Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/1f8a09-4365-4bba-8e35-5ee274eb7eab/1/FCaOTC4CUzDfJv1ATK4PavJszCM.mft
File: FCaOTC4CUzDfJv1ATK4PavJszCM.mft (raw, json)
Hash identifier: uB1oKok2plLxikuyYvLLmlDy5TfDj44YDl1mMt+LURQ=
Subject key identifier: 85:97:A9:1D:28:73:C5:86:54:C3:83:FB:58:63:C5:58:D3:B2:6A:C7
Authority key identifier: 14:26:8E:4C:2E:02:53:30:DF:26:FD:40:4C:AE:0F:6A:F2:6C:CC:23
Certificate issuer: /CN=14268e4c2e025330df26fd404cae0f6af26ccc23
Certificate serial: 01984777C80F1A6168AD32197FD7E5AFDC55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FCaOTC4CUzDfJv1ATK4PavJszCM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/1f8a09-4365-4bba-8e35-5ee274eb7eab/1/FCaOTC4CUzDfJv1ATK4PavJszCM.mft
Manifest number: 0E3F
Signing time: Sat 26 Jul 2025 16:01:28 +0000
Manifest this update: Sat 26 Jul 2025 16:01:28 +0000
Manifest next update: Sun 27 Jul 2025 16:01:28 +0000
Files and hashes: 1: FCaOTC4CUzDfJv1ATK4PavJszCM.crl (hash: VsJcNDV2X5FnNVckNKpS4znS3TvpYBJN0StgN4ww480=)
2: u0DOKBtKEXfOYPXrhlfb2Ryk4Zc.roa (hash: VOn09+bdFNjvpl/Gu+Ha0G2LvOgVJGvmVcF7NTjr9S0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/1f8a09-4365-4bba-8e35-5ee274eb7eab/1/FCaOTC4CUzDfJv1ATK4PavJszCM.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/1f8a09-4365-4bba-8e35-5ee274eb7eab/1/FCaOTC4CUzDfJv1ATK4PavJszCM.mft
rsync://rpki.ripe.net/repository/DEFAULT/FCaOTC4CUzDfJv1ATK4PavJszCM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 15:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:77:c8:0f:1a:61:68:ad:32:19:7f:d7:e5:af:dc:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14268e4c2e025330df26fd404cae0f6af26ccc23
Validity
Not Before: Jul 26 16:01:28 2025 GMT
Not After : Jul 27 16:01:28 2025 GMT
Subject: CN=8597a91d2873c58654c383fb5863c558d3b26ac7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:e0:00:16:8e:c3:2c:4a:ab:67:68:4e:ee:9c:
d9:62:8d:c1:cc:43:ff:e5:d9:0e:29:a6:8c:50:68:
7e:bc:8e:1d:dc:a5:d4:4b:0e:8a:dc:2c:9b:ba:1d:
4e:b8:7b:c6:5e:25:18:8a:49:31:d8:5a:b3:55:fa:
3a:7d:9b:4d:12:6a:c8:23:3f:be:b5:b3:c9:f1:6d:
8c:92:ec:f8:fc:eb:c5:25:be:5a:e5:1a:74:d9:ee:
d9:b5:2e:00:45:9e:49:3a:56:a3:45:a8:86:cd:13:
1f:fe:8c:55:55:56:c0:df:61:42:2f:10:c9:81:d7:
d5:f4:ae:08:d9:54:0c:41:9c:b1:69:13:a6:bb:0a:
f9:64:42:b8:c7:ee:92:78:7f:79:d8:9e:67:27:7e:
3e:db:ee:69:46:c9:42:6f:a5:ce:77:99:dc:9e:a7:
5d:e3:1d:85:b9:91:4d:7d:bc:47:48:b4:86:2c:83:
0a:a7:50:b7:b9:05:e9:27:8a:5c:5d:f7:49:a9:1a:
a9:e5:ea:dd:72:23:04:2b:79:1d:a4:e3:e3:28:4b:
f8:6c:ba:cb:26:eb:ef:cc:e0:93:41:af:41:31:e3:
d4:06:e5:6a:6e:42:07:d2:1e:5d:06:0c:7f:a1:03:
a0:11:bb:f5:b7:b7:48:5f:0f:8f:8d:e3:22:27:27:
9c:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:97:A9:1D:28:73:C5:86:54:C3:83:FB:58:63:C5:58:D3:B2:6A:C7
X509v3 Authority Key Identifier:
keyid:14:26:8E:4C:2E:02:53:30:DF:26:FD:40:4C:AE:0F:6A:F2:6C:CC:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FCaOTC4CUzDfJv1ATK4PavJszCM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/1f8a09-4365-4bba-8e35-5ee274eb7eab/1/FCaOTC4CUzDfJv1ATK4PavJszCM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/1f8a09-4365-4bba-8e35-5ee274eb7eab/1/FCaOTC4CUzDfJv1ATK4PavJszCM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:97:bc:ce:12:f4:2d:5f:cd:68:a4:10:a5:6d:64:98:fc:68:
93:4f:d8:7e:91:69:f1:4f:b8:85:1c:5a:99:87:06:6e:74:c8:
1a:aa:4c:10:38:0f:b8:22:f5:53:73:06:29:fc:ff:2a:c5:c0:
35:42:39:6e:78:c5:9c:ff:61:e3:94:d1:bc:9b:e1:af:b7:38:
da:28:8a:7a:37:72:b6:4f:0f:b2:97:27:32:8a:8a:82:c4:79:
c6:14:f2:eb:be:49:59:9e:54:c8:c5:8f:3a:97:46:23:00:36:
f1:80:24:9a:23:46:1f:7a:33:39:e4:69:f4:79:c4:12:71:ed:
bd:f6:5e:59:1f:c4:83:da:75:88:99:b6:07:fc:cd:ba:88:96:
83:7b:33:d1:e4:ab:15:0d:d0:12:36:3f:dc:45:02:4c:53:80:
7a:92:1e:b5:d9:80:07:fe:89:11:ff:57:15:51:25:cb:88:ac:
66:78:c4:af:ff:55:de:63:ef:2c:58:4b:99:cd:5c:8e:4c:31:
b8:dc:6b:d2:1c:48:13:15:37:81:c5:18:2f:56:09:a1:09:01:
62:ba:29:11:1d:81:26:07:af:2c:9f:0f:2b:8d:e9:0f:7d:6f:
29:be:04:6b:a3:de:c9:78:7a:11:35:24:1d:4a:4a:99:5e:1a:
71:df:5f:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 23:49:13 2025 by rpki-client