Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/dd50de-8e2a-490c-a418-60116862616a/1/FaevcHtYSLNTljanQxd51wFM2mE.mft
File: FaevcHtYSLNTljanQxd51wFM2mE.mft (raw, json)
Hash identifier: SjMX2bv3FhSeTRZsG9ejNym1DsYIBCZr/HLPLi5mRVk=
Subject key identifier: 3B:C8:E3:ED:3B:D3:5A:F8:9F:84:2E:FF:23:09:54:9E:BA:CD:69:FB
Authority key identifier: 15:A7:AF:70:7B:58:48:B3:53:96:36:A7:43:17:79:D7:01:4C:DA:61
Certificate issuer: /CN=15a7af707b5848b3539636a7431779d7014cda61
Certificate serial: 019A533F5B62B86FB570B6C04ADF376CB4F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FaevcHtYSLNTljanQxd51wFM2mE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/dd50de-8e2a-490c-a418-60116862616a/1/FaevcHtYSLNTljanQxd51wFM2mE.mft
Manifest number: 0614
Signing time: Wed 05 Nov 2025 09:00:52 +0000
Manifest this update: Wed 05 Nov 2025 09:00:52 +0000
Manifest next update: Thu 06 Nov 2025 09:00:52 +0000
Files and hashes: 1: FaevcHtYSLNTljanQxd51wFM2mE.crl (hash: ppMNZc5UkQ165TG/xI+3lyHcQxHHLVm8rBHPEYqhx8w=)
2: bX3oZWjtTuzwx_xG-vCMVNG-cOc.roa (hash: d1VXe5ysdAxKyO5IduA6oLfO1V4ILKmPg+j75Lo6HnE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/dd50de-8e2a-490c-a418-60116862616a/1/FaevcHtYSLNTljanQxd51wFM2mE.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/dd50de-8e2a-490c-a418-60116862616a/1/FaevcHtYSLNTljanQxd51wFM2mE.mft
rsync://rpki.ripe.net/repository/DEFAULT/FaevcHtYSLNTljanQxd51wFM2mE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:3f:5b:62:b8:6f:b5:70:b6:c0:4a:df:37:6c:b4:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15a7af707b5848b3539636a7431779d7014cda61
Validity
Not Before: Nov 5 09:00:52 2025 GMT
Not After : Nov 6 09:00:52 2025 GMT
Subject: CN=3bc8e3ed3bd35af89f842eff2309549ebacd69fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:64:e6:6e:bf:aa:8d:e2:a1:e7:8a:e1:df:57:
3e:67:47:c0:97:0f:61:8d:76:03:d1:3b:f8:da:32:
d8:4a:ec:56:56:58:a4:2c:d7:d6:10:dd:6c:81:e2:
e3:8b:f0:94:c8:58:d0:26:f2:a1:09:cf:01:0f:33:
09:a5:74:81:42:d2:8d:85:db:9f:e9:de:e6:71:f1:
6b:26:d2:f0:c6:da:82:85:32:32:17:32:36:fa:9e:
45:88:57:94:fa:a9:25:8d:4b:0c:07:57:fb:03:9b:
9a:70:c1:b5:9f:6b:45:41:91:43:3a:d5:e9:4d:a0:
75:cb:3c:b6:4e:e0:b3:e0:f1:2f:d9:bb:7d:f4:bd:
89:d9:2b:b1:94:d1:ef:60:71:85:07:a6:59:22:c4:
6d:8d:65:2a:ec:d3:1f:54:79:81:59:68:ba:9f:c0:
f2:15:2a:17:09:aa:d8:8f:e4:95:c3:cf:93:ca:9c:
36:0b:55:8a:11:ee:aa:1a:fa:75:a1:94:ab:f5:b0:
23:db:64:d5:7c:4e:5c:9a:28:7f:f1:ff:b5:09:7c:
bd:7f:78:30:d0:63:44:f9:d0:a6:3a:aa:6d:5b:e6:
44:b6:19:e1:c1:e7:99:7f:19:e9:a8:79:a5:c6:80:
a3:a7:f7:12:9a:7c:d3:33:fe:5e:dd:1c:71:50:75:
21:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:C8:E3:ED:3B:D3:5A:F8:9F:84:2E:FF:23:09:54:9E:BA:CD:69:FB
X509v3 Authority Key Identifier:
keyid:15:A7:AF:70:7B:58:48:B3:53:96:36:A7:43:17:79:D7:01:4C:DA:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FaevcHtYSLNTljanQxd51wFM2mE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/dd50de-8e2a-490c-a418-60116862616a/1/FaevcHtYSLNTljanQxd51wFM2mE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/dd50de-8e2a-490c-a418-60116862616a/1/FaevcHtYSLNTljanQxd51wFM2mE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:bf:9e:eb:20:9d:d2:98:c3:64:c1:68:e2:16:23:dd:1c:e4:
d2:ce:a4:c8:8d:0e:e2:c7:a6:2d:2a:f0:f7:ee:9c:d4:c9:cf:
fe:de:0d:b7:fc:06:18:88:8b:da:7e:51:10:8e:eb:00:67:f1:
80:ad:12:34:0b:2e:b6:a1:82:1f:53:ce:95:4c:ad:70:a7:c4:
25:38:4e:8a:84:a7:22:07:bb:a7:6f:eb:9f:29:a9:ed:bf:38:
e7:06:54:d1:fb:5d:9d:0e:25:26:b9:d6:a9:6c:8c:2e:96:44:
53:f6:dd:b6:cb:ad:cc:38:b3:12:20:f3:25:9b:d0:24:0f:5c:
1d:7e:c3:75:18:72:56:09:f0:1e:5f:45:78:91:f5:9c:57:33:
a5:4e:d7:fe:d6:40:31:58:1e:24:1a:15:6d:56:8e:57:c6:f7:
24:38:a7:52:d3:52:9b:46:e7:c4:95:02:48:7f:f9:c5:d1:35:
3e:e3:06:fe:55:da:48:a0:49:dd:a1:bc:04:0f:2a:db:8c:bb:
6c:b5:83:71:a5:bc:70:48:cb:f5:a8:c8:21:de:3e:db:c1:32:
27:2e:55:fc:a0:f6:32:d5:f4:5d:14:1c:e5:ba:4c:de:14:a7:
a3:1b:0a:f8:19:8e:14:39:f6:66:1b:14:6b:c0:a9:d6:47:22:
45:08:49:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 12:20:08 2025 by rpki-client