Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/12f26e-fb11-42e1-bacc-3969eca7b7d4/1/Fa8HL54VarwgxGhJjiMjFSxzaug.mft
File: Fa8HL54VarwgxGhJjiMjFSxzaug.mft (raw, json)
Hash identifier: GMYZrTB+NW6AZF/tcxWppUp46uZKHbnPxn88uNfSs+g=
Subject key identifier: D8:26:97:A2:70:0A:EF:C8:7B:55:EE:F2:53:D3:A7:60:28:48:C6:F2
Authority key identifier: 15:AF:07:2F:9E:15:6A:BC:20:C4:68:49:8E:23:23:15:2C:73:6A:E8
Certificate issuer: /CN=15af072f9e156abc20c468498e2323152c736ae8
Certificate serial: 0199FC215CF279B779AE2675EE2D899ADB7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fa8HL54VarwgxGhJjiMjFSxzaug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/12f26e-fb11-42e1-bacc-3969eca7b7d4/1/Fa8HL54VarwgxGhJjiMjFSxzaug.mft
Manifest number: 1621
Signing time: Sun 19 Oct 2025 11:01:08 +0000
Manifest this update: Sun 19 Oct 2025 11:01:08 +0000
Manifest next update: Mon 20 Oct 2025 11:01:08 +0000
Files and hashes: 1: 1-hG6m2b1-771ZXFUCad6-Q0HqS0.roa (hash: iRlAMEhmdJkdMf5CTvW6WMLAwT23DftwTFfnt2+39Po=)
2: Fa8HL54VarwgxGhJjiMjFSxzaug.crl (hash: xur4JA81DnOrxrWlXkDumeifC7syU8QvlKMs8jK+KN0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/12f26e-fb11-42e1-bacc-3969eca7b7d4/1/Fa8HL54VarwgxGhJjiMjFSxzaug.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/12f26e-fb11-42e1-bacc-3969eca7b7d4/1/Fa8HL54VarwgxGhJjiMjFSxzaug.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fa8HL54VarwgxGhJjiMjFSxzaug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:5c:f2:79:b7:79:ae:26:75:ee:2d:89:9a:db:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15af072f9e156abc20c468498e2323152c736ae8
Validity
Not Before: Oct 19 11:01:08 2025 GMT
Not After : Oct 20 11:01:08 2025 GMT
Subject: CN=d82697a2700aefc87b55eef253d3a7602848c6f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:95:cb:62:93:16:ff:47:83:a3:c3:00:8a:31:
3d:25:12:2d:25:27:4a:01:4b:4b:c6:02:88:60:b2:
57:b5:01:1a:7b:6a:f7:4c:b2:24:66:39:fe:cc:24:
ed:00:46:e0:ce:3d:6f:9e:7f:5e:66:83:0c:9e:cf:
7a:45:bb:0f:8e:ed:26:f1:64:15:0b:0c:8d:2c:ea:
e7:56:e1:0b:11:57:c7:6c:de:02:fc:29:5f:fc:1b:
af:cb:c5:94:47:53:c4:c2:9d:49:f9:45:de:dc:3a:
0b:34:f6:cc:06:4f:bb:46:6d:46:53:20:2c:20:45:
dc:b9:f5:64:d4:4b:5d:f5:6e:29:f5:11:0c:11:b2:
e2:a3:f2:55:02:8b:40:e3:11:49:29:3c:7d:18:c1:
0c:67:58:0e:ad:fb:17:e2:2c:b4:5a:49:a4:9a:b6:
f5:2d:5d:09:9f:31:8b:aa:4f:03:cf:96:48:15:14:
64:96:e9:08:5b:e4:2a:6c:b7:af:c8:fe:4c:4a:3c:
f3:e8:c8:45:c9:cb:b3:94:4a:cd:23:0f:1f:9f:ae:
db:6a:e0:98:a0:7e:05:f5:3e:11:53:25:e2:e4:3e:
81:6b:4f:d6:6a:be:30:28:31:73:a0:06:2b:15:1d:
df:25:e8:57:91:d1:d2:fd:5a:fa:9b:3d:b2:78:b8:
7c:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:26:97:A2:70:0A:EF:C8:7B:55:EE:F2:53:D3:A7:60:28:48:C6:F2
X509v3 Authority Key Identifier:
keyid:15:AF:07:2F:9E:15:6A:BC:20:C4:68:49:8E:23:23:15:2C:73:6A:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fa8HL54VarwgxGhJjiMjFSxzaug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/12f26e-fb11-42e1-bacc-3969eca7b7d4/1/Fa8HL54VarwgxGhJjiMjFSxzaug.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/12f26e-fb11-42e1-bacc-3969eca7b7d4/1/Fa8HL54VarwgxGhJjiMjFSxzaug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:32:33:1c:e8:5c:38:03:e7:f5:44:29:e1:0e:61:56:c3:2c:
74:7a:a5:62:e9:c7:32:89:6c:c4:78:7f:bd:2e:f4:c4:1f:b7:
fa:bd:cc:f6:06:13:9a:6f:35:9a:43:45:51:81:36:d6:c6:52:
e7:94:59:83:3b:ff:8c:d3:54:bf:97:c9:ea:e1:2b:ca:48:32:
0f:91:06:37:4c:0b:85:f8:36:44:e8:6d:3e:e4:58:e6:12:5d:
7c:9a:a4:02:cc:d3:17:c1:93:a8:a1:30:b9:db:36:57:5d:81:
a9:3f:d8:12:62:22:6d:71:ef:8c:ca:70:ab:8c:4d:43:81:ae:
a9:16:c5:65:50:92:82:b1:96:3b:a4:d6:c6:42:43:61:cf:c0:
9f:e6:7a:9b:83:a7:db:1a:43:d5:10:47:2d:7e:cf:be:c9:9b:
80:9b:a0:6c:ba:54:cb:ea:5b:75:7e:fa:d3:4a:08:54:f6:af:
ce:96:46:06:c0:63:73:7c:59:f5:73:16:fc:24:f3:81:1a:31:
aa:a1:78:8f:2b:4e:6a:fb:aa:77:69:29:5d:28:88:88:98:6d:
09:46:5b:84:dc:dd:c6:4f:6a:eb:bb:a6:6c:0e:d5:15:e8:06:
13:06:31:c2:1b:a6:32:3c:ed:2d:41:de:6b:7e:91:30:8a:ab:
08:8f:00:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:06:59 2025 by rpki-client