Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/fVAuLSSx8haRMIggeiaOZiawzjk.mft
File: fVAuLSSx8haRMIggeiaOZiawzjk.mft (raw, json)
Hash identifier: sSxVDXkLxypIiRnaTzFDmQfntET0hKWOuzP3UXUfRCI=
Subject key identifier: 53:1D:23:59:AD:B0:9D:CA:B5:29:ED:A2:72:98:36:B4:AD:71:AF:B7
Authority key identifier: 7D:50:2E:2D:24:B1:F2:16:91:30:88:20:7A:26:8E:66:26:B0:CE:39
Certificate issuer: /CN=7d502e2d24b1f216913088207a268e6626b0ce39
Certificate serial: 019A4D3D1EE65BAAECFA7717ED429791AC01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVAuLSSx8haRMIggeiaOZiawzjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/fVAuLSSx8haRMIggeiaOZiawzjk.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 05:00:42 +0000
Manifest this update: Tue 04 Nov 2025 05:00:42 +0000
Manifest next update: Wed 05 Nov 2025 05:00:42 +0000
Files and hashes: 1: 4xfLpgjd4Enxc-qc8nof3OkbJKI.roa (hash: qMoNzrHzj4dbd+webpPz0KwxOvGmhXmFlkGqK08FyRc=)
2: 7JwTekQ2tjFEdZLkqTIWTWDl694.roa (hash: vwEa+p0/d9QBYzjnHEhK+7G2R/Qxw/NinB7TZ/V7TxA=)
3: fVAuLSSx8haRMIggeiaOZiawzjk.crl (hash: mCibUueTyRLBN3vZISYHhhWFQIZ5RuYTxoEFPLuJwg8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/fVAuLSSx8haRMIggeiaOZiawzjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/fVAuLSSx8haRMIggeiaOZiawzjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVAuLSSx8haRMIggeiaOZiawzjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3d:1e:e6:5b:aa:ec:fa:77:17:ed:42:97:91:ac:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d502e2d24b1f216913088207a268e6626b0ce39
Validity
Not Before: Nov 4 05:00:42 2025 GMT
Not After : Nov 5 05:00:42 2025 GMT
Subject: CN=531d2359adb09dcab529eda2729836b4ad71afb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:d0:ff:c1:a6:79:d7:3e:21:2a:1a:b2:ee:25:
69:48:4d:98:d2:72:db:e2:80:bb:8e:c4:ea:57:4e:
3c:12:3d:24:fa:25:ea:49:23:44:45:7e:e2:03:03:
99:0c:08:99:4a:5e:65:22:e5:15:16:f8:ea:7f:77:
02:3d:c5:4b:ad:6d:81:05:a5:1d:d4:15:7a:9e:24:
97:a3:c8:15:9f:4c:38:32:40:dc:93:0a:66:f6:ac:
7b:46:1d:ad:8e:13:e4:3a:91:c9:d4:e7:75:3a:92:
0f:dd:a6:b3:9a:29:1f:98:75:12:3e:41:d4:65:74:
04:64:d3:16:48:06:c5:b7:5b:ba:a9:da:42:d2:d1:
67:84:3a:ae:fa:01:c5:68:85:99:a9:f1:7f:4f:e0:
5c:0a:fa:52:79:7e:56:3d:f3:e0:97:10:7e:a8:ef:
82:82:6f:b8:d8:33:c8:20:23:33:67:4c:28:00:35:
79:12:21:34:13:2f:5d:0a:7f:fa:b6:5e:fd:60:38:
96:1c:c2:a4:c9:8f:f8:1a:10:d2:0c:54:a6:95:e0:
ef:37:9f:a6:f5:e1:c9:1c:db:f1:d9:a1:c7:4a:cb:
90:19:53:2e:4d:88:e1:19:94:fa:30:3e:5a:e0:cd:
58:9c:d8:00:5f:b2:65:ad:21:23:39:58:a1:ee:b7:
cb:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:1D:23:59:AD:B0:9D:CA:B5:29:ED:A2:72:98:36:B4:AD:71:AF:B7
X509v3 Authority Key Identifier:
keyid:7D:50:2E:2D:24:B1:F2:16:91:30:88:20:7A:26:8E:66:26:B0:CE:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVAuLSSx8haRMIggeiaOZiawzjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/fVAuLSSx8haRMIggeiaOZiawzjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/fVAuLSSx8haRMIggeiaOZiawzjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:b1:e3:11:11:3e:d9:db:5c:cd:c8:92:6f:dd:57:2b:bc:d1:
31:8a:42:de:69:cf:6e:f1:61:34:87:38:85:81:c0:5e:9a:72:
06:45:f6:5f:cb:aa:60:b5:13:f3:ac:d7:f4:b2:f3:1d:09:eb:
5e:87:15:39:8d:03:52:b8:0d:c3:a6:4f:8f:4c:db:bb:ad:ec:
1c:65:f4:4a:5b:d5:18:be:cf:1f:07:6e:74:4c:d4:e7:9a:00:
ff:e3:1b:2b:ef:50:ef:a0:94:e2:ae:d3:1f:8d:51:c2:b6:8f:
c0:29:d0:db:df:8e:03:e0:7c:6d:49:71:7d:00:22:71:8c:cd:
95:b9:3b:98:d5:30:8c:8e:99:8f:42:8a:15:20:58:5c:da:87:
93:1e:5d:4f:33:85:d5:0a:8d:63:9a:ef:a0:eb:c8:8a:31:e1:
51:71:d2:a0:17:c5:1b:ef:af:37:44:6b:8b:3b:a0:bb:2d:48:
70:f9:0d:13:30:8c:07:4a:ad:17:dd:87:ca:36:4c:08:63:7d:
eb:0f:13:3c:fd:5c:67:d1:4a:52:03:c6:8b:b8:76:97:d3:77:
2d:3b:7f:82:d0:b1:57:fb:d4:57:f1:ee:40:78:17:66:76:c0:
29:8b:a9:21:d9:ae:91:15:af:37:61:dd:2c:d3:01:d1:aa:29:
7e:22:bb:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:50:14 2025 by rpki-client