Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/19650d-2b87-4911-ae1e-895b0d3c4b45/1/fAfb3HHxK9p7t_qAytwu2aL-7-s.mft
File: fAfb3HHxK9p7t_qAytwu2aL-7-s.mft (raw, json)
Hash identifier: 0IT2d1gb76dawgmxlwnw1yAO4nW2BKuVO2AYnFWlSaw=
Subject key identifier: 15:06:BE:D0:6B:31:47:FB:7C:08:5B:A3:12:1F:52:26:37:40:7B:2A
Authority key identifier: 7C:07:DB:DC:71:F1:2B:DA:7B:B7:FA:80:CA:DC:2E:D9:A2:FE:EF:EB
Certificate issuer: /CN=7c07dbdc71f12bda7bb7fa80cadc2ed9a2feefeb
Certificate serial: 019932A3A07C34FDA0B1F5AA578E543E283E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fAfb3HHxK9p7t_qAytwu2aL-7-s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/19650d-2b87-4911-ae1e-895b0d3c4b45/1/fAfb3HHxK9p7t_qAytwu2aL-7-s.mft
Manifest number: 0393
Signing time: Wed 10 Sep 2025 08:00:08 +0000
Manifest this update: Wed 10 Sep 2025 08:00:08 +0000
Manifest next update: Thu 11 Sep 2025 08:00:08 +0000
Files and hashes: 1: fAfb3HHxK9p7t_qAytwu2aL-7-s.crl (hash: d9VSoJbTFz9SvzW3kJTRBSrRBG7wdNbwbWL9oJ5LYHE=)
2: fbxGcDZ4JffpLB-VA4euV8cUHbI.roa (hash: ZaYZ23rjJ96t14BAX6CvRsmnyjmgBRcXDVd5G/xhkus=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/19650d-2b87-4911-ae1e-895b0d3c4b45/1/fAfb3HHxK9p7t_qAytwu2aL-7-s.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/19650d-2b87-4911-ae1e-895b0d3c4b45/1/fAfb3HHxK9p7t_qAytwu2aL-7-s.mft
rsync://rpki.ripe.net/repository/DEFAULT/fAfb3HHxK9p7t_qAytwu2aL-7-s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 08:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:32:a3:a0:7c:34:fd:a0:b1:f5:aa:57:8e:54:3e:28:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c07dbdc71f12bda7bb7fa80cadc2ed9a2feefeb
Validity
Not Before: Sep 10 08:00:08 2025 GMT
Not After : Sep 11 08:00:08 2025 GMT
Subject: CN=1506bed06b3147fb7c085ba3121f522637407b2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:95:9a:bf:7f:6b:36:6c:cf:82:c0:a3:b8:79:
47:bc:02:d1:83:da:d5:39:f9:91:be:54:eb:b8:0e:
62:13:b9:a4:b6:36:bd:0c:53:cf:7b:95:3a:32:24:
42:28:ad:c0:88:87:7d:43:fd:da:a9:94:60:f4:54:
22:3d:ce:2e:75:23:ad:6b:e3:c4:a8:fc:de:c3:f7:
a7:eb:fb:93:b7:0d:13:34:8f:02:1e:44:a2:61:fc:
b3:35:5a:9f:d8:a3:ed:13:66:b5:56:ba:b6:c9:fb:
6a:4f:4c:27:9c:df:2e:74:35:9c:92:9e:f4:55:25:
89:ec:75:1e:b6:4e:a2:cc:10:3b:c1:2a:d3:78:d1:
f4:36:79:3d:d3:88:c1:99:77:ee:80:ea:cf:05:a3:
ee:03:53:24:b2:84:85:1b:be:d7:b9:9b:0c:0c:ea:
b8:f8:03:d0:e1:73:22:ad:00:80:c7:c2:23:78:7f:
96:a8:aa:3a:2a:db:8b:85:39:bd:1b:b1:61:6a:00:
1a:7f:19:68:6b:c2:d2:e4:0e:34:4f:ec:d5:5d:9f:
cd:75:74:e0:06:a5:87:cf:56:99:a5:da:b3:fa:01:
56:2c:bf:82:95:e1:f1:54:24:37:72:0a:1a:ac:bf:
ef:74:35:6a:d3:a4:2d:ec:2c:36:01:cb:03:f3:44:
2c:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:06:BE:D0:6B:31:47:FB:7C:08:5B:A3:12:1F:52:26:37:40:7B:2A
X509v3 Authority Key Identifier:
