Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/19650d-2b87-4911-ae1e-895b0d3c4b45/1/fAfb3HHxK9p7t_qAytwu2aL-7-s.mft
File: fAfb3HHxK9p7t_qAytwu2aL-7-s.mft (raw, json)
Hash identifier: HcySugPvG2lf86hA/SEyt0hZdtCaew+R7MxY2th9sy8=
Subject key identifier: A1:08:5C:D5:8A:E1:2D:D5:1D:E5:FA:26:85:17:BD:61:98:D9:B5:75
Authority key identifier: 7C:07:DB:DC:71:F1:2B:DA:7B:B7:FA:80:CA:DC:2E:D9:A2:FE:EF:EB
Certificate issuer: /CN=7c07dbdc71f12bda7bb7fa80cadc2ed9a2feefeb
Certificate serial: 0197481E3814308884F543C499343599D2AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fAfb3HHxK9p7t_qAytwu2aL-7-s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/19650d-2b87-4911-ae1e-895b0d3c4b45/1/fAfb3HHxK9p7t_qAytwu2aL-7-s.mft
Manifest number: 0295
Signing time: Sat 07 Jun 2025 02:00:29 +0000
Manifest this update: Sat 07 Jun 2025 02:00:29 +0000
Manifest next update: Sun 08 Jun 2025 02:00:29 +0000
Files and hashes: 1: fAfb3HHxK9p7t_qAytwu2aL-7-s.crl (hash: DhSt15wg1eJLLqEx3mpa87+7N9fpT/SEt7Q3ULFwMtw=)
2: fbxGcDZ4JffpLB-VA4euV8cUHbI.roa (hash: ZaYZ23rjJ96t14BAX6CvRsmnyjmgBRcXDVd5G/xhkus=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/19650d-2b87-4911-ae1e-895b0d3c4b45/1/fAfb3HHxK9p7t_qAytwu2aL-7-s.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/19650d-2b87-4911-ae1e-895b0d3c4b45/1/fAfb3HHxK9p7t_qAytwu2aL-7-s.mft
rsync://rpki.ripe.net/repository/DEFAULT/fAfb3HHxK9p7t_qAytwu2aL-7-s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 02:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:1e:38:14:30:88:84:f5:43:c4:99:34:35:99:d2:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c07dbdc71f12bda7bb7fa80cadc2ed9a2feefeb
Validity
Not Before: Jun 7 02:00:29 2025 GMT
Not After : Jun 8 02:00:29 2025 GMT
Subject: CN=a1085cd58ae12dd51de5fa268517bd6198d9b575
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:88:94:52:a6:c7:b8:26:3e:75:d4:6c:7f:12:
4c:f7:d8:0a:b1:16:0b:93:97:79:20:72:cc:b1:3e:
df:58:43:1b:4d:3c:a1:04:7a:f3:5e:2b:54:50:7b:
22:5c:89:61:52:f9:12:dc:a7:18:44:59:81:a8:86:
5f:54:e7:1e:14:a3:44:a9:89:e3:4b:7e:16:b7:e5:
c5:63:1e:8a:c0:3f:da:36:e7:82:72:e0:30:5e:01:
5f:d2:74:55:57:e5:e3:c7:a3:54:50:72:37:9a:93:
f4:cd:72:30:12:d5:ad:90:ae:ff:06:6c:a3:da:fb:
c3:3c:25:40:29:7b:17:e5:0f:78:44:4b:ed:c5:a5:
08:12:83:45:25:eb:f4:f6:8c:6e:67:c2:df:03:3a:
cd:c8:a1:55:26:3a:5a:22:86:90:1d:f1:d9:bc:de:
99:bc:95:e4:aa:0d:ae:c2:ea:1a:65:da:8c:cf:dd:
3f:12:43:10:e1:98:b3:55:76:9e:f1:77:9a:25:e0:
f3:b2:1a:1f:d0:83:e8:84:35:88:05:72:1f:c8:22:
db:c0:8a:3c:ac:b3:f7:a3:56:f1:4f:54:89:d5:5d:
c0:c1:92:09:6a:a9:f1:0b:dc:b7:36:24:29:73:a7:
a4:d8:13:76:2d:28:a0:94:56:92:f9:43:0f:52:f0:
a7:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:08:5C:D5:8A:E1:2D:D5:1D:E5:FA:26:85:17:BD:61:98:D9:B5:75
X509v3 Authority Key Identifier:
keyid:7C:07:DB:DC:71:F1:2B:DA:7B:B7:FA:80:CA:DC:2E:D9:A2:FE:EF:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fAfb3HHxK9p7t_qAytwu2aL-7-s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/19650d-2b87-4911-ae1e-895b0d3c4b45/1/fAfb3HHxK9p7t_qAytwu2aL-7-s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/19650d-2b87-4911-ae1e-895b0d3c4b45/1/fAfb3HHxK9p7t_qAytwu2aL-7-s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:1d:d6:1b:fb:82:f9:b2:1f:88:d9:a5:53:53:c1:c2:65:32:
5e:08:1b:d2:8d:21:13:74:1a:af:52:51:63:75:51:9f:e2:22:
64:58:5c:d9:13:37:d4:10:df:11:51:51:fa:a5:e5:0d:40:18:
95:80:c5:c3:4e:55:ac:47:27:d3:ef:3f:36:b8:dd:cd:fd:09:
00:a9:f5:87:e3:c1:0a:95:fd:05:ba:83:dd:23:d4:51:76:f9:
51:f0:eb:0e:76:10:cf:8c:b3:0c:eb:8d:8c:e7:97:38:4f:f0:
e2:60:72:d7:32:13:51:c5:95:16:8b:44:b8:95:c8:74:d9:7e:
83:31:83:1d:ea:68:71:eb:98:84:d9:00:2c:28:77:7e:a5:81:
b9:fe:7b:93:ca:5b:45:5b:f0:ec:83:bc:9a:5d:c4:91:93:73:
30:7e:de:16:dc:4e:14:bc:a5:e7:c2:64:ea:e8:0e:e5:a2:6c:
23:29:f0:fb:ab:0c:48:3c:ea:2d:a5:9b:6f:7d:42:23:2a:9a:
b1:ae:14:d5:86:da:67:ef:24:fe:24:e5:6f:f3:de:3c:a4:fa:
98:4c:8e:78:41:b0:f2:a5:8d:bb:3a:ce:e2:1b:bf:2d:ad:de:
d1:9b:e4:20:cd:22:f9:21:15:91:4a:a2:3f:f6:65:d1:8a:a4:
a1:75:26:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 11:41:16 2025 by rpki-client