Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/73e009-f2f4-43ac-81a1-89aa8d2e8004/1/faXNZSr9Hy8zfCDY_3KGzSzxvfk.mft
File: faXNZSr9Hy8zfCDY_3KGzSzxvfk.mft (raw, json)
Hash identifier: iJWNhryLnVDWdL14a3JzIeSISfWLKhuWHhQfpLYWEFs=
Subject key identifier: C9:D9:6F:49:46:0E:DD:C3:BD:64:AE:22:F4:07:38:0F:4D:43:00:13
Authority key identifier: 7D:A5:CD:65:2A:FD:1F:2F:33:7C:20:D8:FF:72:86:CD:2C:F1:BD:F9
Certificate issuer: /CN=7da5cd652afd1f2f337c20d8ff7286cd2cf1bdf9
Certificate serial: 019A7226728A0DA4F49DAED7AAC02A296C73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXNZSr9Hy8zfCDY_3KGzSzxvfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/73e009-f2f4-43ac-81a1-89aa8d2e8004/1/faXNZSr9Hy8zfCDY_3KGzSzxvfk.mft
Manifest number: 1454
Signing time: Tue 11 Nov 2025 09:01:53 +0000
Manifest this update: Tue 11 Nov 2025 09:01:53 +0000
Manifest next update: Wed 12 Nov 2025 09:01:53 +0000
Files and hashes: 1: faXNZSr9Hy8zfCDY_3KGzSzxvfk.crl (hash: oOCOOR826DII4z8ptgAGAR2KEgi6l6AZ+mE6Xc+QoyE=)
2: yKkZFLs6YVbkXytvzgCPIVXuU18.roa (hash: 3M+Qw4Xfzb67zSVF5cyn50VarUBuvPcrrFEH7s1xtH4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/73e009-f2f4-43ac-81a1-89aa8d2e8004/1/faXNZSr9Hy8zfCDY_3KGzSzxvfk.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/73e009-f2f4-43ac-81a1-89aa8d2e8004/1/faXNZSr9Hy8zfCDY_3KGzSzxvfk.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXNZSr9Hy8zfCDY_3KGzSzxvfk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:72:8a:0d:a4:f4:9d:ae:d7:aa:c0:2a:29:6c:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5cd652afd1f2f337c20d8ff7286cd2cf1bdf9
Validity
Not Before: Nov 11 09:01:53 2025 GMT
Not After : Nov 12 09:01:53 2025 GMT
Subject: CN=c9d96f49460eddc3bd64ae22f407380f4d430013
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:72:60:7b:05:76:77:38:3b:7c:e0:c6:77:91:
5c:fd:5d:96:d3:2a:66:3a:74:85:00:21:d8:57:f0:
97:bd:7d:86:f4:52:55:8b:a4:01:26:0e:2e:d7:d8:
65:65:dd:37:24:71:6b:e9:9f:83:5d:bf:b5:2c:ea:
e5:b5:98:7e:c3:88:5e:9a:fa:12:62:06:a1:72:b4:
1e:7f:ce:cc:12:3c:06:69:ab:43:fb:1e:7e:9f:3d:
78:c6:20:ee:bd:ac:f4:ba:64:fc:90:45:60:74:45:
06:af:ba:ab:30:d9:3e:a3:aa:0e:83:2e:bf:05:03:
cc:9a:73:28:8d:a3:71:fb:02:16:b3:71:1d:44:d4:
bc:23:40:f4:75:30:3c:31:04:e3:86:42:41:c5:ae:
f6:7e:0e:72:95:f8:b3:b6:09:2f:58:2d:85:56:5f:
5b:b9:90:37:fe:4e:5f:c5:14:b9:7c:67:bd:da:8f:
ff:56:aa:8b:3f:33:bd:23:e8:62:48:c0:e5:53:07:
8b:03:a7:76:64:ca:4b:28:a2:38:02:34:c4:4b:f0:
89:db:f3:da:5f:a7:55:53:53:d4:ac:9e:1d:3a:f7:
61:86:22:d5:dc:79:15:ab:e8:e5:30:6d:08:b0:38:
9a:32:46:20:2b:a0:fc:2b:95:af:63:f1:f2:7a:d5:
ca:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:D9:6F:49:46:0E:DD:C3:BD:64:AE:22:F4:07:38:0F:4D:43:00:13
X509v3 Authority Key Identifier:
keyid:7D:A5:CD:65:2A:FD:1F:2F:33:7C:20:D8:FF:72:86:CD:2C:F1:BD:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXNZSr9Hy8zfCDY_3KGzSzxvfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/73e009-f2f4-43ac-81a1-89aa8d2e8004/1/faXNZSr9Hy8zfCDY_3KGzSzxvfk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/73e009-f2f4-43ac-81a1-89aa8d2e8004/1/faXNZSr9Hy8zfCDY_3KGzSzxvfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:13:39:17:13:cb:78:d3:94:08:ee:e7:a3:bd:e8:ef:80:c1:
80:39:b4:6c:80:a6:f8:fa:1c:03:19:f9:33:d9:56:cd:ad:c3:
f5:6f:c8:f2:ac:90:b8:c4:f9:5d:0c:67:56:be:de:02:0b:3c:
fc:81:d7:2f:5c:05:c1:3f:c4:06:c1:73:2c:17:54:e9:7c:61:
72:c0:f6:e5:cb:aa:9c:c3:18:fb:26:f3:86:51:15:50:c8:91:
4c:4a:b5:a5:97:26:82:0f:93:b0:37:ca:bd:69:5a:38:73:96:
9b:3a:fa:61:4f:b2:bc:53:ca:ee:b5:76:98:f8:c0:26:75:0b:
65:ef:9a:2e:52:e7:57:63:a0:db:df:2c:72:0b:70:2e:43:af:
c4:98:b7:35:0e:51:ce:00:d7:44:55:cb:23:f0:59:c9:07:72:
60:4b:31:da:20:4f:49:73:f0:0f:7c:c7:53:51:59:5a:c5:1c:
9b:71:7e:f7:73:16:85:a7:d0:b2:09:b3:ad:df:b2:b7:d7:d9:
75:ab:15:d9:8e:77:0d:57:7b:12:cc:24:1b:e6:91:c8:29:9c:
8f:23:f4:4b:d7:31:3a:db:1d:0e:3f:97:9a:ac:00:14:71:ff:
2f:00:27:b2:f7:fb:7f:1a:21:18:7a:c8:bb:b8:0e:d8:db:a5:
85:b1:54:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:19:43 2025 by rpki-client