Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/19650d-2b87-4911-ae1e-895b0d3c4b45/1/fAfb3HHxK9p7t_qAytwu2aL-7-s.mft
File: fAfb3HHxK9p7t_qAytwu2aL-7-s.mft (raw, json)
Hash identifier: ods8IcSlVoyvyfUUAAqQsV8nfn3AccUv53Orl/8KSP8=
Subject key identifier: 49:72:D5:D3:DA:7C:9C:91:C6:3E:36:56:15:06:33:D8:1E:36:62:56
Authority key identifier: 7C:07:DB:DC:71:F1:2B:DA:7B:B7:FA:80:CA:DC:2E:D9:A2:FE:EF:EB
Certificate issuer: /CN=7c07dbdc71f12bda7bb7fa80cadc2ed9a2feefeb
Certificate serial: 01976EBE2A0286479F33ECCB8461D982976E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fAfb3HHxK9p7t_qAytwu2aL-7-s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/19650d-2b87-4911-ae1e-895b0d3c4b45/1/fAfb3HHxK9p7t_qAytwu2aL-7-s.mft
Manifest number: 02A9
Signing time: Sat 14 Jun 2025 14:00:45 +0000
Manifest this update: Sat 14 Jun 2025 14:00:45 +0000
Manifest next update: Sun 15 Jun 2025 14:00:45 +0000
Files and hashes: 1: fAfb3HHxK9p7t_qAytwu2aL-7-s.crl (hash: T+c286SR8zjXsO2jdnPvPAUiRU1pdgB0zTx6iCp1OCU=)
2: fbxGcDZ4JffpLB-VA4euV8cUHbI.roa (hash: ZaYZ23rjJ96t14BAX6CvRsmnyjmgBRcXDVd5G/xhkus=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/19650d-2b87-4911-ae1e-895b0d3c4b45/1/fAfb3HHxK9p7t_qAytwu2aL-7-s.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/19650d-2b87-4911-ae1e-895b0d3c4b45/1/fAfb3HHxK9p7t_qAytwu2aL-7-s.mft
rsync://rpki.ripe.net/repository/DEFAULT/fAfb3HHxK9p7t_qAytwu2aL-7-s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:be:2a:02:86:47:9f:33:ec:cb:84:61:d9:82:97:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c07dbdc71f12bda7bb7fa80cadc2ed9a2feefeb
Validity
Not Before: Jun 14 14:00:45 2025 GMT
Not After : Jun 15 14:00:45 2025 GMT
Subject: CN=4972d5d3da7c9c91c63e3656150633d81e366256
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:86:52:83:ac:89:3f:e4:68:13:18:cc:00:df:
41:09:6f:79:67:d6:3a:8e:34:f2:69:70:f2:cd:6b:
f0:5a:8c:45:58:08:a3:d8:ce:4a:31:63:75:af:d8:
98:11:7c:d7:97:09:ea:01:b6:8b:61:91:39:30:18:
d1:f9:99:c8:17:5f:a8:7b:6f:37:aa:97:dd:76:4e:
eb:df:07:94:3c:db:19:e5:e8:6f:9e:14:16:a2:f3:
c0:ac:71:66:1c:3c:76:39:14:cf:6e:0e:79:87:a7:
53:74:4a:05:fc:51:37:5b:61:2b:15:de:94:a8:17:
8a:b5:c8:99:01:f8:b5:47:c9:74:7f:cf:04:17:86:
4d:b0:94:61:7e:04:95:3f:e3:28:6b:4c:4e:60:55:
d1:93:ee:34:1c:6e:0e:f3:fd:23:3f:5e:ee:c7:68:
14:81:5f:05:15:16:92:98:3f:4c:b4:73:53:6c:62:
80:4a:41:12:24:97:21:f2:41:c4:09:61:6f:0c:2b:
f7:7d:67:da:14:16:bf:cd:14:5d:d5:cc:ce:4a:b0:
28:a2:bb:95:e9:cc:36:4d:df:c7:77:2c:a5:cf:e8:
60:8b:19:a0:d1:ec:b5:6f:08:aa:cc:ec:f0:7b:84:
87:2b:c2:c5:13:6a:78:6d:a3:4d:f9:a1:8b:e6:3e:
4c:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:72:D5:D3:DA:7C:9C:91:C6:3E:36:56:15:06:33:D8:1E:36:62:56
X509v3 Authority Key Identifier:
