Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/80ed98-da84-4e4a-b86c-681862a18f0c/1/fa1iGAhj1yKqpPCIHkQ3jjyAg3I.mft
File: fa1iGAhj1yKqpPCIHkQ3jjyAg3I.mft (raw, json)
Hash identifier: elk+2Vxf6xT2nALLERn4s+L4tCjcvNrSsu+VIiLxpBI=
Subject key identifier: 01:9E:02:AB:20:C2:EE:89:EF:50:67:BA:4F:2D:FC:FF:B7:81:95:35
Authority key identifier: 7D:AD:62:18:08:63:D7:22:AA:A4:F0:88:1E:44:37:8E:3C:80:83:72
Certificate issuer: /CN=7dad62180863d722aaa4f0881e44378e3c808372
Certificate serial: 0199FBEB16D9CB25A42051B7F8189255A530
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fa1iGAhj1yKqpPCIHkQ3jjyAg3I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/80ed98-da84-4e4a-b86c-681862a18f0c/1/fa1iGAhj1yKqpPCIHkQ3jjyAg3I.mft
Manifest number: 01F2
Signing time: Sun 19 Oct 2025 10:01:51 +0000
Manifest this update: Sun 19 Oct 2025 10:01:51 +0000
Manifest next update: Mon 20 Oct 2025 10:01:51 +0000
Files and hashes: 1: C7GNqkgz9p0zOIQbq1hmHpb1k10.roa (hash: Ih5IZ06o7j/AaerWpaiGsplGlhC586fD+XGd+HNQexM=)
2: fa1iGAhj1yKqpPCIHkQ3jjyAg3I.crl (hash: U/gVE4pNzdnXYHOoRbrtUSu8uuAuGHye5qA+JFXI0WM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/80ed98-da84-4e4a-b86c-681862a18f0c/1/fa1iGAhj1yKqpPCIHkQ3jjyAg3I.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/80ed98-da84-4e4a-b86c-681862a18f0c/1/fa1iGAhj1yKqpPCIHkQ3jjyAg3I.mft
rsync://rpki.ripe.net/repository/DEFAULT/fa1iGAhj1yKqpPCIHkQ3jjyAg3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:16:d9:cb:25:a4:20:51:b7:f8:18:92:55:a5:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7dad62180863d722aaa4f0881e44378e3c808372
Validity
Not Before: Oct 19 10:01:51 2025 GMT
Not After : Oct 20 10:01:51 2025 GMT
Subject: CN=019e02ab20c2ee89ef5067ba4f2dfcffb7819535
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:27:d3:b4:60:d1:fb:70:b4:f6:6c:bc:ab:af:
29:fe:be:fa:eb:2f:24:99:4c:28:6c:d7:ee:e9:5c:
dd:66:ba:9e:11:c0:cd:aa:85:53:fe:4e:61:42:34:
56:51:00:a3:1b:48:00:95:48:be:99:e9:18:d8:8f:
9d:e5:0e:d3:0c:72:28:a8:a6:a8:7f:1d:f8:3b:50:
43:b1:0c:8e:ff:81:65:69:0c:00:4a:84:71:be:7d:
fa:f7:a6:8c:19:29:cd:53:00:34:7b:7b:77:d4:dd:
76:a5:ba:ac:25:74:21:f2:34:36:b8:32:82:e6:86:
1f:36:61:b8:5d:d5:f6:ca:d7:dd:c1:d3:49:87:3f:
1a:ed:09:e7:74:36:00:80:40:1a:ff:ea:10:04:d6:
aa:9a:88:58:60:4b:4b:ad:6a:0f:dd:04:02:83:0a:
15:c6:05:76:30:2d:93:40:3a:61:a3:b0:92:33:1d:
e6:60:ef:16:c4:68:c8:35:48:2d:8f:78:23:ec:9d:
f0:8e:0c:09:f4:75:90:84:bb:2d:47:b2:f2:fc:c0:
63:28:e6:ba:2f:ce:12:38:45:8c:2d:1c:4d:f4:49:
30:20:26:0d:c2:8f:15:90:4d:81:a7:b3:f3:f8:6f:
df:0e:33:86:30:cf:c0:f2:63:77:12:08:ba:ae:9f:
27:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:9E:02:AB:20:C2:EE:89:EF:50:67:BA:4F:2D:FC:FF:B7:81:95:35
X509v3 Authority Key Identifier:
keyid:7D:AD:62:18:08:63:D7:22:AA:A4:F0:88:1E:44:37:8E:3C:80:83:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa1iGAhj1yKqpPCIHkQ3jjyAg3I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/80ed98-da84-4e4a-b86c-681862a18f0c/1/fa1iGAhj1yKqpPCIHkQ3jjyAg3I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/80ed98-da84-4e4a-b86c-681862a18f0c/1/fa1iGAhj1yKqpPCIHkQ3jjyAg3I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:27:8d:57:8e:29:ef:b6:65:be:aa:6c:41:0c:67:1d:0c:20:
12:e6:8f:1d:6d:9b:13:30:63:49:cc:ec:37:66:b7:c1:56:66:
4d:ae:09:19:68:b3:62:0c:1f:95:9f:41:ec:31:d1:ea:5e:c2:
96:0b:d5:9a:2b:b7:18:3d:f4:c3:3c:a1:34:6f:19:d1:09:81:
2a:2b:9d:f6:03:9b:a7:6a:bc:ca:97:31:fe:64:1a:7f:f8:96:
61:5e:4e:f5:cc:92:75:1d:d4:7d:92:dc:9b:6f:fb:ea:8f:f1:
09:0c:b1:4f:20:81:56:2f:65:05:92:3e:7a:74:79:b5:60:2a:
4b:92:94:fc:ad:88:9f:d9:ca:85:11:0e:37:18:36:2f:2c:de:
bf:51:9c:07:48:59:52:a3:92:cf:7c:c1:27:a7:7c:75:76:8b:
79:35:df:81:0f:57:0b:4b:3e:ab:d0:b3:1e:c8:d1:c2:d5:2b:
62:1b:15:06:bb:14:ac:39:0a:73:e9:1e:1c:24:0a:50:3f:49:
ce:5a:1d:bf:5a:b3:54:55:6b:28:4c:2b:d7:93:1a:44:52:3b:
dd:6a:a8:b1:a6:1c:3f:0d:45:e3:64:84:6d:4e:28:a3:3d:c0:
9a:93:19:b9:a8:9f:76:d9:28:05:71:f9:a4:2b:96:80:24:ba:
e5:ed:b3:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:28:23 2025 by rpki-client