Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/73e009-f2f4-43ac-81a1-89aa8d2e8004/1/faXNZSr9Hy8zfCDY_3KGzSzxvfk.mft
File: faXNZSr9Hy8zfCDY_3KGzSzxvfk.mft (raw, json)
Hash identifier: X84K/Kr/OzRAy5VEuIOk/5SJw1e9d/tWLnZRWM+sUtc=
Subject key identifier: 52:D9:CE:E9:52:03:EA:56:45:83:08:FD:ED:EC:27:22:8A:0E:F7:7C
Authority key identifier: 7D:A5:CD:65:2A:FD:1F:2F:33:7C:20:D8:FF:72:86:CD:2C:F1:BD:F9
Certificate issuer: /CN=7da5cd652afd1f2f337c20d8ff7286cd2cf1bdf9
Certificate serial: 019754903B09B0D2CA1461830B3CEF2F9626
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXNZSr9Hy8zfCDY_3KGzSzxvfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/73e009-f2f4-43ac-81a1-89aa8d2e8004/1/faXNZSr9Hy8zfCDY_3KGzSzxvfk.mft
Manifest number: 12B7
Signing time: Mon 09 Jun 2025 12:00:27 +0000
Manifest this update: Mon 09 Jun 2025 12:00:27 +0000
Manifest next update: Tue 10 Jun 2025 12:00:27 +0000
Files and hashes: 1: faXNZSr9Hy8zfCDY_3KGzSzxvfk.crl (hash: pJNF2i26SZ8b98vvdusNqiKtW15OuEPzsazxRBucqg8=)
2: yKkZFLs6YVbkXytvzgCPIVXuU18.roa (hash: 3M+Qw4Xfzb67zSVF5cyn50VarUBuvPcrrFEH7s1xtH4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/73e009-f2f4-43ac-81a1-89aa8d2e8004/1/faXNZSr9Hy8zfCDY_3KGzSzxvfk.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/73e009-f2f4-43ac-81a1-89aa8d2e8004/1/faXNZSr9Hy8zfCDY_3KGzSzxvfk.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXNZSr9Hy8zfCDY_3KGzSzxvfk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 11:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:54:90:3b:09:b0:d2:ca:14:61:83:0b:3c:ef:2f:96:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5cd652afd1f2f337c20d8ff7286cd2cf1bdf9
Validity
Not Before: Jun 9 12:00:27 2025 GMT
Not After : Jun 10 12:00:27 2025 GMT
Subject: CN=52d9cee95203ea56458308fdedec27228a0ef77c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:a1:61:46:7f:46:9c:dd:a0:56:24:19:9d:75:
74:56:a1:a7:6a:c2:a7:65:c4:e1:f1:8b:43:fd:de:
8a:f3:4a:c1:2e:c6:09:3a:51:0b:90:ac:26:6d:22:
26:c0:a9:49:83:6b:2c:6b:8b:72:81:62:9a:e5:37:
be:9d:d5:3f:e2:7b:84:2b:46:ca:8b:98:63:da:c5:
22:1f:3a:ad:e7:a7:ec:cb:79:e2:81:ba:b6:3d:1a:
50:97:43:ff:41:44:ec:ed:d2:8f:21:b9:fe:2d:b5:
2b:63:e9:71:02:1d:06:55:8d:a4:29:94:c3:b1:8a:
63:70:7d:38:0f:0d:05:f7:b3:43:57:ee:2a:a6:70:
5e:78:13:13:1d:81:77:9f:8c:14:98:33:f4:35:1d:
71:84:5f:39:bd:de:7f:4f:f7:8e:5f:c1:ac:4f:74:
a8:f5:7b:cf:22:ff:32:1d:38:50:cb:ed:43:ba:66:
96:40:e2:37:fb:04:32:9b:c1:d8:0d:80:40:dd:2b:
ac:7c:cf:46:26:57:17:be:1a:99:e5:63:26:6a:bd:
3d:95:95:b0:3d:b4:27:2d:89:ed:8d:5e:2c:5a:89:
c1:d6:4d:c3:60:32:af:23:87:e1:5e:83:9e:34:fc:
14:76:02:1b:80:e2:60:58:80:9f:0d:3e:07:e6:0c:
f3:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:D9:CE:E9:52:03:EA:56:45:83:08:FD:ED:EC:27:22:8A:0E:F7:7C
X509v3 Authority Key Identifier:
