Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/f38a3e-53be-41d5-9c85-201d507345d9/1/Fa1vJLzs3I2uw-dFS8EoPcDNkx8.mft
File: Fa1vJLzs3I2uw-dFS8EoPcDNkx8.mft (raw, json)
Hash identifier: cCUimeUQ56FmQ0ZoahUZ9hlFm2ZUR5hwHwgNMAPS0JU=
Subject key identifier: 28:FA:E1:E1:F1:7E:41:D9:99:74:9F:78:1A:FA:7E:35:A7:56:F3:D8
Authority key identifier: 15:AD:6F:24:BC:EC:DC:8D:AE:C3:E7:45:4B:C1:28:3D:C0:CD:93:1F
Certificate issuer: /CN=15ad6f24bcecdc8daec3e7454bc1283dc0cd931f
Certificate serial: 01974B1F94BCEC14B84FAB70C1B3479DB055
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fa1vJLzs3I2uw-dFS8EoPcDNkx8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/f38a3e-53be-41d5-9c85-201d507345d9/1/Fa1vJLzs3I2uw-dFS8EoPcDNkx8.mft
Manifest number: 03D8
Signing time: Sat 07 Jun 2025 16:00:50 +0000
Manifest this update: Sat 07 Jun 2025 16:00:50 +0000
Manifest next update: Sun 08 Jun 2025 16:00:50 +0000
Files and hashes: 1: 1-irVsmvhgC9shKeonnyDEPMDuh0.roa (hash: 1FiwJeXR31pl2bxgdy1T8oVV/E4LsfaNte1AvGr9OZg=)
2: Fa1vJLzs3I2uw-dFS8EoPcDNkx8.crl (hash: oQ3qeGGJh9U9Fp6fc2yQj87ganKY0B2KW8/r7bNZyHo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/f38a3e-53be-41d5-9c85-201d507345d9/1/Fa1vJLzs3I2uw-dFS8EoPcDNkx8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/f38a3e-53be-41d5-9c85-201d507345d9/1/Fa1vJLzs3I2uw-dFS8EoPcDNkx8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fa1vJLzs3I2uw-dFS8EoPcDNkx8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:1f:94:bc:ec:14:b8:4f:ab:70:c1:b3:47:9d:b0:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15ad6f24bcecdc8daec3e7454bc1283dc0cd931f
Validity
Not Before: Jun 7 16:00:50 2025 GMT
Not After : Jun 8 16:00:50 2025 GMT
Subject: CN=28fae1e1f17e41d999749f781afa7e35a756f3d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f6:f8:7d:c6:97:fb:d8:77:a9:98:83:9b:c3:
e8:45:23:de:94:e2:43:1e:9e:45:53:31:47:64:f6:
5c:31:18:e2:5e:7d:40:d8:42:51:fc:43:d9:82:01:
1e:8a:15:9a:01:b4:ea:5d:5e:19:b4:bb:d1:77:eb:
80:00:04:b7:50:ff:b6:4c:1c:1c:d6:eb:37:69:82:
06:aa:8b:d5:70:36:17:ab:f8:89:89:78:fb:77:3b:
2c:28:b8:55:8e:cc:fa:25:34:2a:ee:80:83:87:20:
de:7d:31:e8:6d:da:41:f9:0e:4e:38:90:f3:93:da:
9f:7f:e2:d4:d4:6a:f2:45:54:0c:c6:1a:46:f2:04:
b5:16:9d:14:34:31:f3:a1:4d:d0:b8:8d:3b:12:a7:
c3:e9:e0:11:80:10:64:05:ca:67:d9:ad:aa:76:b1:
04:c7:8f:c7:93:0c:d8:3a:09:26:df:6c:6a:52:26:
cf:6a:e8:a4:57:2a:0b:7a:47:ed:ba:8a:cd:6d:57:
76:ee:2f:41:2f:6b:cd:ae:0f:bf:2f:04:17:ee:fa:
bf:43:c4:fe:b4:eb:e0:64:78:32:91:24:ef:39:e7:
47:11:34:54:a5:0d:59:59:a3:f4:67:ba:f4:d5:39:
e2:fb:5b:99:af:8e:b3:d4:6f:b6:9b:84:fd:0b:c0:
9c:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:FA:E1:E1:F1:7E:41:D9:99:74:9F:78:1A:FA:7E:35:A7:56:F3:D8
X509v3 Authority Key Identifier:
keyid:15:AD:6F:24:BC:EC:DC:8D:AE:C3:E7:45:4B:C1:28:3D:C0:CD:93:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fa1vJLzs3I2uw-dFS8EoPcDNkx8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f38a3e-53be-41d5-9c85-201d507345d9/1/Fa1vJLzs3I2uw-dFS8EoPcDNkx8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f38a3e-53be-41d5-9c85-201d507345d9/1/Fa1vJLzs3I2uw-dFS8EoPcDNkx8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:c9:7b:0c:79:a1:ae:30:3f:d7:ba:42:45:28:d7:29:e1:51:
7d:6b:9d:8d:03:cd:7a:6e:f7:f7:63:25:10:75:f8:73:5b:58:
fe:5f:14:95:1a:3a:0e:2c:38:29:99:50:ff:18:88:fb:c8:ed:
19:cc:d6:1b:62:27:3b:ab:0a:7b:53:36:76:3a:44:b6:90:c3:
83:d8:35:e3:a6:96:62:94:2b:29:62:81:56:21:17:3b:02:34:
fb:72:ac:d5:22:5d:c1:c6:2f:ef:a9:eb:76:9d:ff:30:00:55:
b5:24:a7:72:09:ae:4c:10:ef:22:8b:0b:ba:96:0c:df:29:34:
f6:d9:34:19:be:99:d4:a2:c9:54:01:b2:40:08:df:04:cb:dc:
2a:05:33:1d:18:49:1b:3b:54:8e:35:62:55:6d:a8:b6:70:f5:
ff:98:7d:d5:1c:c9:03:e3:63:67:58:68:93:63:a2:20:93:d0:
9d:89:87:47:a2:7e:ce:2b:4b:f1:cc:67:80:b1:40:99:a8:57:
9c:04:03:1b:c7:67:87:21:66:08:52:d4:09:d7:80:f5:a9:a2:
c3:04:1c:85:fe:29:31:a7:48:c5:24:69:b6:85:8e:94:4c:fc:
85:58:86:66:7a:2c:e9:b0:19:a6:cd:54:9f:13:15:67:e5:ae:
d2:4b:c1:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 18:40:05 2025 by rpki-client