Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/73e009-f2f4-43ac-81a1-89aa8d2e8004/1/faXNZSr9Hy8zfCDY_3KGzSzxvfk.mft
File: faXNZSr9Hy8zfCDY_3KGzSzxvfk.mft (raw, json)
Hash identifier: +dlTFCT5QbudDaUteN8CwXrto91McKII6DouGjTH1s0=
Subject key identifier: 28:0F:BE:EB:CA:CF:CC:64:42:ED:92:3D:92:47:C7:EC:58:98:F7:A3
Authority key identifier: 7D:A5:CD:65:2A:FD:1F:2F:33:7C:20:D8:FF:72:86:CD:2C:F1:BD:F9
Certificate issuer: /CN=7da5cd652afd1f2f337c20d8ff7286cd2cf1bdf9
Certificate serial: 019769CE7B2417BECF8DBB0CA41FC3F3E1D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXNZSr9Hy8zfCDY_3KGzSzxvfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/73e009-f2f4-43ac-81a1-89aa8d2e8004/1/faXNZSr9Hy8zfCDY_3KGzSzxvfk.mft
Manifest number: 12C2
Signing time: Fri 13 Jun 2025 15:00:28 +0000
Manifest this update: Fri 13 Jun 2025 15:00:28 +0000
Manifest next update: Sat 14 Jun 2025 15:00:28 +0000
Files and hashes: 1: faXNZSr9Hy8zfCDY_3KGzSzxvfk.crl (hash: iHxPibQvbDthIes1+oX80kwhEl1fm9TZcfRYK2kWnlg=)
2: yKkZFLs6YVbkXytvzgCPIVXuU18.roa (hash: 3M+Qw4Xfzb67zSVF5cyn50VarUBuvPcrrFEH7s1xtH4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/73e009-f2f4-43ac-81a1-89aa8d2e8004/1/faXNZSr9Hy8zfCDY_3KGzSzxvfk.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/73e009-f2f4-43ac-81a1-89aa8d2e8004/1/faXNZSr9Hy8zfCDY_3KGzSzxvfk.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXNZSr9Hy8zfCDY_3KGzSzxvfk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 15:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:ce:7b:24:17:be:cf:8d:bb:0c:a4:1f:c3:f3:e1:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5cd652afd1f2f337c20d8ff7286cd2cf1bdf9
Validity
Not Before: Jun 13 15:00:28 2025 GMT
Not After : Jun 14 15:00:28 2025 GMT
Subject: CN=280fbeebcacfcc6442ed923d9247c7ec5898f7a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:7c:bb:1d:2f:c6:99:1b:a8:72:65:28:86:32:
0a:7a:ad:97:14:ff:ff:fb:95:7f:c5:f3:06:9f:70:
90:23:3a:13:f9:25:55:76:77:63:09:5a:1b:ca:1e:
4f:cd:5e:02:93:e7:85:d2:d9:ba:5d:f7:1f:58:f9:
07:08:a0:63:55:31:34:d6:3b:9f:80:be:9a:6c:e2:
bc:b6:6a:0d:fd:de:d8:26:d9:50:6c:fd:fa:6b:9d:
fb:ea:e8:a2:ac:e7:50:93:b0:24:33:cb:e6:2c:18:
c4:5e:df:6b:94:64:82:c6:7e:f3:95:0a:ca:34:d3:
1b:2b:d8:c5:99:62:0f:67:5b:6c:cb:dc:89:37:e4:
56:25:23:c3:54:81:3b:85:75:75:57:2e:81:e9:38:
ed:e5:85:02:e0:5f:f6:cd:18:35:31:9b:ca:f8:ab:
06:98:4a:25:ae:50:05:18:b2:08:e4:40:48:ff:fd:
ed:a1:b8:4d:b4:89:31:66:01:b6:56:35:f0:1d:34:
31:ca:db:02:da:77:6a:2a:47:e6:ef:0f:ee:79:65:
c5:38:69:41:2b:3e:31:0e:ed:97:75:4b:b4:39:5e:
4c:d1:da:f6:6f:13:eb:0c:57:d4:82:97:a8:6d:a6:
7e:7a:53:a4:dd:d5:2f:e8:c8:f9:9d:41:df:98:e6:
67:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:0F:BE:EB:CA:CF:CC:64:42:ED:92:3D:92:47:C7:EC:58:98:F7:A3
X509v3 Authority Key Identifier:
keyid:7D:A5:CD:65:2A:FD:1F:2F:33:7C:20:D8:FF:72:86:CD:2C:F1:BD:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXNZSr9Hy8zfCDY_3KGzSzxvfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/73e009-f2f4-43ac-81a1-89aa8d2e8004/1/faXNZSr9Hy8zfCDY_3KGzSzxvfk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/73e009-f2f4-43ac-81a1-89aa8d2e8004/1/faXNZSr9Hy8zfCDY_3KGzSzxvfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:af:47:3c:4b:d7:1f:b9:f0:4b:08:ee:f3:73:26:2d:8b:b2:
13:09:d6:af:6b:f7:b2:89:bb:1f:1e:23:f9:52:53:10:86:cc:
72:23:5e:90:fb:6b:8a:dd:a0:cd:54:16:4a:3f:4a:f2:fe:0c:
82:fc:ae:b9:0c:f9:2b:fc:8e:17:88:35:49:19:65:a2:a8:c7:
e1:e4:73:07:5c:fe:fb:3a:c6:67:e6:51:31:b1:bd:f6:33:b3:
78:30:a2:0f:fb:ef:6b:85:4a:0e:e6:27:95:99:ae:49:92:9a:
c3:ae:a5:c5:2c:6f:18:33:aa:a2:9b:d3:4b:23:04:05:62:37:
a9:c3:e1:ba:fd:37:34:b2:12:33:07:f5:6b:f3:c5:cf:23:47:
98:4c:8f:33:70:74:ed:c5:e7:ca:e9:7f:e9:94:a8:58:64:3e:
d9:59:fd:1a:4b:da:45:c8:bd:ec:19:08:a0:40:52:79:de:fe:
75:61:cf:af:14:b8:5a:96:b8:08:d7:5d:dd:93:1d:d9:98:ed:
bf:27:00:8a:ee:a7:49:84:88:cd:b5:d2:45:0e:ea:ad:8e:6b:
a3:f7:51:13:d5:7a:86:80:a3:fb:62:bb:39:fa:9b:fe:81:42:
e5:cc:7a:55:ea:e1:c3:31:5b:38:78:0a:22:ee:aa:37:63:88:
f4:b6:89:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 00:01:22 2025 by rpki-client