Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/5986f1-863f-4eec-8551-0a8fe6434bf8/1/FcyIDwoSx7lPcdmy5bAopw0fo0o.mft
File: FcyIDwoSx7lPcdmy5bAopw0fo0o.mft (raw, json)
Hash identifier: hvmVulHapLrHSVxhZIO6xhHvepocgAdrOwHmDaAx8ss=
Subject key identifier: D7:1F:74:E6:6B:BA:38:07:D6:95:0E:7C:52:E8:99:E8:B4:6A:27:61
Authority key identifier: 15:CC:88:0F:0A:12:C7:B9:4F:71:D9:B2:E5:B0:28:A7:0D:1F:A3:4A
Certificate issuer: /CN=15cc880f0a12c7b94f71d9b2e5b028a70d1fa34a
Certificate serial: 019922C38E67F161ABAD4E3BC653DF08E784
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FcyIDwoSx7lPcdmy5bAopw0fo0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/5986f1-863f-4eec-8551-0a8fe6434bf8/1/FcyIDwoSx7lPcdmy5bAopw0fo0o.mft
Manifest number: 1678
Signing time: Sun 07 Sep 2025 06:01:05 +0000
Manifest this update: Sun 07 Sep 2025 06:01:05 +0000
Manifest next update: Mon 08 Sep 2025 06:01:05 +0000
Files and hashes: 1: FcyIDwoSx7lPcdmy5bAopw0fo0o.crl (hash: gmaIySMjIwzNutkr4hb5hta/uEuifBOrvlpz5TOZKe8=)
2: kc-ZCrpFtG9x51LpF4W3iw7kDzs.roa (hash: aN11v2IUXg+LXUfyuCNuVklkgeIw5ckCn/DmdMCJWXk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/5986f1-863f-4eec-8551-0a8fe6434bf8/1/FcyIDwoSx7lPcdmy5bAopw0fo0o.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/5986f1-863f-4eec-8551-0a8fe6434bf8/1/FcyIDwoSx7lPcdmy5bAopw0fo0o.mft
rsync://rpki.ripe.net/repository/DEFAULT/FcyIDwoSx7lPcdmy5bAopw0fo0o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c3:8e:67:f1:61:ab:ad:4e:3b:c6:53:df:08:e7:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15cc880f0a12c7b94f71d9b2e5b028a70d1fa34a
Validity
Not Before: Sep 7 06:01:05 2025 GMT
Not After : Sep 8 06:01:05 2025 GMT
Subject: CN=d71f74e66bba3807d6950e7c52e899e8b46a2761
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:eb:00:f6:ac:1e:75:d5:7b:65:95:57:5d:54:
81:97:36:68:15:83:be:65:1c:6d:f1:1d:9a:c7:d4:
51:bf:dc:81:99:1e:d4:71:70:89:1f:15:13:55:00:
b5:6a:34:09:25:d0:36:c5:1d:d8:07:92:48:b6:f9:
de:80:3b:50:11:81:24:f4:82:9a:b5:54:a8:51:58:
7a:92:7d:f0:5a:23:38:47:0a:e8:14:ec:a0:b7:30:
8a:ae:0b:5a:5e:fd:c1:d2:d0:90:00:56:0c:ef:48:
54:d2:75:8d:5a:39:57:41:7b:f9:b8:12:63:e5:d7:
cf:08:f6:0e:21:3a:62:9f:6e:73:80:a2:95:59:8b:
0b:e3:21:be:85:3a:1c:c4:e8:25:d0:17:40:07:57:
8a:fc:22:9b:e8:14:68:10:ae:20:0b:19:d0:93:03:
4a:4e:96:dd:39:35:c3:f3:72:60:1a:22:e3:7d:fb:
a9:56:f5:cc:cb:d5:5c:b2:6c:ac:99:42:ef:e8:a9:
89:29:55:66:c4:c4:cb:4e:b0:ab:77:0d:ad:01:ca:
44:20:2f:72:8b:00:fd:84:dc:3d:0b:17:17:f6:ec:
30:ad:c4:59:d7:08:e4:a9:dd:73:ed:e3:41:03:0e:
11:f5:57:d9:1e:fb:8a:69:9a:c4:47:84:7a:be:06:
e8:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:1F:74:E6:6B:BA:38:07:D6:95:0E:7C:52:E8:99:E8:B4:6A:27:61
X509v3 Authority Key Identifier:
keyid:15:CC:88:0F:0A:12:C7:B9:4F:71:D9:B2:E5:B0:28:A7:0D:1F:A3:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FcyIDwoSx7lPcdmy5bAopw0fo0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/5986f1-863f-4eec-8551-0a8fe6434bf8/1/FcyIDwoSx7lPcdmy5bAopw0fo0o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/5986f1-863f-4eec-8551-0a8fe6434bf8/1/FcyIDwoSx7lPcdmy5bAopw0fo0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:4e:71:79:cf:66:91:be:a6:62:ba:ab:f7:1e:c9:a7:b3:80:
04:52:a7:db:dd:43:0c:d9:81:94:0c:98:37:cb:1f:7a:85:a7:
d4:d8:f5:75:d9:d7:4f:84:75:ac:07:49:fe:76:4d:29:7d:52:
7c:b9:2b:71:20:ee:b1:10:86:08:e5:35:fc:08:ce:fe:59:d7:
43:c6:30:d3:db:96:5a:4b:d6:4e:49:77:36:57:05:a8:ad:a6:
8b:ab:38:fe:cf:d6:29:97:ee:9b:d0:6d:92:91:6d:79:43:57:
27:78:b6:f2:e1:f8:11:f1:bf:90:83:cc:13:a3:ee:b7:60:f0:
69:d3:5f:01:0c:e2:d5:a9:bc:04:69:f0:1a:b0:5a:4a:e8:2b:
78:ff:94:8d:c2:ad:bf:13:b1:1b:f4:85:a7:74:e0:c2:3f:5a:
b3:74:ed:d6:ca:fb:dd:b9:3d:51:3b:a9:01:6d:66:39:46:5b:
10:f4:96:9b:34:b9:51:49:5b:dc:60:06:72:72:cb:b7:10:7a:
c6:0e:f6:56:18:0a:7d:5d:2f:4a:6e:70:3d:1a:6c:6f:52:ed:
34:9d:fb:3e:1a:17:f6:3e:97:92:09:c4:69:7e:48:4d:0b:99:
66:19:88:c7:bd:46:a6:53:8e:0e:7a:db:07:93:73:0c:9f:e1:
75:5b:f0:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:42:26 2025 by rpki-client