Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/80ed98-da84-4e4a-b86c-681862a18f0c/1/fa1iGAhj1yKqpPCIHkQ3jjyAg3I.mft
File: fa1iGAhj1yKqpPCIHkQ3jjyAg3I.mft (raw, json)
Hash identifier: XYQAGKsAYZG5zNRbFWK2wnZYSRbj1IIyaJDe7xZsTAw=
Subject key identifier: 4A:7B:E1:1E:A9:CE:E3:22:B8:03:9A:C9:64:8B:9C:10:85:D9:77:CC
Authority key identifier: 7D:AD:62:18:08:63:D7:22:AA:A4:F0:88:1E:44:37:8E:3C:80:83:72
Certificate issuer: /CN=7dad62180863d722aaa4f0881e44378e3c808372
Certificate serial: 01974C324AFDD459694C56046466C3F5B534
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fa1iGAhj1yKqpPCIHkQ3jjyAg3I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/80ed98-da84-4e4a-b86c-681862a18f0c/1/fa1iGAhj1yKqpPCIHkQ3jjyAg3I.mft
Manifest number: 8E
Signing time: Sat 07 Jun 2025 21:00:53 +0000
Manifest this update: Sat 07 Jun 2025 21:00:53 +0000
Manifest next update: Sun 08 Jun 2025 21:00:53 +0000
Files and hashes: 1: C7GNqkgz9p0zOIQbq1hmHpb1k10.roa (hash: Ih5IZ06o7j/AaerWpaiGsplGlhC586fD+XGd+HNQexM=)
2: fa1iGAhj1yKqpPCIHkQ3jjyAg3I.crl (hash: Ss5y7V0HYkidhg6zG1+T7qEZiAazQODZrGgI5cyG4Dc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/80ed98-da84-4e4a-b86c-681862a18f0c/1/fa1iGAhj1yKqpPCIHkQ3jjyAg3I.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/80ed98-da84-4e4a-b86c-681862a18f0c/1/fa1iGAhj1yKqpPCIHkQ3jjyAg3I.mft
rsync://rpki.ripe.net/repository/DEFAULT/fa1iGAhj1yKqpPCIHkQ3jjyAg3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:32:4a:fd:d4:59:69:4c:56:04:64:66:c3:f5:b5:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7dad62180863d722aaa4f0881e44378e3c808372
Validity
Not Before: Jun 7 21:00:53 2025 GMT
Not After : Jun 8 21:00:53 2025 GMT
Subject: CN=4a7be11ea9cee322b8039ac9648b9c1085d977cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c2:0a:94:1b:1c:67:ff:5d:25:8c:e3:8d:45:
19:ca:9f:69:0f:06:d7:ed:fd:c5:9b:2b:20:8d:81:
a3:f3:be:91:b5:df:2e:75:f6:46:9f:9b:64:cf:08:
e7:4a:e8:cb:68:8e:bc:7c:da:e6:2b:fd:6f:f8:75:
31:e3:c7:68:2f:85:29:4c:83:b1:e8:23:03:cf:51:
21:c9:3f:e0:d6:50:f9:e4:cc:65:07:c4:e1:bc:db:
56:7f:95:03:83:89:9b:d9:3d:b2:2c:7a:27:37:a6:
58:cc:ee:fb:4e:08:a2:c9:79:b3:04:a2:be:79:1a:
46:5f:0f:4e:20:99:f1:78:8a:a7:87:d4:6c:16:06:
1b:82:65:72:0c:4d:f9:90:9e:44:5f:dd:a4:6e:7d:
56:15:6b:5d:26:5a:bc:80:22:ba:30:a0:43:82:8b:
c7:85:b9:03:d8:4b:30:48:54:e2:14:fa:c3:ac:bd:
0f:dc:34:43:5f:87:0e:ce:a2:00:7b:72:45:e0:53:
c5:4a:28:29:32:31:10:b6:4a:01:87:d1:73:a2:88:
9f:c2:57:dc:3f:07:eb:ad:d2:32:15:a6:a5:86:fa:
bb:b1:3f:27:6c:05:4c:48:9d:65:a4:7f:9e:0e:70:
6c:34:eb:ec:8c:51:e4:93:6f:77:14:ca:ee:f3:67:
a7:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:7B:E1:1E:A9:CE:E3:22:B8:03:9A:C9:64:8B:9C:10:85:D9:77:CC
X509v3 Authority Key Identifier:
keyid:7D:AD:62:18:08:63:D7:22:AA:A4:F0:88:1E:44:37:8E:3C:80:83:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa1iGAhj1yKqpPCIHkQ3jjyAg3I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/80ed98-da84-4e4a-b86c-681862a18f0c/1/fa1iGAhj1yKqpPCIHkQ3jjyAg3I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/80ed98-da84-4e4a-b86c-681862a18f0c/1/fa1iGAhj1yKqpPCIHkQ3jjyAg3I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:48:d2:55:10:1b:d2:13:99:1b:99:4d:c7:f5:a3:30:a7:41:
72:a3:d6:03:64:95:27:d5:56:0e:df:e0:50:16:34:84:79:bf:
ec:fb:68:72:94:8a:00:44:26:74:1f:55:cb:fd:66:4a:32:d2:
67:27:55:22:1d:a5:91:41:22:ad:66:9c:f0:a5:e3:38:bd:7e:
dc:26:84:1e:08:48:ac:a1:57:d7:83:df:4b:1a:ce:51:47:ac:
18:74:d8:d0:cc:23:bf:5c:65:b9:9b:e3:ed:65:e8:24:f1:03:
6b:bf:26:3d:27:94:51:ea:aa:65:c9:7f:09:7d:db:c2:9a:e6:
ca:48:76:8e:cd:f5:49:30:a4:8d:fc:bb:6e:af:be:a2:8e:f1:
70:80:bd:86:ef:d9:1c:34:00:25:cc:89:ff:7e:40:91:30:ba:
cf:3c:58:44:24:d1:73:d2:9d:7d:3d:19:7e:e2:bc:64:92:07:
57:76:83:4a:cc:74:40:64:a8:0e:bf:10:7d:8f:9f:81:9e:e7:
6a:29:74:e0:e2:c9:28:ec:c0:bf:1f:7b:40:88:79:75:e7:e5:
d9:4e:8f:28:87:12:85:27:12:87:c3:66:99:bb:eb:2a:9a:d9:
34:ed:32:35:29:ba:71:bf:3d:97:3f:97:7e:07:6a:1e:fa:3c:
d0:9c:62:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:03:41 2025 by rpki-client