Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/73e009-f2f4-43ac-81a1-89aa8d2e8004/1/faXNZSr9Hy8zfCDY_3KGzSzxvfk.mft
File: faXNZSr9Hy8zfCDY_3KGzSzxvfk.mft (raw, json)
Hash identifier: vfCrXdOHw9621hrX0ZVL1DJKw2xg4FSbOXf6FtLbbzU=
Subject key identifier: C2:46:D4:78:51:F2:2B:C8:64:27:4F:CC:69:3A:BE:7D:E2:DC:3C:5B
Authority key identifier: 7D:A5:CD:65:2A:FD:1F:2F:33:7C:20:D8:FF:72:86:CD:2C:F1:BD:F9
Certificate issuer: /CN=7da5cd652afd1f2f337c20d8ff7286cd2cf1bdf9
Certificate serial: 019765F1BE3B3B9530D959D5A6A6EE164AB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXNZSr9Hy8zfCDY_3KGzSzxvfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/73e009-f2f4-43ac-81a1-89aa8d2e8004/1/faXNZSr9Hy8zfCDY_3KGzSzxvfk.mft
Manifest number: 12C0
Signing time: Thu 12 Jun 2025 21:00:31 +0000
Manifest this update: Thu 12 Jun 2025 21:00:31 +0000
Manifest next update: Fri 13 Jun 2025 21:00:31 +0000
Files and hashes: 1: faXNZSr9Hy8zfCDY_3KGzSzxvfk.crl (hash: Zi6CnQsd9uyis/HMq2h60T0TTymFK+kctyGY87ZJxsE=)
2: yKkZFLs6YVbkXytvzgCPIVXuU18.roa (hash: 3M+Qw4Xfzb67zSVF5cyn50VarUBuvPcrrFEH7s1xtH4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/73e009-f2f4-43ac-81a1-89aa8d2e8004/1/faXNZSr9Hy8zfCDY_3KGzSzxvfk.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/73e009-f2f4-43ac-81a1-89aa8d2e8004/1/faXNZSr9Hy8zfCDY_3KGzSzxvfk.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXNZSr9Hy8zfCDY_3KGzSzxvfk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:65:f1:be:3b:3b:95:30:d9:59:d5:a6:a6:ee:16:4a:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5cd652afd1f2f337c20d8ff7286cd2cf1bdf9
Validity
Not Before: Jun 12 21:00:31 2025 GMT
Not After : Jun 13 21:00:31 2025 GMT
Subject: CN=c246d47851f22bc864274fcc693abe7de2dc3c5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:92:0e:bf:b5:61:08:9f:45:5a:ec:20:f0:8a:
31:3f:cf:64:fb:97:9f:bd:61:90:57:4a:4f:bf:c0:
a9:f0:ee:18:c2:a0:19:3e:e1:7b:d9:ee:58:17:b3:
6b:7b:60:43:2e:96:15:40:21:8e:df:ca:c4:65:a2:
7c:f1:3e:75:1f:1f:9f:e6:a1:89:88:93:70:ed:fe:
4b:2b:99:b8:05:6e:dd:5d:3d:18:93:18:e9:19:c1:
1b:61:93:db:78:a3:26:e3:0f:37:84:4c:98:ff:90:
3f:d9:19:80:0c:8f:c6:c8:51:7e:a1:0e:e7:93:64:
a7:a6:d4:1b:0a:ff:eb:87:e7:60:aa:d1:c5:29:99:
e1:15:e4:71:6b:9f:b6:9c:b6:b0:a7:09:0d:89:41:
a2:d5:83:0b:34:5b:10:54:45:da:cf:1d:ce:23:f8:
4a:92:21:b9:24:ed:a0:f6:9c:89:39:a1:cd:6e:7e:
24:0d:30:a9:10:27:61:a5:c4:fa:e4:f4:d9:dd:b5:
c5:d5:b8:20:91:29:e2:7c:51:55:8c:4e:05:5c:44:
7c:2c:76:a3:0b:07:f3:ee:57:8f:c0:64:99:38:4d:
93:7a:01:1c:bf:dc:8f:d2:67:fd:c7:24:3d:18:1d:
74:67:0e:be:0e:4d:3a:ca:66:e0:ca:ec:84:e2:30:
d3:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:46:D4:78:51:F2:2B:C8:64:27:4F:CC:69:3A:BE:7D:E2:DC:3C:5B
X509v3 Authority Key Identifier:
keyid:7D:A5:CD:65:2A:FD:1F:2F:33:7C:20:D8:FF:72:86:CD:2C:F1:BD:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXNZSr9Hy8zfCDY_3KGzSzxvfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/73e009-f2f4-43ac-81a1-89aa8d2e8004/1/faXNZSr9Hy8zfCDY_3KGzSzxvfk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/73e009-f2f4-43ac-81a1-89aa8d2e8004/1/faXNZSr9Hy8zfCDY_3KGzSzxvfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:82:8b:55:ed:bf:33:cc:60:11:aa:0c:18:9a:24:64:3d:7c:
58:ee:26:bc:18:a6:95:ee:25:00:7d:34:0b:f7:3a:d0:69:39:
05:0e:b5:46:a2:e2:0a:42:d0:1c:8a:2e:ff:77:d7:ff:bb:0e:
85:80:f1:dc:4e:db:14:d8:5e:42:e0:06:f3:d6:24:34:2e:c1:
ca:b8:76:a7:57:a2:7d:10:2c:5b:94:eb:e4:4b:9d:83:4a:69:
17:62:4e:47:cf:f6:f8:7a:67:29:d8:af:86:21:a6:44:ea:43:
24:62:3e:a9:3f:07:0b:d3:b8:66:60:61:23:aa:ed:3b:66:e1:
81:15:05:6d:95:6f:d7:46:4e:e4:cb:69:42:3b:38:0b:8d:6b:
aa:de:65:6d:72:f8:b0:37:0d:bf:a5:9f:ca:34:0b:98:52:b9:
98:e8:84:8f:7e:f7:f1:a5:65:ec:47:d3:d8:1a:9c:62:52:1d:
44:48:de:6e:c8:6a:7e:76:f2:00:60:d1:d0:d6:93:b0:45:80:
90:79:65:2f:f0:d1:7d:54:c7:4a:a4:4b:66:93:18:fe:c9:19:
60:27:bc:99:32:ff:de:93:d5:1b:f6:64:95:8d:23:bc:c3:1d:
56:bd:24:e0:4a:fa:bb:f3:2f:51:60:eb:94:3a:95:be:9b:13:
d0:db:0c:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 22:28:47 2025 by rpki-client