Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/7bd927-b507-4363-9ada-dee4317f5b14/1/Fc4GtE2NxD3HQsQN472oqjdE4r0.mft
File: Fc4GtE2NxD3HQsQN472oqjdE4r0.mft (raw, json)
Hash identifier: pUMQo1wxpmGaaZnzkkf7VlHPjb61ewdo/9GiAv2stb8=
Subject key identifier: 0C:68:90:C7:D7:F5:9F:D1:24:71:CD:83:8E:14:AE:9E:A9:54:A1:A1
Authority key identifier: 15:CE:06:B4:4D:8D:C4:3D:C7:42:C4:0D:E3:BD:A8:AA:37:44:E2:BD
Certificate issuer: /CN=15ce06b44d8dc43dc742c40de3bda8aa3744e2bd
Certificate serial: 0199228CD3128316A9939B0B3BDFF88B9F9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fc4GtE2NxD3HQsQN472oqjdE4r0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/7bd927-b507-4363-9ada-dee4317f5b14/1/Fc4GtE2NxD3HQsQN472oqjdE4r0.mft
Manifest number: 1305
Signing time: Sun 07 Sep 2025 05:01:18 +0000
Manifest this update: Sun 07 Sep 2025 05:01:18 +0000
Manifest next update: Mon 08 Sep 2025 05:01:18 +0000
Files and hashes: 1: 52KUDdFP_rD3RmJYr6LMpUPEMmM.roa (hash: usibkDt6eCnub+7x6EZqrdrQgsmz6UQ+udh3uzbsAi0=)
2: Fc4GtE2NxD3HQsQN472oqjdE4r0.crl (hash: gvOyuUGB3ouQyL0lAMEvyW+Jt3xid7+SqAHe3Ycjj/k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/7bd927-b507-4363-9ada-dee4317f5b14/1/Fc4GtE2NxD3HQsQN472oqjdE4r0.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/7bd927-b507-4363-9ada-dee4317f5b14/1/Fc4GtE2NxD3HQsQN472oqjdE4r0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fc4GtE2NxD3HQsQN472oqjdE4r0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:d3:12:83:16:a9:93:9b:0b:3b:df:f8:8b:9f:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15ce06b44d8dc43dc742c40de3bda8aa3744e2bd
Validity
Not Before: Sep 7 05:01:18 2025 GMT
Not After : Sep 8 05:01:18 2025 GMT
Subject: CN=0c6890c7d7f59fd12471cd838e14ae9ea954a1a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:ec:f0:20:9a:64:5d:85:ec:4e:b3:e0:17:a6:
ec:0d:67:1d:39:01:6d:de:ed:75:1f:53:05:9d:ea:
98:a2:dc:b8:bb:48:e4:97:5c:3b:a6:e6:23:36:f1:
aa:db:25:6f:2c:b4:7e:51:8c:e8:72:6e:16:50:e5:
67:71:02:65:89:80:95:13:25:43:30:3c:75:73:94:
2c:bc:09:55:cd:fb:3f:f0:7f:48:c7:bc:8b:cc:6f:
21:f1:41:2f:77:5e:d3:f5:99:6a:af:b9:52:cf:47:
99:1f:48:9c:0c:dd:f1:76:f3:a8:73:7a:71:05:8a:
dc:e6:c0:f5:32:e2:d5:ee:37:9c:dd:dd:ff:b1:c7:
87:8a:da:2a:18:14:ae:9c:1d:e2:a7:31:07:9d:18:
ee:05:dd:a9:8a:3b:04:fb:a7:32:56:f2:6d:37:ff:
df:81:db:69:d1:7f:69:d5:b2:af:ac:1c:78:c3:4f:
78:e5:16:70:0a:b4:3f:46:e3:f0:30:f0:87:e9:ac:
0a:de:e6:b1:56:19:e1:13:b8:b6:40:c8:c0:a7:1d:
ec:51:ee:4a:cb:c5:db:4c:a4:20:7a:84:ee:0d:5c:
04:ee:8e:87:dc:6f:77:fe:90:0c:1f:78:0d:65:80:
62:5e:8d:a5:23:73:21:bb:b6:8f:cb:7f:e0:94:84:
62:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:68:90:C7:D7:F5:9F:D1:24:71:CD:83:8E:14:AE:9E:A9:54:A1:A1
X509v3 Authority Key Identifier:
keyid:15:CE:06:B4:4D:8D:C4:3D:C7:42:C4:0D:E3:BD:A8:AA:37:44:E2:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fc4GtE2NxD3HQsQN472oqjdE4r0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/7bd927-b507-4363-9ada-dee4317f5b14/1/Fc4GtE2NxD3HQsQN472oqjdE4r0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/7bd927-b507-4363-9ada-dee4317f5b14/1/Fc4GtE2NxD3HQsQN472oqjdE4r0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:4d:62:7d:67:71:44:56:34:b1:85:e4:e2:e3:09:64:59:79:
39:07:25:1f:d1:be:42:64:ee:b4:20:db:d7:06:de:39:eb:a6:
eb:b7:29:46:ef:fd:d2:d7:03:56:7b:61:ed:8f:4f:55:2e:23:
be:20:e2:42:6d:50:10:6a:ac:82:77:ec:39:c4:ef:e3:9f:f0:
ad:86:a0:25:ec:07:f1:3a:77:44:70:ac:85:5b:36:aa:09:d3:
ab:63:21:cf:28:49:09:ba:09:ee:d5:18:b4:f6:e5:f7:d0:28:
04:9d:c2:7b:ff:59:9c:08:7f:d1:d6:d8:e7:ff:c2:0b:38:f9:
99:cd:cf:9a:17:87:79:ad:e7:c2:7c:dd:bf:ca:ab:82:05:18:
69:2e:e2:80:de:98:90:7c:d7:40:b2:61:e6:6a:cb:02:65:36:
2d:1f:bc:cd:fa:a0:49:14:11:6c:9f:46:72:d1:2b:2f:d9:10:
f8:3d:cf:3d:3a:50:41:80:15:9d:cc:77:9d:1c:04:54:5b:e3:
45:f7:6e:e6:2d:2f:a5:e8:0b:d6:88:90:3d:f2:b6:50:65:48:
23:18:72:58:00:86:45:85:0a:b9:f8:b0:80:2d:78:a5:80:f0:
3f:68:4f:c8:87:7f:af:22:55:d3:49:a6:d5:49:98:be:58:ee:
d3:a0:f5:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:51:16 2025 by rpki-client