
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/73e009-f2f4-43ac-81a1-89aa8d2e8004/1/faXNZSr9Hy8zfCDY_3KGzSzxvfk.mft
File: faXNZSr9Hy8zfCDY_3KGzSzxvfk.mft (raw, json)
Hash identifier: X2r1zSemksO+8XgrZxMnR8Aoy1c/muyIBsbd6j22kPU=
Subject key identifier: 28:13:95:27:9B:8E:3F:9A:62:6E:5F:41:5B:7C:DE:2A:A5:53:18:5E
Authority key identifier: 7D:A5:CD:65:2A:FD:1F:2F:33:7C:20:D8:FF:72:86:CD:2C:F1:BD:F9
Certificate issuer: /CN=7da5cd652afd1f2f337c20d8ff7286cd2cf1bdf9
Certificate serial: 0198556A2CA434746A8758E3990B07363EFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXNZSr9Hy8zfCDY_3KGzSzxvfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/73e009-f2f4-43ac-81a1-89aa8d2e8004/1/faXNZSr9Hy8zfCDY_3KGzSzxvfk.mft
Manifest number: 133C
Signing time: Tue 29 Jul 2025 09:01:18 +0000
Manifest this update: Tue 29 Jul 2025 09:01:18 +0000
Manifest next update: Wed 30 Jul 2025 09:01:18 +0000
Files and hashes: 1: faXNZSr9Hy8zfCDY_3KGzSzxvfk.crl (hash: JggqCOtmptiqwDjLQQbYFRFDoGJOGzzcCjgjAOTN904=)
2: yKkZFLs6YVbkXytvzgCPIVXuU18.roa (hash: 3M+Qw4Xfzb67zSVF5cyn50VarUBuvPcrrFEH7s1xtH4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/73e009-f2f4-43ac-81a1-89aa8d2e8004/1/faXNZSr9Hy8zfCDY_3KGzSzxvfk.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/73e009-f2f4-43ac-81a1-89aa8d2e8004/1/faXNZSr9Hy8zfCDY_3KGzSzxvfk.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXNZSr9Hy8zfCDY_3KGzSzxvfk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 09:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:55:6a:2c:a4:34:74:6a:87:58:e3:99:0b:07:36:3e:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5cd652afd1f2f337c20d8ff7286cd2cf1bdf9
Validity
Not Before: Jul 29 09:01:18 2025 GMT
Not After : Jul 30 09:01:18 2025 GMT
Subject: CN=281395279b8e3f9a626e5f415b7cde2aa553185e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:15:e2:a9:27:c3:3f:b8:b5:44:34:44:df:39:
13:6d:22:c9:22:45:3f:bd:61:6b:f8:df:42:81:aa:
5c:09:29:67:a1:16:50:ed:1d:47:64:d0:8d:15:2b:
04:bf:0b:3b:96:9a:05:14:4f:b1:3e:6a:f5:15:86:
20:72:81:1d:c6:a8:6c:75:a6:35:e3:d6:86:41:2d:
42:5b:53:49:23:51:21:e9:d1:cf:df:5e:59:35:d6:
bb:27:99:7e:05:cb:69:69:1d:1f:c2:d9:bc:58:42:
16:7a:36:68:af:77:bc:f7:b0:19:2e:d2:21:93:43:
35:29:6f:68:30:65:67:02:b4:80:25:ac:dc:5a:97:
7d:46:f4:a0:9e:d6:a8:ab:f1:29:b7:f1:5f:07:b4:
6d:bc:f2:0e:7f:e9:bb:79:76:0b:1c:b8:6b:de:bb:
7a:b2:84:46:58:28:4e:dd:f4:a8:b0:36:0b:fa:56:
ff:f4:08:59:2c:5c:de:f2:bb:a0:88:de:50:36:10:
04:07:01:90:00:94:fa:4b:35:b8:de:84:e2:c7:c5:
33:58:a3:7c:df:12:bc:5b:37:ef:36:d4:d6:29:7d:
4e:29:54:fe:d1:04:02:13:4b:12:ad:e2:a2:68:50:
bb:2a:c4:56:07:ff:87:ca:0c:d6:b7:db:e2:fb:85:
98:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:13:95:27:9B:8E:3F:9A:62:6E:5F:41:5B:7C:DE:2A:A5:53:18:5E
X509v3 Authority Key Identifier:
keyid:7D:A5:CD:65:2A:FD:1F:2F:33:7C:20:D8:FF:72:86:CD:2C:F1:BD:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXNZSr9Hy8zfCDY_3KGzSzxvfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/73e009-f2f4-43ac-81a1-89aa8d2e8004/1/faXNZSr9Hy8zfCDY_3KGzSzxvfk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/73e009-f2f4-43ac-81a1-89aa8d2e8004/1/faXNZSr9Hy8zfCDY_3KGzSzxvfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:c4:55:32:14:55:e6:6d:c1:f4:e3:9e:39:e0:33:41:af:04:
2e:02:a8:fa:c8:2c:35:ac:90:a1:de:3d:f3:29:d4:b4:64:13:
d1:df:1f:6a:d1:2a:9a:8d:92:aa:9e:25:5b:6a:b5:6a:46:aa:
0c:ee:fa:74:0c:95:e8:ec:8a:48:1d:da:73:3b:a2:5f:49:db:
bb:15:98:0f:c6:e9:38:e7:d8:70:ef:ff:05:69:ea:8f:c6:7e:
3e:58:da:48:17:eb:e5:66:3b:07:c0:b4:9a:29:fd:15:cd:2c:
fb:c9:24:f0:55:4a:d1:b3:cf:5d:a3:7a:02:53:7c:55:e4:6b:
c8:5e:67:ee:a2:58:52:81:b8:e1:5a:2a:20:00:9e:82:2d:ed:
c0:54:62:6d:1a:c2:19:c4:c1:80:d4:d1:d4:20:ee:8e:6a:b1:
29:bf:51:92:19:c0:6f:11:c7:05:2b:bc:da:49:6a:55:7d:0d:
6b:52:23:88:e1:39:0e:75:48:82:7e:32:99:ed:47:e2:7e:3d:
10:8b:ca:87:2c:e3:7a:f7:ec:c8:de:6c:e5:e8:ea:0a:d9:ff:
0b:2e:fa:07:a5:5c:e1:95:ab:35:a0:30:4c:58:aa:26:ce:3a:
c8:f3:7b:04:40:27:64:a5:3e:ca:bb:4e:72:07:f3:27:9a:50:
5d:2b:28:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 19:04:14 2025 by rpki-client