Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/ff0742-7313-4e94-9618-63a1ce33307f/1/faSamu8hhOwLtu8P3pAcWyhBumQ.mft
File: faSamu8hhOwLtu8P3pAcWyhBumQ.mft (raw, json)
Hash identifier: b97FlraOT3vBREwuojj0h+XJml26bZ9PGJ6aAMu7k7M=
Subject key identifier: 1B:4A:06:A3:27:04:37:25:C2:B4:72:8A:1B:FA:D6:1A:82:49:5E:95
Authority key identifier: 7D:A4:9A:9A:EF:21:84:EC:0B:B6:EF:0F:DE:90:1C:5B:28:41:BA:64
Certificate issuer: /CN=7da49a9aef2184ec0bb6ef0fde901c5b2841ba64
Certificate serial: 019A71B7E707EF00CF5F38B0D8F03CFC5743
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faSamu8hhOwLtu8P3pAcWyhBumQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/ff0742-7313-4e94-9618-63a1ce33307f/1/faSamu8hhOwLtu8P3pAcWyhBumQ.mft
Manifest number: 0F0D
Signing time: Tue 11 Nov 2025 07:01:08 +0000
Manifest this update: Tue 11 Nov 2025 07:01:08 +0000
Manifest next update: Wed 12 Nov 2025 07:01:08 +0000
Files and hashes: 1: UmPdXcB87LTnfP1Vg3oW_URaukk.roa (hash: 83EUHwQ3blWBwS3edM/z7UuelSE4PX5MSdHszZ1a7QU=)
2: faSamu8hhOwLtu8P3pAcWyhBumQ.crl (hash: dNSLJ/WQRSdmvqApzBdk+Z+OfLFRw3pnjrGvLF+E1cQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/ff0742-7313-4e94-9618-63a1ce33307f/1/faSamu8hhOwLtu8P3pAcWyhBumQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/ff0742-7313-4e94-9618-63a1ce33307f/1/faSamu8hhOwLtu8P3pAcWyhBumQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/faSamu8hhOwLtu8P3pAcWyhBumQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:e7:07:ef:00:cf:5f:38:b0:d8:f0:3c:fc:57:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da49a9aef2184ec0bb6ef0fde901c5b2841ba64
Validity
Not Before: Nov 11 07:01:08 2025 GMT
Not After : Nov 12 07:01:08 2025 GMT
Subject: CN=1b4a06a327043725c2b4728a1bfad61a82495e95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:d8:7a:29:06:f7:28:21:1d:5d:26:36:0d:fe:
f2:5a:22:30:6f:1b:ac:b5:25:40:47:4c:5e:53:98:
77:56:6f:07:96:4d:3c:cf:af:b1:90:05:97:e9:26:
52:29:ee:a8:8b:55:a8:5d:ed:cd:68:f6:9a:a5:bf:
f0:d7:64:72:97:21:05:3e:75:fe:93:89:b5:fa:b9:
f9:93:b2:4b:df:64:41:b3:88:c1:a9:6c:53:88:1a:
30:37:95:2e:55:d0:bb:97:bd:33:85:fb:76:b2:6f:
0f:9f:d9:12:6d:b9:d1:3d:02:d1:f5:de:b7:a6:98:
fe:22:b2:61:e0:7a:3f:8c:8b:e4:5d:a0:cd:66:51:
11:51:e4:31:6d:24:37:24:e0:39:9a:7a:72:ec:33:
8e:fb:97:0a:02:36:08:6c:ee:1c:78:75:90:32:b3:
4f:54:92:8c:ed:f2:66:0a:e9:2f:e8:d6:2c:a0:e6:
ec:fc:3a:9a:e3:a6:4b:0b:0d:ae:1f:03:68:8c:b1:
de:79:6d:06:99:63:13:b9:d6:ed:11:c8:3c:cb:2f:
46:9d:40:c0:d0:bf:5e:31:9a:c3:46:54:5f:65:2c:
0a:3e:96:d4:62:50:06:13:f3:de:41:48:5c:e8:a5:
83:8a:6c:54:8c:3d:38:c0:65:22:3c:49:31:5c:8e:
43:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:4A:06:A3:27:04:37:25:C2:B4:72:8A:1B:FA:D6:1A:82:49:5E:95
X509v3 Authority Key Identifier:
keyid:7D:A4:9A:9A:EF:21:84:EC:0B:B6:EF:0F:DE:90:1C:5B:28:41:BA:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faSamu8hhOwLtu8P3pAcWyhBumQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ff0742-7313-4e94-9618-63a1ce33307f/1/faSamu8hhOwLtu8P3pAcWyhBumQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ff0742-7313-4e94-9618-63a1ce33307f/1/faSamu8hhOwLtu8P3pAcWyhBumQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:94:92:b3:c6:87:c9:bf:84:47:7a:09:10:38:b1:65:92:85:
a2:8d:3e:9b:e3:05:a2:e9:2d:b8:e8:0e:39:d6:1a:8b:99:3f:
87:63:a5:44:e9:8c:27:ad:84:f9:c2:2a:3a:62:bd:ae:b5:f9:
44:c5:84:57:fb:25:cb:6b:22:bf:2c:6f:0a:2f:47:87:f3:e1:
16:95:f0:0d:db:b5:ff:9a:85:f7:e8:ca:66:ca:72:e8:35:f2:
ae:cf:84:f4:ee:fd:c2:96:b2:88:08:32:a2:e6:1a:12:0a:59:
c2:b6:7a:cc:85:e0:59:06:8c:7b:a8:61:21:de:c2:4b:33:34:
0a:52:b0:67:6d:b3:f0:c2:6b:18:71:b6:ad:9e:4b:c3:66:11:
2e:77:1f:2b:fc:63:10:cb:8c:f4:a9:3d:79:4b:27:9e:9f:02:
a6:3f:a4:89:39:1b:fd:f2:c3:57:84:89:92:ee:19:1e:9c:73:
75:81:08:36:d6:54:ca:e4:24:cc:5c:b8:0e:61:eb:9c:bc:12:
26:21:55:7a:0a:97:de:e1:71:ba:7d:92:46:63:37:37:5c:fd:
46:ed:ba:95:58:f8:89:65:23:b4:e3:98:cc:fd:6d:ad:a8:8d:
88:93:dd:be:14:e5:08:0a:13:0b:99:0e:9e:5a:a7:10:3f:36:
ae:db:e0:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:33:47 2025 by rpki-client