Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/cbbedc-b7bc-4255-bc41-e36e8d293ae0/1/FAThjoYWcF7A8pDlfKgpqC9flsI.mft
File: FAThjoYWcF7A8pDlfKgpqC9flsI.mft (raw, json)
Hash identifier: dmjZf4iRX0MtzPgEbjrDFvSyt0ayNvmy0n7Q9h0sxVw=
Subject key identifier: 52:8D:89:FC:61:A4:18:9D:2F:46:38:A3:CF:E9:75:D8:0C:36:C7:37
Authority key identifier: 14:04:E1:8E:86:16:70:5E:C0:F2:90:E5:7C:A8:29:A8:2F:5F:96:C2
Certificate issuer: /CN=1404e18e8616705ec0f290e57ca829a82f5f96c2
Certificate serial: 01974FD81A5810E4D08E2EA00ED408C7F491
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FAThjoYWcF7A8pDlfKgpqC9flsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/cbbedc-b7bc-4255-bc41-e36e8d293ae0/1/FAThjoYWcF7A8pDlfKgpqC9flsI.mft
Manifest number: 1580
Signing time: Sun 08 Jun 2025 14:00:51 +0000
Manifest this update: Sun 08 Jun 2025 14:00:51 +0000
Manifest next update: Mon 09 Jun 2025 14:00:51 +0000
Files and hashes: 1: FAThjoYWcF7A8pDlfKgpqC9flsI.crl (hash: 9WpcPrDDBP0Zx3pVDmrABmCEf8AfcIWFgI29TJYdw/s=)
2: tsrNBESAlUjzygDHgS7gEuqfQn0.roa (hash: 6Jn0pVJqrN6B9jn7fLfe3kxST0CupCM2snjZV9wb1no=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/cbbedc-b7bc-4255-bc41-e36e8d293ae0/1/FAThjoYWcF7A8pDlfKgpqC9flsI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/cbbedc-b7bc-4255-bc41-e36e8d293ae0/1/FAThjoYWcF7A8pDlfKgpqC9flsI.mft
rsync://rpki.ripe.net/repository/DEFAULT/FAThjoYWcF7A8pDlfKgpqC9flsI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 11:44:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4f:d8:1a:58:10:e4:d0:8e:2e:a0:0e:d4:08:c7:f4:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1404e18e8616705ec0f290e57ca829a82f5f96c2
Validity
Not Before: Jun 8 14:00:51 2025 GMT
Not After : Jun 9 14:00:51 2025 GMT
Subject: CN=528d89fc61a4189d2f4638a3cfe975d80c36c737
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:eb:5d:ba:25:d3:20:52:c0:1b:71:ac:02:14:
0c:0a:64:50:80:11:fa:81:1a:9e:72:e6:a4:1f:55:
0e:0e:e5:b9:39:f2:49:1d:de:88:7b:1d:f9:48:64:
52:b6:04:51:a9:0c:c6:e7:4d:22:30:e5:78:17:51:
76:16:9a:eb:a8:10:c4:f9:81:56:24:6e:fb:d4:cb:
03:47:70:1e:39:97:a2:d3:d8:fa:49:94:a4:84:17:
b7:3d:91:8d:fa:d0:15:62:d5:b4:ce:ea:c0:fa:40:
04:75:d0:05:dc:8d:9a:ad:b4:16:00:4e:87:dc:37:
cb:08:e8:ba:35:52:3c:8a:92:9d:bd:ab:02:90:60:
37:d3:3e:d4:d8:28:2b:94:03:32:f8:81:bd:3f:d4:
c3:04:a9:04:c1:45:84:20:e4:a6:7b:d7:f1:84:ae:
e7:3a:87:4c:c1:ba:2f:07:10:0b:86:30:57:fc:2d:
c8:cc:1c:ff:2c:91:42:ac:e3:8d:ae:5a:03:d5:67:
43:65:f7:8c:fb:ff:1c:9f:bd:da:fc:be:2a:f6:76:
7e:12:05:45:05:0f:bf:95:89:3d:26:32:98:a7:28:
8d:6e:54:ca:6a:28:b9:c4:10:4a:57:b9:18:c9:9b:
f7:c5:eb:5d:8e:7e:b4:40:ce:94:10:3f:02:59:6c:
2d:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:8D:89:FC:61:A4:18:9D:2F:46:38:A3:CF:E9:75:D8:0C:36:C7:37
X509v3 Authority Key Identifier:
keyid:14:04:E1:8E:86:16:70:5E:C0:F2:90:E5:7C:A8:29:A8:2F:5F:96:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FAThjoYWcF7A8pDlfKgpqC9flsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/cbbedc-b7bc-4255-bc41-e36e8d293ae0/1/FAThjoYWcF7A8pDlfKgpqC9flsI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/cbbedc-b7bc-4255-bc41-e36e8d293ae0/1/FAThjoYWcF7A8pDlfKgpqC9flsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:c9:bf:52:5b:95:9f:b3:27:48:7a:3b:b7:08:e2:df:fb:68:
7f:0a:ce:c1:1f:21:4e:47:6e:6f:db:df:b0:bc:65:2e:88:49:
48:83:28:5c:a4:35:c8:31:69:ec:4f:6e:df:04:6a:63:a2:37:
b3:28:5f:7c:c7:f8:b2:b9:28:f8:73:09:6f:82:cd:9b:e5:96:
9c:00:9a:5e:6b:80:47:55:72:00:ba:fa:d0:f6:5e:2c:90:65:
74:e0:02:53:ec:c2:ce:db:d4:4e:59:63:94:10:a2:cc:9d:15:
4f:17:e2:a9:61:ba:8b:70:66:01:1e:09:55:39:3c:0c:a5:bc:
34:57:22:f0:a1:c3:1c:c6:65:2a:87:bb:f8:43:29:92:cb:b1:
ec:af:7d:a6:63:67:cb:39:ab:e6:f9:db:12:6d:4e:d3:db:24:
c8:e9:4f:8a:f6:14:9c:54:25:aa:a6:da:3f:e3:74:62:36:a4:
72:f1:bb:a7:0a:ec:9e:df:c2:7c:5f:0d:cf:fa:71:c0:dc:88:
01:99:26:6a:6c:81:16:3f:a8:2f:58:4d:e8:88:94:bf:0c:77:
a4:1a:5d:6e:65:d4:d0:2a:6d:3f:c2:93:52:dc:b0:a8:d1:35:
dc:f1:46:8a:3d:c0:2f:f0:de:1e:19:6a:5e:b6:ad:62:73:1f:
85:a0:82:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 18:24:27 2025 by rpki-client