Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/f38a3e-53be-41d5-9c85-201d507345d9/1/Fa1vJLzs3I2uw-dFS8EoPcDNkx8.mft
File: Fa1vJLzs3I2uw-dFS8EoPcDNkx8.mft (raw, json)
Hash identifier: PeLoyDA0cJmjcbOVtpbaCllnM7jDu8zlv85JiEkcFhw=
Subject key identifier: BC:79:AB:EE:1D:4C:29:46:AC:FF:7A:87:EE:AB:38:10:AA:29:20:BD
Authority key identifier: 15:AD:6F:24:BC:EC:DC:8D:AE:C3:E7:45:4B:C1:28:3D:C0:CD:93:1F
Certificate issuer: /CN=15ad6f24bcecdc8daec3e7454bc1283dc0cd931f
Certificate serial: 01976A05D89F367FF4DD2486392BD8021A6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fa1vJLzs3I2uw-dFS8EoPcDNkx8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/f38a3e-53be-41d5-9c85-201d507345d9/1/Fa1vJLzs3I2uw-dFS8EoPcDNkx8.mft
Manifest number: 03E8
Signing time: Fri 13 Jun 2025 16:00:57 +0000
Manifest this update: Fri 13 Jun 2025 16:00:57 +0000
Manifest next update: Sat 14 Jun 2025 16:00:57 +0000
Files and hashes: 1: 1-irVsmvhgC9shKeonnyDEPMDuh0.roa (hash: 1FiwJeXR31pl2bxgdy1T8oVV/E4LsfaNte1AvGr9OZg=)
2: Fa1vJLzs3I2uw-dFS8EoPcDNkx8.crl (hash: /tdp8pAa/Zdh5V3bhZh+F3jMETGiuGZx9gcVOUJwHWM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/f38a3e-53be-41d5-9c85-201d507345d9/1/Fa1vJLzs3I2uw-dFS8EoPcDNkx8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/f38a3e-53be-41d5-9c85-201d507345d9/1/Fa1vJLzs3I2uw-dFS8EoPcDNkx8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fa1vJLzs3I2uw-dFS8EoPcDNkx8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6a:05:d8:9f:36:7f:f4:dd:24:86:39:2b:d8:02:1a:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15ad6f24bcecdc8daec3e7454bc1283dc0cd931f
Validity
Not Before: Jun 13 16:00:57 2025 GMT
Not After : Jun 14 16:00:57 2025 GMT
Subject: CN=bc79abee1d4c2946acff7a87eeab3810aa2920bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:57:34:32:79:53:34:06:85:91:2d:98:8f:92:
3e:73:e0:66:5e:b6:76:87:ea:91:4b:93:78:1d:cb:
3c:d4:0e:e6:0f:65:74:a7:e2:48:e3:a2:80:99:63:
d8:1f:d9:7a:7f:05:c8:f9:96:fa:3b:6c:aa:56:c2:
45:83:07:bc:ca:c5:48:d3:26:c7:b6:71:23:e9:b8:
33:15:22:9e:e1:9d:0e:f0:19:80:b4:bd:b2:7e:79:
4d:6e:d0:8a:9f:8c:75:26:de:9a:3d:66:7e:07:5c:
ad:d6:07:35:ba:ee:a7:e7:55:39:12:7f:fe:0d:79:
f9:c5:a9:e3:c3:14:6a:61:f7:f0:ee:74:30:24:56:
4a:00:96:73:f7:2f:27:21:f5:f1:35:1d:8e:09:d1:
90:74:c0:34:e7:3c:bb:be:5f:25:a5:a9:1b:67:7e:
c5:38:f1:92:01:6b:d0:e8:67:a2:72:2b:b2:cf:d9:
c8:a3:e3:12:83:55:c4:3c:b9:b1:67:9a:d0:47:30:
c6:f9:8c:63:ef:89:63:04:d8:76:06:26:cc:b3:22:
84:c1:79:ef:8e:9f:48:4b:75:02:06:ee:9a:7a:3d:
ff:66:10:06:e1:94:bc:75:f2:dc:6b:ea:75:b2:10:
b2:c0:ab:ae:8b:bd:8b:2a:1e:1d:00:7e:ef:2b:f0:
15:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:79:AB:EE:1D:4C:29:46:AC:FF:7A:87:EE:AB:38:10:AA:29:20:BD
X509v3 Authority Key Identifier:
keyid:15:AD:6F:24:BC:EC:DC:8D:AE:C3:E7:45:4B:C1:28:3D:C0:CD:93:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fa1vJLzs3I2uw-dFS8EoPcDNkx8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f38a3e-53be-41d5-9c85-201d507345d9/1/Fa1vJLzs3I2uw-dFS8EoPcDNkx8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f38a3e-53be-41d5-9c85-201d507345d9/1/Fa1vJLzs3I2uw-dFS8EoPcDNkx8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:18:5e:52:30:d7:af:c1:76:23:74:27:c4:38:d6:96:23:27:
49:ea:f1:51:50:8f:96:e9:8c:13:31:a7:9f:9b:aa:d4:56:aa:
b4:89:bc:e0:0c:d2:76:6f:2b:9d:32:1a:7d:5b:74:eb:87:ea:
8c:75:b1:58:92:69:b6:c7:19:cd:39:bb:b4:2c:86:cf:6c:b2:
cc:0c:85:71:91:30:c3:90:a4:79:2e:25:86:b8:f3:21:ed:7c:
78:0d:4b:a6:98:49:27:3f:1c:eb:cd:74:69:4a:8a:ac:fd:8d:
31:db:7d:dd:31:6c:95:44:12:af:83:94:53:97:9d:26:f1:16:
6c:7f:b2:b5:2a:b6:55:09:da:65:f7:ad:e7:1d:8e:9c:10:fa:
61:b2:9d:27:62:16:53:ea:7e:9c:c7:36:76:ad:da:98:06:31:
29:e4:ca:7c:d5:29:eb:55:d7:e9:2a:58:3b:b3:b8:ff:b2:9e:
4e:ca:a4:e7:a5:ab:06:e3:d6:9e:1e:a7:42:2e:0c:e6:94:35:
a9:b6:95:4c:fe:56:b4:7a:23:5f:d8:07:bc:6f:2b:06:12:3c:
d8:c8:30:91:f0:bc:f7:b9:56:9f:fa:36:fc:29:ac:db:88:8e:
7a:84:06:a4:4b:aa:6f:ba:85:a7:f4:6a:02:42:bd:1d:03:57:
7c:55:4a:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:00:58 2025 by rpki-client