Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/7a1aee-671b-4f39-b4dd-212a9f310622/1/fcVVNSMj28woe4fg1qSBSmOrvUY.mft
File: fcVVNSMj28woe4fg1qSBSmOrvUY.mft (raw, json)
Hash identifier: LtOqyrCBpujvlT5BgoVEa8m8q87d7LWav7E5X/InlKE=
Subject key identifier: 4A:E7:3E:9D:5A:67:47:6F:8E:88:1A:15:BA:73:D3:EE:AE:70:97:68
Authority key identifier: 7D:C5:55:35:23:23:DB:CC:28:7B:87:E0:D6:A4:81:4A:63:AB:BD:46
Certificate issuer: /CN=7dc555352323dbcc287b87e0d6a4814a63abbd46
Certificate serial: 01992C34BBBCF6F9CEF55BAD26831D302CE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fcVVNSMj28woe4fg1qSBSmOrvUY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/7a1aee-671b-4f39-b4dd-212a9f310622/1/fcVVNSMj28woe4fg1qSBSmOrvUY.mft
Manifest number: 0354
Signing time: Tue 09 Sep 2025 02:01:17 +0000
Manifest this update: Tue 09 Sep 2025 02:01:17 +0000
Manifest next update: Wed 10 Sep 2025 02:01:17 +0000
Files and hashes: 1: RdOdP3DlBfXpnxBBT7lO73v8oG8.roa (hash: 9+BQ0Xt7iU/x6pUN6YyjEsb6BHBaV2Ejuirq22nlRh8=)
2: fcVVNSMj28woe4fg1qSBSmOrvUY.crl (hash: GJCb+newBG2sk7f5MAEQC/hDa2IAejhK8fo62el9vVU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/7a1aee-671b-4f39-b4dd-212a9f310622/1/fcVVNSMj28woe4fg1qSBSmOrvUY.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/7a1aee-671b-4f39-b4dd-212a9f310622/1/fcVVNSMj28woe4fg1qSBSmOrvUY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fcVVNSMj28woe4fg1qSBSmOrvUY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 02:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2c:34:bb:bc:f6:f9:ce:f5:5b:ad:26:83:1d:30:2c:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7dc555352323dbcc287b87e0d6a4814a63abbd46
Validity
Not Before: Sep 9 02:01:17 2025 GMT
Not After : Sep 10 02:01:17 2025 GMT
Subject: CN=4ae73e9d5a67476f8e881a15ba73d3eeae709768
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:33:5b:bd:92:42:d0:2f:7e:ff:26:e2:89:6e:
b9:62:5e:9a:df:d9:e9:0c:4a:01:62:91:e1:9d:42:
c6:7e:ed:5a:23:f1:de:ee:87:ad:de:bf:35:6e:3d:
1b:63:e4:45:ad:e9:07:68:78:4f:65:fe:1a:36:82:
53:1a:71:1a:5c:5f:1c:0a:f2:09:63:c4:ad:39:11:
58:f0:8a:bf:93:6b:6a:cd:a4:5b:49:23:61:0c:50:
95:0c:ad:21:8f:36:8c:90:19:0f:58:85:a2:28:fe:
86:6e:40:0f:c7:b6:03:e0:40:b9:38:26:34:64:c7:
d3:70:be:24:fb:b6:96:ef:e4:4f:00:b3:f0:8c:19:
fc:b7:80:d0:b6:5d:95:17:a0:6b:e9:23:ca:6c:54:
9e:7b:a7:e2:97:b3:55:bd:d6:fb:8d:24:31:4d:02:
4a:ea:3c:f2:20:0a:fe:ed:8f:ca:29:6e:8b:99:46:
1b:de:73:68:89:54:13:ee:a4:08:09:b3:ed:1f:7d:
df:89:95:88:60:8d:72:28:85:36:c2:4e:bb:78:e2:
a1:a2:87:ee:ac:d5:24:01:62:3b:7f:87:15:96:f6:
28:c6:e0:53:bf:53:8d:0f:2c:f3:58:d4:f0:56:be:
12:e5:93:98:c4:a8:44:34:e8:61:0f:a3:6c:34:fa:
15:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:E7:3E:9D:5A:67:47:6F:8E:88:1A:15:BA:73:D3:EE:AE:70:97:68
X509v3 Authority Key Identifier:
keyid:7D:C5:55:35:23:23:DB:CC:28:7B:87:E0:D6:A4:81:4A:63:AB:BD:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fcVVNSMj28woe4fg1qSBSmOrvUY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/7a1aee-671b-4f39-b4dd-212a9f310622/1/fcVVNSMj28woe4fg1qSBSmOrvUY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/7a1aee-671b-4f39-b4dd-212a9f310622/1/fcVVNSMj28woe4fg1qSBSmOrvUY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:ba:28:05:d2:47:d9:60:99:32:b2:b5:16:17:44:b3:c1:3a:
07:6b:cd:e0:20:3e:34:21:2d:70:4c:ef:33:82:7a:bd:6e:e2:
0a:e6:a1:64:22:4c:ec:7e:f2:1b:bf:bf:c3:7f:12:c8:4a:e2:
bb:b0:3d:e5:b0:1a:71:bf:7b:ed:c9:ad:b3:a3:92:eb:e3:fc:
59:e4:5d:10:f8:6b:05:bf:ab:d0:65:83:17:58:aa:b9:ad:42:
e3:c1:26:02:dc:d4:a2:1f:92:14:f8:30:0b:ef:cd:ee:01:33:
f4:64:79:77:5e:2c:a0:33:d4:78:b5:95:87:5f:18:99:9a:28:
6c:3d:37:d0:6f:99:f3:6f:9d:55:ab:fc:66:f1:4a:ac:21:67:
ce:64:5d:94:15:72:ae:38:65:f9:dd:e8:a4:e2:08:60:f1:07:
ca:04:f9:1a:83:a3:1e:0f:1c:41:8d:ef:77:f9:55:e5:e7:24:
e5:bb:6c:4f:79:63:a3:31:7a:90:64:88:59:8b:b0:00:76:d5:
ce:0e:ce:df:56:a7:8c:01:de:00:5e:b2:c7:8b:ea:33:be:e4:
1e:0d:c5:18:8a:40:26:c9:a8:d5:3d:f6:ce:16:9d:82:0d:24:
66:19:94:10:d2:7f:eb:57:b5:46:b3:4a:7e:a1:61:bf:a2:4b:
ea:73:fb:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 09:30:07 2025 by rpki-client