Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/12f26e-fb11-42e1-bacc-3969eca7b7d4/1/Fa8HL54VarwgxGhJjiMjFSxzaug.mft
File: Fa8HL54VarwgxGhJjiMjFSxzaug.mft (raw, json)
Hash identifier: DkimzwDPpnT0eVoPvOmn3vtbHviIDzERFRN7Jbo3wIs=
Subject key identifier: 41:B9:66:A0:F9:4E:4A:A8:C3:82:7C:7F:E7:7D:0F:D2:A7:5E:8A:60
Authority key identifier: 15:AF:07:2F:9E:15:6A:BC:20:C4:68:49:8E:23:23:15:2C:73:6A:E8
Certificate issuer: /CN=15af072f9e156abc20c468498e2323152c736ae8
Certificate serial: 019961A25C57CD1B1E8C4FD14A6551C3E4D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fa8HL54VarwgxGhJjiMjFSxzaug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/12f26e-fb11-42e1-bacc-3969eca7b7d4/1/Fa8HL54VarwgxGhJjiMjFSxzaug.mft
Manifest number: 15D1
Signing time: Fri 19 Sep 2025 11:00:54 +0000
Manifest this update: Fri 19 Sep 2025 11:00:54 +0000
Manifest next update: Sat 20 Sep 2025 11:00:54 +0000
Files and hashes: 1: 1-hG6m2b1-771ZXFUCad6-Q0HqS0.roa (hash: iRlAMEhmdJkdMf5CTvW6WMLAwT23DftwTFfnt2+39Po=)
2: Fa8HL54VarwgxGhJjiMjFSxzaug.crl (hash: tEgpgcR3KrE3BQzxbLWDOBlWii3mElYZsfgGuxpkFH4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/12f26e-fb11-42e1-bacc-3969eca7b7d4/1/Fa8HL54VarwgxGhJjiMjFSxzaug.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/12f26e-fb11-42e1-bacc-3969eca7b7d4/1/Fa8HL54VarwgxGhJjiMjFSxzaug.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fa8HL54VarwgxGhJjiMjFSxzaug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Sep 2025 11:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:61:a2:5c:57:cd:1b:1e:8c:4f:d1:4a:65:51:c3:e4:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15af072f9e156abc20c468498e2323152c736ae8
Validity
Not Before: Sep 19 11:00:54 2025 GMT
Not After : Sep 20 11:00:54 2025 GMT
Subject: CN=41b966a0f94e4aa8c3827c7fe77d0fd2a75e8a60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:b0:29:da:2e:24:d9:0f:01:8e:7b:31:e0:16:
6a:89:65:36:f8:36:b7:09:10:8e:42:5e:f7:a5:af:
14:bb:c3:d8:c0:6e:35:e8:d9:13:32:ff:c7:bc:10:
8e:49:5a:30:80:09:ae:41:03:92:e2:21:06:54:7e:
d0:ff:d6:ec:3c:36:12:c8:2e:00:67:14:36:93:20:
ce:88:0a:ab:11:9b:c3:c7:b9:c0:5b:82:1d:8d:af:
c8:da:fe:4a:f7:a6:4b:aa:d9:17:17:2d:f9:8c:38:
40:38:24:e6:21:dc:c6:a0:4c:b7:59:3c:fb:ca:7e:
8c:06:e1:3f:0a:ec:f0:6d:f8:ad:8a:91:40:5e:ef:
0d:2b:cd:b4:34:a4:4d:2e:a4:88:56:61:cd:00:4e:
93:63:c9:b5:f4:aa:9e:84:e1:d4:51:6a:a2:f8:5a:
ac:b3:c5:e6:b9:b2:c6:8c:67:79:f7:61:4e:fc:64:
a6:4d:ef:93:32:35:b4:8e:db:d8:e2:2b:3e:ec:a1:
2d:6d:96:76:05:bc:d4:da:f2:0b:ce:3a:25:0b:ff:
fc:6b:df:aa:b6:ca:93:23:5a:ab:e6:23:a1:19:e2:
ca:08:e0:6b:62:58:d1:3d:08:64:47:cc:e5:a2:d0:
2b:65:70:c2:d9:61:43:fe:ca:9e:7b:15:4f:6d:f4:
8d:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:B9:66:A0:F9:4E:4A:A8:C3:82:7C:7F:E7:7D:0F:D2:A7:5E:8A:60
X509v3 Authority Key Identifier:
