Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/f38a3e-53be-41d5-9c85-201d507345d9/1/Fa1vJLzs3I2uw-dFS8EoPcDNkx8.mft
File: Fa1vJLzs3I2uw-dFS8EoPcDNkx8.mft (raw, json)
Hash identifier: FhQ4YyFXiH9xjY0e0e0jqk5P/IzGWY/KJLGjB4jjR6I=
Subject key identifier: 7D:F5:3B:A5:FC:B7:78:57:34:2C:95:23:13:05:B1:F5:F2:00:46:D0
Authority key identifier: 15:AD:6F:24:BC:EC:DC:8D:AE:C3:E7:45:4B:C1:28:3D:C0:CD:93:1F
Certificate issuer: /CN=15ad6f24bcecdc8daec3e7454bc1283dc0cd931f
Certificate serial: 01984A09CBDE64301FFBD3AD4AF71C08A975
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fa1vJLzs3I2uw-dFS8EoPcDNkx8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/f38a3e-53be-41d5-9c85-201d507345d9/1/Fa1vJLzs3I2uw-dFS8EoPcDNkx8.mft
Manifest number: 045C
Signing time: Sun 27 Jul 2025 04:00:12 +0000
Manifest this update: Sun 27 Jul 2025 04:00:12 +0000
Manifest next update: Mon 28 Jul 2025 04:00:12 +0000
Files and hashes: 1: 1-irVsmvhgC9shKeonnyDEPMDuh0.roa (hash: 1FiwJeXR31pl2bxgdy1T8oVV/E4LsfaNte1AvGr9OZg=)
2: Fa1vJLzs3I2uw-dFS8EoPcDNkx8.crl (hash: zTd8ej5iLNnQDCHWtVQR9RjUG/Ih327+juoEsf0byhU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/f38a3e-53be-41d5-9c85-201d507345d9/1/Fa1vJLzs3I2uw-dFS8EoPcDNkx8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/f38a3e-53be-41d5-9c85-201d507345d9/1/Fa1vJLzs3I2uw-dFS8EoPcDNkx8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fa1vJLzs3I2uw-dFS8EoPcDNkx8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:09:cb:de:64:30:1f:fb:d3:ad:4a:f7:1c:08:a9:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15ad6f24bcecdc8daec3e7454bc1283dc0cd931f
Validity
Not Before: Jul 27 04:00:12 2025 GMT
Not After : Jul 28 04:00:12 2025 GMT
Subject: CN=7df53ba5fcb77857342c95231305b1f5f20046d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f2:d2:30:69:e1:29:01:b4:ec:a0:ab:29:ef:
a8:94:f4:30:52:60:e1:ea:83:68:3c:cf:c4:d0:af:
45:e0:11:84:d1:9a:32:bb:dc:c5:8e:6f:00:05:92:
33:86:6a:93:44:1d:33:89:c1:99:55:ce:f3:92:9d:
a4:f7:85:c6:eb:bb:76:48:a8:f2:c8:67:66:2b:e9:
22:5d:22:71:17:6e:40:06:16:5d:68:ca:1f:db:8a:
58:3e:4b:fe:98:b1:9f:81:ae:4e:84:a8:be:e7:d4:
ef:44:ea:af:b1:65:0f:91:1a:f9:f1:94:0a:d6:ba:
5f:27:c4:44:0a:66:84:b5:29:ae:18:55:ff:59:5b:
fc:d8:5e:7d:a0:51:ef:0b:f2:d2:1b:74:a6:aa:39:
57:9e:7a:b2:0c:46:c9:f1:9d:07:0e:00:7b:ed:da:
ae:e8:03:aa:25:a3:8e:17:89:64:93:40:ee:35:0d:
60:66:f3:23:6a:4d:25:59:e1:25:8d:79:1e:59:bf:
44:6c:27:10:da:43:1e:3d:34:f7:b6:17:61:1e:c3:
dc:96:7c:38:7e:08:ba:82:05:f1:b0:f2:58:7f:1e:
f8:e1:70:77:60:4d:fb:ca:89:b8:cb:f6:b1:cf:f5:
b3:3f:a3:5f:86:62:60:aa:99:b6:e4:a7:e0:9c:2f:
c4:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:F5:3B:A5:FC:B7:78:57:34:2C:95:23:13:05:B1:F5:F2:00:46:D0
X509v3 Authority Key Identifier:
keyid:15:AD:6F:24:BC:EC:DC:8D:AE:C3:E7:45:4B:C1:28:3D:C0:CD:93:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fa1vJLzs3I2uw-dFS8EoPcDNkx8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f38a3e-53be-41d5-9c85-201d507345d9/1/Fa1vJLzs3I2uw-dFS8EoPcDNkx8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f38a3e-53be-41d5-9c85-201d507345d9/1/Fa1vJLzs3I2uw-dFS8EoPcDNkx8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:ad:2c:64:1e:8a:a3:d0:c4:b1:25:a0:c5:62:43:6f:05:3c:
4d:d2:4b:98:63:e2:e0:9d:88:1a:0f:c5:67:c5:6a:fa:16:55:
2e:66:10:65:1d:b3:4c:5a:f7:71:c0:13:fa:8b:2b:bc:ad:ab:
03:03:2f:08:30:e2:f6:44:97:05:75:26:f9:b0:b7:0c:36:7a:
fc:27:6d:98:d0:bc:6f:fd:be:2e:47:30:fe:60:69:a1:57:74:
01:6c:a2:b5:b1:8c:04:87:a0:5b:5e:53:1e:8b:2c:79:b2:93:
04:ab:22:3d:a9:c7:78:44:91:e8:b5:94:ba:c1:7e:a6:55:4e:
41:12:8e:67:3f:6e:3d:b4:a0:2b:2d:28:35:fd:85:60:5c:ac:
2a:1d:40:61:30:a8:82:a4:19:ba:9c:75:6c:fa:53:c1:3a:af:
a4:6b:00:41:b3:db:88:09:1d:83:8d:d2:52:10:27:5f:fd:fd:
b1:a8:25:12:fa:eb:60:46:d3:56:e1:27:c9:59:63:1e:bc:57:
9f:1e:3d:30:2e:e5:c1:6d:01:66:8d:27:78:7b:84:b5:88:6e:
57:e0:de:1e:56:15:44:6e:6c:57:e2:e4:e5:88:b0:31:ef:31:
14:66:19:e9:14:47:b5:77:a6:3b:ea:3d:e0:e5:ee:ea:ee:c6:
8b:1e:6e:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:56:30 2025 by rpki-client