Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/b033d3-ee96-4c0d-a70e-0274f446d331/1/rFaq3EJBEsT8iYnAruJUm7r1ZWg.mft
File: rFaq3EJBEsT8iYnAruJUm7r1ZWg.mft (raw, json)
Hash identifier: EGvTee7tyy6IMqjfodF3vJGN57SiqFgV4QXkb4xUrLo=
Subject key identifier: 16:C0:A1:D4:F4:C2:B3:D2:EF:8B:99:2E:AD:74:04:8D:11:93:E6:DD
Authority key identifier: AC:56:AA:DC:42:41:12:C4:FC:89:89:C0:AE:E2:54:9B:BA:F5:65:68
Certificate issuer: /CN=ac56aadc424112c4fc8989c0aee2549bbaf56568
Certificate serial: 0198D5F1C37BC6124E9C97795BD034A80883
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rFaq3EJBEsT8iYnAruJUm7r1ZWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/b033d3-ee96-4c0d-a70e-0274f446d331/1/rFaq3EJBEsT8iYnAruJUm7r1ZWg.mft
Manifest number: 1648
Signing time: Sat 23 Aug 2025 08:00:47 +0000
Manifest this update: Sat 23 Aug 2025 08:00:47 +0000
Manifest next update: Sun 24 Aug 2025 08:00:47 +0000
Files and hashes: 1: hDXJqHhRVakrUpAy2mxJpw32amA.roa (hash: Q2fYQzDzeuJHoaVaTN2Do0bb6ba0BBCZfekXkM6wQUY=)
2: rFaq3EJBEsT8iYnAruJUm7r1ZWg.crl (hash: rILt7RRNVPEZiz33QpoAW5iWjvnzC7DOLQPs0cx9HJw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/b033d3-ee96-4c0d-a70e-0274f446d331/1/rFaq3EJBEsT8iYnAruJUm7r1ZWg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/b033d3-ee96-4c0d-a70e-0274f446d331/1/rFaq3EJBEsT8iYnAruJUm7r1ZWg.mft
rsync://rpki.ripe.net/repository/DEFAULT/rFaq3EJBEsT8iYnAruJUm7r1ZWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:c3:7b:c6:12:4e:9c:97:79:5b:d0:34:a8:08:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac56aadc424112c4fc8989c0aee2549bbaf56568
Validity
Not Before: Aug 23 08:00:47 2025 GMT
Not After : Aug 24 08:00:47 2025 GMT
Subject: CN=16c0a1d4f4c2b3d2ef8b992ead74048d1193e6dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:55:bc:ba:cd:ca:6c:17:a0:fe:35:3a:b5:30:
c0:cc:13:0e:12:91:47:22:26:c4:a8:b7:1c:7b:d5:
33:03:41:6e:9e:4e:66:25:8c:33:2f:95:06:7e:73:
5c:8f:26:7b:77:6e:22:dd:99:df:88:e1:70:f2:75:
05:dd:8d:d4:4c:6f:3c:df:e7:d6:c8:f2:4a:a3:da:
f1:73:2c:23:98:4c:1e:c6:8e:ec:5a:a4:d3:bb:49:
26:75:e4:c2:e1:7c:19:b2:62:c9:af:d6:e4:37:9d:
48:8b:74:1c:18:15:b9:22:fe:bf:1f:75:58:68:25:
ef:32:80:bd:85:8d:a9:b0:5b:bd:5a:4c:ce:39:ad:
82:df:a8:fc:4d:e1:31:bb:07:48:68:10:b5:93:c7:
41:b8:03:6b:3d:ea:dc:1b:d1:4d:6e:42:f7:da:c8:
09:6b:08:1b:3f:59:8f:f5:e7:86:4d:fb:c0:ff:26:
53:25:c6:ce:d2:94:02:19:11:24:66:3e:7d:9e:ea:
99:25:90:ae:28:f4:2d:54:c5:93:ac:d8:ed:73:1c:
39:9d:c0:83:f4:d8:de:9a:d7:08:05:b5:19:44:f4:
c1:08:e5:a4:5e:4a:a8:22:1b:90:85:0f:3e:5b:c0:
45:09:cf:95:fb:3d:52:ff:80:8a:fd:8a:f6:8c:26:
fe:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:C0:A1:D4:F4:C2:B3:D2:EF:8B:99:2E:AD:74:04:8D:11:93:E6:DD
X509v3 Authority Key Identifier:
keyid:AC:56:AA:DC:42:41:12:C4:FC:89:89:C0:AE:E2:54:9B:BA:F5:65:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rFaq3EJBEsT8iYnAruJUm7r1ZWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/b033d3-ee96-4c0d-a70e-0274f446d331/1/rFaq3EJBEsT8iYnAruJUm7r1ZWg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/b033d3-ee96-4c0d-a70e-0274f446d331/1/rFaq3EJBEsT8iYnAruJUm7r1ZWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:eb:97:f3:c9:9b:ec:55:e2:37:9f:8f:0b:d0:20:1e:9f:68:
82:13:c8:72:77:73:ef:fd:62:ab:87:b8:15:8d:f1:af:ea:f5:
15:7a:1f:c0:47:97:d2:a6:5e:d6:fa:a2:4c:4f:af:e5:ea:7e:
da:20:34:b7:f1:86:31:ed:5a:8d:49:2f:f6:36:16:43:9c:12:
ed:ad:88:58:bd:bf:08:53:e3:d8:30:22:3a:28:05:87:2e:09:
0d:4b:30:8c:9f:41:95:7f:10:0a:15:f7:c8:c2:d6:b7:fe:6c:
3c:f2:90:57:e2:87:d1:6c:3b:d8:3a:67:06:fe:a9:db:59:47:
1f:3d:87:ff:69:a1:d3:54:a8:9d:35:c2:25:f8:2c:0e:ac:7c:
4a:9f:28:39:99:95:a2:a6:f9:bf:85:17:04:9e:3f:52:97:4f:
b0:6e:96:e1:8d:6f:a1:a8:3e:b5:58:f8:6e:73:b3:67:f1:0d:
03:a0:e7:61:be:2e:95:a4:4f:d4:af:63:25:1e:eb:6c:6c:0a:
ca:29:c4:c7:c6:bd:c9:47:bf:9b:b8:7c:cd:6b:4a:7d:3d:69:
45:42:3c:fe:14:93:45:55:44:df:f7:20:13:b1:b9:08:40:20:
52:96:be:0b:62:d4:09:29:81:ae:e8:9b:c8:e4:00:49:c5:be:
5e:fe:9b:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:31:09 2025 by rpki-client