
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/f32669-977e-4309-a8de-41bc28c1dcac/1/Fc09GKyTtW_SsxgAAWXc1swwE4I.mft
File: Fc09GKyTtW_SsxgAAWXc1swwE4I.mft (raw, json)
Hash identifier: iOEV8DvW1n4zQjfNTFrfoXnpyWtsGLP55gGrLZmiM9o=
Subject key identifier: 3B:8C:E9:A3:1C:60:53:2A:9E:5D:6A:34:C6:6F:F6:2D:84:0A:E3:5F
Authority key identifier: 15:CD:3D:18:AC:93:B5:6F:D2:B3:18:00:01:65:DC:D6:CC:30:13:82
Certificate issuer: /CN=15cd3d18ac93b56fd2b318000165dcd6cc301382
Certificate serial: 019921B230529DFAE209A71CD8CABDDC4DDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fc09GKyTtW_SsxgAAWXc1swwE4I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/f32669-977e-4309-a8de-41bc28c1dcac/1/Fc09GKyTtW_SsxgAAWXc1swwE4I.mft
Manifest number: 166F
Signing time: Sun 07 Sep 2025 01:02:29 +0000
Manifest this update: Sun 07 Sep 2025 01:02:29 +0000
Manifest next update: Mon 08 Sep 2025 01:02:29 +0000
Files and hashes: 1: Fc09GKyTtW_SsxgAAWXc1swwE4I.crl (hash: VX4SxZAPK/D8GgqHZtKl2KuiwR1+/ErwBB4g4MQiZjs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/f32669-977e-4309-a8de-41bc28c1dcac/1/Fc09GKyTtW_SsxgAAWXc1swwE4I.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/f32669-977e-4309-a8de-41bc28c1dcac/1/Fc09GKyTtW_SsxgAAWXc1swwE4I.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fc09GKyTtW_SsxgAAWXc1swwE4I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:02:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b2:30:52:9d:fa:e2:09:a7:1c:d8:ca:bd:dc:4d:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15cd3d18ac93b56fd2b318000165dcd6cc301382
Validity
Not Before: Sep 7 01:02:29 2025 GMT
Not After : Sep 8 01:02:29 2025 GMT
Subject: CN=3b8ce9a31c60532a9e5d6a34c66ff62d840ae35f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:46:d3:7f:6a:c5:5e:59:e7:e5:15:44:f8:b9:
52:49:5d:61:12:16:fc:d7:c4:40:e6:a8:dc:46:2a:
eb:9c:74:3c:02:99:1c:0d:13:d3:27:c0:a0:4e:26:
c7:37:3c:28:c1:f6:cd:96:e4:07:df:42:28:07:17:
9f:a4:40:a2:1b:bb:84:27:ce:ac:b0:8b:61:80:8c:
26:e4:b6:ef:57:9a:64:5f:4f:8c:5c:f8:13:3c:c9:
52:61:c4:2e:92:b0:59:04:17:d0:79:42:48:f7:17:
65:32:4b:ed:6a:55:64:5a:4a:5d:ee:24:05:32:5b:
a2:31:93:5c:a3:35:72:89:73:19:6f:69:cd:a5:0c:
f2:df:ce:49:b8:ad:22:35:8a:4e:2a:b7:32:ee:72:
e2:14:bb:db:21:81:50:19:41:4f:55:b5:39:9c:08:
73:71:c4:b3:3b:18:41:54:66:0f:4b:20:09:74:4d:
c9:35:78:5a:45:5c:43:28:fe:1e:37:6c:2b:e6:e8:
a2:5c:88:e0:e3:47:61:03:a6:84:62:12:e7:10:9b:
8c:bc:45:8c:e3:99:f2:44:4b:c0:3f:45:82:fc:53:
a7:06:f9:6d:aa:45:ab:f1:2d:2b:43:59:d3:db:71:
2e:cd:10:a0:22:01:a2:5f:24:19:44:11:1d:40:5b:
02:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:8C:E9:A3:1C:60:53:2A:9E:5D:6A:34:C6:6F:F6:2D:84:0A:E3:5F
X509v3 Authority Key Identifier:
keyid:15:CD:3D:18:AC:93:B5:6F:D2:B3:18:00:01:65:DC:D6:CC:30:13:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fc09GKyTtW_SsxgAAWXc1swwE4I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f32669-977e-4309-a8de-41bc28c1dcac/1/Fc09GKyTtW_SsxgAAWXc1swwE4I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f32669-977e-4309-a8de-41bc28c1dcac/1/Fc09GKyTtW_SsxgAAWXc1swwE4I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:aa:db:99:de:19:62:75:8f:c8:23:06:a9:e4:d9:51:b2:61:
e8:6c:69:23:ce:6d:14:77:ca:d9:33:90:0a:ce:09:45:e0:d5:
cb:55:43:6c:1d:e4:fe:84:24:61:95:0e:c6:b8:3c:a6:e4:61:
58:ad:f2:88:ec:d6:ee:ba:4f:7e:5d:83:07:c8:3b:33:f2:36:
e0:6a:d3:b0:e9:94:9a:a4:0d:ee:b3:32:3f:d4:e2:0d:f3:01:
c0:5e:0a:45:28:7f:8d:b2:fd:5f:02:e0:c6:1c:f3:59:47:ae:
84:40:ff:27:af:b6:33:60:84:de:9f:09:48:cd:e5:24:cc:f4:
3a:48:23:d1:1c:78:53:56:0c:bc:f6:c7:58:61:fa:90:7e:c9:
70:b6:76:26:7f:ba:3f:d0:15:78:a1:ef:8e:56:a3:75:ff:d3:
4a:ec:a4:5e:d3:c0:6b:8f:f7:f2:94:bf:9f:61:7a:c6:ca:7e:
0c:92:19:bc:f0:a4:46:1c:c8:bc:3a:a3:15:82:8d:6d:66:72:
76:ab:1c:b1:55:6a:b0:57:4d:9b:23:4a:42:aa:32:39:c7:df:
4f:bc:b5:19:08:7f:cb:d2:80:15:10:48:d8:11:34:f9:48:8a:
9e:3f:72:67:a7:f4:2e:f1:21:a0:be:52:7a:d1:ea:7c:9c:df:
1f:53:47:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:07:35 2025 by rpki-client