Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/dec50d-ee3a-4584-a591-429d668d9228/1/fa57XJowGYvXF4tIuF8LIhpeHrc.mft
File: fa57XJowGYvXF4tIuF8LIhpeHrc.mft (raw, json)
Hash identifier: iTvpukOpVzJVJ8yqeeEvp/BnCkagsKeIOFK6Ifp/Nvc=
Subject key identifier: 8A:EA:FA:08:0B:25:62:3B:42:9D:C8:32:88:40:34:CF:0A:1E:D8:97
Authority key identifier: 7D:AE:7B:5C:9A:30:19:8B:D7:17:8B:48:B8:5F:0B:22:1A:5E:1E:B7
Certificate issuer: /CN=7dae7b5c9a30198bd7178b48b85f0b221a5e1eb7
Certificate serial: 019A1B3E06BE28C8D10FA771BD0FAEC90A8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fa57XJowGYvXF4tIuF8LIhpeHrc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/dec50d-ee3a-4584-a591-429d668d9228/1/fa57XJowGYvXF4tIuF8LIhpeHrc.mft
Manifest number: 0BB9
Signing time: Sat 25 Oct 2025 12:00:41 +0000
Manifest this update: Sat 25 Oct 2025 12:00:41 +0000
Manifest next update: Sun 26 Oct 2025 12:00:41 +0000
Files and hashes: 1: c0Cf6YCbscr3sGW2nWgoXFY8xps.roa (hash: 5gRboI0NrXJxmfngbqENdfvUiQ0ds61NdsYGIZfYOOU=)
2: fa57XJowGYvXF4tIuF8LIhpeHrc.crl (hash: Am2vAtEoRab0N2Ls4A0UMEk1NOPGQBxJLtjnKAZkxrk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/dec50d-ee3a-4584-a591-429d668d9228/1/fa57XJowGYvXF4tIuF8LIhpeHrc.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/dec50d-ee3a-4584-a591-429d668d9228/1/fa57XJowGYvXF4tIuF8LIhpeHrc.mft
rsync://rpki.ripe.net/repository/DEFAULT/fa57XJowGYvXF4tIuF8LIhpeHrc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 11:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1b:3e:06:be:28:c8:d1:0f:a7:71:bd:0f:ae:c9:0a:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7dae7b5c9a30198bd7178b48b85f0b221a5e1eb7
Validity
Not Before: Oct 25 12:00:41 2025 GMT
Not After : Oct 26 12:00:41 2025 GMT
Subject: CN=8aeafa080b25623b429dc832884034cf0a1ed897
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:3b:98:1a:8f:9f:aa:2f:0b:72:3f:d3:51:7b:
a2:41:e9:d3:de:cc:7e:c6:a7:a6:bf:ae:da:9d:0a:
05:c1:a7:35:7d:66:bf:44:2f:d3:a5:4d:e5:ff:9f:
dd:1c:0c:dc:04:55:85:bc:44:01:39:e2:f3:5a:5e:
63:fe:91:89:b1:32:9b:af:40:e0:67:e0:d0:ec:53:
cd:71:3e:49:5e:9f:4d:d6:00:bd:b3:fa:80:74:bd:
67:32:1f:39:09:d4:d5:71:c2:c3:e1:2f:f1:fe:ff:
b4:da:e1:85:bf:a3:78:06:b0:09:bc:85:d2:ae:7a:
cd:2e:69:8e:a8:8b:8d:51:b0:b7:6b:fd:00:f1:66:
f5:a2:cb:08:ca:65:46:39:be:33:11:e8:02:ca:de:
e7:d1:67:25:75:30:17:f3:47:f7:83:93:c9:65:b3:
36:4d:67:8c:c1:b6:cb:75:aa:ea:2b:f1:da:98:2b:
d1:b2:43:04:93:c5:74:e1:58:a4:76:1e:5b:3c:6c:
8b:1b:c3:f1:63:6c:eb:1d:07:f5:54:3c:8d:b6:30:
0f:2a:c0:23:8d:2e:20:e4:70:95:37:ab:20:2f:ee:
ec:79:8e:0b:da:ae:c8:a8:8b:15:b7:e0:e8:83:e3:
8b:57:9c:c7:05:59:47:8b:9e:30:a4:78:10:52:2c:
c2:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:EA:FA:08:0B:25:62:3B:42:9D:C8:32:88:40:34:CF:0A:1E:D8:97
X509v3 Authority Key Identifier:
keyid:7D:AE:7B:5C:9A:30:19:8B:D7:17:8B:48:B8:5F:0B:22:1A:5E:1E:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa57XJowGYvXF4tIuF8LIhpeHrc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/dec50d-ee3a-4584-a591-429d668d9228/1/fa57XJowGYvXF4tIuF8LIhpeHrc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/dec50d-ee3a-4584-a591-429d668d9228/1/fa57XJowGYvXF4tIuF8LIhpeHrc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:8d:e6:a1:d8:f5:1a:23:12:37:88:95:b2:ba:17:70:56:ae:
8b:9a:45:23:64:a3:5c:0d:a3:88:30:13:7e:28:9c:dc:3b:94:
d9:fa:6d:6b:62:ae:cf:05:d7:cb:c3:15:d1:8b:a2:d6:c0:b4:
a4:50:d3:9e:9b:4c:32:73:52:73:3c:c4:25:5e:86:b0:8a:4e:
19:5e:ad:bb:f0:d8:36:73:12:f3:78:bc:2c:a9:ba:1a:93:b4:
a1:a2:d7:cc:53:0c:86:18:11:37:0f:19:bd:90:55:c3:60:d5:
12:32:28:fe:19:b3:fe:96:85:4e:87:67:bc:0a:2f:32:32:01:
d2:cd:bf:a6:21:90:23:3a:16:3f:53:95:66:ab:0e:90:64:a0:
b8:d2:fb:e0:07:d1:f6:d0:96:fc:c7:e5:0c:23:5a:5e:e9:2e:
45:8b:20:c0:20:db:a9:c6:43:68:17:02:84:49:a3:3d:c1:00:
db:a7:92:9f:93:67:96:3d:52:57:31:6e:ea:a8:75:db:eb:8b:
14:8d:36:17:9c:8f:7b:06:16:06:42:f6:79:35:3d:87:bf:f2:
5a:25:35:69:ad:9f:a3:2e:61:08:86:43:b5:f8:24:d9:3d:6d:
54:c8:e2:d5:58:01:54:02:1e:c5:73:93:19:ae:67:23:e9:86:
f6:74:98:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 21:16:05 2025 by rpki-client