
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/dd50de-8e2a-490c-a418-60116862616a/1/FaevcHtYSLNTljanQxd51wFM2mE.mft
File: FaevcHtYSLNTljanQxd51wFM2mE.mft (raw, json)
Hash identifier: OfhhaK7bCp8F7/iR0R6D7aO23p10+G4nfnF9ixNJalU=
Subject key identifier: FC:39:8A:C0:65:AD:3F:DE:41:5A:FD:96:9C:A7:C8:B0:93:87:50:DD
Authority key identifier: 15:A7:AF:70:7B:58:48:B3:53:96:36:A7:43:17:79:D7:01:4C:DA:61
Certificate issuer: /CN=15a7af707b5848b3539636a7431779d7014cda61
Certificate serial: 019A5150D2044AEB478A6BD5DB52FBB1FF98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FaevcHtYSLNTljanQxd51wFM2mE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/dd50de-8e2a-490c-a418-60116862616a/1/FaevcHtYSLNTljanQxd51wFM2mE.mft
Manifest number: 0613
Signing time: Wed 05 Nov 2025 00:00:42 +0000
Manifest this update: Wed 05 Nov 2025 00:00:42 +0000
Manifest next update: Thu 06 Nov 2025 00:00:42 +0000
Files and hashes: 1: FaevcHtYSLNTljanQxd51wFM2mE.crl (hash: ojLdl54FRb+cJPMIteWG+S2pQ6WoeBJAagEHgZAedfs=)
2: bX3oZWjtTuzwx_xG-vCMVNG-cOc.roa (hash: d1VXe5ysdAxKyO5IduA6oLfO1V4ILKmPg+j75Lo6HnE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/dd50de-8e2a-490c-a418-60116862616a/1/FaevcHtYSLNTljanQxd51wFM2mE.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/dd50de-8e2a-490c-a418-60116862616a/1/FaevcHtYSLNTljanQxd51wFM2mE.mft
rsync://rpki.ripe.net/repository/DEFAULT/FaevcHtYSLNTljanQxd51wFM2mE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:50:d2:04:4a:eb:47:8a:6b:d5:db:52:fb:b1:ff:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15a7af707b5848b3539636a7431779d7014cda61
Validity
Not Before: Nov 5 00:00:42 2025 GMT
Not After : Nov 6 00:00:42 2025 GMT
Subject: CN=fc398ac065ad3fde415afd969ca7c8b0938750dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c4:3e:15:4d:69:14:3c:fd:3d:d3:ee:0a:d7:
8b:f8:00:9a:6b:63:dc:06:95:e9:cd:22:24:c7:c6:
1f:1d:56:d0:01:40:b0:1d:08:ab:08:49:13:d5:e7:
2a:8a:bd:f6:a4:72:b2:55:bf:20:d0:f1:f4:19:aa:
cf:f2:c4:3b:ee:c3:2b:fa:7e:a0:97:4e:17:f5:e9:
a9:30:80:b7:a1:4f:4a:30:ec:76:3f:98:7d:24:fd:
2f:03:40:74:33:1b:01:ac:12:ea:da:90:13:86:56:
82:29:ca:a0:06:0e:1b:d3:bf:04:16:e7:54:fc:3f:
10:85:17:6a:68:83:27:b7:73:18:12:d1:4b:4a:34:
01:0a:58:3b:14:5c:45:21:5b:f1:00:aa:ed:0e:b3:
e3:5b:04:6d:8c:ba:1b:ec:8c:07:79:e4:bf:58:64:
be:ac:0a:82:a8:6c:72:b8:4b:cb:51:51:29:ed:b1:
14:27:7b:d4:c8:78:7c:85:b5:fa:59:ce:97:88:5c:
59:b4:7e:63:71:1f:47:f9:0b:37:ad:fb:3a:ec:7e:
4a:72:42:36:c0:ef:29:1c:ff:67:85:87:76:db:5b:
f1:48:0c:61:8a:67:79:fc:a7:69:a4:83:d7:ce:9e:
e5:a1:8a:92:ec:d3:f8:3d:da:85:25:44:c0:8e:14:
13:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:39:8A:C0:65:AD:3F:DE:41:5A:FD:96:9C:A7:C8:B0:93:87:50:DD
X509v3 Authority Key Identifier:
keyid:15:A7:AF:70:7B:58:48:B3:53:96:36:A7:43:17:79:D7:01:4C:DA:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FaevcHtYSLNTljanQxd51wFM2mE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/dd50de-8e2a-490c-a418-60116862616a/1/FaevcHtYSLNTljanQxd51wFM2mE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/dd50de-8e2a-490c-a418-60116862616a/1/FaevcHtYSLNTljanQxd51wFM2mE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:09:99:16:6c:de:b4:f0:9a:37:61:9f:ff:f0:4d:4e:17:3f:
82:71:0d:c8:b8:00:d6:09:e5:6f:e6:9f:d0:ef:15:bd:5a:26:
c2:98:72:84:17:fb:3b:0f:99:8b:d6:91:c1:82:dc:65:e5:80:
bd:51:af:e0:4a:ac:2b:6c:75:7c:55:2e:d1:8b:83:a9:92:02:
fe:da:3a:55:ee:a0:83:31:da:8d:d7:d8:3d:58:72:95:5b:52:
cb:75:05:56:77:e8:f4:72:d0:24:1c:e9:be:ed:c7:c8:17:b3:
29:8e:a5:0c:b5:2c:ab:eb:88:9e:a7:7c:c8:c9:24:20:9b:bb:
6c:dc:91:33:78:a6:e7:1e:3d:af:35:b7:e9:66:54:02:91:45:
fb:86:30:2b:fb:f8:07:f3:de:5c:c4:d0:fe:1c:eb:65:4c:53:
c3:23:8f:70:b6:19:4a:c9:a5:e0:e9:37:d5:87:bd:d0:f8:b6:
f8:9b:7c:27:c0:ed:3a:d7:1e:63:ad:ef:fe:3f:17:1e:fb:70:
21:30:f6:e4:ed:d7:19:eb:2c:5a:32:56:d7:94:95:cc:11:97:
a1:bc:ba:d4:5b:5b:b0:9e:16:3b:08:17:2c:b3:cb:a1:74:ee:
d2:15:fc:54:30:50:b5:57:2d:b2:8a:63:06:1f:6c:42:6f:0d:
23:e1:fb:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:59:11 2025 by rpki-client