Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/12f26e-fb11-42e1-bacc-3969eca7b7d4/1/Fa8HL54VarwgxGhJjiMjFSxzaug.mft
File: Fa8HL54VarwgxGhJjiMjFSxzaug.mft (raw, json)
Hash identifier: 5+lkcaJeOwgAkabKfwkc0/fzZJ10pWugczHjKpGum7A=
Subject key identifier: F4:92:53:01:B2:6E:A5:D6:DC:10:90:A3:80:02:44:12:3D:90:95:29
Authority key identifier: 15:AF:07:2F:9E:15:6A:BC:20:C4:68:49:8E:23:23:15:2C:73:6A:E8
Certificate issuer: /CN=15af072f9e156abc20c468498e2323152c736ae8
Certificate serial: 0198D4A811F430BA13A1DEED57A0E885D875
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fa8HL54VarwgxGhJjiMjFSxzaug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/12f26e-fb11-42e1-bacc-3969eca7b7d4/1/Fa8HL54VarwgxGhJjiMjFSxzaug.mft
Manifest number: 1588
Signing time: Sat 23 Aug 2025 02:00:41 +0000
Manifest this update: Sat 23 Aug 2025 02:00:41 +0000
Manifest next update: Sun 24 Aug 2025 02:00:41 +0000
Files and hashes: 1: 1-hG6m2b1-771ZXFUCad6-Q0HqS0.roa (hash: iRlAMEhmdJkdMf5CTvW6WMLAwT23DftwTFfnt2+39Po=)
2: Fa8HL54VarwgxGhJjiMjFSxzaug.crl (hash: PuiJFJC0xON8zMjs65AsflhW7NrepO/ysRQJQEmK56I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/12f26e-fb11-42e1-bacc-3969eca7b7d4/1/Fa8HL54VarwgxGhJjiMjFSxzaug.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/12f26e-fb11-42e1-bacc-3969eca7b7d4/1/Fa8HL54VarwgxGhJjiMjFSxzaug.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fa8HL54VarwgxGhJjiMjFSxzaug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a8:11:f4:30:ba:13:a1:de:ed:57:a0:e8:85:d8:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15af072f9e156abc20c468498e2323152c736ae8
Validity
Not Before: Aug 23 02:00:41 2025 GMT
Not After : Aug 24 02:00:41 2025 GMT
Subject: CN=f4925301b26ea5d6dc1090a3800244123d909529
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:ff:af:78:34:b4:fd:84:cf:38:8f:ce:5d:96:
c9:97:03:21:26:8f:84:77:27:57:22:cf:9a:fb:f2:
e3:6a:50:3f:58:72:bf:5d:88:43:e5:a6:31:67:d9:
80:eb:87:92:72:e8:c9:6a:ba:b8:89:38:08:aa:fd:
d3:28:95:83:1e:fb:9b:16:89:ee:67:05:83:43:74:
40:0e:e6:64:8e:63:10:45:21:9e:2a:5b:c3:e9:65:
ba:aa:76:f7:11:bc:6c:e6:95:48:02:22:3b:50:98:
8b:cd:64:e7:90:58:2e:45:ad:ac:09:f0:de:34:d6:
de:d3:7f:fb:46:06:19:4e:00:de:51:3e:bc:47:6a:
51:9e:01:7b:d6:b7:40:9f:d6:ee:46:9e:ce:ef:12:
58:a3:18:c6:71:ea:5f:d7:15:02:8a:8d:7f:e9:dc:
43:98:c2:a5:56:3d:a3:2e:9b:24:85:3e:c5:6f:9e:
f6:a4:42:f8:ac:96:2f:3a:4a:48:b9:37:2f:45:24:
5d:8e:7a:37:fa:55:69:87:a2:7b:57:82:13:b8:f1:
cb:72:a2:7b:30:9b:65:56:da:a9:67:27:01:c6:40:
ea:6d:ac:9e:4b:4c:57:42:59:de:e6:00:ea:88:81:
7f:ec:ec:3e:fd:29:26:d8:6f:93:8d:dd:e6:12:ee:
fc:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:92:53:01:B2:6E:A5:D6:DC:10:90:A3:80:02:44:12:3D:90:95:29
X509v3 Authority Key Identifier:
keyid:15:AF:07:2F:9E:15:6A:BC:20:C4:68:49:8E:23:23:15:2C:73:6A:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fa8HL54VarwgxGhJjiMjFSxzaug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/12f26e-fb11-42e1-bacc-3969eca7b7d4/1/Fa8HL54VarwgxGhJjiMjFSxzaug.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/12f26e-fb11-42e1-bacc-3969eca7b7d4/1/Fa8HL54VarwgxGhJjiMjFSxzaug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:69:6d:c4:b0:1a:c5:39:34:e7:f6:f8:55:ac:3d:70:60:14:
ed:77:7b:fe:09:24:7d:f2:08:6e:ed:3a:59:20:db:ff:9d:54:
72:69:97:7d:da:dd:f4:56:9f:6b:3e:6a:21:fa:54:a9:bb:56:
33:ee:e0:68:d1:a7:5c:f3:18:17:e4:74:c6:de:de:3a:34:40:
99:0d:b7:c5:08:59:d7:2f:98:2f:69:67:4a:25:56:0c:21:6a:
45:7a:63:f4:21:a9:39:fb:d3:97:8f:a1:4c:f2:29:23:c6:f7:
fe:10:db:29:b7:09:df:77:5c:9d:a1:11:70:ef:c2:f3:16:f0:
4f:b0:ab:ae:0c:38:21:e6:5f:05:cc:70:2a:4b:d9:40:25:f7:
3c:e8:fb:37:57:17:2e:0e:43:73:e6:52:41:13:c8:9f:52:d6:
31:ef:39:ea:29:01:dd:e9:ed:cf:6e:99:5f:c3:f8:0e:7c:0f:
9b:19:10:a1:aa:88:04:47:97:aa:16:7b:21:16:ae:46:ac:a2:
3e:35:60:9e:31:fd:7a:d4:bd:5d:16:13:7f:85:a0:02:6d:b5:
56:c2:65:25:f1:10:dc:b4:a8:2b:ae:36:bb:74:df:d2:4b:6f:
a5:76:a0:80:6f:47:ff:00:af:c0:b5:d7:22:bc:93:17:a8:ec:
93:6a:57:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:41:43 2025 by rpki-client