Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/d1c881-eb75-4413-8b64-d60aa733cd10/1/fC4N6VOoXYdf1kZKwSNQcr95xto.mft
File: fC4N6VOoXYdf1kZKwSNQcr95xto.mft (raw, json)
Hash identifier: A08qVTi2UUFEKWyqFp/v7i93mRkIHMsjQSDPtsDaFlU=
Subject key identifier: DA:23:32:10:6B:C7:35:64:20:52:AF:F4:EC:50:A0:F8:58:64:F5:2E
Authority key identifier: 7C:2E:0D:E9:53:A8:5D:87:5F:D6:46:4A:C1:23:50:72:BF:79:C6:DA
Certificate issuer: /CN=7c2e0de953a85d875fd6464ac1235072bf79c6da
Certificate serial: 019938706EC17855647DB81FC06053C923D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fC4N6VOoXYdf1kZKwSNQcr95xto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/d1c881-eb75-4413-8b64-d60aa733cd10/1/fC4N6VOoXYdf1kZKwSNQcr95xto.mft
Manifest number: 0632
Signing time: Thu 11 Sep 2025 11:01:56 +0000
Manifest this update: Thu 11 Sep 2025 11:01:56 +0000
Manifest next update: Fri 12 Sep 2025 11:01:56 +0000
Files and hashes: 1: fC4N6VOoXYdf1kZKwSNQcr95xto.crl (hash: KWh+aDPulySLF06AWnXYwP8Xh0i4guGuFAaPmD5oDJM=)
2: lnM8FCGF8fRbpieUbEQd8sXstK8.roa (hash: fZ4mA2DPYBcr3ruplZ8MmHZ+BtKN9pxbg2b5pcYF7Tg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/d1c881-eb75-4413-8b64-d60aa733cd10/1/fC4N6VOoXYdf1kZKwSNQcr95xto.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/d1c881-eb75-4413-8b64-d60aa733cd10/1/fC4N6VOoXYdf1kZKwSNQcr95xto.mft
rsync://rpki.ripe.net/repository/DEFAULT/fC4N6VOoXYdf1kZKwSNQcr95xto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 05:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:38:70:6e:c1:78:55:64:7d:b8:1f:c0:60:53:c9:23:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c2e0de953a85d875fd6464ac1235072bf79c6da
Validity
Not Before: Sep 11 11:01:56 2025 GMT
Not After : Sep 12 11:01:56 2025 GMT
Subject: CN=da2332106bc735642052aff4ec50a0f85864f52e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:09:b5:19:c4:d6:17:76:ab:b7:b9:a7:a1:40:
49:c8:77:30:b0:03:38:f2:34:ad:f6:3c:9e:f2:da:
41:f9:ab:9e:c2:5c:47:b1:b9:12:8a:6b:af:5e:d9:
26:5d:69:dc:f6:2c:67:04:e9:5c:f0:85:e8:b5:71:
f8:ff:c7:d4:95:03:66:33:1e:76:f9:70:23:b2:84:
00:f2:54:fc:7e:d5:f9:7c:7d:3d:7c:bd:e8:c1:6e:
10:84:01:b2:80:31:4e:da:44:77:aa:3e:19:a2:ea:
6e:25:7d:b1:08:32:32:13:0d:ff:49:74:64:15:fb:
03:82:2d:d3:59:20:51:aa:81:3b:a6:eb:c3:4c:11:
81:43:63:fc:93:0b:bc:81:f3:b5:ba:23:3b:ba:36:
3f:5b:b6:06:70:17:80:5f:32:b8:66:47:11:24:9a:
42:4e:7d:94:ad:e8:7a:13:05:7e:5c:7b:65:02:46:
8f:fd:99:7a:f2:d6:e6:cb:85:7d:09:e1:6c:96:22:
ef:3c:46:f9:79:a7:05:fa:6c:d5:59:43:ea:19:19:
60:b9:89:24:e1:11:26:e6:6e:d2:89:8b:f2:90:0d:
db:60:bf:b2:ba:d7:7d:f0:48:ed:3c:3c:1c:f6:49:
ac:1f:d1:a3:d8:3d:30:11:57:db:0a:69:3e:83:2d:
57:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:23:32:10:6B:C7:35:64:20:52:AF:F4:EC:50:A0:F8:58:64:F5:2E
X509v3 Authority Key Identifier:
keyid:7C:2E:0D:E9:53:A8:5D:87:5F:D6:46:4A:C1:23:50:72:BF:79:C6:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fC4N6VOoXYdf1kZKwSNQcr95xto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/d1c881-eb75-4413-8b64-d60aa733cd10/1/fC4N6VOoXYdf1kZKwSNQcr95xto.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/d1c881-eb75-4413-8b64-d60aa733cd10/1/fC4N6VOoXYdf1kZKwSNQcr95xto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:28:a7:44:93:1d:e8:ae:f9:42:86:0c:00:85:23:bc:4d:f7:
0a:a5:7d:fa:63:3e:d2:e5:73:5e:08:00:d2:ef:f6:ef:fd:a7:
3f:0a:22:33:9a:fc:df:74:59:cf:e7:a3:24:0c:a4:bd:04:08:
5a:c1:8d:e2:6c:93:20:66:0d:ef:09:8b:95:45:b9:36:01:56:
79:80:39:7d:73:86:3e:71:06:70:29:01:14:ae:95:e8:79:d2:
c5:31:d6:c1:f5:bc:f5:db:e5:10:5f:0a:3e:d3:f7:d0:e1:5d:
eb:60:cb:ba:6f:f8:8f:2c:d2:0e:0e:19:6d:4c:f4:48:9e:3d:
96:ae:89:19:43:5d:a9:b4:f0:64:0e:68:5f:04:f7:5a:1c:0c:
78:c1:0a:d2:4d:c3:f8:8b:13:89:b6:2a:10:27:81:99:b7:6f:
6e:9b:a3:ff:23:37:0b:0d:20:9e:62:32:d5:d4:c3:51:9e:44:
cc:91:bb:e3:69:49:9b:ed:8a:fd:0e:67:fc:0b:ab:d5:9f:59:
9e:2f:8a:a1:2a:92:dc:a3:66:88:11:f6:5c:c5:5e:a4:8c:69:
f7:cb:83:2e:11:96:1e:b2:82:a2:20:6d:32:1b:e0:ab:ca:56:
1b:3e:60:f9:7f:f2:b7:61:61:4b:e6:7e:83:4c:e7:14:43:bb:
ef:51:58:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 13:29:14 2025 by rpki-client