Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/5e753d-c33d-47a3-8e82-a52862b44563/1/_FXgUz76pWJPU4uS7RqXP-_4l1E.mft
File: _FXgUz76pWJPU4uS7RqXP-_4l1E.mft (raw, json)
Hash identifier: twFGW9MwnmJvF4kuQNyvbKUb81AcjneYOrz5Xx1sUyE=
Subject key identifier: 53:94:34:9B:D5:10:C0:50:74:10:E2:AF:ED:1B:81:5D:6A:38:B1:E2
Authority key identifier: FC:55:E0:53:3E:FA:A5:62:4F:53:8B:92:ED:1A:97:3F:EF:F8:97:51
Certificate issuer: /CN=fc55e0533efaa5624f538b92ed1a973feff89751
Certificate serial: 01986B83F6248356A7E45E197274C80C1F84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_FXgUz76pWJPU4uS7RqXP-_4l1E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/5e753d-c33d-47a3-8e82-a52862b44563/1/_FXgUz76pWJPU4uS7RqXP-_4l1E.mft
Manifest number: 10FD
Signing time: Sat 02 Aug 2025 16:01:06 +0000
Manifest this update: Sat 02 Aug 2025 16:01:06 +0000
Manifest next update: Sun 03 Aug 2025 16:01:06 +0000
Files and hashes: 1: _FXgUz76pWJPU4uS7RqXP-_4l1E.crl (hash: buomlSXaPKTLsy2dP1SGwr1X1llqpe4/xz/eqXDjLrg=)
2: yh5VzgeOwtUgAcziSiqUhcW6kK8.roa (hash: hvI53ao0Y2iffOi0mRz/DzGNpvNOk5YefpCNLUXPIjc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/5e753d-c33d-47a3-8e82-a52862b44563/1/_FXgUz76pWJPU4uS7RqXP-_4l1E.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/5e753d-c33d-47a3-8e82-a52862b44563/1/_FXgUz76pWJPU4uS7RqXP-_4l1E.mft
rsync://rpki.ripe.net/repository/DEFAULT/_FXgUz76pWJPU4uS7RqXP-_4l1E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 03 Aug 2025 15:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:6b:83:f6:24:83:56:a7:e4:5e:19:72:74:c8:0c:1f:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc55e0533efaa5624f538b92ed1a973feff89751
Validity
Not Before: Aug 2 16:01:06 2025 GMT
Not After : Aug 3 16:01:06 2025 GMT
Subject: CN=5394349bd510c0507410e2afed1b815d6a38b1e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:6a:3f:49:9f:fc:78:6c:15:f5:3a:e8:e7:c8:
d3:f6:91:0b:f3:4e:21:2c:34:72:a1:e2:8e:03:7c:
17:57:54:86:0c:6b:5c:f8:98:48:5a:13:ad:72:c7:
4f:57:12:4b:ac:5b:aa:55:86:d1:71:94:f5:c6:77:
8a:8d:63:22:dd:e6:78:bd:aa:c4:c7:a3:7e:db:bf:
9d:1d:02:03:61:72:57:5b:61:ce:6c:30:43:dc:bc:
03:98:21:f6:b9:18:ff:69:9b:5d:ee:42:5f:98:0a:
f8:7e:67:2b:89:24:3e:0c:2e:00:f6:8e:4a:6c:81:
03:f4:ac:dd:5d:f4:4f:dd:e3:4e:bd:5f:6a:34:30:
83:15:1f:b1:e1:23:0e:20:30:cb:01:6c:f2:03:42:
f9:2b:1b:12:05:51:64:2f:87:9e:1c:15:3a:00:fc:
79:b4:1f:2f:8b:1e:7b:4e:c4:2c:94:dd:2a:d7:0a:
25:dd:4d:ed:2f:39:64:2a:40:4d:ab:81:5d:a9:18:
3c:c1:e5:7a:1c:13:2e:83:0c:5d:35:40:30:1c:49:
8b:0b:94:ae:66:a0:de:61:55:e0:34:82:a9:59:1a:
a1:37:de:d3:48:32:56:a4:74:68:ad:a4:f1:3a:18:
4e:0e:92:48:93:2d:bb:4e:c5:2f:83:98:d2:91:c6:
d4:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:94:34:9B:D5:10:C0:50:74:10:E2:AF:ED:1B:81:5D:6A:38:B1:E2
X509v3 Authority Key Identifier:
keyid:FC:55:E0:53:3E:FA:A5:62:4F:53:8B:92:ED:1A:97:3F:EF:F8:97:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_FXgUz76pWJPU4uS7RqXP-_4l1E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/5e753d-c33d-47a3-8e82-a52862b44563/1/_FXgUz76pWJPU4uS7RqXP-_4l1E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/5e753d-c33d-47a3-8e82-a52862b44563/1/_FXgUz76pWJPU4uS7RqXP-_4l1E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:0c:78:e2:f3:ab:5d:26:ab:53:df:b4:a3:85:c7:16:bf:4b:
b3:73:34:d5:4d:cc:10:be:80:d7:a4:1e:a8:29:1d:8b:c0:05:
8b:ae:d3:51:cc:5e:82:0b:cc:d1:c7:ba:19:59:b7:cd:ff:ec:
4b:53:5e:da:12:4a:2b:7a:07:10:f2:45:f9:f6:37:e1:16:d8:
0b:3d:f4:52:26:c7:c9:70:80:ee:ff:f8:ca:78:42:49:2b:5a:
d0:fa:09:15:4f:02:62:78:af:d0:20:5f:dc:2b:e9:10:38:ff:
e9:e7:7a:45:f9:98:6d:14:51:9d:52:aa:1f:f0:1e:0a:af:2d:
cc:a9:33:0e:5a:2b:87:1a:eb:5b:e3:00:12:50:97:04:fd:3d:
a8:1a:ba:15:40:3a:f1:57:bf:97:4d:b9:f8:27:a2:cb:4d:63:
b5:f9:20:10:0a:64:9c:16:2a:9d:df:07:68:06:5a:e0:dd:a6:
8e:1e:21:f0:6a:c2:31:22:93:44:92:f4:3f:74:ea:29:f4:f9:
c8:aa:37:83:ef:17:f7:0c:7b:12:d7:1e:66:27:94:39:85:4e:
5b:d3:ef:fb:0a:3f:30:91:73:ba:74:a1:ec:83:70:01:de:a7:
49:98:ad:ba:ce:c8:d0:34:e9:cb:3a:96:e3:cb:ba:fe:23:8f:
2f:47:80:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 3 00:43:08 2025 by rpki-client