Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/fVAuLSSx8haRMIggeiaOZiawzjk.mft
File: fVAuLSSx8haRMIggeiaOZiawzjk.mft (raw, json)
Hash identifier: Y0fK0Hi86vJOqwXx0iD6pSUlUeJTf7/lSyHRo1Egf1A=
Subject key identifier: D5:36:0D:1A:A7:85:87:65:8B:AB:3C:7D:D0:24:54:3E:B2:47:90:11
Authority key identifier: 7D:50:2E:2D:24:B1:F2:16:91:30:88:20:7A:26:8E:66:26:B0:CE:39
Certificate issuer: /CN=7d502e2d24b1f216913088207a268e6626b0ce39
Certificate serial: 019777535FAB4FA582DC659FBB413DD396C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVAuLSSx8haRMIggeiaOZiawzjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/fVAuLSSx8haRMIggeiaOZiawzjk.mft
Manifest number: 1596
Signing time: Mon 16 Jun 2025 06:00:42 +0000
Manifest this update: Mon 16 Jun 2025 06:00:42 +0000
Manifest next update: Tue 17 Jun 2025 06:00:42 +0000
Files and hashes: 1: 4xfLpgjd4Enxc-qc8nof3OkbJKI.roa (hash: qMoNzrHzj4dbd+webpPz0KwxOvGmhXmFlkGqK08FyRc=)
2: 7JwTekQ2tjFEdZLkqTIWTWDl694.roa (hash: vwEa+p0/d9QBYzjnHEhK+7G2R/Qxw/NinB7TZ/V7TxA=)
3: fVAuLSSx8haRMIggeiaOZiawzjk.crl (hash: 66zuR/dmUBIoeFe+AvAQDw2MDm17jom079yOc5V0alA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/fVAuLSSx8haRMIggeiaOZiawzjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/fVAuLSSx8haRMIggeiaOZiawzjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVAuLSSx8haRMIggeiaOZiawzjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 06:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:77:53:5f:ab:4f:a5:82:dc:65:9f:bb:41:3d:d3:96:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d502e2d24b1f216913088207a268e6626b0ce39
Validity
Not Before: Jun 16 06:00:42 2025 GMT
Not After : Jun 17 06:00:42 2025 GMT
Subject: CN=d5360d1aa78587658bab3c7dd024543eb2479011
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:dd:9f:29:8e:21:63:7e:b0:25:e1:4a:d7:a2:
ed:de:b7:e4:e3:38:2c:da:57:a3:2a:36:f5:2e:25:
ba:14:5f:5c:88:08:4b:b6:56:81:6d:95:21:36:2e:
2d:31:4c:48:e9:b7:75:5e:52:21:8e:56:c3:f7:26:
2c:4d:f0:d3:bc:d1:26:30:75:fb:9c:bf:0a:1f:c9:
57:ca:d6:a4:f7:02:54:a9:fd:02:62:34:f5:3b:d0:
70:85:e3:92:97:6e:91:32:21:3b:94:5e:7c:20:67:
16:02:03:97:dc:38:13:b3:e1:fa:59:49:a6:a2:a0:
6e:26:71:2c:30:4f:4e:f2:bc:50:ec:4f:49:07:91:
ea:25:51:53:3e:a6:54:ef:ae:67:6f:99:26:56:39:
8a:d2:14:91:34:8c:2b:ce:33:ff:d8:30:74:34:bd:
60:f4:06:ae:8d:d3:87:1c:e0:48:2b:de:21:c9:46:
bc:96:0a:52:ce:d1:2a:2a:d8:e8:ce:48:3a:7a:2b:
ec:16:34:fb:38:85:18:0c:d9:f8:3c:e7:55:94:97:
3c:2b:e3:d1:07:18:25:76:43:01:16:8f:c3:1d:b4:
a2:ee:cf:e4:f2:80:ab:3a:cb:ed:27:53:b7:b1:90:
79:2b:80:a5:c4:79:b1:61:57:af:bd:cc:2c:4e:a1:
83:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:36:0D:1A:A7:85:87:65:8B:AB:3C:7D:D0:24:54:3E:B2:47:90:11
X509v3 Authority Key Identifier:
keyid:7D:50:2E:2D:24:B1:F2:16:91:30:88:20:7A:26:8E:66:26:B0:CE:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVAuLSSx8haRMIggeiaOZiawzjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/fVAuLSSx8haRMIggeiaOZiawzjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/fVAuLSSx8haRMIggeiaOZiawzjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:9a:a9:15:a9:bb:e8:96:29:a2:65:df:5f:a7:cd:73:a4:78:
01:a8:f2:da:55:e9:8d:ba:72:ff:ee:c1:a5:b1:a5:ac:24:a2:
cc:68:7d:2d:93:87:31:7d:e5:31:97:a0:5a:85:06:94:e3:f6:
58:71:ee:85:42:d6:ec:55:c7:cd:95:ea:b6:e7:82:bb:3b:c2:
5f:f3:59:5b:20:9f:ac:37:81:36:90:d8:b4:84:3c:56:3d:2e:
6c:a7:ae:0f:2d:7e:8c:e2:94:25:70:75:38:24:d9:40:35:3d:
c8:92:48:cf:ec:e9:71:dd:34:90:19:8b:89:1d:d5:df:9a:38:
39:d5:09:07:e7:1c:bb:de:08:a0:53:fb:ea:db:eb:db:20:83:
4c:af:4b:65:a0:10:a7:54:0f:f6:30:3c:ac:f2:08:93:c5:75:
c2:f2:d5:54:98:1c:4a:3f:b9:cd:d8:ab:fc:e1:5c:7d:1f:66:
a0:0b:c6:b0:05:bf:57:be:14:02:bc:22:1e:1f:73:44:6c:46:
a2:f0:43:8a:67:23:91:4c:1f:d6:80:f8:7c:9b:4c:1a:ca:78:
4c:c9:b4:a7:7f:10:34:10:cc:c9:66:07:58:6b:86:d2:7e:82:
fa:80:ca:0c:03:b3:82:fd:36:c5:f5:5c:ca:95:17:da:a4:1f:
e3:9a:28:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 14:54:45 2025 by rpki-client