Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/4ef496-45e5-4397-a914-5989a4902d1a/1/FPwSEe469lf8lPkvoDCd5sbJQG4.mft
File: FPwSEe469lf8lPkvoDCd5sbJQG4.mft (raw, json)
Hash identifier: nByrQza8ikjCgqufY2u2tiZXXPLtOvDtMJTQ+Nk8c28=
Subject key identifier: 1C:8C:2B:C9:7C:FA:ED:AB:4C:33:87:37:5A:B8:A0:41:21:A8:04:FA
Authority key identifier: 14:FC:12:11:EE:3A:F6:57:FC:94:F9:2F:A0:30:9D:E6:C6:C9:40:6E
Certificate issuer: /CN=14fc1211ee3af657fc94f92fa0309de6c6c9406e
Certificate serial: 01984F311E0F9CCA55F66DC7BC597C6F59F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FPwSEe469lf8lPkvoDCd5sbJQG4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/4ef496-45e5-4397-a914-5989a4902d1a/1/FPwSEe469lf8lPkvoDCd5sbJQG4.mft
Manifest number: 0CB9
Signing time: Mon 28 Jul 2025 04:01:15 +0000
Manifest this update: Mon 28 Jul 2025 04:01:15 +0000
Manifest next update: Tue 29 Jul 2025 04:01:15 +0000
Files and hashes: 1: FPwSEe469lf8lPkvoDCd5sbJQG4.crl (hash: aYsiJpwn9j4U6TNkYA5PLxNCdbo4+c9arDxPSI2y+zM=)
2: aJypmqoFfKbNLA7QelNPg-kxzbw.roa (hash: AlnIanfnH1GwrGuXXqK+U4eJyego+t2Sw5napesUvxE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/4ef496-45e5-4397-a914-5989a4902d1a/1/FPwSEe469lf8lPkvoDCd5sbJQG4.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/4ef496-45e5-4397-a914-5989a4902d1a/1/FPwSEe469lf8lPkvoDCd5sbJQG4.mft
rsync://rpki.ripe.net/repository/DEFAULT/FPwSEe469lf8lPkvoDCd5sbJQG4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4f:31:1e:0f:9c:ca:55:f6:6d:c7:bc:59:7c:6f:59:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14fc1211ee3af657fc94f92fa0309de6c6c9406e
Validity
Not Before: Jul 28 04:01:15 2025 GMT
Not After : Jul 29 04:01:15 2025 GMT
Subject: CN=1c8c2bc97cfaedab4c3387375ab8a04121a804fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:58:5b:d6:30:7d:5f:b2:07:92:57:07:80:50:
96:ba:0e:a6:e9:aa:ab:d6:7e:e4:20:8c:df:05:c1:
35:12:8e:94:fb:37:67:0e:35:8c:3d:ae:d1:2e:2f:
09:b2:39:5a:cf:88:77:bd:96:47:e9:ea:db:34:b6:
c1:9c:74:50:45:d1:df:93:2c:75:f8:0c:b6:33:40:
3a:d0:2c:02:10:52:b1:49:62:c5:a4:05:58:a3:60:
19:b5:6e:58:f2:31:69:87:ea:ee:02:67:b9:50:fd:
8f:66:e3:fb:3b:19:26:89:a5:7a:31:a8:5c:d2:32:
1f:ec:aa:da:ed:db:0e:aa:70:51:d2:52:dc:ac:f0:
84:39:68:16:91:0c:d2:cb:13:76:bc:fd:08:65:24:
bd:ac:18:93:1d:e4:ab:60:bd:68:80:11:55:13:d9:
13:f8:1d:f8:b7:a1:55:1f:bd:83:ae:a9:95:7b:eb:
0f:ce:28:b4:0b:0b:db:c9:73:e4:40:ce:1e:8b:e1:
c0:23:f4:c9:ed:bb:10:ed:87:ab:20:5b:e9:79:79:
f6:64:d6:75:ab:f1:84:4c:18:fc:ae:1b:1b:9d:d3:
32:67:df:3f:96:9c:61:5f:5e:0d:5e:a3:13:fc:4d:
43:e1:2b:06:0b:b8:05:28:60:21:d1:09:1c:f5:08:
92:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:8C:2B:C9:7C:FA:ED:AB:4C:33:87:37:5A:B8:A0:41:21:A8:04:FA
X509v3 Authority Key Identifier:
keyid:14:FC:12:11:EE:3A:F6:57:FC:94:F9:2F:A0:30:9D:E6:C6:C9:40:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FPwSEe469lf8lPkvoDCd5sbJQG4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/4ef496-45e5-4397-a914-5989a4902d1a/1/FPwSEe469lf8lPkvoDCd5sbJQG4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/4ef496-45e5-4397-a914-5989a4902d1a/1/FPwSEe469lf8lPkvoDCd5sbJQG4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:7a:59:06:b0:1a:e7:52:2b:aa:69:c9:53:f1:e8:2f:ff:d9:
f3:d3:a9:00:45:b5:03:0c:d1:c5:42:20:f0:ce:c4:c7:42:b9:
c6:41:a3:89:eb:49:ea:5b:3c:9a:12:93:2e:26:42:d6:2f:f6:
93:b0:fa:5b:39:c4:d5:22:2d:b0:fb:99:9f:fd:de:c1:b9:ad:
30:26:64:28:e2:10:cf:68:22:20:8c:1f:d2:fd:e1:b2:ed:81:
20:28:1e:f0:35:79:6a:08:1a:12:a3:2e:3d:a5:00:b8:b0:c6:
c9:3e:85:9b:67:7d:42:f0:fc:17:34:0e:dc:7d:db:ae:ee:a5:
82:a1:c5:5b:16:21:8c:85:f3:32:0f:4b:3f:b3:f1:bd:83:d7:
68:61:d5:9f:e2:69:ae:28:d6:1a:29:17:c1:c8:22:cd:04:d2:
26:47:fa:3d:a2:ef:a4:c9:3c:46:f8:57:87:6e:8b:82:fb:c5:
da:2f:b3:1f:57:12:70:76:d4:d1:8d:64:7e:ac:1b:d8:14:c5:
00:07:87:ba:7a:01:17:19:4d:ad:89:54:19:2c:4e:07:3b:55:
89:47:81:79:76:de:d5:00:4b:18:4c:7d:f6:bb:56:3f:ac:35:
53:97:36:e3:55:92:72:d8:ef:05:d1:31:96:9a:1d:70:4c:6a:
e7:79:9d:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 05:44:01 2025 by rpki-client