Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/f710ce-440f-405f-ac50-aa942994fc60/1/FW8E_FyodTFasLhUtkUGsJyZjpo.mft
File: FW8E_FyodTFasLhUtkUGsJyZjpo.mft (raw, json)
Hash identifier: Gp3vajt9agrCV0il6k7c1ug84YHXhTrLZAkjJyg+vj4=
Subject key identifier: 49:3B:B1:23:C5:77:66:CC:18:88:14:45:B8:6A:81:CB:C0:0A:81:F5
Authority key identifier: 15:6F:04:FC:5C:A8:75:31:5A:B0:B8:54:B6:45:06:B0:9C:99:8E:9A
Certificate issuer: /CN=156f04fc5ca875315ab0b854b64506b09c998e9a
Certificate serial: 01979180AF091D39E7552EC833190014DF1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FW8E_FyodTFasLhUtkUGsJyZjpo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/f710ce-440f-405f-ac50-aa942994fc60/1/FW8E_FyodTFasLhUtkUGsJyZjpo.mft
Manifest number: 15A0
Signing time: Sat 21 Jun 2025 08:00:18 +0000
Manifest this update: Sat 21 Jun 2025 08:00:18 +0000
Manifest next update: Sun 22 Jun 2025 08:00:18 +0000
Files and hashes: 1: 74FiFUUCcsV_j506QvqvuUKXA1c.roa (hash: apRm/FJ7fgKknAqYO8bdqiAphQJLpxJucgrm/glKMKk=)
2: FW8E_FyodTFasLhUtkUGsJyZjpo.crl (hash: 7a4fhnKP1hS9es5/vmhyvnKcMwRL2MdWlRIzNP1fFuY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/f710ce-440f-405f-ac50-aa942994fc60/1/FW8E_FyodTFasLhUtkUGsJyZjpo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/f710ce-440f-405f-ac50-aa942994fc60/1/FW8E_FyodTFasLhUtkUGsJyZjpo.mft
rsync://rpki.ripe.net/repository/DEFAULT/FW8E_FyodTFasLhUtkUGsJyZjpo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 22 Jun 2025 07:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:91:80:af:09:1d:39:e7:55:2e:c8:33:19:00:14:df:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=156f04fc5ca875315ab0b854b64506b09c998e9a
Validity
Not Before: Jun 21 08:00:18 2025 GMT
Not After : Jun 22 08:00:18 2025 GMT
Subject: CN=493bb123c57766cc18881445b86a81cbc00a81f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c6:19:51:a3:8f:b2:8f:83:41:c4:74:07:45:
67:3c:cf:4a:3c:fe:82:28:43:68:ca:80:70:ff:73:
9f:64:43:36:2c:b8:d9:71:9d:e9:d4:3f:05:37:ea:
75:ff:f7:25:b0:83:6a:b1:fd:b7:7e:46:eb:c2:be:
fb:60:aa:93:23:25:fe:f9:92:78:42:86:0f:b6:52:
27:7c:2b:c4:96:32:6b:59:f3:a4:cd:d2:98:1c:56:
88:8f:5e:bf:d3:3c:66:95:b6:22:e5:65:70:62:32:
ff:be:f7:35:be:d5:62:4f:63:07:df:48:32:83:fd:
db:d2:00:8c:8b:b4:68:a2:d5:9a:0d:09:7f:7d:6e:
f8:ff:47:30:33:19:84:89:5e:02:73:fd:e9:22:3d:
bd:e8:38:e2:db:38:d2:45:f9:d1:95:c5:55:1e:5e:
0f:29:70:01:44:90:7f:bb:d8:c1:8f:cf:b8:4f:5d:
c0:ed:8d:61:a0:c1:ed:27:61:49:28:f0:45:94:7c:
0b:2b:a7:13:a1:30:a0:a3:03:40:f0:ba:a7:09:a0:
b4:ba:4c:bd:2a:0a:a0:55:db:49:32:a2:ee:68:b1:
bd:14:f1:93:5d:9e:44:06:79:f7:c0:06:68:9b:46:
f1:39:5a:46:9a:6e:df:86:a6:f7:6f:f5:6a:18:91:
ae:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:3B:B1:23:C5:77:66:CC:18:88:14:45:B8:6A:81:CB:C0:0A:81:F5
X509v3 Authority Key Identifier:
keyid:15:6F:04:FC:5C:A8:75:31:5A:B0:B8:54:B6:45:06:B0:9C:99:8E:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FW8E_FyodTFasLhUtkUGsJyZjpo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f710ce-440f-405f-ac50-aa942994fc60/1/FW8E_FyodTFasLhUtkUGsJyZjpo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f710ce-440f-405f-ac50-aa942994fc60/1/FW8E_FyodTFasLhUtkUGsJyZjpo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:69:c2:82:3f:e4:4f:9b:63:d8:94:f9:3e:91:1c:73:87:9b:
e3:5a:5c:9a:a1:f0:00:4d:6f:13:6e:26:b6:53:d0:f4:63:f1:
37:f5:db:3a:9e:57:e9:c4:9f:5d:9f:3a:64:9d:87:3c:0f:f1:
e1:c4:fa:a6:ae:e7:87:a5:ed:32:d1:39:2b:93:78:b5:ef:b7:
07:49:53:6b:b6:d8:b1:fa:05:35:37:4e:29:0a:7c:d2:ce:26:
27:70:d3:e8:a3:5e:34:44:e9:6e:1d:ee:87:0c:7f:34:bd:fe:
84:f3:39:dc:65:ea:df:d6:7c:5e:85:2e:97:73:a0:67:f1:5f:
49:98:50:90:8a:e8:a6:77:9d:17:5d:9d:3b:84:95:52:13:b0:
3a:97:74:33:b2:0a:2f:bf:82:1a:71:1c:0d:9c:04:fc:d6:b8:
ea:4c:5f:99:0d:b0:85:a1:6e:57:0a:1d:2e:4c:7f:ab:7d:98:
05:af:b8:ed:5f:8a:79:d8:7b:dc:20:78:d0:f6:9c:6e:85:04:
f1:45:f4:71:ad:dd:59:79:33:6e:e0:ed:25:c6:28:da:34:bd:
e5:be:7f:6e:80:c8:09:a5:8d:94:b2:28:4b:fe:59:21:60:f0:
f0:66:4a:1b:f1:b4:98:4e:20:ae:16:f4:19:d6:93:fb:f4:e9:
21:49:d7:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 10:56:30 2025 by rpki-client