Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/b033d3-ee96-4c0d-a70e-0274f446d331/1/rFaq3EJBEsT8iYnAruJUm7r1ZWg.mft
File: rFaq3EJBEsT8iYnAruJUm7r1ZWg.mft (raw, json)
Hash identifier: AWMzXmX+fjjiTm3QmugngF1snUJZNXXFczKuWfz6U34=
Subject key identifier: B6:1C:F0:2B:BA:4B:43:BB:AD:A5:49:A3:23:88:49:02:39:EA:ED:61
Authority key identifier: AC:56:AA:DC:42:41:12:C4:FC:89:89:C0:AE:E2:54:9B:BA:F5:65:68
Certificate issuer: /CN=ac56aadc424112c4fc8989c0aee2549bbaf56568
Certificate serial: 019A5263447F1B5B6843852D6D05FCD55B3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rFaq3EJBEsT8iYnAruJUm7r1ZWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/b033d3-ee96-4c0d-a70e-0274f446d331/1/rFaq3EJBEsT8iYnAruJUm7r1ZWg.mft
Manifest number: 170D
Signing time: Wed 05 Nov 2025 05:00:28 +0000
Manifest this update: Wed 05 Nov 2025 05:00:28 +0000
Manifest next update: Thu 06 Nov 2025 05:00:28 +0000
Files and hashes: 1: hDXJqHhRVakrUpAy2mxJpw32amA.roa (hash: Q2fYQzDzeuJHoaVaTN2Do0bb6ba0BBCZfekXkM6wQUY=)
2: rFaq3EJBEsT8iYnAruJUm7r1ZWg.crl (hash: 7q7ZNdKySg24E79sfpOb5Iq0d5mBpWkM9TbDzwhW9GE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/b033d3-ee96-4c0d-a70e-0274f446d331/1/rFaq3EJBEsT8iYnAruJUm7r1ZWg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/b033d3-ee96-4c0d-a70e-0274f446d331/1/rFaq3EJBEsT8iYnAruJUm7r1ZWg.mft
rsync://rpki.ripe.net/repository/DEFAULT/rFaq3EJBEsT8iYnAruJUm7r1ZWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:63:44:7f:1b:5b:68:43:85:2d:6d:05:fc:d5:5b:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac56aadc424112c4fc8989c0aee2549bbaf56568
Validity
Not Before: Nov 5 05:00:28 2025 GMT
Not After : Nov 6 05:00:28 2025 GMT
Subject: CN=b61cf02bba4b43bbada549a32388490239eaed61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:07:7e:44:6d:56:75:a3:88:3e:e9:2f:fd:8b:
81:fe:c1:66:da:9f:2c:79:b0:f3:72:a9:fe:b4:60:
77:b9:27:ed:a5:94:11:22:f6:77:99:f6:44:70:da:
3a:07:24:b2:a1:08:96:46:5a:74:44:52:06:23:71:
a9:a6:aa:ec:2d:aa:52:78:4f:48:d9:52:d1:ce:82:
81:e0:d5:95:31:00:23:98:c8:df:de:b8:b3:01:8e:
7b:f3:ef:99:f5:4a:fe:ca:35:21:a4:4d:d1:d2:55:
be:62:86:f9:03:53:db:bf:ef:4a:eb:90:46:85:ec:
db:ae:a1:0c:83:0f:08:65:d0:67:c0:12:a8:23:64:
4c:98:78:b5:bd:14:a2:96:65:c2:cc:9f:3c:ba:30:
f4:6f:a4:28:c0:14:2c:f7:5a:f5:e1:45:c3:ba:ea:
ec:16:e8:8e:d8:a2:3f:a9:eb:e0:28:cc:60:b2:31:
3c:e0:d2:fe:99:18:92:b0:39:be:5b:ad:89:e3:8a:
52:7b:9a:5c:47:3b:fd:75:08:81:80:c4:c4:56:12:
d2:64:a2:fd:ff:91:98:58:6c:89:41:a5:60:4b:dd:
50:99:2f:4c:29:3a:31:bd:0e:59:5d:66:ea:97:d1:
16:0c:5e:a2:20:67:98:9d:a8:66:ee:c1:7f:40:b5:
f8:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:1C:F0:2B:BA:4B:43:BB:AD:A5:49:A3:23:88:49:02:39:EA:ED:61
X509v3 Authority Key Identifier:
keyid:AC:56:AA:DC:42:41:12:C4:FC:89:89:C0:AE:E2:54:9B:BA:F5:65:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rFaq3EJBEsT8iYnAruJUm7r1ZWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/b033d3-ee96-4c0d-a70e-0274f446d331/1/rFaq3EJBEsT8iYnAruJUm7r1ZWg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/b033d3-ee96-4c0d-a70e-0274f446d331/1/rFaq3EJBEsT8iYnAruJUm7r1ZWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:22:05:55:ac:1a:7c:e7:99:2f:e5:8e:aa:6d:e4:44:46:20:
1b:33:a2:57:c6:92:aa:18:bb:85:1f:bd:7b:0d:b5:20:63:e9:
1d:13:d7:4d:dc:4b:53:71:f8:d0:45:0f:f3:8f:4b:e4:4f:16:
24:20:bd:a3:8c:8e:0f:60:e2:7d:10:f3:35:c2:88:11:17:d6:
25:35:f6:57:57:59:0d:df:c5:5f:48:01:23:e4:b7:54:a6:ad:
8e:2d:f0:4f:68:cd:dc:1d:1d:23:da:77:7e:48:e4:81:23:3e:
e3:cd:f7:e3:be:b7:b5:62:03:b1:fc:28:d4:e6:75:b5:52:65:
9c:ca:e6:98:1c:e6:01:6c:f7:42:a0:45:f6:a3:07:d5:74:84:
9a:d4:98:56:49:c5:02:a0:83:a2:60:88:c0:86:57:08:37:43:
0b:92:6c:60:9c:fe:5d:01:00:4b:39:9c:58:bb:3d:1d:72:8a:
77:06:47:c5:34:3e:6f:56:26:44:7f:c2:5f:a2:7e:c4:fb:f8:
81:12:08:30:7d:e7:41:b5:1c:d2:8c:59:b2:96:94:72:67:c2:
63:6e:de:c6:a8:5b:5d:01:8b:bf:9f:61:a3:36:a0:50:78:a1:
82:25:2a:7c:7b:0b:26:89:19:1b:45:ef:c2:2a:f7:d3:3d:a9:
69:22:55:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:09:10 2025 by rpki-client