Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/b033d3-ee96-4c0d-a70e-0274f446d331/1/rFaq3EJBEsT8iYnAruJUm7r1ZWg.mft
File: rFaq3EJBEsT8iYnAruJUm7r1ZWg.mft (raw, json)
Hash identifier: SJfVvKBS8xp6Nm7/V7Z8BLs8JYntuYu8Bblf4P+Q1DY=
Subject key identifier: C2:E5:DA:B5:AE:E2:7A:A4:EF:C4:82:2A:B4:57:64:FB:50:94:B3:7C
Authority key identifier: AC:56:AA:DC:42:41:12:C4:FC:89:89:C0:AE:E2:54:9B:BA:F5:65:68
Certificate issuer: /CN=ac56aadc424112c4fc8989c0aee2549bbaf56568
Certificate serial: 0199FB7CF386289254BEF22007FB995FDC60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rFaq3EJBEsT8iYnAruJUm7r1ZWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/b033d3-ee96-4c0d-a70e-0274f446d331/1/rFaq3EJBEsT8iYnAruJUm7r1ZWg.mft
Manifest number: 16E0
Signing time: Sun 19 Oct 2025 08:01:34 +0000
Manifest this update: Sun 19 Oct 2025 08:01:34 +0000
Manifest next update: Mon 20 Oct 2025 08:01:34 +0000
Files and hashes: 1: hDXJqHhRVakrUpAy2mxJpw32amA.roa (hash: Q2fYQzDzeuJHoaVaTN2Do0bb6ba0BBCZfekXkM6wQUY=)
2: rFaq3EJBEsT8iYnAruJUm7r1ZWg.crl (hash: 7ta07yL47bX12Msd060BHUd1dzuaj7jOza5MS41+cWg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/b033d3-ee96-4c0d-a70e-0274f446d331/1/rFaq3EJBEsT8iYnAruJUm7r1ZWg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/b033d3-ee96-4c0d-a70e-0274f446d331/1/rFaq3EJBEsT8iYnAruJUm7r1ZWg.mft
rsync://rpki.ripe.net/repository/DEFAULT/rFaq3EJBEsT8iYnAruJUm7r1ZWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 08:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:f3:86:28:92:54:be:f2:20:07:fb:99:5f:dc:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac56aadc424112c4fc8989c0aee2549bbaf56568
Validity
Not Before: Oct 19 08:01:34 2025 GMT
Not After : Oct 20 08:01:34 2025 GMT
Subject: CN=c2e5dab5aee27aa4efc4822ab45764fb5094b37c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f5:ec:f4:7e:85:6c:62:5a:b3:cb:0b:df:19:
e2:95:fa:34:52:14:3c:6e:5c:38:e8:89:83:96:25:
da:43:e6:41:47:7f:19:27:e2:f4:a1:d7:e0:28:a9:
c1:00:a7:ff:46:77:ff:eb:10:d8:b7:10:77:29:bf:
f7:27:d9:52:48:b2:e3:8d:c0:06:c6:57:f9:46:78:
8e:63:5c:0e:31:96:93:25:5b:6f:a6:b0:6d:66:dc:
9e:61:15:68:c6:27:91:1c:91:99:68:62:00:a6:26:
f3:eb:54:70:ec:1a:0c:d8:04:bb:93:1b:f4:fe:88:
01:b9:9e:9c:07:c1:6a:42:d1:e3:15:87:33:e7:a9:
0e:d4:28:f2:c6:7e:c7:60:83:aa:1f:2d:9b:56:57:
d9:ef:91:ad:39:21:10:8b:c2:b4:c9:c1:7f:52:9f:
5a:b8:13:2d:03:3b:52:8b:39:2d:70:ba:bb:f5:54:
ce:dd:98:c5:82:cc:d8:69:fc:fd:be:55:dd:50:69:
bd:90:66:11:4b:84:41:3c:4d:f0:31:71:44:7b:8a:
a3:aa:2c:7b:c7:fb:bd:79:5c:93:f2:39:0c:32:bc:
02:60:11:d6:3f:22:27:18:97:dd:83:14:4e:c9:23:
4e:91:24:48:94:c7:25:11:84:59:a2:cd:98:9b:22:
7c:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:E5:DA:B5:AE:E2:7A:A4:EF:C4:82:2A:B4:57:64:FB:50:94:B3:7C
X509v3 Authority Key Identifier:
keyid:AC:56:AA:DC:42:41:12:C4:FC:89:89:C0:AE:E2:54:9B:BA:F5:65:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rFaq3EJBEsT8iYnAruJUm7r1ZWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/b033d3-ee96-4c0d-a70e-0274f446d331/1/rFaq3EJBEsT8iYnAruJUm7r1ZWg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/b033d3-ee96-4c0d-a70e-0274f446d331/1/rFaq3EJBEsT8iYnAruJUm7r1ZWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:e6:58:34:d2:b6:1b:ec:7b:fe:7c:7b:67:83:aa:5d:b8:02:
26:a3:b1:52:a7:eb:62:f6:b9:57:12:e8:e6:73:4a:61:4f:ee:
a6:e8:12:da:a5:47:28:5e:f7:ad:6f:ee:23:d4:b5:d3:df:e5:
40:28:b3:04:85:6c:3f:3b:47:6a:4d:c3:5f:d9:86:cc:8d:62:
64:76:72:3e:f7:b8:14:85:f7:59:17:89:be:2b:b2:3c:a2:e0:
30:6a:8b:58:f8:c1:da:b5:5b:57:b6:a0:f2:fb:9f:0a:e0:a0:
27:05:00:58:cb:0c:dd:43:c3:95:12:7e:ba:05:12:ab:a9:4f:
66:1c:31:b5:1c:15:4b:2b:fa:7d:c6:79:15:51:33:63:c2:f0:
01:3e:9e:3e:f3:3e:70:7a:a6:32:42:cf:bc:4a:a0:74:1b:64:
44:d0:cd:b9:3e:37:ab:a1:df:cd:8a:c9:1d:08:bc:41:7f:33:
59:5e:dd:8e:a5:4c:65:5c:63:a3:92:e1:7a:37:c5:7c:7c:e3:
15:de:1a:26:5d:3b:cc:b9:f1:59:28:11:d7:2b:2b:0f:a2:ea:
7a:a7:32:91:d5:38:a8:46:17:72:94:06:dd:39:ba:03:cb:58:
ab:e3:fe:94:3f:40:4b:93:72:fb:27:61:64:38:fd:29:60:fe:
ee:0e:3e:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:50:03 2025 by rpki-client