Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/6f8157-8d76-4d3e-8938-7e53d1c558d9/1/FcGKKQjOvZCF4BJmuwL7ivIkdzU.mft
File: FcGKKQjOvZCF4BJmuwL7ivIkdzU.mft (raw, json)
Hash identifier: tabxEwjI71p0/mm3W+2nsV4YTZsorW+DsK+bgrmQ8o0=
Subject key identifier: BF:EF:8D:B1:C8:7F:52:C4:24:1F:E2:F0:8C:29:E5:A1:95:F9:4B:E9
Authority key identifier: 15:C1:8A:29:08:CE:BD:90:85:E0:12:66:BB:02:FB:8A:F2:24:77:35
Certificate issuer: /CN=15c18a2908cebd9085e01266bb02fb8af2247735
Certificate serial: 019A2289F13270A2D420E2B511EC99E39211
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FcGKKQjOvZCF4BJmuwL7ivIkdzU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/6f8157-8d76-4d3e-8938-7e53d1c558d9/1/FcGKKQjOvZCF4BJmuwL7ivIkdzU.mft
Manifest number: 01AB
Signing time: Sun 26 Oct 2025 22:00:56 +0000
Manifest this update: Sun 26 Oct 2025 22:00:56 +0000
Manifest next update: Mon 27 Oct 2025 22:00:56 +0000
Files and hashes: 1: 2KNjtYfkkvpIBPVL-Dk7JZfM4jU.roa (hash: YZgrPPEN8zGqhO8cwF6VGe00Dd89Opm5ALHWcKmIHgM=)
2: FcGKKQjOvZCF4BJmuwL7ivIkdzU.crl (hash: 9vMHVLkbkDSnGDUtn7cUb1LIMc3RMDKHY6rdBla+o/M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/6f8157-8d76-4d3e-8938-7e53d1c558d9/1/FcGKKQjOvZCF4BJmuwL7ivIkdzU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/6f8157-8d76-4d3e-8938-7e53d1c558d9/1/FcGKKQjOvZCF4BJmuwL7ivIkdzU.mft
rsync://rpki.ripe.net/repository/DEFAULT/FcGKKQjOvZCF4BJmuwL7ivIkdzU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:89:f1:32:70:a2:d4:20:e2:b5:11:ec:99:e3:92:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15c18a2908cebd9085e01266bb02fb8af2247735
Validity
Not Before: Oct 26 22:00:56 2025 GMT
Not After : Oct 27 22:00:56 2025 GMT
Subject: CN=bfef8db1c87f52c4241fe2f08c29e5a195f94be9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:48:4a:86:23:17:53:0e:91:b3:62:fd:13:d4:
ac:de:bd:f3:05:bd:68:11:40:61:04:99:b1:a5:b1:
74:fb:3d:3a:08:72:e2:71:e7:7c:76:87:6b:d7:8f:
18:50:68:6f:64:1f:9e:f4:75:92:78:27:f4:15:0b:
ea:35:a4:1c:cc:e5:3d:70:95:31:ec:9d:7c:3b:d4:
4f:c2:99:ad:2f:9a:dc:82:77:4e:22:56:54:ae:a0:
a2:0c:83:f3:2d:90:81:b0:d5:7c:4b:68:cf:d2:d4:
db:22:f7:07:08:21:de:7c:64:b1:87:ad:e6:91:18:
a1:9c:13:4b:17:4e:59:c4:db:ed:9c:81:71:e8:90:
6e:e6:89:54:72:c6:98:ce:81:ef:f4:9a:37:16:1f:
ac:fc:93:2c:3d:c8:91:02:79:db:2c:37:8e:7e:47:
18:3e:16:00:08:da:36:92:6f:7d:db:37:b9:f6:c2:
8b:58:ca:56:3a:08:8f:22:3f:3a:e7:ad:a0:87:4f:
b8:97:7f:e7:99:11:29:ea:85:c5:43:bb:ba:7a:73:
63:d8:04:39:54:5d:d8:91:84:45:11:37:21:49:77:
8f:8e:26:28:3a:1b:1f:f6:94:73:a8:db:df:62:46:
be:61:85:f1:b2:c8:e2:d6:a3:0e:7c:5f:e5:6e:7a:
bf:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:EF:8D:B1:C8:7F:52:C4:24:1F:E2:F0:8C:29:E5:A1:95:F9:4B:E9
X509v3 Authority Key Identifier:
keyid:15:C1:8A:29:08:CE:BD:90:85:E0:12:66:BB:02:FB:8A:F2:24:77:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FcGKKQjOvZCF4BJmuwL7ivIkdzU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6f8157-8d76-4d3e-8938-7e53d1c558d9/1/FcGKKQjOvZCF4BJmuwL7ivIkdzU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6f8157-8d76-4d3e-8938-7e53d1c558d9/1/FcGKKQjOvZCF4BJmuwL7ivIkdzU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:4a:1f:bb:4e:b8:52:56:b2:33:9c:98:5d:c4:d5:6d:c7:ac:
7b:8f:94:e6:10:3c:76:32:f7:80:3e:84:e4:5b:8f:25:1c:e3:
55:b6:a2:29:55:60:d4:95:f4:c7:4d:03:56:ce:b5:b2:aa:bd:
2e:87:7e:d6:a2:fd:da:dc:9e:21:bc:6d:e0:9a:46:bb:43:80:
b9:95:b8:d7:c8:4d:dc:83:68:6f:ba:68:b2:3f:81:c2:4e:90:
bb:c5:19:8f:96:4f:39:28:a0:93:70:a9:92:2b:ef:47:c5:22:
1a:de:94:39:1a:79:66:6d:4e:b7:f9:4c:d3:a6:08:61:ce:3f:
a4:a3:77:e7:0d:ab:73:62:0a:8e:69:dd:dd:76:fc:96:17:6b:
f6:69:37:98:7c:30:f6:0d:68:dd:7f:d1:96:53:03:a5:ab:e4:
6d:7d:d9:24:29:be:3c:ad:d1:bf:86:20:7c:64:67:f3:4f:98:
21:e8:77:34:56:4b:3b:34:80:0a:0b:3f:5a:0e:3a:0d:57:dd:
8a:83:ed:2a:5a:45:3d:b1:01:f1:f4:9b:8a:95:a2:17:52:0a:
6b:1d:df:bb:8a:91:19:b5:a4:00:ac:a7:46:88:c7:a0:6e:c4:
54:64:60:43:89:76:25:19:ad:67:1a:6e:35:2d:b9:88:d1:f3:
ba:cb:54:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 04:37:44 2025 by rpki-client