
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/b033d3-ee96-4c0d-a70e-0274f446d331/1/rFaq3EJBEsT8iYnAruJUm7r1ZWg.mft
File: rFaq3EJBEsT8iYnAruJUm7r1ZWg.mft (raw, json)
Hash identifier: ohcmi5SrEwCTzUYqUoTN6krrj05ebeY0ay1iS0ZUJSI=
Subject key identifier: B3:ED:58:68:6B:08:DC:64:61:27:4B:B8:21:77:E3:B5:BB:AA:D0:B4
Authority key identifier: AC:56:AA:DC:42:41:12:C4:FC:89:89:C0:AE:E2:54:9B:BA:F5:65:68
Certificate issuer: /CN=ac56aadc424112c4fc8989c0aee2549bbaf56568
Certificate serial: 01988C8F65A0FFFAECBD0F7F1393D52FA7F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rFaq3EJBEsT8iYnAruJUm7r1ZWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/b033d3-ee96-4c0d-a70e-0274f446d331/1/rFaq3EJBEsT8iYnAruJUm7r1ZWg.mft
Manifest number: 1622
Signing time: Sat 09 Aug 2025 02:01:04 +0000
Manifest this update: Sat 09 Aug 2025 02:01:04 +0000
Manifest next update: Sun 10 Aug 2025 02:01:04 +0000
Files and hashes: 1: hDXJqHhRVakrUpAy2mxJpw32amA.roa (hash: Q2fYQzDzeuJHoaVaTN2Do0bb6ba0BBCZfekXkM6wQUY=)
2: rFaq3EJBEsT8iYnAruJUm7r1ZWg.crl (hash: xM/yGcevzL2TMy0FVShCMCGQvSElzC80h7L8eH5yM+M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/b033d3-ee96-4c0d-a70e-0274f446d331/1/rFaq3EJBEsT8iYnAruJUm7r1ZWg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/b033d3-ee96-4c0d-a70e-0274f446d331/1/rFaq3EJBEsT8iYnAruJUm7r1ZWg.mft
rsync://rpki.ripe.net/repository/DEFAULT/rFaq3EJBEsT8iYnAruJUm7r1ZWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8c:8f:65:a0:ff:fa:ec:bd:0f:7f:13:93:d5:2f:a7:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac56aadc424112c4fc8989c0aee2549bbaf56568
Validity
Not Before: Aug 9 02:01:04 2025 GMT
Not After : Aug 10 02:01:04 2025 GMT
Subject: CN=b3ed58686b08dc6461274bb82177e3b5bbaad0b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:61:25:55:5d:38:e9:80:fb:a5:b2:ea:93:2e:
bd:51:79:f6:cc:dc:14:f5:68:7e:86:c7:b7:de:b4:
c6:61:79:fd:28:3b:f6:a5:f2:41:fd:88:51:dc:06:
2e:92:39:df:d7:74:07:0c:68:95:04:e8:9d:79:fb:
6e:cf:d6:b9:02:fd:f8:fd:0e:9f:54:c6:56:35:73:
15:6a:d1:b4:51:dd:9b:b8:8f:b0:a4:cb:dc:72:75:
95:43:16:50:db:2c:fd:b6:8e:1f:af:37:c4:0d:c4:
78:89:ae:40:b2:a1:b8:fd:e3:ef:41:0d:ce:5d:c3:
4e:e6:fa:de:ba:18:a8:b2:62:a0:57:14:26:80:3f:
2a:94:15:fc:cc:e9:32:ad:8c:40:67:74:84:b6:11:
70:5c:6c:8b:ac:f4:63:7e:3e:f5:6c:89:7c:ab:06:
84:c6:ce:f3:55:a6:91:ab:8e:ad:a7:e4:d9:74:82:
5a:8d:4c:f4:94:f7:5f:22:07:08:6d:3d:ce:ba:02:
fe:a2:e4:b3:5c:0c:ce:6f:b1:1e:24:96:c4:a9:c1:
b8:f8:bf:90:ed:35:dd:e7:df:db:9c:b8:45:30:2e:
0f:92:f5:01:58:54:89:c2:7f:11:f5:d4:7c:e0:36:
a5:6b:8d:da:0b:68:b3:ac:73:e3:ea:60:78:26:ab:
38:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:ED:58:68:6B:08:DC:64:61:27:4B:B8:21:77:E3:B5:BB:AA:D0:B4
X509v3 Authority Key Identifier:
keyid:AC:56:AA:DC:42:41:12:C4:FC:89:89:C0:AE:E2:54:9B:BA:F5:65:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rFaq3EJBEsT8iYnAruJUm7r1ZWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/b033d3-ee96-4c0d-a70e-0274f446d331/1/rFaq3EJBEsT8iYnAruJUm7r1ZWg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/b033d3-ee96-4c0d-a70e-0274f446d331/1/rFaq3EJBEsT8iYnAruJUm7r1ZWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:24:98:35:4e:93:7c:bf:b2:11:30:bd:33:65:4a:c6:cc:05:
d0:86:aa:28:23:bc:d2:bc:06:2f:92:a6:18:77:4a:75:2a:d4:
de:cb:b9:1a:b3:f0:d2:6b:f8:09:54:f7:b2:44:4f:bf:20:72:
88:c1:cd:0e:fb:7f:e0:4f:9f:41:e8:d9:6e:39:da:71:1e:25:
69:ec:6d:ef:f0:12:0c:06:74:f7:dc:20:af:8f:48:3d:b2:4f:
16:8e:58:ec:77:f0:5b:1e:bc:aa:85:96:89:5f:cf:96:d5:56:
cb:68:52:2e:7a:97:b9:f1:dc:e1:47:7c:11:d0:dd:68:db:93:
42:95:aa:6c:d0:34:c4:14:69:dd:94:d5:02:1f:3f:7e:06:57:
56:c1:14:f7:29:b2:cf:b6:22:31:99:6b:50:7e:9e:5c:fe:2c:
39:77:c3:0f:12:1b:61:db:3a:8d:2b:fe:89:06:c9:fa:88:fa:
a1:7f:65:5b:93:6a:a5:2a:7e:37:fb:6f:7c:f2:f3:e3:b2:dc:
7e:2a:91:97:a7:b9:56:5b:4a:bf:7d:81:e9:36:08:e1:46:39:
82:68:1a:91:e0:ce:db:19:14:d5:19:0a:d0:f2:48:57:48:d9:
a2:21:2a:83:3e:19:05:d1:ed:aa:09:71:aa:da:4c:93:df:a0:
e1:c5:24:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:51:19 2025 by rpki-client