Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/b033d3-ee96-4c0d-a70e-0274f446d331/1/rFaq3EJBEsT8iYnAruJUm7r1ZWg.mft
File: rFaq3EJBEsT8iYnAruJUm7r1ZWg.mft (raw, json)
Hash identifier: j7bcglWJemv+yDe1NevVyb6qnuMExvKNu7QR5w1wisY=
Subject key identifier: 60:4D:D4:FC:AC:C2:69:A7:3B:B5:4E:B9:52:AF:CD:67:A0:99:1A:FF
Authority key identifier: AC:56:AA:DC:42:41:12:C4:FC:89:89:C0:AE:E2:54:9B:BA:F5:65:68
Certificate issuer: /CN=ac56aadc424112c4fc8989c0aee2549bbaf56568
Certificate serial: 019A7149CEE5E216E0DEA3D75951D631C7C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rFaq3EJBEsT8iYnAruJUm7r1ZWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/b033d3-ee96-4c0d-a70e-0274f446d331/1/rFaq3EJBEsT8iYnAruJUm7r1ZWg.mft
Manifest number: 171D
Signing time: Tue 11 Nov 2025 05:00:53 +0000
Manifest this update: Tue 11 Nov 2025 05:00:53 +0000
Manifest next update: Wed 12 Nov 2025 05:00:53 +0000
Files and hashes: 1: hDXJqHhRVakrUpAy2mxJpw32amA.roa (hash: Q2fYQzDzeuJHoaVaTN2Do0bb6ba0BBCZfekXkM6wQUY=)
2: rFaq3EJBEsT8iYnAruJUm7r1ZWg.crl (hash: UANaZFbeeefaUegZl9dRQldkNrFzTvLYupRdFeUl9k4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/b033d3-ee96-4c0d-a70e-0274f446d331/1/rFaq3EJBEsT8iYnAruJUm7r1ZWg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/b033d3-ee96-4c0d-a70e-0274f446d331/1/rFaq3EJBEsT8iYnAruJUm7r1ZWg.mft
rsync://rpki.ripe.net/repository/DEFAULT/rFaq3EJBEsT8iYnAruJUm7r1ZWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:ce:e5:e2:16:e0:de:a3:d7:59:51:d6:31:c7:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac56aadc424112c4fc8989c0aee2549bbaf56568
Validity
Not Before: Nov 11 05:00:53 2025 GMT
Not After : Nov 12 05:00:53 2025 GMT
Subject: CN=604dd4fcacc269a73bb54eb952afcd67a0991aff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:60:ca:fa:81:34:fb:91:fe:1d:39:25:83:81:
20:ba:1d:df:96:69:7c:56:de:1a:fa:b5:54:0e:84:
b8:28:ee:98:06:e3:6e:17:3d:7f:86:42:bf:a4:ed:
11:28:1a:97:8d:23:f9:65:80:31:91:3b:02:50:75:
bd:41:4a:53:88:3c:ad:40:8a:f8:ee:77:8d:49:f6:
9b:1a:00:df:1f:82:68:88:0e:fd:51:f2:c6:2b:ae:
06:be:c4:ca:43:c0:76:b7:dd:f7:9f:e6:95:ab:31:
d8:be:f5:02:2a:53:40:15:64:60:5a:b7:44:9f:52:
5e:51:5f:9d:91:91:6e:c9:46:73:2d:0f:37:9d:40:
26:b1:90:27:0f:38:a2:53:a9:82:80:ed:55:a0:69:
4a:b1:74:11:67:45:7b:01:4a:ce:54:94:a6:bb:e2:
04:f1:63:0d:55:f8:08:62:2d:59:ca:9e:af:d2:d5:
05:be:a3:07:04:0f:22:a2:55:4d:58:2d:b6:3a:0b:
c6:90:0e:08:c1:2a:a9:95:28:9a:c0:c6:27:7a:2c:
4f:91:6a:80:a9:07:03:b8:33:c1:30:4e:06:66:b5:
fa:8f:ba:d1:24:7b:3e:af:b5:73:0f:cf:31:c6:25:
c6:d5:19:d2:a7:f9:96:27:4b:d0:0b:26:31:ee:c5:
eb:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:4D:D4:FC:AC:C2:69:A7:3B:B5:4E:B9:52:AF:CD:67:A0:99:1A:FF
X509v3 Authority Key Identifier:
keyid:AC:56:AA:DC:42:41:12:C4:FC:89:89:C0:AE:E2:54:9B:BA:F5:65:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rFaq3EJBEsT8iYnAruJUm7r1ZWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/b033d3-ee96-4c0d-a70e-0274f446d331/1/rFaq3EJBEsT8iYnAruJUm7r1ZWg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/b033d3-ee96-4c0d-a70e-0274f446d331/1/rFaq3EJBEsT8iYnAruJUm7r1ZWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:85:03:eb:45:e0:53:05:89:91:a0:11:6b:0a:9c:23:53:f6:
27:a5:4a:1e:dd:b5:f9:00:84:a4:10:b0:3e:14:fe:88:7f:16:
06:83:d0:95:12:b9:c0:ba:93:4d:29:e8:5a:3d:45:e6:4b:83:
9f:26:9d:ab:9a:ce:af:c1:7a:70:4b:16:f2:4e:19:7f:36:ed:
91:fd:9d:b7:25:07:3d:9f:02:7c:59:8e:32:45:d6:ca:6e:85:
6b:e0:f2:c6:2e:2e:bd:08:a7:ee:e6:57:af:30:79:f9:d5:f7:
e3:e7:c5:6d:13:a4:cd:43:c1:f6:de:75:fb:02:9c:85:3f:a0:
5e:77:f3:1f:88:4b:48:cf:90:3c:f9:20:82:22:cc:9e:30:1b:
ac:94:f6:5e:18:94:41:cd:65:66:8d:df:ef:f3:6c:05:c9:5d:
44:80:62:34:7c:a1:44:c8:b9:a4:0f:48:2e:2e:14:0b:e5:00:
b8:2e:55:eb:46:fe:a0:c3:d6:de:0b:0c:1b:c0:7f:a7:4e:8e:
55:a9:db:7d:66:cc:75:d0:87:d2:68:a1:bd:d4:95:81:3f:ad:
69:7b:2c:05:f2:3c:ba:e4:d4:5e:c4:75:94:1f:8b:f2:14:34:
a8:f0:6e:b3:cd:d8:8e:14:d3:ca:90:26:03:c2:48:ac:da:fd:
38:7b:db:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:44:26 2025 by rpki-client