Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/12f26e-fb11-42e1-bacc-3969eca7b7d4/1/Fa8HL54VarwgxGhJjiMjFSxzaug.mft
File: Fa8HL54VarwgxGhJjiMjFSxzaug.mft (raw, json)
Hash identifier: boM2ken0oOBcV7y5vDmQEpitKytSVSMvsAhCKZMnad4=
Subject key identifier: 0B:D6:78:60:DE:DD:00:3A:14:56:19:6C:07:07:FC:2C:AA:E7:B0:9A
Authority key identifier: 15:AF:07:2F:9E:15:6A:BC:20:C4:68:49:8E:23:23:15:2C:73:6A:E8
Certificate issuer: /CN=15af072f9e156abc20c468498e2323152c736ae8
Certificate serial: 0198819DF10F2A2DFD09E6EF7B1F6E348B35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fa8HL54VarwgxGhJjiMjFSxzaug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/12f26e-fb11-42e1-bacc-3969eca7b7d4/1/Fa8HL54VarwgxGhJjiMjFSxzaug.mft
Manifest number: 155D
Signing time: Wed 06 Aug 2025 23:01:08 +0000
Manifest this update: Wed 06 Aug 2025 23:01:08 +0000
Manifest next update: Thu 07 Aug 2025 23:01:08 +0000
Files and hashes: 1: 1-hG6m2b1-771ZXFUCad6-Q0HqS0.roa (hash: iRlAMEhmdJkdMf5CTvW6WMLAwT23DftwTFfnt2+39Po=)
2: Fa8HL54VarwgxGhJjiMjFSxzaug.crl (hash: 89Za2zqJhzkjSzNqsRAy2Orp7HJqILJ4fJ3/koPSfTo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/12f26e-fb11-42e1-bacc-3969eca7b7d4/1/Fa8HL54VarwgxGhJjiMjFSxzaug.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/12f26e-fb11-42e1-bacc-3969eca7b7d4/1/Fa8HL54VarwgxGhJjiMjFSxzaug.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fa8HL54VarwgxGhJjiMjFSxzaug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 23:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:9d:f1:0f:2a:2d:fd:09:e6:ef:7b:1f:6e:34:8b:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15af072f9e156abc20c468498e2323152c736ae8
Validity
Not Before: Aug 6 23:01:08 2025 GMT
Not After : Aug 7 23:01:08 2025 GMT
Subject: CN=0bd67860dedd003a1456196c0707fc2caae7b09a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:6d:df:46:5a:9c:6d:0b:69:e9:a4:c3:41:30:
ff:8a:28:66:88:ca:94:eb:a3:37:c6:65:09:de:11:
6f:0d:92:45:ca:d7:79:9a:3a:96:c2:9f:30:ad:9c:
20:b9:e1:d6:bc:29:a9:f9:76:a5:0a:b5:0a:8e:a2:
dc:93:bc:61:a8:e0:ac:f9:46:2e:05:b9:fe:2d:d2:
13:48:7e:9c:fd:40:82:15:b9:4a:57:0e:e2:a3:d5:
3d:11:e3:97:69:0f:7b:99:b2:9b:28:57:2e:67:81:
b3:52:fa:f9:33:61:94:c3:fd:f6:3d:f5:98:6d:de:
de:e2:7a:1e:87:1c:c9:e3:b1:2a:35:13:7d:bc:49:
03:cb:68:4d:1b:ba:86:35:b7:6c:cf:83:59:9f:99:
52:d5:e6:32:8d:25:8b:9e:99:09:b3:ec:d4:35:5b:
87:e8:70:8f:e8:a9:70:d0:a4:63:59:db:69:81:9f:
d4:82:65:19:14:7b:8b:ce:d8:f4:82:13:8e:a2:30:
7d:9f:24:85:cd:a6:f4:5c:65:84:7f:bc:87:20:50:
47:67:77:d9:dc:8e:96:e6:e8:50:88:fb:f3:97:d9:
d7:49:7c:6f:a3:b1:b8:22:0c:a9:66:94:45:73:09:
aa:b2:32:fe:00:33:3e:e8:e0:05:89:1d:60:dc:3b:
4b:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:D6:78:60:DE:DD:00:3A:14:56:19:6C:07:07:FC:2C:AA:E7:B0:9A
X509v3 Authority Key Identifier:
keyid:15:AF:07:2F:9E:15:6A:BC:20:C4:68:49:8E:23:23:15:2C:73:6A:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fa8HL54VarwgxGhJjiMjFSxzaug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/12f26e-fb11-42e1-bacc-3969eca7b7d4/1/Fa8HL54VarwgxGhJjiMjFSxzaug.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/12f26e-fb11-42e1-bacc-3969eca7b7d4/1/Fa8HL54VarwgxGhJjiMjFSxzaug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:79:1b:35:06:bc:6a:3f:c9:cc:25:12:79:7b:04:07:1c:6c:
b1:0e:2c:bf:7d:c8:f5:3e:9e:86:18:df:e8:01:2d:bd:6d:ef:
fc:d8:63:74:96:f8:86:f6:c3:eb:8f:3d:bb:cb:2b:02:d6:6a:
d4:e8:fd:da:24:4c:7c:48:9b:a7:e8:64:ed:cd:b0:5f:80:45:
fb:e1:00:74:cf:85:bb:21:c3:dd:4c:46:a7:16:7f:77:07:b9:
cc:7d:34:df:77:56:23:6a:8e:5c:ca:46:64:33:e0:05:c3:75:
62:7b:1d:a2:50:56:61:17:29:16:c8:c7:d3:e4:46:dd:1b:fd:
5e:d4:b2:3a:dc:d8:f6:45:3c:18:52:20:23:d4:6a:8e:37:a5:
98:17:9e:b3:4f:ba:e1:25:30:0c:98:17:19:75:5f:bc:8d:23:
2a:d5:c7:16:cd:4a:c5:32:5e:02:32:88:d2:d6:80:a2:f2:ca:
66:65:cc:17:57:8f:0d:bf:56:5d:73:99:71:78:28:5b:21:a6:
3f:eb:40:29:de:d4:6f:60:c9:d2:88:27:31:fd:aa:d4:f6:53:
16:a9:69:85:4a:95:f4:c9:6d:73:c5:9b:f7:22:ac:f2:de:4c:
e1:34:b0:b4:22:1e:0d:4b:37:cd:c2:47:51:20:6b:b9:c0:e2:
36:0d:45:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 07:22:34 2025 by rpki-client