Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/9c130b-e15e-4b6d-b5fb-719b0497e7cc/1/Fas-cvc0DahW6T1i7o0CPx18juc.mft
File: Fas-cvc0DahW6T1i7o0CPx18juc.mft (raw, json)
Hash identifier: 0gX1gPNDvsewu6q0vn9TpyV6w5ENiYQONVy/S2RSoVA=
Subject key identifier: 59:8F:D0:76:56:ED:49:BB:7C:0E:B7:83:CE:34:C4:6D:F8:E5:19:92
Authority key identifier: 15:AB:3E:72:F7:34:0D:A8:56:E9:3D:62:EE:8D:02:3F:1D:7C:8E:E7
Certificate issuer: /CN=15ab3e72f7340da856e93d62ee8d023f1d7c8ee7
Certificate serial: 01974D7BB143CF6C62E0DCEE39D29CF52DCD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fas-cvc0DahW6T1i7o0CPx18juc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/9c130b-e15e-4b6d-b5fb-719b0497e7cc/1/Fas-cvc0DahW6T1i7o0CPx18juc.mft
Manifest number: 0AC4
Signing time: Sun 08 Jun 2025 03:00:41 +0000
Manifest this update: Sun 08 Jun 2025 03:00:41 +0000
Manifest next update: Mon 09 Jun 2025 03:00:41 +0000
Files and hashes: 1: 7JWKgvAHAa8B28vXNz3LbsvM1_0.roa (hash: aiThNQ8MveF/powu4k+TgcUEIjwVdj4V/Vhk6YBFQDA=)
2: Fas-cvc0DahW6T1i7o0CPx18juc.crl (hash: bVLl0rsTVvM/NUflR+OduDKszVvv20Dsn5veRsCZjeA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/9c130b-e15e-4b6d-b5fb-719b0497e7cc/1/Fas-cvc0DahW6T1i7o0CPx18juc.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/9c130b-e15e-4b6d-b5fb-719b0497e7cc/1/Fas-cvc0DahW6T1i7o0CPx18juc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fas-cvc0DahW6T1i7o0CPx18juc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:7b:b1:43:cf:6c:62:e0:dc:ee:39:d2:9c:f5:2d:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15ab3e72f7340da856e93d62ee8d023f1d7c8ee7
Validity
Not Before: Jun 8 03:00:41 2025 GMT
Not After : Jun 9 03:00:41 2025 GMT
Subject: CN=598fd07656ed49bb7c0eb783ce34c46df8e51992
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:75:2d:9f:bc:69:21:cc:ad:6b:be:94:5b:e9:
10:96:a4:12:6c:6c:3d:6c:af:f9:ec:37:78:fd:bd:
c0:86:b1:f3:2b:e8:e9:43:76:13:7f:22:01:af:cf:
0b:e7:61:06:36:a9:48:ec:6c:ad:ea:db:9b:9f:c2:
25:77:99:dd:9b:38:a5:b9:82:f3:0c:b6:7f:31:5b:
fb:a7:00:89:89:53:dd:9a:a1:28:32:15:11:0f:d8:
61:6b:25:93:08:88:30:75:98:14:bb:8a:33:11:65:
de:71:0d:dd:22:51:30:9b:02:fe:95:df:76:cc:61:
71:a2:47:2b:e4:07:4d:75:bd:b1:f3:56:24:ad:e4:
a6:01:ac:8a:27:f3:ad:e7:25:9e:d3:c5:0e:c9:b3:
1d:f7:d6:41:65:25:60:b5:6f:7a:3b:61:3f:0f:51:
c6:9a:a3:0c:13:79:11:b0:4a:b5:60:db:69:5f:ed:
66:36:06:f4:76:3b:9e:93:21:77:40:56:83:74:f9:
c8:4c:75:ff:51:dd:61:a0:6f:51:9e:8a:e5:5b:d3:
83:49:ba:04:c5:c5:a9:94:e3:d5:b7:bd:b0:92:2a:
6c:72:be:7e:89:c3:21:0f:22:25:16:9c:17:74:61:
ab:16:2f:39:46:5a:f1:40:10:33:b8:59:41:9c:23:
fb:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:8F:D0:76:56:ED:49:BB:7C:0E:B7:83:CE:34:C4:6D:F8:E5:19:92
X509v3 Authority Key Identifier:
keyid:15:AB:3E:72:F7:34:0D:A8:56:E9:3D:62:EE:8D:02:3F:1D:7C:8E:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fas-cvc0DahW6T1i7o0CPx18juc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/9c130b-e15e-4b6d-b5fb-719b0497e7cc/1/Fas-cvc0DahW6T1i7o0CPx18juc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/9c130b-e15e-4b6d-b5fb-719b0497e7cc/1/Fas-cvc0DahW6T1i7o0CPx18juc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:99:c6:76:33:5f:97:6d:71:21:d8:46:2e:3f:7f:02:2b:61:
23:8a:7e:c5:6d:92:3a:12:9e:5d:2d:2e:d6:08:d1:d7:5b:8f:
ab:35:f4:08:40:89:30:6f:c4:6a:e7:b0:f4:d7:b6:f8:fa:db:
2f:a9:37:17:86:a8:21:1f:0c:61:82:7a:e0:fb:6d:e3:3a:38:
00:ba:93:c1:57:8d:cc:42:93:5b:e9:4e:46:47:12:38:e7:03:
be:c1:21:51:2f:5e:a6:ed:48:6c:a4:71:71:58:bc:f0:c0:74:
98:3b:27:4a:f6:aa:1b:96:ee:c0:9e:87:ee:4a:38:43:5c:a6:
c9:02:ad:6d:9f:24:00:0c:fd:1d:89:47:65:85:90:d0:38:db:
0f:5f:e4:f1:69:0d:b6:f3:40:98:aa:d5:74:8f:4b:46:fc:c9:
49:43:b3:c8:53:75:5d:7e:a3:84:30:f2:56:0a:a2:8e:12:e4:
fb:77:54:9d:d7:4f:37:8f:74:2d:10:a8:cd:75:dc:9f:03:cd:
d6:3d:90:4a:b0:50:28:7b:a1:a1:22:ac:91:0f:d4:0f:af:40:
b7:95:d4:4b:c6:b7:56:5e:d8:f8:be:95:b1:ca:b4:63:36:b0:
cc:ed:50:99:fd:8d:85:1b:4b:ab:9c:5b:2e:fb:a9:1d:4e:0b:
75:43:cc:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 09:33:31 2025 by rpki-client