Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/73e009-f2f4-43ac-81a1-89aa8d2e8004/1/faXNZSr9Hy8zfCDY_3KGzSzxvfk.mft
File: faXNZSr9Hy8zfCDY_3KGzSzxvfk.mft (raw, json)
Hash identifier: vMsWd0v8gYSjIzarWrQ6PZAVu1UQBHBGKkZM+TUe68o=
Subject key identifier: B6:A8:4A:94:A2:03:AF:91:25:B1:BF:1A:13:10:93:61:D4:1A:62:D9
Authority key identifier: 7D:A5:CD:65:2A:FD:1F:2F:33:7C:20:D8:FF:72:86:CD:2C:F1:BD:F9
Certificate issuer: /CN=7da5cd652afd1f2f337c20d8ff7286cd2cf1bdf9
Certificate serial: 0198971364D5DF41B5CE7006F97D3383048D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXNZSr9Hy8zfCDY_3KGzSzxvfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/73e009-f2f4-43ac-81a1-89aa8d2e8004/1/faXNZSr9Hy8zfCDY_3KGzSzxvfk.mft
Manifest number: 135E
Signing time: Mon 11 Aug 2025 03:01:27 +0000
Manifest this update: Mon 11 Aug 2025 03:01:27 +0000
Manifest next update: Tue 12 Aug 2025 03:01:27 +0000
Files and hashes: 1: faXNZSr9Hy8zfCDY_3KGzSzxvfk.crl (hash: iB+HCsgcN63Qqjn6prkcUPydYdY5ZUN5JCMe8CUAHiE=)
2: yKkZFLs6YVbkXytvzgCPIVXuU18.roa (hash: 3M+Qw4Xfzb67zSVF5cyn50VarUBuvPcrrFEH7s1xtH4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/73e009-f2f4-43ac-81a1-89aa8d2e8004/1/faXNZSr9Hy8zfCDY_3KGzSzxvfk.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/73e009-f2f4-43ac-81a1-89aa8d2e8004/1/faXNZSr9Hy8zfCDY_3KGzSzxvfk.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXNZSr9Hy8zfCDY_3KGzSzxvfk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:97:13:64:d5:df:41:b5:ce:70:06:f9:7d:33:83:04:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5cd652afd1f2f337c20d8ff7286cd2cf1bdf9
Validity
Not Before: Aug 11 03:01:27 2025 GMT
Not After : Aug 12 03:01:27 2025 GMT
Subject: CN=b6a84a94a203af9125b1bf1a13109361d41a62d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:dd:2e:89:77:dc:b7:58:c3:75:67:de:a3:12:
08:c5:c7:e1:30:25:80:b0:20:66:50:c1:a7:b0:f9:
da:d6:e4:a5:55:3e:5e:09:6f:ea:0c:af:be:b0:37:
31:2c:79:32:1c:6e:4c:19:5c:67:c8:6a:83:70:1e:
e4:aa:7b:48:dd:e3:bd:a6:02:ea:51:27:35:af:f4:
57:f4:ef:54:20:6c:65:0f:4e:f2:79:18:18:64:9f:
41:70:ba:8b:7b:c0:3e:79:91:2a:b9:97:66:c5:d8:
56:20:81:ff:f5:c6:a5:4e:76:ee:e1:16:50:b7:a1:
c3:4d:9d:c4:95:d6:15:fa:52:fd:7b:ef:fd:46:00:
3e:2a:ac:73:5e:54:6d:22:e0:64:d6:92:01:4a:26:
45:fc:43:07:21:46:b9:2d:9a:4d:5e:c0:08:4b:a2:
dd:71:19:c9:56:7e:14:8c:34:33:f2:72:c1:a9:1e:
9c:f0:c2:17:0b:6a:5c:b0:a7:f2:1b:47:c9:31:52:
e5:c5:1b:a7:4c:b2:6a:7f:15:fd:f0:cf:f5:9a:f6:
27:39:a0:df:5a:31:16:e4:ff:ae:a4:a7:0e:b5:01:
98:a8:5e:ba:f6:30:e6:87:4d:19:98:bd:74:6d:cc:
f2:06:35:1f:e8:40:03:e3:bc:0a:4d:2a:bf:1c:83:
d6:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:A8:4A:94:A2:03:AF:91:25:B1:BF:1A:13:10:93:61:D4:1A:62:D9
X509v3 Authority Key Identifier:
keyid:7D:A5:CD:65:2A:FD:1F:2F:33:7C:20:D8:FF:72:86:CD:2C:F1:BD:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXNZSr9Hy8zfCDY_3KGzSzxvfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/73e009-f2f4-43ac-81a1-89aa8d2e8004/1/faXNZSr9Hy8zfCDY_3KGzSzxvfk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/73e009-f2f4-43ac-81a1-89aa8d2e8004/1/faXNZSr9Hy8zfCDY_3KGzSzxvfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:d0:68:f2:e5:4e:71:99:03:6b:14:31:59:68:89:fc:f7:91:
07:2c:0e:a5:cd:fa:39:a5:94:1c:6e:b5:fe:8b:ba:03:19:15:
e7:53:d1:97:3e:64:35:16:aa:67:6a:bb:bd:28:7f:33:c8:92:
26:16:31:5b:77:f5:6f:82:46:9e:6b:a5:cc:4f:28:28:bb:72:
4f:52:bd:ee:db:9a:eb:cb:f6:da:69:72:78:c9:07:73:00:01:
97:51:11:b6:a2:bf:36:5c:20:9a:ea:3f:8c:f0:6d:21:b0:1a:
ba:b8:d5:d7:d7:ee:47:0a:19:59:32:11:35:09:2e:49:55:08:
f5:ae:b6:98:c0:d6:57:99:b5:a2:5b:17:94:28:26:cd:5e:ce:
c9:b5:e1:2a:2f:f3:a5:98:8f:de:27:3c:dd:41:ff:68:03:45:
b3:f0:88:fd:58:30:7f:b5:b6:fd:40:23:62:3e:72:18:11:1f:
2c:97:21:a8:e0:9d:75:cc:02:3c:1f:f7:64:2e:9a:d7:c8:61:
06:43:85:94:57:05:31:4b:1e:11:b9:6e:ac:4a:da:e3:1f:7f:
c4:f7:14:43:82:00:5f:3b:3b:1d:b6:f7:79:37:cf:1a:88:f7:
d0:6a:e7:ab:4f:c4:0c:40:09:eb:c0:99:29:47:35:f1:ae:3e:
95:e4:c5:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 07:26:07 2025 by rpki-client