Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/52e0e2-478b-401d-9385-8ff6cd7747c4/1/FcGBcG9hxLc3zX63j3Iw40zfwUw.mft
File: FcGBcG9hxLc3zX63j3Iw40zfwUw.mft (raw, json)
Hash identifier: gm0KqaOZ/EIQ1+2D7Qc3K01DUkZWdbBWm+VnRxJXge8=
Subject key identifier: 45:7A:F8:BC:6F:45:0E:27:04:EE:AE:23:DC:84:2A:45:EC:13:B1:B7
Authority key identifier: 15:C1:81:70:6F:61:C4:B7:37:CD:7E:B7:8F:72:30:E3:4C:DF:C1:4C
Certificate issuer: /CN=15c181706f61c4b737cd7eb78f7230e34cdfc14c
Certificate serial: 019A7225C343FFBC4A786932778F14007037
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FcGBcG9hxLc3zX63j3Iw40zfwUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/52e0e2-478b-401d-9385-8ff6cd7747c4/1/FcGBcG9hxLc3zX63j3Iw40zfwUw.mft
Manifest number: 013F
Signing time: Tue 11 Nov 2025 09:01:08 +0000
Manifest this update: Tue 11 Nov 2025 09:01:08 +0000
Manifest next update: Wed 12 Nov 2025 09:01:08 +0000
Files and hashes: 1: FcGBcG9hxLc3zX63j3Iw40zfwUw.crl (hash: KS9OVQDiskR8spTSutCua4onGbrtdDtFDo/84Kx+u5A=)
2: TODaCUho62Gehv-2PizceaR7ohg.roa (hash: EEJ5eEmNl9HYrtpyde+m1i67aXqJjeNEtfrXMxwcvR8=)
3: njg2vaPfciqJR5R5nbxzG2lmchg.roa (hash: hRVFVxSb35peMjVcWnWK+AgafRYFP/BZDTvTgJv0dRc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/52e0e2-478b-401d-9385-8ff6cd7747c4/1/FcGBcG9hxLc3zX63j3Iw40zfwUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/52e0e2-478b-401d-9385-8ff6cd7747c4/1/FcGBcG9hxLc3zX63j3Iw40zfwUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/FcGBcG9hxLc3zX63j3Iw40zfwUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:c3:43:ff:bc:4a:78:69:32:77:8f:14:00:70:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15c181706f61c4b737cd7eb78f7230e34cdfc14c
Validity
Not Before: Nov 11 09:01:08 2025 GMT
Not After : Nov 12 09:01:08 2025 GMT
Subject: CN=457af8bc6f450e2704eeae23dc842a45ec13b1b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:cc:9c:8e:2f:2b:5e:0e:81:7f:c4:78:c5:a5:
36:31:27:39:00:15:7d:60:cd:41:34:75:7a:5f:c9:
a4:1f:ad:92:8c:89:dc:4b:47:86:ba:47:8e:a2:ca:
01:64:b0:18:ef:d2:a3:fe:86:3c:9d:e9:62:50:4b:
67:89:a4:23:a5:19:f6:4b:ee:eb:cb:51:e5:aa:1f:
54:72:df:54:16:77:92:7f:8b:07:4b:8c:7c:c9:b6:
2b:2a:d1:0f:bd:e1:21:94:21:b7:a0:fa:11:05:d6:
b5:dc:03:43:4d:d4:36:18:c4:ff:45:2c:4d:8e:5a:
e1:71:5a:91:b8:f2:da:58:8a:c0:93:27:3d:b2:cf:
57:bd:09:f2:37:9c:ff:40:34:9a:11:6f:b0:74:cc:
ef:b5:0a:e6:da:a6:7c:29:c3:12:96:be:97:db:00:
cb:3b:8b:c7:f0:f5:64:ad:5b:14:82:e1:fa:a0:87:
d6:73:28:dc:a6:c5:49:4d:17:29:fd:4d:b8:a7:e8:
5b:ea:c8:b0:43:bc:7f:77:2e:c1:17:54:0a:1d:8c:
3d:b1:46:78:d4:65:47:af:e4:02:db:23:dc:1b:18:
4d:72:72:05:94:f7:5c:82:06:ce:f8:db:d4:67:50:
92:40:7f:2f:f7:61:20:9d:0e:01:08:ba:ec:d3:c6:
2f:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:7A:F8:BC:6F:45:0E:27:04:EE:AE:23:DC:84:2A:45:EC:13:B1:B7
X509v3 Authority Key Identifier:
keyid:15:C1:81:70:6F:61:C4:B7:37:CD:7E:B7:8F:72:30:E3:4C:DF:C1:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FcGBcG9hxLc3zX63j3Iw40zfwUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/52e0e2-478b-401d-9385-8ff6cd7747c4/1/FcGBcG9hxLc3zX63j3Iw40zfwUw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/52e0e2-478b-401d-9385-8ff6cd7747c4/1/FcGBcG9hxLc3zX63j3Iw40zfwUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:91:8c:cf:75:e8:28:e4:4b:3e:50:d9:01:81:5a:24:db:38:
2f:3c:a0:d4:ca:2a:37:85:1b:67:22:6c:f6:8a:b6:bc:48:61:
e7:fc:f1:f6:73:f4:aa:cc:69:d4:1f:81:a9:52:4d:dd:d3:d7:
34:84:41:32:d5:be:a5:18:3a:a5:d0:f8:78:b1:4e:cd:13:6b:
5d:a8:af:a4:f9:b8:e8:b4:c5:d8:55:20:48:4a:0a:b8:e8:eb:
7f:b6:98:dd:9a:2d:cc:44:80:12:fc:d2:c8:bf:de:9d:8b:f8:
52:84:dc:ce:91:f5:8f:be:80:55:5a:57:3e:f6:e6:05:0d:55:
c6:6b:41:d4:f9:14:9c:24:20:e1:d7:29:ce:78:3e:2a:30:f4:
75:c9:25:ec:47:37:a6:7a:61:ad:98:01:f6:02:2b:d6:a9:f6:
fb:14:24:af:f2:4c:d0:45:74:e9:76:6f:fa:d1:35:a9:ab:09:
01:32:9e:86:76:ff:4c:ef:9e:e7:de:db:34:d1:bf:a6:d4:3a:
7d:25:1e:d9:93:fe:6e:e5:d1:04:26:20:64:fb:95:b4:86:a3:
ac:e3:18:c8:56:ec:a3:08:1c:eb:36:73:fc:03:3a:ba:87:2c:
ae:b8:9b:92:8c:c8:22:eb:cf:89:85:29:0c:4d:9c:ab:55:8c:
e3:85:1d:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:51:42 2025 by rpki-client