Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/19650d-2b87-4911-ae1e-895b0d3c4b45/1/fAfb3HHxK9p7t_qAytwu2aL-7-s.mft
File: fAfb3HHxK9p7t_qAytwu2aL-7-s.mft (raw, json)
Hash identifier: NQ9S+U8VMgZbgGP/lxC1ph8NizyW+7ewN4YrINYv3sE=
Subject key identifier: CB:F2:65:33:29:18:6D:CF:D6:2E:0A:44:9A:70:BF:96:0D:79:33:A5
Authority key identifier: 7C:07:DB:DC:71:F1:2B:DA:7B:B7:FA:80:CA:DC:2E:D9:A2:FE:EF:EB
Certificate issuer: /CN=7c07dbdc71f12bda7bb7fa80cadc2ed9a2feefeb
Certificate serial: 01987374308723A57AF7615745441F427153
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fAfb3HHxK9p7t_qAytwu2aL-7-s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/19650d-2b87-4911-ae1e-895b0d3c4b45/1/fAfb3HHxK9p7t_qAytwu2aL-7-s.mft
Manifest number: 0330
Signing time: Mon 04 Aug 2025 05:00:50 +0000
Manifest this update: Mon 04 Aug 2025 05:00:50 +0000
Manifest next update: Tue 05 Aug 2025 05:00:50 +0000
Files and hashes: 1: fAfb3HHxK9p7t_qAytwu2aL-7-s.crl (hash: s8FZWGAltBk3xU74WiF3eSE/E1dsltfWcTgg5Uv9GZ8=)
2: fbxGcDZ4JffpLB-VA4euV8cUHbI.roa (hash: ZaYZ23rjJ96t14BAX6CvRsmnyjmgBRcXDVd5G/xhkus=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/19650d-2b87-4911-ae1e-895b0d3c4b45/1/fAfb3HHxK9p7t_qAytwu2aL-7-s.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/19650d-2b87-4911-ae1e-895b0d3c4b45/1/fAfb3HHxK9p7t_qAytwu2aL-7-s.mft
rsync://rpki.ripe.net/repository/DEFAULT/fAfb3HHxK9p7t_qAytwu2aL-7-s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:74:30:87:23:a5:7a:f7:61:57:45:44:1f:42:71:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c07dbdc71f12bda7bb7fa80cadc2ed9a2feefeb
Validity
Not Before: Aug 4 05:00:50 2025 GMT
Not After : Aug 5 05:00:50 2025 GMT
Subject: CN=cbf2653329186dcfd62e0a449a70bf960d7933a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:52:b6:1f:81:fc:be:a5:e7:c1:f2:78:33:68:
3d:38:83:47:ba:64:c9:cf:bc:3c:1d:7e:0f:c0:23:
26:ae:50:cb:2f:3e:13:d8:a5:1b:39:0a:f9:d1:4a:
78:ac:cd:c9:31:df:af:2e:04:71:97:30:cb:f6:84:
6b:9c:80:d8:8f:f9:30:04:d4:7f:44:16:a8:02:a2:
91:26:ec:11:1f:2c:ba:79:a5:00:fa:f7:04:26:3d:
4e:b5:e2:57:ad:8f:64:67:2d:11:f9:a3:4d:3a:a2:
82:42:98:c3:4c:0b:7a:e5:94:fa:97:ba:e9:36:2c:
0c:3e:76:34:38:46:a7:b4:b2:a3:20:9e:e9:9c:ac:
4d:83:f4:4c:44:b7:63:c9:8c:61:e1:f7:23:c5:53:
a7:f4:8b:59:09:e3:dd:bb:10:60:f3:cd:1b:57:9d:
35:ba:cb:73:26:1d:fd:7a:04:33:fc:a5:ac:90:20:
02:a8:ee:23:9d:c5:1d:6a:f1:3a:4f:1d:9c:30:d2:
3a:f9:c8:18:a1:f1:7a:b1:c3:55:16:11:36:4e:62:
b9:19:a9:29:72:42:a5:a5:79:f1:1c:eb:35:54:70:
1b:a0:5c:4a:3a:18:e0:4b:23:cd:ed:bd:a8:98:a7:
31:cd:66:10:0a:70:18:f5:6c:3b:f3:93:b6:bc:be:
5d:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:F2:65:33:29:18:6D:CF:D6:2E:0A:44:9A:70:BF:96:0D:79:33:A5
X509v3 Authority Key Identifier:
keyid:7C:07:DB:DC:71:F1:2B:DA:7B:B7:FA:80:CA:DC:2E:D9:A2:FE:EF:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fAfb3HHxK9p7t_qAytwu2aL-7-s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/19650d-2b87-4911-ae1e-895b0d3c4b45/1/fAfb3HHxK9p7t_qAytwu2aL-7-s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/19650d-2b87-4911-ae1e-895b0d3c4b45/1/fAfb3HHxK9p7t_qAytwu2aL-7-s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:ad:9a:c2:e2:7a:81:39:b0:82:47:5c:e4:34:68:56:34:f4:
0a:0b:43:32:53:f0:b9:2e:1e:35:da:00:69:ee:df:37:91:14:
20:09:95:5f:a4:76:47:be:e2:8f:58:f7:03:9b:26:bb:23:9c:
e1:5b:5a:12:d1:8f:1f:82:5e:0f:eb:39:d3:4e:d2:a7:30:ad:
3d:ce:9c:3c:59:2d:8b:e0:30:3a:94:55:17:c6:4f:bf:ba:d1:
33:17:a9:35:93:ac:88:b4:16:c6:bd:c2:fd:90:d9:a8:68:03:
67:50:f0:dc:01:95:51:b5:47:4f:97:0a:8b:a4:8c:51:f8:23:
fd:1b:8a:fa:01:0c:2f:19:24:69:88:3a:a9:62:1f:74:84:64:
55:71:63:7c:ba:19:30:79:df:ac:42:72:38:79:5b:23:6d:f6:
f6:65:6c:e3:02:bb:81:24:39:8e:ae:87:fe:7d:bb:83:e8:18:
40:14:53:4e:66:98:6e:1d:8c:f9:71:1a:39:dd:70:4c:11:56:
0b:ca:d4:03:ee:28:22:6f:0c:40:80:f1:33:e2:20:9f:b7:c0:
13:f6:41:ca:60:68:9e:47:71:7c:08:5e:44:6b:6d:1f:59:26:
b3:b9:6c:90:57:4c:4c:03:7b:ff:43:9e:92:9d:60:41:bf:c9:
3a:4c:42:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:25:39 2025 by rpki-client