Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/eaf880-7106-4d33-8735-334f9429248e/1/FUA-FXyC9176fFSpvH0NG_AbHK4.mft
File: FUA-FXyC9176fFSpvH0NG_AbHK4.mft (raw, json)
Hash identifier: QAU7QNNC3ekOUfCwj2l1aUAnmBNlkqmmCfqhT2s2c/A=
Subject key identifier: 94:02:7D:63:46:65:78:25:08:A7:4B:AB:D6:1A:FF:BA:25:08:1C:58
Authority key identifier: 15:40:3E:15:7C:82:F7:5E:FA:7C:54:A9:BC:7D:0D:1B:F0:1B:1C:AE
Certificate issuer: /CN=15403e157c82f75efa7c54a9bc7d0d1bf01b1cae
Certificate serial: 0197CEA9609A39D1F6A1BEAB48E9D83A6ED9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FUA-FXyC9176fFSpvH0NG_AbHK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/eaf880-7106-4d33-8735-334f9429248e/1/FUA-FXyC9176fFSpvH0NG_AbHK4.mft
Manifest number: 15C4
Signing time: Thu 03 Jul 2025 05:01:36 +0000
Manifest this update: Thu 03 Jul 2025 05:01:36 +0000
Manifest next update: Fri 04 Jul 2025 05:01:36 +0000
Files and hashes: 1: 9svdSi4VMR39LcPpfRqTZ_ivzWU.roa (hash: qkFZEN8wS5/7d3PWnlFnfBgG42VLZsiC6RIzbDuNeoI=)
2: FUA-FXyC9176fFSpvH0NG_AbHK4.crl (hash: m31m1k458XRbUYA5Nn3My8wulby/8TF8L1LA/Z0WEzg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/eaf880-7106-4d33-8735-334f9429248e/1/FUA-FXyC9176fFSpvH0NG_AbHK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/eaf880-7106-4d33-8735-334f9429248e/1/FUA-FXyC9176fFSpvH0NG_AbHK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/FUA-FXyC9176fFSpvH0NG_AbHK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Jul 2025 05:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ce:a9:60:9a:39:d1:f6:a1:be:ab:48:e9:d8:3a:6e:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15403e157c82f75efa7c54a9bc7d0d1bf01b1cae
Validity
Not Before: Jul 3 05:01:36 2025 GMT
Not After : Jul 4 05:01:36 2025 GMT
Subject: CN=94027d634665782508a74babd61affba25081c58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:04:dc:4e:1e:d7:16:f4:b8:b5:31:b2:a8:34:
f0:c5:a5:d8:15:ae:22:55:31:0a:08:f8:e9:7c:8d:
5a:7f:f0:44:4d:12:31:33:20:37:55:37:2c:28:51:
04:32:49:bb:ae:e3:7f:f3:4a:d9:86:3a:b8:c2:6f:
59:64:8c:81:15:18:79:98:9e:7c:4a:74:9d:3f:4c:
50:86:95:89:1f:9d:5f:39:39:24:1e:25:eb:41:f6:
53:66:6b:56:92:da:1f:aa:50:15:31:89:f1:b5:60:
cd:bf:a1:a6:3a:46:d5:0b:1d:d4:d9:d1:d3:58:96:
a9:7e:a7:1b:9e:a2:35:75:1b:f1:40:2b:7d:97:85:
80:5e:0a:6e:11:95:68:1c:b2:1f:bc:0e:7e:f4:70:
71:9f:aa:fd:b8:4b:27:05:cf:36:38:2c:26:02:47:
0e:76:74:89:e7:ff:a4:ab:eb:9d:87:0c:51:bd:e5:
24:5e:01:4a:e6:e6:58:f3:2d:55:b1:e8:7e:fd:65:
12:e4:d0:44:a8:17:3b:bf:14:43:91:2f:a1:10:0d:
80:82:4d:ea:7d:f7:35:52:2a:72:c3:a5:b6:a7:ab:
90:f6:2a:14:3b:b0:87:b1:86:d6:42:2b:46:3c:14:
a2:3d:57:fd:6b:21:9d:22:14:fe:97:29:ba:bb:98:
ae:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:02:7D:63:46:65:78:25:08:A7:4B:AB:D6:1A:FF:BA:25:08:1C:58
X509v3 Authority Key Identifier:
keyid:15:40:3E:15:7C:82:F7:5E:FA:7C:54:A9:BC:7D:0D:1B:F0:1B:1C:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FUA-FXyC9176fFSpvH0NG_AbHK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/eaf880-7106-4d33-8735-334f9429248e/1/FUA-FXyC9176fFSpvH0NG_AbHK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/eaf880-7106-4d33-8735-334f9429248e/1/FUA-FXyC9176fFSpvH0NG_AbHK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:53:c3:ee:a7:0a:7d:63:e1:f0:af:d6:99:f2:90:01:1b:7e:
d6:59:26:76:a4:b6:b9:9a:c7:42:e7:44:22:e0:dc:4d:26:7d:
2e:67:c2:50:17:e4:ce:15:16:99:fd:88:52:fb:3a:ae:b1:36:
b5:b1:75:75:60:f9:9b:0f:8a:72:ed:9c:01:19:ed:2d:3c:cb:
9c:b2:98:c6:6d:b8:50:3e:c3:9c:8c:22:3d:38:a4:d8:28:7d:
56:2f:2f:3a:12:0a:c9:9b:55:3c:06:88:46:30:40:0b:6d:9b:
c2:47:aa:bb:93:f4:99:12:b3:dd:ed:6d:69:57:52:d6:24:d2:
46:12:11:f2:84:b1:64:f7:d0:84:84:43:5e:99:bb:8c:1b:04:
e6:26:35:30:53:15:51:42:3f:27:95:72:64:70:40:4d:2a:ef:
68:7b:6c:41:f2:ed:5b:c7:35:c8:44:3c:bb:ab:02:d3:c9:3d:
79:bd:b3:78:0e:ae:c4:48:ca:98:e8:9a:3c:ba:fe:d9:93:3c:
09:56:da:ef:3d:74:ad:e0:99:5b:ad:e1:a2:df:36:38:b9:b5:
13:f4:4c:a0:59:17:da:f4:90:9b:88:15:d9:b1:44:da:f5:b8:
a2:3e:14:f4:be:1a:3a:49:71:d1:dd:0d:3d:a6:5a:4c:76:35:
13:7e:60:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 08:05:33 2025 by rpki-client