Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/9c130b-e15e-4b6d-b5fb-719b0497e7cc/1/Fas-cvc0DahW6T1i7o0CPx18juc.mft
File: Fas-cvc0DahW6T1i7o0CPx18juc.mft (raw, json)
Hash identifier: PzcESbUnWNevcu5370b7fO3vIiV++b2oQjSECmp+VxU=
Subject key identifier: 13:7A:C7:75:33:6E:69:79:D7:92:9E:83:F6:CA:17:1A:93:D0:C9:7B
Authority key identifier: 15:AB:3E:72:F7:34:0D:A8:56:E9:3D:62:EE:8D:02:3F:1D:7C:8E:E7
Certificate issuer: /CN=15ab3e72f7340da856e93d62ee8d023f1d7c8ee7
Certificate serial: 019A51F561D06374D49A5F5E571B8EE7CF63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fas-cvc0DahW6T1i7o0CPx18juc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/9c130b-e15e-4b6d-b5fb-719b0497e7cc/1/Fas-cvc0DahW6T1i7o0CPx18juc.mft
Manifest number: 0C54
Signing time: Wed 05 Nov 2025 03:00:27 +0000
Manifest this update: Wed 05 Nov 2025 03:00:27 +0000
Manifest next update: Thu 06 Nov 2025 03:00:27 +0000
Files and hashes: 1: 7JWKgvAHAa8B28vXNz3LbsvM1_0.roa (hash: aiThNQ8MveF/powu4k+TgcUEIjwVdj4V/Vhk6YBFQDA=)
2: Fas-cvc0DahW6T1i7o0CPx18juc.crl (hash: tf3S6J9wlfRymF3/8TDioH5b+igr10RLji6YAr4iXns=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/9c130b-e15e-4b6d-b5fb-719b0497e7cc/1/Fas-cvc0DahW6T1i7o0CPx18juc.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/9c130b-e15e-4b6d-b5fb-719b0497e7cc/1/Fas-cvc0DahW6T1i7o0CPx18juc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fas-cvc0DahW6T1i7o0CPx18juc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:f5:61:d0:63:74:d4:9a:5f:5e:57:1b:8e:e7:cf:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15ab3e72f7340da856e93d62ee8d023f1d7c8ee7
Validity
Not Before: Nov 5 03:00:27 2025 GMT
Not After : Nov 6 03:00:27 2025 GMT
Subject: CN=137ac775336e6979d7929e83f6ca171a93d0c97b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:86:07:31:15:66:f1:fd:a8:9a:32:88:a2:5a:
e3:7a:e9:a2:70:dd:52:ee:37:e7:ff:dd:a5:ec:dc:
80:05:b1:5f:2a:28:e0:4f:79:e4:06:31:d0:e9:59:
4d:2a:ec:a8:13:01:02:55:1b:50:80:79:29:c5:a1:
66:18:b1:18:cb:55:0a:6c:59:02:10:a4:cb:b7:ba:
e8:9b:8e:3b:a8:85:60:26:b4:7c:6d:f4:0d:fb:82:
92:4e:1c:a1:88:12:ba:18:4b:fa:63:d2:39:ea:bd:
6c:a4:92:a6:a2:53:82:9f:be:be:00:ac:5e:ae:72:
2e:df:8d:54:55:5b:53:3f:7d:db:a4:54:35:e2:46:
3a:bf:a6:2e:37:29:32:c5:fc:5d:36:1e:81:5a:ff:
e8:bc:d6:73:ac:da:9c:2f:00:ea:88:08:fd:1e:5f:
01:c7:dd:fa:08:cd:7e:09:cb:58:1b:bc:95:20:74:
59:c0:cf:1a:53:99:e1:b2:c4:82:72:d4:73:38:93:
56:29:19:24:14:5f:13:d0:a9:27:66:8f:34:ae:48:
b5:05:7e:2c:b6:b7:7e:5f:91:20:64:90:e1:e7:90:
5d:e0:df:82:8d:bb:e1:d0:76:e5:dd:ed:07:31:ad:
04:06:27:23:d2:9f:26:e6:a3:68:26:3c:05:dd:9a:
1d:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:7A:C7:75:33:6E:69:79:D7:92:9E:83:F6:CA:17:1A:93:D0:C9:7B
X509v3 Authority Key Identifier:
keyid:15:AB:3E:72:F7:34:0D:A8:56:E9:3D:62:EE:8D:02:3F:1D:7C:8E:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fas-cvc0DahW6T1i7o0CPx18juc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/9c130b-e15e-4b6d-b5fb-719b0497e7cc/1/Fas-cvc0DahW6T1i7o0CPx18juc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/9c130b-e15e-4b6d-b5fb-719b0497e7cc/1/Fas-cvc0DahW6T1i7o0CPx18juc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:b3:d0:db:cc:17:eb:2d:59:83:fb:ab:d6:9b:52:b1:28:55:
ba:ab:54:26:4c:0a:c5:91:30:76:2b:e1:aa:40:a0:e7:60:6c:
c8:ab:2c:e4:0f:a5:79:b3:c6:03:12:85:2f:d3:42:e5:77:fb:
94:24:f4:c6:56:d9:b3:2d:4d:6a:3e:7b:6e:86:1a:67:5f:e1:
94:10:9b:aa:1b:c1:f0:8d:cd:b3:a8:88:f7:32:25:97:9a:af:
91:25:96:15:75:01:bc:ff:38:fc:61:4e:26:8a:a9:9d:8e:49:
97:db:dc:05:6c:47:e1:86:83:f1:f6:1a:3c:2a:2c:50:42:d4:
ac:e6:7d:3d:2e:71:53:82:ed:dd:10:b5:c8:6b:5f:e4:bc:8d:
e2:3a:70:d3:47:bd:e4:e8:93:49:bd:31:1c:d3:d6:95:1d:1b:
f6:b6:9d:2d:c8:09:82:68:a6:67:67:20:a6:19:0e:ca:6c:44:
8b:22:a0:0d:85:8a:9c:9a:ee:95:56:cc:49:30:3c:8d:84:46:
2f:76:4b:2b:79:a8:1d:df:31:56:29:e0:f5:78:42:67:c1:1f:
7e:0a:e6:ff:2a:f2:b5:3a:d9:1c:1c:3d:9c:98:36:7d:b3:60:
94:d7:28:8b:84:77:62:0c:92:6b:f5:d9:3b:55:aa:fc:e8:5c:
61:3e:64:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:04:00 2025 by rpki-client