Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/73e009-f2f4-43ac-81a1-89aa8d2e8004/1/faXNZSr9Hy8zfCDY_3KGzSzxvfk.mft
File: faXNZSr9Hy8zfCDY_3KGzSzxvfk.mft (raw, json)
Hash identifier: yZc60yjVlVXyyXjckmetNTMWgTVw+Rqr6AcKPbpDFmA=
Subject key identifier: 45:EA:A6:A9:25:90:F2:61:31:BD:E3:34:A5:3B:AB:52:A5:6C:50:68
Authority key identifier: 7D:A5:CD:65:2A:FD:1F:2F:33:7C:20:D8:FF:72:86:CD:2C:F1:BD:F9
Certificate issuer: /CN=7da5cd652afd1f2f337c20d8ff7286cd2cf1bdf9
Certificate serial: 0199FC58D9FE4E44A5BE0AFBE5F3F18A765A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXNZSr9Hy8zfCDY_3KGzSzxvfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/73e009-f2f4-43ac-81a1-89aa8d2e8004/1/faXNZSr9Hy8zfCDY_3KGzSzxvfk.mft
Manifest number: 1417
Signing time: Sun 19 Oct 2025 12:01:45 +0000
Manifest this update: Sun 19 Oct 2025 12:01:45 +0000
Manifest next update: Mon 20 Oct 2025 12:01:45 +0000
Files and hashes: 1: faXNZSr9Hy8zfCDY_3KGzSzxvfk.crl (hash: 8yDlg2gGCLivJ1/a2l9cjkEvXiJ5KX/X+N9oeM+YPwI=)
2: yKkZFLs6YVbkXytvzgCPIVXuU18.roa (hash: 3M+Qw4Xfzb67zSVF5cyn50VarUBuvPcrrFEH7s1xtH4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/73e009-f2f4-43ac-81a1-89aa8d2e8004/1/faXNZSr9Hy8zfCDY_3KGzSzxvfk.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/73e009-f2f4-43ac-81a1-89aa8d2e8004/1/faXNZSr9Hy8zfCDY_3KGzSzxvfk.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXNZSr9Hy8zfCDY_3KGzSzxvfk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:d9:fe:4e:44:a5:be:0a:fb:e5:f3:f1:8a:76:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5cd652afd1f2f337c20d8ff7286cd2cf1bdf9
Validity
Not Before: Oct 19 12:01:45 2025 GMT
Not After : Oct 20 12:01:45 2025 GMT
Subject: CN=45eaa6a92590f26131bde334a53bab52a56c5068
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:c0:18:ae:38:04:28:bc:6f:c8:cd:13:8f:64:
3a:e8:a2:8c:f8:88:6d:e4:5d:6a:8b:6c:cd:3d:b4:
d5:b8:80:b1:5f:a5:51:2b:9f:19:46:1e:ca:0e:47:
ae:02:cd:d9:89:72:fc:61:1c:90:80:4f:30:00:99:
86:62:62:cc:2d:3c:4e:6c:16:9e:24:0e:ff:84:7d:
9d:a2:8b:e7:bf:94:78:55:19:74:c6:a2:fd:4f:dc:
0a:76:31:5d:a1:65:45:80:02:31:ea:da:6c:23:ba:
3a:33:df:96:5a:d4:0a:ae:77:49:e7:d2:3e:62:7f:
dd:70:30:56:14:31:f1:ed:93:51:db:63:10:29:4c:
4e:06:30:ab:89:36:2f:85:5d:72:47:a4:3b:a4:af:
ff:1e:93:56:67:77:a5:0d:51:1c:69:e8:e4:2f:ca:
b6:6a:53:e5:71:ad:3d:2c:b6:4e:49:ee:d9:ca:40:
a3:ed:9c:0a:bc:90:ad:64:d2:af:68:65:1f:21:cb:
02:42:a5:f6:60:69:ee:23:62:cb:9b:c3:8d:03:ec:
41:af:54:fc:68:c8:7c:6c:f5:6b:be:bd:08:d9:75:
c6:e3:5a:29:e1:b9:e3:29:09:3d:92:60:c1:16:b5:
7f:30:cf:9a:59:98:3a:31:e2:48:2e:0b:57:ba:4e:
7e:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:EA:A6:A9:25:90:F2:61:31:BD:E3:34:A5:3B:AB:52:A5:6C:50:68
X509v3 Authority Key Identifier:
keyid:7D:A5:CD:65:2A:FD:1F:2F:33:7C:20:D8:FF:72:86:CD:2C:F1:BD:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXNZSr9Hy8zfCDY_3KGzSzxvfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/73e009-f2f4-43ac-81a1-89aa8d2e8004/1/faXNZSr9Hy8zfCDY_3KGzSzxvfk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/73e009-f2f4-43ac-81a1-89aa8d2e8004/1/faXNZSr9Hy8zfCDY_3KGzSzxvfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:3f:9a:ab:27:b4:1e:09:4f:27:94:e2:e7:44:64:26:e4:f6:
21:61:7b:38:79:9d:cd:cf:b2:97:56:31:ac:a6:7a:dc:9a:25:
aa:40:8d:90:90:00:4c:4e:9b:af:35:42:b6:69:12:1f:a2:5c:
1d:3d:70:fa:cd:1b:ae:ce:e8:6f:07:71:1b:b4:16:ef:d6:fc:
c5:0b:05:31:93:ca:05:28:dc:98:ab:5d:d8:37:2b:c3:67:29:
0f:ec:de:48:39:ae:be:d3:da:50:97:41:cd:47:5a:ff:71:2c:
39:0d:89:78:4c:f7:87:5a:ee:35:c5:72:2b:05:e9:26:8a:1d:
7b:2b:f0:44:6e:3a:80:b9:33:03:45:e0:35:2a:c6:f2:d0:06:
93:bf:1e:f7:bb:67:f1:68:cf:2c:21:c1:27:2c:d8:17:a9:36:
bb:b8:26:48:63:fc:ab:6c:84:dd:c1:bc:90:71:cc:86:cd:ec:
05:7f:5e:20:4c:a3:74:9a:8a:8e:1e:93:46:5e:e3:e9:fe:db:
51:95:ba:50:35:c9:9e:c9:23:f0:e2:43:df:79:22:f5:bf:af:
69:83:33:61:75:f3:52:b2:db:53:f1:83:53:b0:00:b2:dc:b6:
3c:62:51:49:45:bd:fc:ce:ee:05:1d:1d:22:52:d1:36:82:db:
d7:53:ed:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:06:11 2025 by rpki-client