Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/80ed98-da84-4e4a-b86c-681862a18f0c/1/fa1iGAhj1yKqpPCIHkQ3jjyAg3I.mft
File: fa1iGAhj1yKqpPCIHkQ3jjyAg3I.mft (raw, json)
Hash identifier: GS+CmDVOPa+u1c77RrcVIOnONgmztMi+j9Vh4pFHuc0=
Subject key identifier: AE:48:0A:37:C5:DC:95:CB:EE:8D:37:CE:BC:24:8F:15:D6:A2:09:37
Authority key identifier: 7D:AD:62:18:08:63:D7:22:AA:A4:F0:88:1E:44:37:8E:3C:80:83:72
Certificate issuer: /CN=7dad62180863d722aaa4f0881e44378e3c808372
Certificate serial: 019770E32486FB3290138E45A0CDA1CB802D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fa1iGAhj1yKqpPCIHkQ3jjyAg3I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/80ed98-da84-4e4a-b86c-681862a18f0c/1/fa1iGAhj1yKqpPCIHkQ3jjyAg3I.mft
Manifest number: A1
Signing time: Sun 15 Jun 2025 00:00:23 +0000
Manifest this update: Sun 15 Jun 2025 00:00:23 +0000
Manifest next update: Mon 16 Jun 2025 00:00:23 +0000
Files and hashes: 1: C7GNqkgz9p0zOIQbq1hmHpb1k10.roa (hash: Ih5IZ06o7j/AaerWpaiGsplGlhC586fD+XGd+HNQexM=)
2: fa1iGAhj1yKqpPCIHkQ3jjyAg3I.crl (hash: UjNpx7UbVlpjSbGLkQLEsp3/65WnKoaixPXrGtqS7qo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/80ed98-da84-4e4a-b86c-681862a18f0c/1/fa1iGAhj1yKqpPCIHkQ3jjyAg3I.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/80ed98-da84-4e4a-b86c-681862a18f0c/1/fa1iGAhj1yKqpPCIHkQ3jjyAg3I.mft
rsync://rpki.ripe.net/repository/DEFAULT/fa1iGAhj1yKqpPCIHkQ3jjyAg3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:e3:24:86:fb:32:90:13:8e:45:a0:cd:a1:cb:80:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7dad62180863d722aaa4f0881e44378e3c808372
Validity
Not Before: Jun 15 00:00:23 2025 GMT
Not After : Jun 16 00:00:23 2025 GMT
Subject: CN=ae480a37c5dc95cbee8d37cebc248f15d6a20937
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:61:86:42:4a:41:e0:17:b0:0c:27:01:82:48:
c3:38:62:07:dc:97:f3:08:fd:ac:5a:a9:19:1e:af:
4d:0c:0f:6d:18:f8:a2:f3:3c:48:34:a7:65:1f:1a:
c6:5a:25:1f:33:fd:98:b8:14:3e:9e:29:bf:29:44:
8a:6a:8b:30:c4:a7:25:98:38:db:3e:93:39:19:42:
77:24:1b:c8:b9:90:4e:4c:d1:a4:49:d2:d5:a1:17:
37:77:3e:65:b0:93:ca:83:a7:99:38:03:ad:bb:fe:
ad:29:7e:9e:71:1e:0c:1f:1c:92:36:78:84:7a:3b:
e7:20:aa:a7:1a:ab:ad:b4:b6:91:30:44:d4:d6:00:
ae:5f:e5:37:70:2d:70:a1:0d:8b:c9:69:14:07:a3:
5f:05:b6:4a:a3:2c:ce:6b:e6:9c:6c:c0:2d:7e:ab:
c3:e8:81:79:c2:10:d8:85:37:99:81:ed:71:dc:73:
3a:62:55:17:81:b7:83:f4:e3:af:bb:3d:cd:a0:31:
d8:92:d3:a6:34:dc:a9:ca:75:c8:5c:9b:90:96:c0:
d1:5d:6a:b6:3e:70:4c:3b:86:85:ef:91:ff:9c:67:
f9:89:04:1c:b9:c0:9f:f2:f9:c7:ba:63:bf:cf:c9:
10:b6:fb:81:ae:0d:e7:8f:37:fd:8b:b5:d3:37:b2:
7a:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:48:0A:37:C5:DC:95:CB:EE:8D:37:CE:BC:24:8F:15:D6:A2:09:37
X509v3 Authority Key Identifier:
keyid:7D:AD:62:18:08:63:D7:22:AA:A4:F0:88:1E:44:37:8E:3C:80:83:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa1iGAhj1yKqpPCIHkQ3jjyAg3I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/80ed98-da84-4e4a-b86c-681862a18f0c/1/fa1iGAhj1yKqpPCIHkQ3jjyAg3I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/80ed98-da84-4e4a-b86c-681862a18f0c/1/fa1iGAhj1yKqpPCIHkQ3jjyAg3I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:62:d6:78:2b:eb:8c:27:83:70:fc:7e:6d:82:bb:c9:ed:4d:
10:55:84:77:94:ed:d9:80:4f:ca:36:e4:bd:b2:12:ed:87:11:
e1:5b:5c:56:97:ec:1a:82:10:5a:06:56:d4:86:43:3f:8b:59:
6d:29:3e:a3:98:58:1b:e9:34:4b:37:3b:d1:b1:44:11:37:c6:
08:2f:78:7b:31:3a:ea:d7:bb:12:63:ec:b2:8e:06:06:d0:05:
6c:b6:b1:35:69:70:95:6f:a9:c8:5d:b4:98:f2:15:2b:ef:f1:
a5:3d:81:c2:97:4e:b6:43:bc:4a:22:6b:2c:dd:d2:f8:cb:b1:
82:d3:2c:c3:66:ae:09:92:db:00:c9:9a:fd:4a:62:82:c0:07:
92:0f:07:13:85:16:2d:85:75:eb:ac:a7:dd:3e:3a:b5:16:14:
5b:bf:71:cc:1e:8a:80:17:52:5f:be:e8:f0:08:8e:83:dd:1e:
6d:64:30:ef:55:9c:3c:d6:3a:c1:f3:02:c5:83:4b:8e:45:43:
38:c0:53:06:72:16:19:7f:6c:55:0d:8f:6b:0f:4c:ae:ff:10:
4b:ea:49:7d:8e:5d:fd:38:e8:76:f0:a4:18:cf:07:62:de:2a:
0d:8f:60:7a:ee:2d:6f:86:61:42:88:d4:76:11:fd:6d:a7:8e:
ae:20:46:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:10:48 2025 by rpki-client