Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/12f26e-fb11-42e1-bacc-3969eca7b7d4/1/Fa8HL54VarwgxGhJjiMjFSxzaug.mft
File: Fa8HL54VarwgxGhJjiMjFSxzaug.mft (raw, json)
Hash identifier: pJM4JTLx83HhmVRrymFjBQKasoe62szk96Gmu8w/ObM=
Subject key identifier: 09:49:95:DA:D4:58:CD:62:0D:19:46:C5:A6:CD:3F:18:12:CF:FD:46
Authority key identifier: 15:AF:07:2F:9E:15:6A:BC:20:C4:68:49:8E:23:23:15:2C:73:6A:E8
Certificate issuer: /CN=15af072f9e156abc20c468498e2323152c736ae8
Certificate serial: 019A4D3CB68AB7AFE192F964912D69ADFADF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fa8HL54VarwgxGhJjiMjFSxzaug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/12f26e-fb11-42e1-bacc-3969eca7b7d4/1/Fa8HL54VarwgxGhJjiMjFSxzaug.mft
Manifest number: 164B
Signing time: Tue 04 Nov 2025 05:00:15 +0000
Manifest this update: Tue 04 Nov 2025 05:00:15 +0000
Manifest next update: Wed 05 Nov 2025 05:00:15 +0000
Files and hashes: 1: 1-hG6m2b1-771ZXFUCad6-Q0HqS0.roa (hash: iRlAMEhmdJkdMf5CTvW6WMLAwT23DftwTFfnt2+39Po=)
2: Fa8HL54VarwgxGhJjiMjFSxzaug.crl (hash: 47lV0MODenbBnWZW5qo04aAo4NcVdXXebJlPIsMhkCs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/12f26e-fb11-42e1-bacc-3969eca7b7d4/1/Fa8HL54VarwgxGhJjiMjFSxzaug.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/12f26e-fb11-42e1-bacc-3969eca7b7d4/1/Fa8HL54VarwgxGhJjiMjFSxzaug.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fa8HL54VarwgxGhJjiMjFSxzaug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3c:b6:8a:b7:af:e1:92:f9:64:91:2d:69:ad:fa:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15af072f9e156abc20c468498e2323152c736ae8
Validity
Not Before: Nov 4 05:00:15 2025 GMT
Not After : Nov 5 05:00:15 2025 GMT
Subject: CN=094995dad458cd620d1946c5a6cd3f1812cffd46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ee:44:34:f0:6a:d3:e5:32:fc:da:ec:17:da:
63:e5:cc:98:81:05:e8:29:74:6d:1d:0f:25:9a:f1:
1d:78:9c:8d:8a:46:94:a9:d0:63:7f:05:7d:dc:c3:
5b:88:f1:0e:11:0f:ae:9e:5f:73:e8:34:4e:a7:ec:
0c:44:7f:07:fc:81:83:09:27:9c:20:f9:62:56:54:
ee:fe:3e:c3:10:9f:4e:fc:97:b3:30:a4:17:25:43:
a9:0a:e4:ce:4c:85:8b:b6:da:4b:ff:8a:18:5c:32:
26:3e:b4:81:00:fe:0e:d8:22:74:07:1e:2d:06:ea:
2b:77:b8:cb:e2:c1:6b:21:32:89:f4:a6:02:f2:bd:
fb:62:0b:00:cb:8f:a9:f4:0a:69:cb:94:d0:9c:18:
94:d2:ee:9b:ac:e8:fe:90:17:16:90:29:38:d5:27:
6f:91:13:5a:47:4c:b9:a2:c9:86:b5:e4:dc:26:fd:
0b:f8:75:37:76:87:97:ed:5c:1d:31:c4:0a:14:6f:
47:31:7d:a8:64:08:b3:48:34:35:ee:c8:bd:86:85:
bd:af:8e:08:43:d8:11:01:dd:cc:96:38:39:ef:ea:
a9:47:3e:a0:00:d3:98:dc:20:e2:49:58:41:b9:83:
08:6c:e0:53:23:69:41:6f:2c:8d:00:61:6e:bb:e6:
84:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:49:95:DA:D4:58:CD:62:0D:19:46:C5:A6:CD:3F:18:12:CF:FD:46
X509v3 Authority Key Identifier:
keyid:15:AF:07:2F:9E:15:6A:BC:20:C4:68:49:8E:23:23:15:2C:73:6A:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fa8HL54VarwgxGhJjiMjFSxzaug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/12f26e-fb11-42e1-bacc-3969eca7b7d4/1/Fa8HL54VarwgxGhJjiMjFSxzaug.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/12f26e-fb11-42e1-bacc-3969eca7b7d4/1/Fa8HL54VarwgxGhJjiMjFSxzaug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:e6:ab:d1:09:88:19:44:f1:af:10:46:af:cd:ff:6a:6d:80:
87:42:84:08:1b:88:ac:b3:f1:6c:81:83:6d:92:92:bc:a2:b3:
28:c0:c0:20:c8:58:d3:1b:5e:de:f1:a1:18:99:89:71:fe:38:
27:0a:7c:78:9c:88:04:a0:e9:fe:11:83:7a:cd:a7:97:74:62:
cc:03:5c:25:4a:78:d2:50:3e:68:87:22:02:f3:f6:ea:f5:55:
4b:9e:99:56:fd:5e:5e:9c:c8:64:79:4c:77:a8:ce:5d:70:91:
76:43:f9:4e:16:4d:ad:69:9e:3c:d6:88:e8:65:fa:fb:86:ef:
71:f8:88:f3:9e:7b:b9:b4:7b:85:c8:58:6f:fd:9d:56:67:07:
47:68:da:37:20:18:1e:88:e0:20:4f:b8:70:79:c4:4e:2b:af:
44:40:5e:e9:23:3d:41:89:ed:93:2e:d1:a6:1f:15:43:9c:f3:
da:7e:86:15:1e:e9:58:97:90:db:65:4a:d5:23:1f:4e:ed:c7:
47:07:41:54:da:9b:b5:f1:dc:13:97:7f:64:5d:33:9f:be:c2:
c2:ac:3f:7b:83:83:9d:e1:d6:95:b6:86:02:1b:78:9c:41:e4:
91:15:0a:44:6b:4c:36:ef:5a:a1:d2:4e:f1:11:f4:7e:bd:4f:
43:19:74:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:14:53 2025 by rpki-client