keyid:7C:07:DB:DC:71:F1:2B:DA:7B:B7:FA:80:CA:DC:2E:D9:A2:FE:EF:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fAfb3HHxK9p7t_qAytwu2aL-7-s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/19650d-2b87-4911-ae1e-895b0d3c4b45/1/fAfb3HHxK9p7t_qAytwu2aL-7-s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/19650d-2b87-4911-ae1e-895b0d3c4b45/1/fAfb3HHxK9p7t_qAytwu2aL-7-s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:d7:5e:55:47:9b:2a:b9:d6:64:0e:5d:84:49:48:44:d8:90:
7f:10:7c:93:c5:fc:1a:5b:a4:7e:7c:2e:94:11:c2:8a:3f:22:
b4:42:9f:7c:c4:76:2c:18:2d:d6:24:43:d6:d7:32:50:e8:bb:
67:11:f2:cc:a2:98:9a:c1:9a:ad:83:80:08:4b:93:d6:41:e4:
41:a2:7e:81:54:85:69:fc:2f:7b:5b:c2:83:7a:1a:47:d5:74:
bc:54:83:a7:c6:93:0c:81:66:ed:11:2c:70:96:e5:7c:b2:01:
21:1c:ec:9c:37:3e:a5:10:0d:60:61:31:16:4f:a5:b7:d8:be:
9b:5e:e1:2a:3f:82:ad:16:00:d7:40:d3:fa:44:22:7c:03:f9:
ef:31:f1:41:d3:8c:fe:4a:c0:2f:b9:1e:ce:14:89:7a:d0:78:
0e:f0:f8:58:55:95:2d:4b:ee:14:4b:d0:dc:d8:6c:aa:ec:d8:
80:ad:be:d7:78:23:d5:76:29:aa:64:2c:e2:c7:50:3f:7a:59:
1e:ed:2d:cb:e6:ea:82:46:b1:44:ad:fa:ad:6e:df:81:b2:ef:
53:7a:2a:44:c6:01:5d:e1:5b:38:0d:61:a9:72:56:2d:5c:70:
46:c6:9f:8e:9a:2f:5b:1a:81:42:4b:26:b7:60:dc:43:f9:03:
5d:06:42:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkyo6B8NP2gsfWqV45UPig+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjMDdkYmRjNzFmMTJiZGE3YmI3ZmE4MGNhZGMyZWQ5YTJm
ZWVmZWIwHhcNMjUwOTEwMDgwMDA4WhcNMjUwOTExMDgwMDA4WjAzMTEwLwYDVQQD
EygxNTA2YmVkMDZiMzE0N2ZiN2MwODViYTMxMjFmNTIyNjM3NDA3YjJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6pWav39rNmzPgsCjuHlHvALRg9rV
OfmRvlTruA5iE7mktja9DFPPe5U6MiRCKK3AiId9Q/3aqZRg9FQiPc4udSOta+PE
qPzew/en6/uTtw0TNI8CHkSiYfyzNVqf2KPtE2a1Vrq2yftqT0wnnN8udDWckp70
VSWJ7HUetk6izBA7wSrTeNH0Nnk904jBmXfugOrPBaPuA1MksoSFG77XuZsMDOq4
+APQ4XMirQCAx8IjeH+WqKo6KtuLhTm9G7FhagAafxloa8LS5A40T+zVXZ/NdXTg
BqWHz1aZpdqz+gFWLL+CleHxVCQ3cgoarL/vdDVq06Qt7Cw2AcsD80QsqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBUGvtBrMUf7fAhboxIfUiY3QHsqMB8GA1UdIwQY
MBaAFHwH29xx8Svae7f6gMrcLtmi/u/rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZkFmYjNISHhLOXA3dF9xQXl0d3UyYUwtNy1zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi8xOTY1MGQtMmI4Ny00OTExLWFlMWUt
ODk1YjBkM2M0YjQ1LzEvZkFmYjNISHhLOXA3dF9xQXl0d3UyYUwtNy1zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi8xOTY1MGQtMmI4Ny00OTExLWFlMWUtODk1YjBkM2M0YjQ1
LzEvZkFmYjNISHhLOXA3dF9xQXl0d3UyYUwtNy1zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAINdeVUeb
KrnWZA5dhElIRNiQfxB8k8X8GlukfnwulBHCij8itEKffMR2LBgt1iRD1tcyUOi7
ZxHyzKKYmsGarYOACEuT1kHkQaJ+gVSFafwve1vCg3oaR9V0vFSDp8aTDIFm7REs
cJblfLIBIRzsnDc+pRANYGExFk+lt9i+m17hKj+CrRYA10DT+kQifAP57zHxQdOM
/krAL7kezhSJetB4DvD4WFWVLUvuFEvQ3NhsquzYgK2+13gj1XYpqmQs4sdQP3pZ
Hu0ty+bqgkaxRK36rW7fgbLvU3oqRMYBXeFbOA1hqXJWLVxwRsafjpovWxqBQksm
t2DcQ/kDXQZCAw==
-----END CERTIFICATE-----
Generated at Wed Sep 10 14:25:36 2025 by rpki-client