keyid:7D:A5:CD:65:2A:FD:1F:2F:33:7C:20:D8:FF:72:86:CD:2C:F1:BD:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXNZSr9Hy8zfCDY_3KGzSzxvfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/73e009-f2f4-43ac-81a1-89aa8d2e8004/1/faXNZSr9Hy8zfCDY_3KGzSzxvfk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/73e009-f2f4-43ac-81a1-89aa8d2e8004/1/faXNZSr9Hy8zfCDY_3KGzSzxvfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:3d:38:ed:87:bc:50:f9:ba:d2:9c:c2:c3:8e:63:29:07:8e:
5b:b1:31:a7:26:ba:c5:7c:fe:c3:23:56:35:df:d5:8b:2e:56:
0c:7d:9f:e9:b5:a3:7c:32:8e:56:7a:e7:86:7b:68:28:dc:30:
01:bf:2a:ac:87:0e:17:0f:cc:d7:e5:55:df:0b:0a:44:98:36:
96:67:1f:74:b8:f2:fd:86:44:d4:b7:40:e1:05:72:be:af:7a:
17:81:d5:f2:7c:9a:c1:3d:0a:9f:84:93:e1:c4:15:b5:4c:36:
f7:4f:db:c6:01:a9:66:d1:e8:23:58:86:60:77:01:bf:e4:5c:
9a:82:b8:9f:f4:53:d4:4c:c0:1e:50:50:1a:c2:db:96:55:a2:
da:7c:6d:b0:58:24:f3:7a:bf:29:22:e6:d9:76:1f:13:c9:08:
26:7d:25:65:06:36:7a:f1:77:ea:5c:cb:f1:50:a9:61:f4:4f:
f9:a7:65:c2:e2:36:1c:4a:06:3e:bc:9c:62:e7:f5:bd:0f:38:
d1:56:a9:f8:3d:7e:15:24:d0:87:cd:50:4e:2a:87:2f:57:41:
17:31:79:1b:9b:46:55:a2:f5:7e:42:ec:e9:6e:25:e0:88:be:
ef:fb:01:92:49:ab:0e:a0:5a:37:35:d1:20:f3:e2:4a:18:70:
16:e3:fd:42
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdUkDsJsNLKFGGDCzzvL5YmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkYTVjZDY1MmFmZDFmMmYzMzdjMjBkOGZmNzI4NmNkMmNm
MWJkZjkwHhcNMjUwNjA5MTIwMDI3WhcNMjUwNjEwMTIwMDI3WjAzMTEwLwYDVQQD
Eyg1MmQ5Y2VlOTUyMDNlYTU2NDU4MzA4ZmRlZGVjMjcyMjhhMGVmNzdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj6FhRn9GnN2gViQZnXV0VqGnasKn
ZcTh8YtD/d6K80rBLsYJOlELkKwmbSImwKlJg2ssa4tygWKa5Te+ndU/4nuEK0bK
i5hj2sUiHzqt56fsy3nigbq2PRpQl0P/QUTs7dKPIbn+LbUrY+lxAh0GVY2kKZTD
sYpjcH04Dw0F97NDV+4qpnBeeBMTHYF3n4wUmDP0NR1xhF85vd5/T/eOX8GsT3So
9XvPIv8yHThQy+1DumaWQOI3+wQym8HYDYBA3SusfM9GJlcXvhqZ5WMmar09lZWw
PbQnLYntjV4sWonB1k3DYDKvI4fhXoOeNPwUdgIbgOJgWICfDT4H5gzzawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFLZzulSA+pWRYMI/e3sJyKKDvd8MB8GA1UdIwQY
MBaAFH2lzWUq/R8vM3wg2P9yhs0s8b35MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmFYTlpTcjlIeTh6ZkNEWV8zS0d6U3p4dmZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS83M2UwMDktZjJmNC00M2FjLTgxYTEt
ODlhYThkMmU4MDA0LzEvZmFYTlpTcjlIeTh6ZkNEWV8zS0d6U3p4dmZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZS83M2UwMDktZjJmNC00M2FjLTgxYTEtODlhYThkMmU4MDA0
LzEvZmFYTlpTcjlIeTh6ZkNEWV8zS0d6U3p4dmZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlz047Ye8
UPm60pzCw45jKQeOW7Expya6xXz+wyNWNd/Viy5WDH2f6bWjfDKOVnrnhntoKNww
Ab8qrIcOFw/M1+VV3wsKRJg2lmcfdLjy/YZE1LdA4QVyvq96F4HV8nyawT0Kn4ST
4cQVtUw290/bxgGpZtHoI1iGYHcBv+RcmoK4n/RT1EzAHlBQGsLbllWi2nxtsFgk
83q/KSLm2XYfE8kIJn0lZQY2evF36lzL8VCpYfRP+adlwuI2HEoGPrycYuf1vQ84
0Vap+D1+FSTQh81QTiqHL1dBFzF5G5tGVaL1fkLs6W4l4Ii+7/sBkkmrDqBaNzXR
IPPiShhwFuP9Qg==
-----END CERTIFICATE-----
Generated at Mon Jun 9 21:14:11 2025 by rpki-client