Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/67e36c-cd55-4b59-aa12-7442f0e2bd17/1/1-vZEdu85RbNE_-442lbKzMXQObA.mft
File: 1-vZEdu85RbNE_-442lbKzMXQObA.mft (raw, json)
Hash identifier: TAWYtOHMnKoBAj5CQ4oCc/TCcvvazq7wT6gnZM+9hf0=
Subject key identifier: A3:C7:E2:6B:D5:73:83:CB:3D:00:CF:E8:80:E6:0B:31:7B:6D:BE:FB
Authority key identifier: FA:F6:44:76:EF:39:45:B3:44:FF:EE:38:DA:56:CA:CC:C5:D0:39:B0
Certificate issuer: /CN=faf64476ef3945b344ffee38da56caccc5d039b0
Certificate serial: 019A21092937EEA4778A632F3E99EB2F3FF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-vZEdu85RbNE_-442lbKzMXQObA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/67e36c-cd55-4b59-aa12-7442f0e2bd17/1/1-vZEdu85RbNE_-442lbKzMXQObA.mft
Manifest number: 16FA
Signing time: Sun 26 Oct 2025 15:00:39 +0000
Manifest this update: Sun 26 Oct 2025 15:00:39 +0000
Manifest next update: Mon 27 Oct 2025 15:00:39 +0000
Files and hashes: 1: 1-vZEdu85RbNE_-442lbKzMXQObA.crl (hash: roXIKgj2irFu9y8pYWAL463PI1rdzfUEvtGRn907Ii4=)
2: SyEVUI3N-GA_i-uzTD16e1zmM2E.roa (hash: LqMTwONwWzte69tiLUqbC66cMzx5aiQvY2EzU+SnCGc=)
3: jnW4jrIpgrgFGee1gUUQCX9nMQM.roa (hash: Pg7xp2U2lzFs5nMdCFW1WCbmFf1TrwqIn5BPDmSukZg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/67e36c-cd55-4b59-aa12-7442f0e2bd17/1/1-vZEdu85RbNE_-442lbKzMXQObA.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/67e36c-cd55-4b59-aa12-7442f0e2bd17/1/1-vZEdu85RbNE_-442lbKzMXQObA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-vZEdu85RbNE_-442lbKzMXQObA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:21:09:29:37:ee:a4:77:8a:63:2f:3e:99:eb:2f:3f:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faf64476ef3945b344ffee38da56caccc5d039b0
Validity
Not Before: Oct 26 15:00:39 2025 GMT
Not After : Oct 27 15:00:39 2025 GMT
Subject: CN=a3c7e26bd57383cb3d00cfe880e60b317b6dbefb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:8b:3a:61:f0:c9:95:97:dd:bf:c2:46:90:5c:
e3:f5:36:da:02:8d:f0:13:1f:5f:d0:51:31:cb:fa:
84:83:17:3b:79:98:b8:93:90:4f:07:d7:3f:c0:f1:
f1:12:74:ee:b0:3c:76:bf:2e:2c:87:33:a1:58:4f:
06:b2:4c:bb:60:0b:42:96:ee:4f:1a:7e:a5:62:e2:
8a:da:0b:ae:c7:fc:1c:7d:a5:d4:b6:61:c5:65:1a:
cb:92:40:ef:7f:20:97:ce:cb:7e:ed:a6:a6:38:f3:
d2:f3:cc:95:62:02:96:66:0f:3d:33:f4:7e:89:fd:
f8:28:e5:0d:00:be:74:e3:41:53:29:1c:d3:40:ec:
58:dc:06:f8:81:0a:9e:7c:e1:c7:b8:32:7c:39:74:
3c:7c:57:eb:86:ea:98:96:2b:4b:57:59:07:6e:d8:
a2:b1:04:fe:55:19:27:00:46:16:39:62:96:c2:45:
14:e4:7c:f8:14:b6:7d:32:32:38:f6:31:3b:11:07:
6c:8a:7c:50:8c:4b:9a:4a:35:ae:1d:be:e8:d6:86:
2b:33:c0:e5:d5:c7:52:e7:e7:7a:cb:18:c1:31:bf:
ba:ac:2c:f6:30:37:40:84:10:eb:e8:ab:80:b9:ee:
f7:bb:17:2e:ec:23:22:0e:66:d0:a5:36:5f:36:9d:
8f:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:C7:E2:6B:D5:73:83:CB:3D:00:CF:E8:80:E6:0B:31:7B:6D:BE:FB
X509v3 Authority Key Identifier:
keyid:FA:F6:44:76:EF:39:45:B3:44:FF:EE:38:DA:56:CA:CC:C5:D0:39:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-vZEdu85RbNE_-442lbKzMXQObA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/67e36c-cd55-4b59-aa12-7442f0e2bd17/1/1-vZEdu85RbNE_-442lbKzMXQObA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/67e36c-cd55-4b59-aa12-7442f0e2bd17/1/1-vZEdu85RbNE_-442lbKzMXQObA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:34:a0:71:9d:12:e9:db:68:d7:87:6c:75:17:d1:a5:a9:c8:
a1:03:6a:87:9e:e2:85:90:58:e6:b8:66:b5:f1:f5:a4:31:2b:
92:cc:fc:29:9c:74:c4:2a:75:ae:33:cd:76:5c:1c:d6:4e:5e:
14:93:7f:c3:0a:ef:c1:00:fa:22:1c:58:cf:1a:4b:49:ed:f1:
27:b5:ad:ba:2b:91:bd:0d:f6:6a:25:ef:f8:92:06:dc:d4:82:
67:7a:27:d4:d6:11:97:fa:3d:da:e0:a7:52:52:a1:22:1c:e1:
c3:0a:ab:41:42:ec:46:8f:71:65:cb:5d:22:cf:3c:c2:9f:0c:
f2:e3:5e:56:51:fe:4e:bc:25:b6:c6:99:46:0a:72:da:6a:1e:
31:1d:c8:f3:f5:01:37:4e:b9:1c:f5:af:2b:d3:25:67:f7:82:
1e:94:c2:54:87:ab:e8:8d:78:c3:8e:62:0e:06:70:31:73:87:
87:1b:59:3b:13:3a:b3:d3:90:2b:8b:17:ab:57:5d:36:d9:b7:
35:49:6d:d5:e3:13:bb:b6:19:07:f3:c9:b0:7d:9c:e6:9c:6d:
71:5d:64:90:ec:99:3f:12:bf:de:38:a7:0b:dc:7a:e3:97:66:
02:34:bb:d9:f9:fa:23:a9:47:14:aa:4a:f8:4d:66:bd:24:b8:
dd:80:62:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 20:37:32 2025 by rpki-client