Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/12f26e-fb11-42e1-bacc-3969eca7b7d4/1/Fa8HL54VarwgxGhJjiMjFSxzaug.mft
File: Fa8HL54VarwgxGhJjiMjFSxzaug.mft (raw, json)
Hash identifier: aEDmLvy5inGnOcUZIOaSB8z1d1/jSMEq9vB3MEtdGuQ=
Subject key identifier: 96:EC:B1:8B:B6:AD:64:62:F4:F4:DD:13:FF:2D:9F:D1:39:9B:88:94
Authority key identifier: 15:AF:07:2F:9E:15:6A:BC:20:C4:68:49:8E:23:23:15:2C:73:6A:E8
Certificate issuer: /CN=15af072f9e156abc20c468498e2323152c736ae8
Certificate serial: 019A5119B04EDCD31F21DF508CD176B88C9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fa8HL54VarwgxGhJjiMjFSxzaug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/12f26e-fb11-42e1-bacc-3969eca7b7d4/1/Fa8HL54VarwgxGhJjiMjFSxzaug.mft
Manifest number: 164D
Signing time: Tue 04 Nov 2025 23:00:29 +0000
Manifest this update: Tue 04 Nov 2025 23:00:29 +0000
Manifest next update: Wed 05 Nov 2025 23:00:29 +0000
Files and hashes: 1: 1-hG6m2b1-771ZXFUCad6-Q0HqS0.roa (hash: iRlAMEhmdJkdMf5CTvW6WMLAwT23DftwTFfnt2+39Po=)
2: Fa8HL54VarwgxGhJjiMjFSxzaug.crl (hash: f6VS7JH1WVvKgyTpH5WG3EPXfiRaAPLhPwPj6d/TmGc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/12f26e-fb11-42e1-bacc-3969eca7b7d4/1/Fa8HL54VarwgxGhJjiMjFSxzaug.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/12f26e-fb11-42e1-bacc-3969eca7b7d4/1/Fa8HL54VarwgxGhJjiMjFSxzaug.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fa8HL54VarwgxGhJjiMjFSxzaug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:19:b0:4e:dc:d3:1f:21:df:50:8c:d1:76:b8:8c:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15af072f9e156abc20c468498e2323152c736ae8
Validity
Not Before: Nov 4 23:00:29 2025 GMT
Not After : Nov 5 23:00:29 2025 GMT
Subject: CN=96ecb18bb6ad6462f4f4dd13ff2d9fd1399b8894
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ff:96:d9:8b:af:3a:5f:72:39:f1:77:b2:c9:
37:0b:00:5b:2b:a2:46:50:16:df:91:34:9e:f5:bd:
c7:76:32:c3:1e:8d:a4:0a:86:09:2c:02:e4:a4:4a:
31:c3:ec:6e:63:05:12:05:04:41:6e:6e:e0:ca:ed:
e5:02:2b:b5:37:b2:70:aa:9a:08:c1:46:03:d0:25:
c9:48:86:14:eb:7d:e3:3a:5a:ec:ee:9a:e4:41:da:
ca:e0:fe:12:e8:ca:a0:73:b4:d6:a7:0e:17:d7:1d:
63:d8:36:b1:4d:5b:9d:fc:22:c7:14:ab:ef:a4:92:
bb:69:16:40:e2:f1:79:41:30:fb:39:85:82:b8:bc:
e0:1c:62:42:83:9e:54:27:1a:e6:73:e0:2f:6f:13:
61:93:9e:98:5a:3f:8b:41:6c:2c:8f:28:21:55:70:
48:dd:05:94:3f:18:8e:2b:00:d5:1e:40:fb:49:f1:
20:67:40:5f:5c:0b:3a:f9:c1:2b:18:7e:26:21:4d:
ef:79:4e:33:0f:9d:8d:0f:9d:56:51:57:6e:ec:e1:
99:e4:b8:ff:e7:f4:db:d0:87:99:0d:0f:f7:3c:7a:
70:42:92:a8:ac:63:e7:31:18:86:60:71:a5:fc:e5:
19:7a:a1:7b:05:c2:98:25:57:37:74:23:ab:c5:1e:
66:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:EC:B1:8B:B6:AD:64:62:F4:F4:DD:13:FF:2D:9F:D1:39:9B:88:94
X509v3 Authority Key Identifier:
keyid:15:AF:07:2F:9E:15:6A:BC:20:C4:68:49:8E:23:23:15:2C:73:6A:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fa8HL54VarwgxGhJjiMjFSxzaug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/12f26e-fb11-42e1-bacc-3969eca7b7d4/1/Fa8HL54VarwgxGhJjiMjFSxzaug.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/12f26e-fb11-42e1-bacc-3969eca7b7d4/1/Fa8HL54VarwgxGhJjiMjFSxzaug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:58:a7:06:c9:fd:a4:cc:e6:47:41:fa:fe:66:a6:8e:2f:a7:
31:e9:9c:46:0d:41:ae:58:97:45:98:b8:05:9b:25:a8:a3:56:
71:d6:8f:fc:bb:9a:2b:76:7c:0d:df:5b:65:d5:74:38:63:c6:
20:32:5f:0f:eb:a3:4f:82:66:ad:4d:04:9d:f5:ff:6b:94:c7:
fe:3c:ba:f0:95:45:04:5d:ed:07:d0:28:df:e2:e3:7b:76:40:
a8:40:5b:2d:4f:66:56:2c:b5:32:6e:14:85:f9:be:ca:5b:b7:
a5:9f:b6:7a:45:42:22:64:ad:97:4a:6f:ac:6a:76:29:02:cc:
76:78:85:bd:52:66:60:54:26:d0:9b:ef:19:06:9e:68:2a:85:
53:be:1a:0e:aa:b1:b8:de:0e:f1:ea:1d:69:80:07:00:62:69:
f7:aa:7c:7a:1f:89:44:fb:7d:ef:64:dc:27:5f:b3:1f:cc:b6:
df:d1:95:4c:4d:d8:d6:5a:58:64:7b:cb:64:24:bc:9e:36:3e:
8a:01:eb:93:98:60:9e:bb:ba:66:bd:a3:25:4a:65:05:55:82:
65:06:a1:6e:73:67:5e:84:61:33:f8:6a:a7:e1:ea:f7:a5:16:
30:ad:87:df:20:2f:b7:60:a9:4e:8c:9b:3a:a0:94:44:92:f0:
71:8b:53:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:54:18 2025 by rpki-client