Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/12f26e-fb11-42e1-bacc-3969eca7b7d4/1/Fa8HL54VarwgxGhJjiMjFSxzaug.mft
File: Fa8HL54VarwgxGhJjiMjFSxzaug.mft (raw, json)
Hash identifier: hqVJIVvBc9Ex7gjVu87kXDP+zQpPC1R7AvaQWH18fJw=
Subject key identifier: 30:71:8F:45:66:16:30:8F:32:60:8D:64:95:DE:4B:A4:DE:C2:74:80
Authority key identifier: 15:AF:07:2F:9E:15:6A:BC:20:C4:68:49:8E:23:23:15:2C:73:6A:E8
Certificate issuer: /CN=15af072f9e156abc20c468498e2323152c736ae8
Certificate serial: 01986C5FAEF58400251F40F17CE44B8A747D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fa8HL54VarwgxGhJjiMjFSxzaug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/12f26e-fb11-42e1-bacc-3969eca7b7d4/1/Fa8HL54VarwgxGhJjiMjFSxzaug.mft
Manifest number: 1552
Signing time: Sat 02 Aug 2025 20:01:06 +0000
Manifest this update: Sat 02 Aug 2025 20:01:06 +0000
Manifest next update: Sun 03 Aug 2025 20:01:06 +0000
Files and hashes: 1: 1-hG6m2b1-771ZXFUCad6-Q0HqS0.roa (hash: iRlAMEhmdJkdMf5CTvW6WMLAwT23DftwTFfnt2+39Po=)
2: Fa8HL54VarwgxGhJjiMjFSxzaug.crl (hash: D1q2WH2IOLpHIt1ANPkUpAyC6KjK4H23yN0W3FwJSR8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/12f26e-fb11-42e1-bacc-3969eca7b7d4/1/Fa8HL54VarwgxGhJjiMjFSxzaug.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/12f26e-fb11-42e1-bacc-3969eca7b7d4/1/Fa8HL54VarwgxGhJjiMjFSxzaug.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fa8HL54VarwgxGhJjiMjFSxzaug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 03 Aug 2025 15:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:6c:5f:ae:f5:84:00:25:1f:40:f1:7c:e4:4b:8a:74:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15af072f9e156abc20c468498e2323152c736ae8
Validity
Not Before: Aug 2 20:01:06 2025 GMT
Not After : Aug 3 20:01:06 2025 GMT
Subject: CN=30718f456616308f32608d6495de4ba4dec27480
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:83:f3:84:c2:e3:63:ac:ba:d0:0a:b8:ba:5a:
1d:31:60:75:b6:d3:1e:88:f8:9e:5f:af:ed:78:0f:
8c:79:7a:21:31:43:7d:fa:e5:a0:bf:01:30:9b:12:
a7:dc:a3:9e:63:bd:94:33:ce:aa:a9:80:63:b3:0e:
bb:c4:e0:e3:ac:ed:f8:cd:76:5c:49:fb:61:8d:c0:
38:23:e6:15:12:b5:69:06:7a:b6:6e:5a:e5:a0:bd:
a2:36:4d:74:87:ee:35:94:15:fe:98:81:68:ed:c7:
25:af:8c:44:0b:30:d6:7d:80:dc:75:b9:c7:0b:91:
3f:ec:de:f0:b2:f1:ca:de:a2:a0:13:53:64:4f:92:
79:fd:01:b2:34:eb:80:1b:f0:9f:b8:f9:8b:6b:13:
3b:38:39:4b:08:96:ba:5b:60:d3:62:51:d5:10:38:
91:e6:c8:3a:fc:52:5b:dd:89:2f:9f:32:3e:b1:e0:
7f:25:d4:92:f5:6b:9a:0d:e6:5b:3c:30:c0:e6:e7:
c7:ee:4e:57:32:c5:f1:6c:f5:c9:80:57:22:00:4b:
b5:eb:c8:54:f9:ea:4d:24:6a:68:d5:54:0c:b3:2d:
ef:83:34:44:d7:d4:f0:13:33:24:94:55:8e:46:e2:
a6:49:62:0f:94:59:fa:09:f0:64:ed:77:1e:86:94:
fc:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:71:8F:45:66:16:30:8F:32:60:8D:64:95:DE:4B:A4:DE:C2:74:80
X509v3 Authority Key Identifier:
keyid:15:AF:07:2F:9E:15:6A:BC:20:C4:68:49:8E:23:23:15:2C:73:6A:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fa8HL54VarwgxGhJjiMjFSxzaug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/12f26e-fb11-42e1-bacc-3969eca7b7d4/1/Fa8HL54VarwgxGhJjiMjFSxzaug.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/12f26e-fb11-42e1-bacc-3969eca7b7d4/1/Fa8HL54VarwgxGhJjiMjFSxzaug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:1e:71:d3:10:bc:51:dc:51:bc:09:e7:c4:60:5f:68:14:30:
69:0d:92:6e:11:00:f2:e8:52:81:e2:c9:57:a6:ad:50:58:38:
58:09:a9:02:63:e6:6c:28:c6:f5:10:1c:0d:aa:9b:7c:35:fd:
3b:c9:7b:09:79:fa:56:d2:49:a1:fa:e2:3a:5b:df:68:72:0e:
ad:54:65:7e:c0:cc:e4:10:3f:41:87:00:64:5a:da:7b:80:3d:
ff:19:aa:c1:1e:b6:ab:84:63:62:2a:0e:4d:b4:7c:08:b3:5f:
66:e8:8b:e4:63:b5:40:31:f8:cc:71:ca:ea:ae:77:c1:97:74:
ad:d2:3a:c3:9d:4c:88:6f:a6:a7:75:cb:f7:30:d7:10:03:8a:
9f:88:2f:93:3e:29:6f:14:2f:af:17:47:8e:08:aa:02:b2:c2:
1d:8f:cb:91:86:77:7f:4b:7d:bc:35:e0:73:1a:fd:b0:f5:44:
38:e0:11:73:f7:a3:9d:0c:1e:cf:d7:28:b6:b3:21:59:4a:25:
45:0a:62:fe:0a:4f:b9:3c:1b:83:c8:26:de:d7:52:31:bb:ea:
45:a1:46:e1:30:16:35:f7:82:90:63:8b:7c:ba:fa:ff:f9:c3:
32:21:bd:e4:50:7d:44:0b:be:05:2b:40:5e:3e:85:42:e5:66:
8b:15:75:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 3 01:12:36 2025 by rpki-client