Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/419af0-cbd6-4233-b52f-d7484bf9ca2b/1/pa_FQ1_LvjSNK1YBanvHvKzxuGY.mft
File: pa_FQ1_LvjSNK1YBanvHvKzxuGY.mft (raw, json)
Hash identifier: 3STzNWjuMWpwVTRwVkmCG9gG+epoTt3IKefdZTiitIw=
Subject key identifier: 59:54:0A:FB:78:A0:FB:35:B5:F4:16:2B:6E:1B:47:E2:92:F8:6A:8A
Authority key identifier: A5:AF:C5:43:5F:CB:BE:34:8D:2B:56:01:6A:7B:C7:BC:AC:F1:B8:66
Certificate issuer: /CN=a5afc5435fcbbe348d2b56016a7bc7bcacf1b866
Certificate serial: 019A4D7449CF0AF3C94B53B422AAC076CDE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pa_FQ1_LvjSNK1YBanvHvKzxuGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/419af0-cbd6-4233-b52f-d7484bf9ca2b/1/pa_FQ1_LvjSNK1YBanvHvKzxuGY.mft
Manifest number: 0AD8
Signing time: Tue 04 Nov 2025 06:00:57 +0000
Manifest this update: Tue 04 Nov 2025 06:00:57 +0000
Manifest next update: Wed 05 Nov 2025 06:00:57 +0000
Files and hashes: 1: L_XmzwrYuu-3rRY_iMRM0yQHIg4.roa (hash: RmMXdLfBhblx+m1KktkkN/nQ0YOW2Tp0s4LZY86DblA=)
2: pa_FQ1_LvjSNK1YBanvHvKzxuGY.crl (hash: aOqVVeYzPIEOMm3yb3F2wDK5ocmiCS8G0uJKs84EnN0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/419af0-cbd6-4233-b52f-d7484bf9ca2b/1/pa_FQ1_LvjSNK1YBanvHvKzxuGY.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/419af0-cbd6-4233-b52f-d7484bf9ca2b/1/pa_FQ1_LvjSNK1YBanvHvKzxuGY.mft
rsync://rpki.ripe.net/repository/DEFAULT/pa_FQ1_LvjSNK1YBanvHvKzxuGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:74:49:cf:0a:f3:c9:4b:53:b4:22:aa:c0:76:cd:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5afc5435fcbbe348d2b56016a7bc7bcacf1b866
Validity
Not Before: Nov 4 06:00:57 2025 GMT
Not After : Nov 5 06:00:57 2025 GMT
Subject: CN=59540afb78a0fb35b5f4162b6e1b47e292f86a8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:dd:71:be:ba:ea:a6:d8:6d:2e:df:b2:29:9d:
42:d3:e0:96:9b:7f:69:cc:6d:45:de:e7:6b:30:25:
fb:91:06:1a:3c:c3:b2:e9:76:8b:15:14:da:28:b4:
63:17:fd:45:dd:42:83:ea:ad:0d:3d:25:52:da:6e:
56:38:c1:b2:98:89:9a:7e:1b:c7:97:a4:1f:d7:34:
d3:22:d0:a6:d8:3b:a0:59:ff:91:08:fc:98:ca:0f:
75:e8:18:c4:be:c9:95:97:9b:22:ff:12:ed:d6:8a:
7c:9e:26:38:73:96:cb:ed:07:f3:15:c9:62:b4:0f:
bc:89:e8:34:d5:63:ec:27:56:f9:9d:d6:de:ed:39:
72:cf:9b:21:d2:76:93:62:40:6e:5f:22:e9:c0:9f:
31:55:c7:2c:e9:a5:45:fd:c3:a0:2d:55:5f:08:ef:
2d:0e:5f:05:55:d9:31:73:2e:0f:08:90:67:45:40:
c7:37:51:1f:fe:52:d7:59:8e:88:ee:cf:02:9e:c4:
74:71:0b:1c:8b:2d:7b:c8:ea:6e:78:04:7e:74:65:
32:53:a5:9c:42:3f:61:a7:72:c2:15:6d:9d:58:07:
8a:4a:44:10:21:8a:e3:1b:2b:c8:10:f3:ba:8f:a2:
d3:ff:b0:13:c3:34:db:24:ab:ba:c0:64:fa:1e:e2:
34:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:54:0A:FB:78:A0:FB:35:B5:F4:16:2B:6E:1B:47:E2:92:F8:6A:8A
X509v3 Authority Key Identifier:
keyid:A5:AF:C5:43:5F:CB:BE:34:8D:2B:56:01:6A:7B:C7:BC:AC:F1:B8:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pa_FQ1_LvjSNK1YBanvHvKzxuGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/419af0-cbd6-4233-b52f-d7484bf9ca2b/1/pa_FQ1_LvjSNK1YBanvHvKzxuGY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/419af0-cbd6-4233-b52f-d7484bf9ca2b/1/pa_FQ1_LvjSNK1YBanvHvKzxuGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:7c:f8:9a:73:71:8b:f4:0f:21:cc:41:f0:86:02:51:97:b1:
a4:29:19:6b:67:08:a4:78:d5:c1:03:c6:35:bb:d3:30:42:6e:
e7:77:46:18:7f:f6:b1:45:5a:81:95:ef:4f:bf:4a:51:13:c6:
d6:e7:76:8c:93:c2:10:c3:4e:5b:95:fb:45:b8:93:6d:77:ea:
e0:63:f6:2a:d7:45:fb:88:ea:42:71:ef:65:8c:19:a5:88:79:
d1:03:8c:00:16:f4:39:ba:8e:40:7f:6d:8e:e7:21:a2:5a:bd:
01:b9:80:ad:25:83:39:71:02:29:2d:49:ab:b9:8b:25:e8:35:
dd:58:c6:2f:aa:af:b9:32:8a:ad:38:f3:84:fc:be:7e:a1:c8:
26:11:18:db:8d:ad:16:70:ff:60:73:23:59:e3:be:df:a4:ec:
76:3d:65:f7:46:80:c0:c7:b9:14:20:76:f0:40:7a:0f:6d:8b:
d3:b4:78:49:d0:4f:43:56:18:e5:2c:1f:69:76:43:e7:26:63:
52:9a:a2:60:b4:d1:bc:24:59:da:c7:1e:48:2b:30:e0:e9:93:
70:d6:8b:18:90:42:fb:66:aa:c7:91:1e:ea:1f:64:c2:62:7d:
81:a1:79:d9:e7:2e:ea:a7:a4:df:2f:ec:fc:3d:9f:7e:16:3d:
98:24:c7:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:41:25 2025 by rpki-client