Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/52e0e2-478b-401d-9385-8ff6cd7747c4/1/FcGBcG9hxLc3zX63j3Iw40zfwUw.mft
File: FcGBcG9hxLc3zX63j3Iw40zfwUw.mft (raw, json)
Hash identifier: VbhzhIO+j6khEOyy7e+63abTsLKl5K9OtygIJCCZP8A=
Subject key identifier: B4:2F:11:A0:CF:C3:FF:DD:6E:F0:8D:D3:A3:DA:EC:3D:D9:4E:8D:16
Authority key identifier: 15:C1:81:70:6F:61:C4:B7:37:CD:7E:B7:8F:72:30:E3:4C:DF:C1:4C
Certificate issuer: /CN=15c181706f61c4b737cd7eb78f7230e34cdfc14c
Certificate serial: 0199221E666A815EEE06159FCDA0EF0A2728
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FcGBcG9hxLc3zX63j3Iw40zfwUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/52e0e2-478b-401d-9385-8ff6cd7747c4/1/FcGBcG9hxLc3zX63j3Iw40zfwUw.mft
Manifest number: 91
Signing time: Sun 07 Sep 2025 03:00:41 +0000
Manifest this update: Sun 07 Sep 2025 03:00:41 +0000
Manifest next update: Mon 08 Sep 2025 03:00:41 +0000
Files and hashes: 1: FcGBcG9hxLc3zX63j3Iw40zfwUw.crl (hash: LZbJpgOdvcSmzR47EBiDrUrqVSxJWpf2TZ7twxpYmXs=)
2: TODaCUho62Gehv-2PizceaR7ohg.roa (hash: EEJ5eEmNl9HYrtpyde+m1i67aXqJjeNEtfrXMxwcvR8=)
3: njg2vaPfciqJR5R5nbxzG2lmchg.roa (hash: hRVFVxSb35peMjVcWnWK+AgafRYFP/BZDTvTgJv0dRc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/52e0e2-478b-401d-9385-8ff6cd7747c4/1/FcGBcG9hxLc3zX63j3Iw40zfwUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/52e0e2-478b-401d-9385-8ff6cd7747c4/1/FcGBcG9hxLc3zX63j3Iw40zfwUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/FcGBcG9hxLc3zX63j3Iw40zfwUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:66:6a:81:5e:ee:06:15:9f:cd:a0:ef:0a:27:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15c181706f61c4b737cd7eb78f7230e34cdfc14c
Validity
Not Before: Sep 7 03:00:41 2025 GMT
Not After : Sep 8 03:00:41 2025 GMT
Subject: CN=b42f11a0cfc3ffdd6ef08dd3a3daec3dd94e8d16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:e0:7f:59:80:ce:cf:ad:b1:cc:fd:2a:5f:8b:
2b:5d:be:f9:0c:40:9a:1b:7e:d9:dc:62:3f:8a:62:
51:ed:ee:c2:f5:1d:4f:04:40:14:28:da:ae:c4:15:
88:08:90:19:15:1b:7c:24:d4:26:74:0a:ba:e3:f2:
9d:91:5c:57:ab:67:1d:2b:1e:8a:bc:6f:d5:bc:87:
8c:da:30:cb:aa:f2:b9:43:aa:9a:46:f8:a2:7d:bd:
38:a7:a8:0e:a7:91:17:c4:ac:4e:cc:66:1c:fc:af:
dd:2f:c9:91:13:68:30:d2:1e:1f:ef:a4:85:f5:b6:
db:79:4d:17:41:1e:71:6b:77:d3:30:86:f1:4a:33:
47:ef:c5:10:f3:0a:12:4f:f2:ef:dc:0d:c4:cd:8f:
6c:bf:09:18:78:be:92:3f:52:95:19:42:a5:5b:5b:
ed:cc:56:14:12:77:eb:a5:fc:81:4b:f8:ba:8a:5e:
fc:02:9b:6c:08:cc:81:c0:58:89:13:02:ba:fe:84:
2c:46:37:47:f3:d6:dc:05:76:81:af:09:af:99:84:
a7:c2:65:31:c2:b6:4f:79:71:81:f9:f3:77:f6:78:
1f:0e:e3:e0:16:46:3a:d7:ca:71:7c:a8:61:c5:5c:
56:b9:d2:ce:97:e3:93:13:da:aa:4e:8a:97:96:41:
15:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:2F:11:A0:CF:C3:FF:DD:6E:F0:8D:D3:A3:DA:EC:3D:D9:4E:8D:16
X509v3 Authority Key Identifier:
keyid:15:C1:81:70:6F:61:C4:B7:37:CD:7E:B7:8F:72:30:E3:4C:DF:C1:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FcGBcG9hxLc3zX63j3Iw40zfwUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/52e0e2-478b-401d-9385-8ff6cd7747c4/1/FcGBcG9hxLc3zX63j3Iw40zfwUw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/52e0e2-478b-401d-9385-8ff6cd7747c4/1/FcGBcG9hxLc3zX63j3Iw40zfwUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:d6:52:15:27:0b:f4:50:bc:88:72:65:26:a5:6a:66:bc:b2:
74:ed:6e:b6:4d:26:6c:30:73:9b:70:fe:fc:92:8d:3e:a1:84:
21:5e:0e:b7:cd:1b:22:f2:85:a9:03:38:e5:55:b1:d1:3d:ab:
81:73:6f:4a:8c:9a:7d:9c:11:07:23:4d:cb:d3:fa:9a:96:c9:
19:6c:73:c3:8c:e5:37:cc:03:ee:12:dc:c5:8e:2c:1b:ce:b7:
60:38:0d:8c:56:d4:e2:dd:e9:bc:ee:85:72:7c:d3:1a:6f:4f:
aa:31:95:d7:24:29:ea:9e:77:0d:be:bc:c9:e5:e3:f6:b0:67:
ed:e2:c6:17:bf:88:f2:28:44:3a:92:9e:04:36:6c:77:2b:b1:
f7:8a:64:e2:37:b6:44:54:50:57:a6:39:7e:64:15:49:42:f4:
8b:5a:ef:d7:78:75:75:dd:3d:98:cc:22:02:97:70:0f:40:c9:
80:fc:4d:be:10:9d:fb:d8:81:ab:1c:47:f8:81:77:9e:32:cf:
fb:90:8c:cb:c9:49:3c:82:74:1a:86:e5:6c:98:8c:43:1f:7a:
08:c1:3d:9a:d7:dc:50:cc:a6:d2:1d:90:ae:e6:c1:0b:70:65:
d1:4e:d1:47:8a:24:64:2e:d0:11:e7:4e:29:f0:97:ef:48:57:
ee:a2:88:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:53:29 2025 by rpki-client