keyid:15:AF:07:2F:9E:15:6A:BC:20:C4:68:49:8E:23:23:15:2C:73:6A:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fa8HL54VarwgxGhJjiMjFSxzaug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/12f26e-fb11-42e1-bacc-3969eca7b7d4/1/Fa8HL54VarwgxGhJjiMjFSxzaug.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/12f26e-fb11-42e1-bacc-3969eca7b7d4/1/Fa8HL54VarwgxGhJjiMjFSxzaug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:61:3c:ef:d9:03:61:2a:e9:d9:32:b8:4d:39:a7:f5:4c:84:
5f:c9:ee:e3:e3:31:af:cc:16:ca:e4:a0:53:be:fe:a6:2b:ec:
b7:38:9a:b2:62:a4:dc:bb:12:dd:1f:7f:6e:d6:06:4f:64:32:
2f:b0:c7:6a:8f:8a:cc:dc:05:93:1e:17:cd:8f:b1:cc:66:ee:
2c:d4:1b:a0:4c:99:45:57:ea:67:27:35:2a:42:41:b2:97:6c:
ed:f1:1d:c7:9d:96:ce:ff:d9:73:c5:a1:3f:a4:0e:7e:14:fb:
8e:37:08:79:e7:b2:9a:d1:b3:87:00:58:db:d1:de:75:15:19:
fa:66:7e:8e:b4:68:50:a1:d7:24:48:54:67:c7:5e:b9:a1:d0:
aa:b3:98:ed:96:c5:f2:15:1d:de:24:71:d0:a1:d6:41:d3:6c:
a6:1e:08:a2:99:0d:ba:32:22:99:23:db:3f:b8:6c:ce:f9:4c:
2c:e7:7c:bb:de:bb:fc:35:46:a5:a6:d4:6a:ee:23:4f:28:e5:
b3:86:3c:16:28:12:8a:a6:b5:53:2a:df:51:35:ff:89:2b:c8:
e8:67:06:68:b2:f3:fe:73:a8:bd:9c:6a:d4:32:92:1d:df:30:
36:32:99:b4:42:ec:e3:40:e4:07:82:fb:5e:91:aa:db:97:8f:
5d:09:f5:5c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZlholxXzRsejE/RSmVRw+TTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1YWYwNzJmOWUxNTZhYmMyMGM0Njg0OThlMjMyMzE1MmM3
MzZhZTgwHhcNMjUwOTE5MTEwMDU0WhcNMjUwOTIwMTEwMDU0WjAzMTEwLwYDVQQD
Eyg0MWI5NjZhMGY5NGU0YWE4YzM4MjdjN2ZlNzdkMGZkMmE3NWU4YTYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzbAp2i4k2Q8Bjnsx4BZqiWU2+Da3
CRCOQl73pa8Uu8PYwG416NkTMv/HvBCOSVowgAmuQQOS4iEGVH7Q/9bsPDYSyC4A
ZxQ2kyDOiAqrEZvDx7nAW4Idja/I2v5K96ZLqtkXFy35jDhAOCTmIdzGoEy3WTz7
yn6MBuE/CuzwbfitipFAXu8NK820NKRNLqSIVmHNAE6TY8m19KqehOHUUWqi+Fqs
s8XmubLGjGd592FO/GSmTe+TMjW0jtvY4is+7KEtbZZ2BbzU2vILzjolC//8a9+q
tsqTI1qr5iOhGeLKCOBrYljRPQhkR8zlotArZXDC2WFD/sqeexVPbfSNZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEG5ZqD5Tkqow4J8f+d9D9KnXopgMB8GA1UdIwQY
MBaAFBWvBy+eFWq8IMRoSY4jIxUsc2roMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmE4SEw1NFZhcndneEdoSmppTWpGU3h6YXVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi8xMmYyNmUtZmIxMS00MmUxLWJhY2Mt
Mzk2OWVjYTdiN2Q0LzEvRmE4SEw1NFZhcndneEdoSmppTWpGU3h6YXVnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi8xMmYyNmUtZmIxMS00MmUxLWJhY2MtMzk2OWVjYTdiN2Q0
LzEvRmE4SEw1NFZhcndneEdoSmppTWpGU3h6YXVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUmE879kD
YSrp2TK4TTmn9UyEX8nu4+Mxr8wWyuSgU77+pivstziasmKk3LsS3R9/btYGT2Qy
L7DHao+KzNwFkx4XzY+xzGbuLNQboEyZRVfqZyc1KkJBspds7fEdx52Wzv/Zc8Wh
P6QOfhT7jjcIeeeymtGzhwBY29HedRUZ+mZ+jrRoUKHXJEhUZ8deuaHQqrOY7ZbF
8hUd3iRx0KHWQdNsph4IopkNujIimSPbP7hszvlMLOd8u967/DVGpabUau4jTyjl
s4Y8FigSiqa1UyrfUTX/iSvI6GcGaLLz/nOovZxq1DKSHd8wNjKZtELs40DkB4L7
XpGq25ePXQn1XA==
-----END CERTIFICATE-----
Generated at Fri Sep 19 18:05:02 2025 by rpki-client