Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/80ed98-da84-4e4a-b86c-681862a18f0c/1/fa1iGAhj1yKqpPCIHkQ3jjyAg3I.mft
File: fa1iGAhj1yKqpPCIHkQ3jjyAg3I.mft (raw, json)
Hash identifier: BmU+gsNb534I819ToVKiKoyEuqADAvVpSf5vS159O2A=
Subject key identifier: 09:37:3C:CA:29:47:63:40:92:73:AE:2A:AE:06:AB:52:D5:24:56:75
Authority key identifier: 7D:AD:62:18:08:63:D7:22:AA:A4:F0:88:1E:44:37:8E:3C:80:83:72
Certificate issuer: /CN=7dad62180863d722aaa4f0881e44378e3c808372
Certificate serial: 0198D6604AF3EF764F916C5736C044630F0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fa1iGAhj1yKqpPCIHkQ3jjyAg3I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/80ed98-da84-4e4a-b86c-681862a18f0c/1/fa1iGAhj1yKqpPCIHkQ3jjyAg3I.mft
Manifest number: 015A
Signing time: Sat 23 Aug 2025 10:01:31 +0000
Manifest this update: Sat 23 Aug 2025 10:01:31 +0000
Manifest next update: Sun 24 Aug 2025 10:01:31 +0000
Files and hashes: 1: C7GNqkgz9p0zOIQbq1hmHpb1k10.roa (hash: Ih5IZ06o7j/AaerWpaiGsplGlhC586fD+XGd+HNQexM=)
2: fa1iGAhj1yKqpPCIHkQ3jjyAg3I.crl (hash: X+z0O7I2LI7CcGNUnhOUkpgw9AnXsvFcENQeb2bUJNU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/80ed98-da84-4e4a-b86c-681862a18f0c/1/fa1iGAhj1yKqpPCIHkQ3jjyAg3I.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/80ed98-da84-4e4a-b86c-681862a18f0c/1/fa1iGAhj1yKqpPCIHkQ3jjyAg3I.mft
rsync://rpki.ripe.net/repository/DEFAULT/fa1iGAhj1yKqpPCIHkQ3jjyAg3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:4a:f3:ef:76:4f:91:6c:57:36:c0:44:63:0f:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7dad62180863d722aaa4f0881e44378e3c808372
Validity
Not Before: Aug 23 10:01:31 2025 GMT
Not After : Aug 24 10:01:31 2025 GMT
Subject: CN=09373cca294763409273ae2aae06ab52d5245675
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:3c:40:99:ed:d5:99:ce:ce:d4:67:49:a9:af:
f7:f5:22:2f:2c:9b:b8:d4:f5:09:4e:0b:62:f9:05:
d6:80:62:a1:c6:15:21:c0:68:4a:b1:04:2d:d4:ef:
12:32:45:e7:f5:a0:fc:3c:c1:ed:0f:fd:41:25:00:
08:36:30:cd:40:f0:00:d6:6d:53:07:71:16:1c:68:
4f:0c:e9:da:9e:0c:2b:66:97:9d:05:71:15:09:e9:
fb:f1:0f:c5:8c:39:a0:9c:ac:44:c8:67:21:3d:97:
5e:01:69:88:01:91:9d:ec:1e:38:e1:3e:13:a4:ca:
e3:f1:1f:8a:84:06:d7:48:be:a2:b0:9e:68:41:1d:
07:7d:2c:fb:46:ee:d9:bd:35:eb:d7:b5:77:58:74:
1a:12:ef:33:77:6e:a3:a3:86:55:29:af:c0:e2:3d:
f6:c1:70:51:49:97:c4:d2:53:5c:3a:31:61:16:4c:
d3:6f:0d:81:bb:e1:85:51:5c:78:1b:f2:38:68:d9:
f5:a4:4f:60:54:02:05:c6:a1:da:02:c8:36:88:05:
2e:ef:b3:dc:1e:2d:87:62:3b:d8:2b:4e:b4:17:c7:
eb:62:f4:5e:a8:02:68:32:cb:31:e1:80:1c:03:f4:
62:6c:b4:89:53:21:7f:b1:a5:61:23:ff:64:80:78:
85:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:37:3C:CA:29:47:63:40:92:73:AE:2A:AE:06:AB:52:D5:24:56:75
X509v3 Authority Key Identifier:
keyid:7D:AD:62:18:08:63:D7:22:AA:A4:F0:88:1E:44:37:8E:3C:80:83:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa1iGAhj1yKqpPCIHkQ3jjyAg3I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/80ed98-da84-4e4a-b86c-681862a18f0c/1/fa1iGAhj1yKqpPCIHkQ3jjyAg3I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/80ed98-da84-4e4a-b86c-681862a18f0c/1/fa1iGAhj1yKqpPCIHkQ3jjyAg3I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:1d:de:dd:75:fa:3b:cc:df:4e:77:b7:b3:a4:3f:c2:3a:3e:
a5:79:76:50:33:d3:f2:22:cc:c7:01:82:a6:cc:95:56:ed:63:
d8:5f:4f:ef:8c:ab:3c:df:85:f8:ea:16:cb:49:72:ae:a7:32:
1a:0a:b0:ce:83:7d:84:cd:ba:68:aa:5f:b7:97:ac:f0:18:7a:
0a:d8:04:53:46:64:2a:79:52:4b:0d:43:6b:e7:55:ec:e8:0b:
aa:2c:f0:9e:5d:e4:db:f5:7c:c0:16:a1:e8:90:32:78:b5:41:
77:eb:46:a4:08:d1:33:86:71:f3:bb:14:80:da:ae:1a:0e:a8:
5a:81:04:bf:2d:eb:c5:1d:32:8f:9b:28:8e:65:d2:f1:78:35:
9e:65:ff:7b:75:36:28:6a:6f:47:86:8c:da:10:b4:58:de:9b:
9f:03:e2:a2:3e:5a:0d:e8:0c:0c:a8:26:ce:a2:7e:82:e9:65:
6a:c1:a7:26:b6:32:80:75:00:d2:37:21:51:35:2d:f5:bb:ef:
d5:7d:ee:d0:47:20:38:de:e6:80:9d:c2:87:4f:54:eb:ab:a8:
bf:84:0c:92:7c:69:e8:3c:02:e2:2c:d2:81:76:57:21:14:24:
a7:b3:f6:74:e6:99:07:a6:b2:dd:21:cc:7c:54:f6:36:54:2e:
81:1b:f5:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:18:53 2025 by rpki-client