keyid:7C:07:DB:DC:71:F1:2B:DA:7B:B7:FA:80:CA:DC:2E:D9:A2:FE:EF:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fAfb3HHxK9p7t_qAytwu2aL-7-s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/19650d-2b87-4911-ae1e-895b0d3c4b45/1/fAfb3HHxK9p7t_qAytwu2aL-7-s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/19650d-2b87-4911-ae1e-895b0d3c4b45/1/fAfb3HHxK9p7t_qAytwu2aL-7-s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:d4:fc:0a:72:af:a2:50:df:24:6c:90:91:f5:a3:3d:06:d0:
14:db:6e:9b:89:22:3f:e0:2f:da:70:9c:bf:09:f8:26:36:e4:
a6:d9:cf:9a:3a:43:d8:92:c3:cc:b3:d2:8a:69:b8:ae:d3:fe:
1e:4e:96:13:10:85:7c:3a:7d:60:80:72:ef:64:fb:a7:70:67:
fa:16:42:e0:2f:61:06:7a:73:83:4d:3a:db:e4:66:9a:7a:ec:
ed:58:be:39:5d:2c:22:ba:e0:2d:81:f6:f4:c2:4d:30:12:36:
d7:54:d6:34:f0:4e:f9:4c:ba:2b:8f:f1:d6:5a:65:81:59:be:
76:97:c9:49:42:e2:c9:22:d8:fa:82:81:43:d6:1f:57:b8:85:
15:ea:c6:c3:79:c8:e0:88:68:8e:98:65:03:5d:54:28:5b:90:
d8:f2:c8:aa:3d:0d:a9:34:7c:c1:0e:00:9f:a9:18:f1:4c:62:
57:41:a9:c0:fc:cd:b9:0e:99:3b:89:6c:d7:31:4b:24:b1:c0:
c9:39:54:5e:f6:60:53:23:9e:12:cc:6b:3e:8a:bf:24:35:a2:
95:99:07:fc:0b:07:8e:f3:36:35:db:44:a4:1d:47:5c:81:21:
e1:2d:0d:ff:52:61:ee:2a:b8:07:9c:bf:b9:f4:c1:38:ca:53:
ad:72:c2:54
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZduvioChkefM+zLhGHZgpduMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjMDdkYmRjNzFmMTJiZGE3YmI3ZmE4MGNhZGMyZWQ5YTJm
ZWVmZWIwHhcNMjUwNjE0MTQwMDQ1WhcNMjUwNjE1MTQwMDQ1WjAzMTEwLwYDVQQD
Eyg0OTcyZDVkM2RhN2M5YzkxYzYzZTM2NTYxNTA2MzNkODFlMzY2MjU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1IZSg6yJP+RoExjMAN9BCW95Z9Y6
jjTyaXDyzWvwWoxFWAij2M5KMWN1r9iYEXzXlwnqAbaLYZE5MBjR+ZnIF1+oe283
qpfddk7r3weUPNsZ5ehvnhQWovPArHFmHDx2ORTPbg55h6dTdEoF/FE3W2ErFd6U
qBeKtciZAfi1R8l0f88EF4ZNsJRhfgSVP+Moa0xOYFXRk+40HG4O8/0jP17ux2gU
gV8FFRaSmD9MtHNTbGKASkESJJch8kHECWFvDCv3fWfaFBa/zRRd1czOSrAooruV
6cw2Td/Hdyylz+hgixmg0ey1bwiqzOzwe4SHK8LFE2p4baNN+aGL5j5MBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEly1dPafJyRxj42VhUGM9geNmJWMB8GA1UdIwQY
MBaAFHwH29xx8Svae7f6gMrcLtmi/u/rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZkFmYjNISHhLOXA3dF9xQXl0d3UyYUwtNy1zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi8xOTY1MGQtMmI4Ny00OTExLWFlMWUt
ODk1YjBkM2M0YjQ1LzEvZkFmYjNISHhLOXA3dF9xQXl0d3UyYUwtNy1zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi8xOTY1MGQtMmI4Ny00OTExLWFlMWUtODk1YjBkM2M0YjQ1
LzEvZkFmYjNISHhLOXA3dF9xQXl0d3UyYUwtNy1zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKdT8CnKv
olDfJGyQkfWjPQbQFNtum4kiP+Av2nCcvwn4JjbkptnPmjpD2JLDzLPSimm4rtP+
Hk6WExCFfDp9YIBy72T7p3Bn+hZC4C9hBnpzg0062+Rmmnrs7Vi+OV0sIrrgLYH2
9MJNMBI211TWNPBO+Uy6K4/x1lplgVm+dpfJSULiySLY+oKBQ9YfV7iFFerGw3nI
4IhojphlA11UKFuQ2PLIqj0NqTR8wQ4An6kY8UxiV0GpwPzNuQ6ZO4ls1zFLJLHA
yTlUXvZgUyOeEsxrPoq/JDWilZkH/AsHjvM2NdtEpB1HXIEh4S0N/1Jh7iq4B5y/
ufTBOMpTrXLCVA==
-----END CERTIFICATE-----
Generated at Sat Jun 14 22:33:38 2025 by rpki-client