Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/9c130b-e15e-4b6d-b5fb-719b0497e7cc/1/Fas-cvc0DahW6T1i7o0CPx18juc.mft
File: Fas-cvc0DahW6T1i7o0CPx18juc.mft (raw, json)
Hash identifier: lncyzyb3MVIO8WX0sdBW89kVLUayO0uIO1vknReeXpk=
Subject key identifier: 92:CD:D2:E0:C3:33:A7:54:03:0C:87:60:66:23:B4:66:1E:6C:D3:79
Authority key identifier: 15:AB:3E:72:F7:34:0D:A8:56:E9:3D:62:EE:8D:02:3F:1D:7C:8E:E7
Certificate issuer: /CN=15ab3e72f7340da856e93d62ee8d023f1d7c8ee7
Certificate serial: 019A72CA3C0510F7A35C0327EC308DDABDFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fas-cvc0DahW6T1i7o0CPx18juc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/9c130b-e15e-4b6d-b5fb-719b0497e7cc/1/Fas-cvc0DahW6T1i7o0CPx18juc.mft
Manifest number: 0C65
Signing time: Tue 11 Nov 2025 12:00:47 +0000
Manifest this update: Tue 11 Nov 2025 12:00:47 +0000
Manifest next update: Wed 12 Nov 2025 12:00:47 +0000
Files and hashes: 1: 7JWKgvAHAa8B28vXNz3LbsvM1_0.roa (hash: aiThNQ8MveF/powu4k+TgcUEIjwVdj4V/Vhk6YBFQDA=)
2: Fas-cvc0DahW6T1i7o0CPx18juc.crl (hash: QmJXoZ/DPyjghYgFWmPLKxJle0yJyG70YGaQY4jY+Yg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/9c130b-e15e-4b6d-b5fb-719b0497e7cc/1/Fas-cvc0DahW6T1i7o0CPx18juc.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/9c130b-e15e-4b6d-b5fb-719b0497e7cc/1/Fas-cvc0DahW6T1i7o0CPx18juc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fas-cvc0DahW6T1i7o0CPx18juc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:3c:05:10:f7:a3:5c:03:27:ec:30:8d:da:bd:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15ab3e72f7340da856e93d62ee8d023f1d7c8ee7
Validity
Not Before: Nov 11 12:00:47 2025 GMT
Not After : Nov 12 12:00:47 2025 GMT
Subject: CN=92cdd2e0c333a754030c87606623b4661e6cd379
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:dc:7a:6c:79:e0:c8:07:98:db:5c:0d:93:f2:
53:1b:ea:e7:93:90:df:40:08:df:54:a5:c8:09:8b:
e9:b0:b3:ca:0b:20:d6:f0:6b:a3:15:19:2e:b2:dc:
14:e4:4d:ff:a4:fd:18:d0:c3:b0:07:fe:21:67:44:
98:0b:ef:39:14:76:fa:00:69:02:f1:ba:69:c5:e3:
fc:94:df:07:83:d6:cf:bd:2e:cb:75:28:bd:44:62:
23:ff:06:f3:03:ad:92:1b:41:4b:03:6f:49:16:4d:
3b:49:8c:6d:53:e9:34:2c:f7:34:a8:fc:3a:54:6f:
c2:e2:46:b0:66:90:bd:9e:27:32:ca:bb:62:90:07:
b2:c9:8e:d8:a2:e2:df:99:a8:4a:53:62:53:e0:97:
78:57:1f:49:08:40:5b:c9:b4:09:da:4b:aa:17:d4:
9f:43:b2:c1:2b:71:6e:06:b2:38:ea:2d:2d:8b:c3:
c5:eb:aa:ef:21:ad:33:61:d8:a8:13:17:e5:fa:3e:
e9:45:44:1a:ae:01:e8:9c:aa:65:94:c5:e9:51:d1:
eb:54:f5:43:2d:49:86:0f:f4:43:49:7f:af:57:3b:
1f:b9:6f:da:2c:89:ef:f8:bd:a0:ba:64:ac:39:5f:
ae:d9:02:6e:dc:23:8e:8a:2b:28:84:95:0b:6b:ec:
ac:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:CD:D2:E0:C3:33:A7:54:03:0C:87:60:66:23:B4:66:1E:6C:D3:79
X509v3 Authority Key Identifier:
keyid:15:AB:3E:72:F7:34:0D:A8:56:E9:3D:62:EE:8D:02:3F:1D:7C:8E:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fas-cvc0DahW6T1i7o0CPx18juc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/9c130b-e15e-4b6d-b5fb-719b0497e7cc/1/Fas-cvc0DahW6T1i7o0CPx18juc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/9c130b-e15e-4b6d-b5fb-719b0497e7cc/1/Fas-cvc0DahW6T1i7o0CPx18juc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:0f:55:1c:90:38:3f:1d:5e:3f:2d:05:56:c2:e3:1d:f1:7b:
6c:ba:2b:c4:90:0b:7c:6b:46:bd:89:57:85:52:77:f0:83:52:
81:c9:5b:c8:67:1b:78:53:4f:39:3e:45:36:94:2c:3a:2f:7c:
3f:75:05:f7:ce:1a:0b:49:21:89:89:09:34:36:c6:f3:f9:72:
ac:39:28:da:ce:ec:f9:e0:5a:ab:36:cd:f7:f5:6a:bd:82:2e:
f9:ca:e6:56:70:ab:35:6d:71:ea:fa:2e:6d:33:b7:e6:c0:83:
09:58:12:a1:88:c2:e6:20:3b:12:fe:0f:9d:c0:fd:62:8d:60:
9c:b4:5e:9b:92:ef:3e:a2:1e:83:24:48:eb:90:3e:86:19:ab:
47:e3:47:d2:19:27:e3:a6:4c:97:f1:5b:be:b9:6c:57:3d:61:
4a:38:7a:fa:da:36:58:16:05:46:a7:6c:47:3b:78:2e:8c:13:
97:21:82:57:74:6b:28:89:8b:44:1e:67:3a:4d:4c:bc:5e:20:
32:10:16:7f:bb:55:73:4d:21:1a:a7:d4:fb:bd:44:f7:b7:25:
84:f8:3d:8a:3b:fb:a0:7c:de:09:b8:38:67:9a:6c:76:95:61:
db:30:9a:ea:92:87:50:a6:36:3b:27:6c:8b:b2:98:b4:90:ea:
f6:bc:52:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:46:53 2025 by rpki-client