Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/52e0e2-478b-401d-9385-8ff6cd7747c4/1/FcGBcG9hxLc3zX63j3Iw40zfwUw.mft
File: FcGBcG9hxLc3zX63j3Iw40zfwUw.mft (raw, json)
Hash identifier: AxLYKoLJsItxW5zuvgy4W45JqJgydMQ8msQwaw4gVqs=
Subject key identifier: 98:DF:46:1E:AF:A6:A5:20:DC:C4:3F:1E:72:BE:06:46:C8:72:3C:6A
Authority key identifier: 15:C1:81:70:6F:61:C4:B7:37:CD:7E:B7:8F:72:30:E3:4C:DF:C1:4C
Certificate issuer: /CN=15c181706f61c4b737cd7eb78f7230e34cdfc14c
Certificate serial: 019828FE9B266B0D5127AA9E17BE51E04470
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FcGBcG9hxLc3zX63j3Iw40zfwUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/52e0e2-478b-401d-9385-8ff6cd7747c4/1/FcGBcG9hxLc3zX63j3Iw40zfwUw.mft
Manifest number: 10
Signing time: Sun 20 Jul 2025 18:00:31 +0000
Manifest this update: Sun 20 Jul 2025 18:00:31 +0000
Manifest next update: Mon 21 Jul 2025 18:00:31 +0000
Files and hashes: 1: FcGBcG9hxLc3zX63j3Iw40zfwUw.crl (hash: OkYmNKyORVSIs/t7FCYikPWUgtFL4BNRHqNlLkszrzQ=)
2: TODaCUho62Gehv-2PizceaR7ohg.roa (hash: EEJ5eEmNl9HYrtpyde+m1i67aXqJjeNEtfrXMxwcvR8=)
3: njg2vaPfciqJR5R5nbxzG2lmchg.roa (hash: hRVFVxSb35peMjVcWnWK+AgafRYFP/BZDTvTgJv0dRc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/52e0e2-478b-401d-9385-8ff6cd7747c4/1/FcGBcG9hxLc3zX63j3Iw40zfwUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/52e0e2-478b-401d-9385-8ff6cd7747c4/1/FcGBcG9hxLc3zX63j3Iw40zfwUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/FcGBcG9hxLc3zX63j3Iw40zfwUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 13:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:28:fe:9b:26:6b:0d:51:27:aa:9e:17:be:51:e0:44:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15c181706f61c4b737cd7eb78f7230e34cdfc14c
Validity
Not Before: Jul 20 18:00:31 2025 GMT
Not After : Jul 21 18:00:31 2025 GMT
Subject: CN=98df461eafa6a520dcc43f1e72be0646c8723c6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:56:da:46:cf:6d:0b:7d:a9:45:12:e0:35:f6:
9a:bf:9e:08:d2:66:4b:e8:68:a4:c1:82:f2:4d:c8:
5c:ae:91:c0:2f:9a:d2:6f:2a:9f:13:b9:ef:97:70:
cd:0a:ba:d1:dc:53:66:27:ca:dd:23:c7:69:cf:0b:
2d:7b:c6:54:40:9b:db:dd:54:17:17:6d:54:a9:70:
83:db:5a:3d:d3:e8:30:5e:53:8c:11:2e:ff:bc:35:
ca:a1:db:4b:03:3b:51:1f:dc:63:41:ca:bc:22:eb:
2b:0c:fe:69:48:a6:1a:4b:33:ee:e5:21:09:8e:87:
a4:8e:00:5a:6a:52:03:d1:5b:c4:19:18:51:99:97:
0c:9b:91:15:11:4e:b7:7c:44:75:90:ac:fa:a1:bb:
03:ba:f3:b0:49:b6:c2:56:0e:91:f7:27:ad:54:63:
81:3a:01:c6:24:40:2e:c3:60:3c:27:37:51:6c:35:
a1:1f:93:9c:dd:8c:51:9e:0b:40:e2:1f:03:ee:e9:
03:0a:d0:d8:cb:8b:e7:e5:6e:74:88:36:a7:56:dc:
ed:5a:cd:f2:cb:33:dc:77:3c:06:6a:80:10:4d:9a:
07:d7:80:21:28:c0:aa:b3:ca:cc:d8:71:21:6b:6c:
97:f9:2f:77:da:63:a9:af:2b:ba:51:b5:85:37:79:
ad:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:DF:46:1E:AF:A6:A5:20:DC:C4:3F:1E:72:BE:06:46:C8:72:3C:6A
X509v3 Authority Key Identifier:
keyid:15:C1:81:70:6F:61:C4:B7:37:CD:7E:B7:8F:72:30:E3:4C:DF:C1:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FcGBcG9hxLc3zX63j3Iw40zfwUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/52e0e2-478b-401d-9385-8ff6cd7747c4/1/FcGBcG9hxLc3zX63j3Iw40zfwUw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/52e0e2-478b-401d-9385-8ff6cd7747c4/1/FcGBcG9hxLc3zX63j3Iw40zfwUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:77:fc:0e:18:6a:f6:92:72:70:e8:e3:73:d7:84:c5:c6:2a:
f6:95:49:44:6a:bb:25:4c:aa:70:ae:f4:3b:1c:7d:78:7f:72:
ad:be:a2:b4:fd:5c:8d:1c:3a:57:3a:46:52:cf:bb:5c:6d:78:
0b:9a:b5:0d:f5:9f:f7:76:39:0e:5d:55:a2:a0:e5:70:f5:5f:
f6:ad:06:cb:30:01:1e:0c:4b:9f:47:0d:b7:0f:82:a8:16:e4:
ac:0c:7f:bf:8b:8f:f7:54:d3:23:bf:75:c7:b5:ef:ec:c9:fa:
7d:b2:14:75:d3:b6:5f:77:4c:15:91:32:07:87:f5:85:0b:69:
1b:57:75:0a:0e:ce:6c:e7:25:a6:5b:2e:1d:16:7c:35:7c:45:
c2:67:1f:1d:9d:2b:eb:77:1e:ef:2f:fe:a1:f7:4f:9e:c9:98:
25:63:c7:a8:c4:ad:1f:f1:a6:00:11:50:9e:d3:11:4f:b9:a3:
4d:9d:0f:e2:50:74:ad:0f:1b:4a:52:7f:e8:3f:1d:40:16:75:
71:b3:8e:dd:53:90:94:2d:30:38:9f:d8:26:e8:66:37:f9:9d:
4e:76:ac:6f:0a:e4:d8:93:c9:9f:62:69:5b:84:45:db:53:42:
98:14:28:7c:62:b3:1d:a3:c6:1a:73:f3:90:5c:69:8d:e0:3f:
f9:8e:5e:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 21:19:56 2025 by rpki-client