Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/5986f1-863f-4eec-8551-0a8fe6434bf8/1/FcyIDwoSx7lPcdmy5bAopw0fo0o.mft
File: FcyIDwoSx7lPcdmy5bAopw0fo0o.mft (raw, json)
Hash identifier: bd8e3fv6MNZGx/Kr5i0OyT3uJKWMwAvz2CSXm4G7ZZg=
Subject key identifier: 18:9B:B8:1F:51:91:58:35:73:80:DF:39:F1:97:54:64:17:A8:94:80
Authority key identifier: 15:CC:88:0F:0A:12:C7:B9:4F:71:D9:B2:E5:B0:28:A7:0D:1F:A3:4A
Certificate issuer: /CN=15cc880f0a12c7b94f71d9b2e5b028a70d1fa34a
Certificate serial: 019747B10A0409D1D5027136503A0D8C73B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FcyIDwoSx7lPcdmy5bAopw0fo0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/5986f1-863f-4eec-8551-0a8fe6434bf8/1/FcyIDwoSx7lPcdmy5bAopw0fo0o.mft
Manifest number: 1582
Signing time: Sat 07 Jun 2025 00:01:14 +0000
Manifest this update: Sat 07 Jun 2025 00:01:14 +0000
Manifest next update: Sun 08 Jun 2025 00:01:14 +0000
Files and hashes: 1: FcyIDwoSx7lPcdmy5bAopw0fo0o.crl (hash: O4qtpjKRot4uKERdy2oh5zTrnU+DgF3mz1/drqa+C2U=)
2: kc-ZCrpFtG9x51LpF4W3iw7kDzs.roa (hash: aN11v2IUXg+LXUfyuCNuVklkgeIw5ckCn/DmdMCJWXk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/5986f1-863f-4eec-8551-0a8fe6434bf8/1/FcyIDwoSx7lPcdmy5bAopw0fo0o.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/5986f1-863f-4eec-8551-0a8fe6434bf8/1/FcyIDwoSx7lPcdmy5bAopw0fo0o.mft
rsync://rpki.ripe.net/repository/DEFAULT/FcyIDwoSx7lPcdmy5bAopw0fo0o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:b1:0a:04:09:d1:d5:02:71:36:50:3a:0d:8c:73:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15cc880f0a12c7b94f71d9b2e5b028a70d1fa34a
Validity
Not Before: Jun 7 00:01:14 2025 GMT
Not After : Jun 8 00:01:14 2025 GMT
Subject: CN=189bb81f519158357380df39f197546417a89480
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:82:28:2e:1d:4b:d9:c0:17:81:66:2e:50:e8:
9a:7d:6a:71:02:66:2d:3f:f0:c3:37:f8:a2:4d:39:
61:b6:96:e6:55:63:60:ba:95:f2:93:84:8b:c4:23:
45:28:fd:2a:87:47:b6:92:62:60:bf:44:91:76:b7:
50:22:29:17:c3:b7:b4:2b:ad:ca:ad:36:a5:06:2a:
dd:5c:f2:55:53:a9:a8:de:e9:fb:ae:2b:e2:69:45:
73:9d:f0:f3:31:aa:12:3e:14:19:2d:0c:d6:13:f0:
a2:54:e9:b1:a6:c5:63:98:c4:9d:cd:46:26:e8:a9:
8a:8d:d6:76:c0:01:18:0d:85:0c:c3:a3:41:e8:bd:
f5:3d:f2:b0:de:7b:20:ba:b9:4e:c0:80:02:4e:63:
29:67:b2:d5:96:e6:59:98:a4:b2:1c:4d:7e:e6:b9:
94:73:89:01:04:42:32:eb:5c:d5:0a:20:fb:8a:54:
c4:c2:49:1a:2e:ea:7f:b0:9e:c3:79:3f:cc:6c:8a:
25:fb:d9:06:6e:41:92:fc:86:7c:0a:7e:ff:86:e6:
fa:b3:36:1e:f1:5e:c4:61:75:44:f3:90:f8:c2:65:
68:4d:ff:8e:59:0d:1b:08:3d:e3:27:9c:77:1d:5f:
d6:41:0d:21:f4:07:ac:1a:ac:97:11:92:fd:54:e7:
53:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:9B:B8:1F:51:91:58:35:73:80:DF:39:F1:97:54:64:17:A8:94:80
X509v3 Authority Key Identifier:
keyid:15:CC:88:0F:0A:12:C7:B9:4F:71:D9:B2:E5:B0:28:A7:0D:1F:A3:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FcyIDwoSx7lPcdmy5bAopw0fo0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/5986f1-863f-4eec-8551-0a8fe6434bf8/1/FcyIDwoSx7lPcdmy5bAopw0fo0o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/5986f1-863f-4eec-8551-0a8fe6434bf8/1/FcyIDwoSx7lPcdmy5bAopw0fo0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:d7:e0:a9:2d:0d:2e:77:ab:41:3e:ee:99:55:97:bf:57:56:
6e:cd:e6:ce:30:a2:e4:cd:a5:b8:b3:c8:89:06:6d:f0:72:dd:
b4:7a:d9:94:35:a1:e9:0c:88:6e:e0:a7:36:73:24:9f:09:43:
fc:fd:4f:e2:84:40:06:48:a7:be:1d:a1:67:70:db:99:e2:4e:
ce:69:30:92:3a:ee:1b:74:9e:df:39:50:02:ad:fa:ba:5a:35:
fa:88:47:34:38:75:aa:8f:a7:f7:9b:56:c4:36:88:30:db:72:
7b:b0:83:2d:22:e0:8a:b1:18:3f:a0:cb:42:32:d8:96:6c:59:
b7:77:1a:d0:17:bf:20:b0:5c:cc:80:90:af:38:a4:a6:93:f6:
c0:0a:a6:c0:12:00:f9:8d:77:5a:73:1a:73:cb:d5:85:96:91:
3d:19:04:85:63:da:eb:5a:b3:ba:70:b6:69:a4:43:a1:6d:7d:
1c:33:be:78:10:28:2e:07:39:dd:11:fa:ed:70:2e:97:62:6b:
0d:31:2d:17:34:14:92:ec:a5:9e:ab:92:35:dc:b8:ae:42:cb:
6e:d6:ec:30:d4:8c:89:df:2e:5a:43:2c:2d:fb:87:ca:b4:36:
5e:48:8e:f1:41:7c:61:02:80:5a:3a:6a:89:7e:5b:ef:22:e7:
c5:f0:9b:f2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdHsQoECdHVAnE2UDoNjHO4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1Y2M4ODBmMGExMmM3Yjk0ZjcxZDliMmU1YjAyOGE3MGQx
ZmEzNGEwHhcNMjUwNjA3MDAwMTE0WhcNMjUwNjA4MDAwMTE0WjAzMTEwLwYDVQQD
EygxODliYjgxZjUxOTE1ODM1NzM4MGRmMzlmMTk3NTQ2NDE3YTg5NDgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq4IoLh1L2cAXgWYuUOiafWpxAmYt
P/DDN/iiTTlhtpbmVWNgupXyk4SLxCNFKP0qh0e2kmJgv0SRdrdQIikXw7e0K63K
rTalBirdXPJVU6mo3un7riviaUVznfDzMaoSPhQZLQzWE/CiVOmxpsVjmMSdzUYm
6KmKjdZ2wAEYDYUMw6NB6L31PfKw3nsgurlOwIACTmMpZ7LVluZZmKSyHE1+5rmU
c4kBBEIy61zVCiD7ilTEwkkaLup/sJ7DeT/MbIol+9kGbkGS/IZ8Cn7/hub6szYe
8V7EYXVE85D4wmVoTf+OWQ0bCD3jJ5x3HV/WQQ0h9AesGqyXEZL9VOdTiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBibuB9RkVg1c4DfOfGXVGQXqJSAMB8GA1UdIwQY
MBaAFBXMiA8KEse5T3HZsuWwKKcNH6NKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmN5SUR3b1N4N2xQY2RteTViQW9wdzBmbzBvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi81OTg2ZjEtODYzZi00ZWVjLTg1NTEt
MGE4ZmU2NDM0YmY4LzEvRmN5SUR3b1N4N2xQY2RteTViQW9wdzBmbzBvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi81OTg2ZjEtODYzZi00ZWVjLTg1NTEtMGE4ZmU2NDM0YmY4
LzEvRmN5SUR3b1N4N2xQY2RteTViQW9wdzBmbzBvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEdfgqS0N
LnerQT7umVWXv1dWbs3mzjCi5M2luLPIiQZt8HLdtHrZlDWh6QyIbuCnNnMknwlD
/P1P4oRABkinvh2hZ3DbmeJOzmkwkjruG3Se3zlQAq36ulo1+ohHNDh1qo+n95tW
xDaIMNtye7CDLSLgirEYP6DLQjLYlmxZt3ca0Be/ILBczICQrzikppP2wAqmwBIA
+Y13WnMac8vVhZaRPRkEhWPa61qzunC2aaRDoW19HDO+eBAoLgc53RH67XAul2Jr
DTEtFzQUkuylnquSNdy4rkLLbtbsMNSMid8uWkMsLfuHyrQ2XkiO8UF8YQKAWjpq
iX5b7yLnxfCb8g==
-----END CERTIFICATE-----
Generated at Sat Jun 7 09:26:05 2025 by rpki-client