Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/f38a3e-53be-41d5-9c85-201d507345d9/1/Fa1vJLzs3I2uw-dFS8EoPcDNkx8.mft
File: Fa1vJLzs3I2uw-dFS8EoPcDNkx8.mft (raw, json)
Hash identifier: uBYVOBXd3YAUXC632pCQfhntp4lKbaeD/jguhUegatU=
Subject key identifier: 39:6F:82:F7:09:D5:C4:06:66:55:65:1F:B0:70:71:B6:6D:E1:A7:C9
Authority key identifier: 15:AD:6F:24:BC:EC:DC:8D:AE:C3:E7:45:4B:C1:28:3D:C0:CD:93:1F
Certificate issuer: /CN=15ad6f24bcecdc8daec3e7454bc1283dc0cd931f
Certificate serial: 019872989843A1459A1C5AC23C69D20BDF70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fa1vJLzs3I2uw-dFS8EoPcDNkx8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/f38a3e-53be-41d5-9c85-201d507345d9/1/Fa1vJLzs3I2uw-dFS8EoPcDNkx8.mft
Manifest number: 0471
Signing time: Mon 04 Aug 2025 01:00:59 +0000
Manifest this update: Mon 04 Aug 2025 01:00:59 +0000
Manifest next update: Tue 05 Aug 2025 01:00:59 +0000
Files and hashes: 1: 1-irVsmvhgC9shKeonnyDEPMDuh0.roa (hash: 1FiwJeXR31pl2bxgdy1T8oVV/E4LsfaNte1AvGr9OZg=)
2: Fa1vJLzs3I2uw-dFS8EoPcDNkx8.crl (hash: Tl0Jbb2lQB373UB5Wo+kets3nRDy7HLeUhyFnztTtNA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/f38a3e-53be-41d5-9c85-201d507345d9/1/Fa1vJLzs3I2uw-dFS8EoPcDNkx8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/f38a3e-53be-41d5-9c85-201d507345d9/1/Fa1vJLzs3I2uw-dFS8EoPcDNkx8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fa1vJLzs3I2uw-dFS8EoPcDNkx8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 01:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:98:98:43:a1:45:9a:1c:5a:c2:3c:69:d2:0b:df:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15ad6f24bcecdc8daec3e7454bc1283dc0cd931f
Validity
Not Before: Aug 4 01:00:59 2025 GMT
Not After : Aug 5 01:00:59 2025 GMT
Subject: CN=396f82f709d5c4066655651fb07071b66de1a7c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:6a:f6:15:2f:78:11:6f:d6:28:78:03:95:9e:
09:01:91:9d:e9:c7:b0:53:4a:d5:29:14:cd:11:10:
c5:89:1c:f5:6a:fe:a7:d8:0d:54:b9:6d:f1:d6:e6:
e4:91:c2:6c:36:10:b4:a8:67:0c:e0:6b:00:d2:e6:
85:d9:4a:29:82:6d:26:5a:7e:56:c4:29:ba:03:71:
0d:a6:2b:d6:9a:49:5c:5e:81:cc:4a:af:e4:0e:48:
06:8c:26:1e:45:51:a6:c9:17:c9:d8:74:58:a4:db:
0a:f7:23:c9:3e:42:0c:1b:19:69:e1:3f:67:bf:24:
e9:4e:67:f5:8a:3f:61:25:a7:c9:46:73:d6:f1:e5:
95:ad:8f:d8:15:4d:c6:a6:87:a5:ed:e3:d3:f7:76:
c9:52:aa:59:6c:bb:4e:59:64:e6:15:19:0b:22:22:
8c:1b:2c:8e:c8:d9:38:a1:07:e6:bc:8d:e5:e8:cf:
78:b2:a8:da:c5:8d:2e:f1:74:a0:97:e7:54:9f:b5:
3d:86:2a:cb:cc:99:7e:4c:4e:1b:7f:b7:75:ee:0a:
f2:62:cc:4f:86:fc:4f:72:7b:4f:d5:1e:5f:d6:90:
d7:0d:1d:72:20:37:99:d2:5d:a3:f1:92:45:8f:05:
85:27:0b:3d:e4:82:96:4e:4d:39:30:88:3b:f8:7a:
85:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:6F:82:F7:09:D5:C4:06:66:55:65:1F:B0:70:71:B6:6D:E1:A7:C9
X509v3 Authority Key Identifier:
keyid:15:AD:6F:24:BC:EC:DC:8D:AE:C3:E7:45:4B:C1:28:3D:C0:CD:93:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fa1vJLzs3I2uw-dFS8EoPcDNkx8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f38a3e-53be-41d5-9c85-201d507345d9/1/Fa1vJLzs3I2uw-dFS8EoPcDNkx8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f38a3e-53be-41d5-9c85-201d507345d9/1/Fa1vJLzs3I2uw-dFS8EoPcDNkx8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:6c:fd:bd:bc:d3:ef:84:40:9e:9e:95:fd:6a:db:a2:4f:ab:
de:85:25:b8:d7:2f:cc:c7:87:29:02:87:0a:7f:b4:78:16:09:
3c:d7:46:5d:d4:b3:71:bd:f9:b5:e6:1a:92:29:62:22:b1:9a:
92:37:6d:b9:4c:73:fb:69:7d:60:27:4c:a2:1b:7b:74:1e:31:
15:74:1e:56:78:47:44:54:a6:63:7a:50:35:2f:eb:49:bc:31:
5e:29:7a:05:8b:18:5a:f8:b5:bd:b7:06:aa:0d:21:02:7f:99:
4e:64:71:7c:95:07:f5:43:6a:f1:97:b8:63:bf:39:a4:a7:e1:
77:58:d5:bd:ab:8d:97:26:a3:db:4b:dd:24:df:0e:67:3e:3e:
b6:aa:c6:69:5d:7c:94:6b:74:c4:12:bc:0f:b1:1a:71:95:3f:
94:f1:a8:0b:82:a6:de:bb:3d:58:db:7b:59:14:06:81:43:cf:
71:53:05:ca:66:89:55:86:d7:8b:00:99:13:ae:b4:69:15:44:
46:bc:cb:b2:27:79:ac:ba:3d:7c:58:d8:b8:f9:2d:00:9c:ba:
ef:05:66:5f:c4:0e:27:06:fa:b7:d8:db:c9:ca:64:52:e6:87:
ab:2f:37:80:fc:c9:1b:b8:4a:3e:b0:3b:66:95:39:b4:d2:9a:
47:b3:0a:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:27:17 2025 by rpki-client