Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/5986f1-863f-4eec-8551-0a8fe6434bf8/1/FcyIDwoSx7lPcdmy5bAopw0fo0o.mft
File: FcyIDwoSx7lPcdmy5bAopw0fo0o.mft (raw, json)
Hash identifier: QjKMq0drxHOPj1ac55ANVXxiO5IXQkUkFCEX1h52vps=
Subject key identifier: 89:D2:C1:2E:2B:54:99:EE:95:8D:71:7F:56:8B:48:CC:95:D6:35:46
Authority key identifier: 15:CC:88:0F:0A:12:C7:B9:4F:71:D9:B2:E5:B0:28:A7:0D:1F:A3:4A
Certificate issuer: /CN=15cc880f0a12c7b94f71d9b2e5b028a70d1fa34a
Certificate serial: 019A2967462E00DEBA8EF25B181DE7929FCE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FcyIDwoSx7lPcdmy5bAopw0fo0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/5986f1-863f-4eec-8551-0a8fe6434bf8/1/FcyIDwoSx7lPcdmy5bAopw0fo0o.mft
Manifest number: 1700
Signing time: Tue 28 Oct 2025 06:00:25 +0000
Manifest this update: Tue 28 Oct 2025 06:00:25 +0000
Manifest next update: Wed 29 Oct 2025 06:00:25 +0000
Files and hashes: 1: FcyIDwoSx7lPcdmy5bAopw0fo0o.crl (hash: 9DwJtnB8LNp+rB0PdbXZLOlC4DiQ+nWNouymlFWp7JQ=)
2: kc-ZCrpFtG9x51LpF4W3iw7kDzs.roa (hash: aN11v2IUXg+LXUfyuCNuVklkgeIw5ckCn/DmdMCJWXk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/5986f1-863f-4eec-8551-0a8fe6434bf8/1/FcyIDwoSx7lPcdmy5bAopw0fo0o.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/5986f1-863f-4eec-8551-0a8fe6434bf8/1/FcyIDwoSx7lPcdmy5bAopw0fo0o.mft
rsync://rpki.ripe.net/repository/DEFAULT/FcyIDwoSx7lPcdmy5bAopw0fo0o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 06:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:29:67:46:2e:00:de:ba:8e:f2:5b:18:1d:e7:92:9f:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15cc880f0a12c7b94f71d9b2e5b028a70d1fa34a
Validity
Not Before: Oct 28 06:00:25 2025 GMT
Not After : Oct 29 06:00:25 2025 GMT
Subject: CN=89d2c12e2b5499ee958d717f568b48cc95d63546
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b1:de:70:c3:c8:ef:84:11:83:13:40:12:6a:
b2:22:16:6d:12:51:69:32:05:bd:69:65:ef:49:f9:
1d:fd:17:14:13:63:1d:5a:d0:0e:34:ab:b1:ab:01:
b0:f2:4f:63:a6:5a:b7:0e:55:71:f1:a8:5b:3f:52:
c3:dc:96:d1:cd:f3:5e:73:56:c6:54:90:da:7b:4c:
74:16:02:17:8f:9a:83:25:57:2a:d9:b5:27:dc:b1:
21:a0:e4:d2:fe:a1:5b:d2:eb:d2:d3:1b:f4:1a:d8:
0f:ad:72:f3:3d:81:10:17:2d:29:49:9d:23:7a:96:
7a:1e:4c:c1:6d:cb:5c:bf:d7:39:d5:21:2d:a8:1e:
f7:07:95:e4:9c:77:76:da:79:69:41:46:8f:03:06:
3d:3b:93:88:fb:f3:08:9f:db:d8:ac:58:cf:44:33:
ee:2b:bb:5f:d7:da:25:88:26:26:9f:be:12:9e:b9:
43:87:1c:8b:5b:0e:c0:7f:ed:8d:04:31:0f:94:6f:
da:f0:4a:44:b6:b1:5a:50:8c:59:1e:ce:5a:9d:94:
d2:c4:ad:db:74:11:55:bc:1f:74:40:2b:cd:a4:27:
0f:20:7d:8d:dc:57:6f:ec:1c:95:99:37:d4:c9:b9:
40:81:e1:b6:8e:aa:ff:2e:70:b9:58:47:09:14:6c:
4e:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:D2:C1:2E:2B:54:99:EE:95:8D:71:7F:56:8B:48:CC:95:D6:35:46
X509v3 Authority Key Identifier:
keyid:15:CC:88:0F:0A:12:C7:B9:4F:71:D9:B2:E5:B0:28:A7:0D:1F:A3:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FcyIDwoSx7lPcdmy5bAopw0fo0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/5986f1-863f-4eec-8551-0a8fe6434bf8/1/FcyIDwoSx7lPcdmy5bAopw0fo0o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/5986f1-863f-4eec-8551-0a8fe6434bf8/1/FcyIDwoSx7lPcdmy5bAopw0fo0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:36:48:79:8f:b5:fe:0d:fe:12:c3:95:eb:7b:fc:35:1f:8f:
ad:3c:27:a5:37:68:ce:88:d0:fa:54:b2:84:97:3d:9e:9e:a2:
a1:af:59:82:93:68:f4:4c:50:e3:a3:bf:bd:4b:e9:34:a0:00:
6a:80:18:53:66:96:90:20:01:94:ae:19:41:37:ea:b5:51:a0:
ad:9b:32:33:1b:11:b8:60:1b:98:03:0b:4c:b5:9d:11:25:3a:
ea:c7:94:ad:d3:2e:7f:13:ef:14:94:f9:a2:fd:f4:2e:ae:c6:
e3:46:54:b5:a7:6a:32:68:7f:4b:94:ad:d3:c5:19:24:32:f4:
29:2b:c2:8a:b6:8b:71:59:e0:5b:e8:6f:0b:65:84:6c:d9:67:
ba:fa:d5:f0:d0:94:cf:4f:97:8a:a8:73:f4:cf:4f:81:db:92:
24:ff:a6:e5:a8:a4:b0:47:82:79:87:f2:da:ee:fb:81:91:8b:
5c:63:b8:59:7a:d2:ca:8e:78:15:8b:55:2b:64:bb:c4:52:75:
0b:0a:2e:f4:72:b9:9e:1b:ec:c3:f4:d2:e1:df:81:ec:0f:e8:
cb:62:f0:29:30:c8:06:5f:e9:51:62:d1:06:11:17:34:77:32:
8c:ec:d3:44:c6:4e:13:c3:ec:17:89:44:05:19:7a:39:fe:7c:
c2:a8:df:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 14:42:29 2025 by rpki-client