Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/c8d8ad-cd72-419b-973f-56094fd6cc6c/1/FOKCz2FihLWPhexD5UyQv5WU5Jw.mft
File: FOKCz2FihLWPhexD5UyQv5WU5Jw.mft (raw, json)
Hash identifier: flO8uDYZ7rOP9QvudbxzwHkFuLKakqjErGB6r4Yk6oo=
Subject key identifier: FE:53:FA:2B:39:FF:85:5E:51:C7:1E:5C:4E:98:4F:B6:48:CD:8C:DF
Authority key identifier: 14:E2:82:CF:61:62:84:B5:8F:85:EC:43:E5:4C:90:BF:95:94:E4:9C
Certificate issuer: /CN=14e282cf616284b58f85ec43e54c90bf9594e49c
Certificate serial: 0199345BD0FDE89AACF75A459324C03D33D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FOKCz2FihLWPhexD5UyQv5WU5Jw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/c8d8ad-cd72-419b-973f-56094fd6cc6c/1/FOKCz2FihLWPhexD5UyQv5WU5Jw.mft
Manifest number: 15E6
Signing time: Wed 10 Sep 2025 16:00:56 +0000
Manifest this update: Wed 10 Sep 2025 16:00:56 +0000
Manifest next update: Thu 11 Sep 2025 16:00:56 +0000
Files and hashes: 1: FOKCz2FihLWPhexD5UyQv5WU5Jw.crl (hash: 543K9Q3WBiovfjsYIvQnREMdvsiPIxUz5gjuVCZoj1A=)
2: kh6Y6l5pM_4l1e06rKEm1LbTzj8.roa (hash: K3F9IA4gy3lGNBan+gMrBm2P+dEVmz4mQ6ObmV/2TV8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/c8d8ad-cd72-419b-973f-56094fd6cc6c/1/FOKCz2FihLWPhexD5UyQv5WU5Jw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/c8d8ad-cd72-419b-973f-56094fd6cc6c/1/FOKCz2FihLWPhexD5UyQv5WU5Jw.mft
rsync://rpki.ripe.net/repository/DEFAULT/FOKCz2FihLWPhexD5UyQv5WU5Jw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 16:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:34:5b:d0:fd:e8:9a:ac:f7:5a:45:93:24:c0:3d:33:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14e282cf616284b58f85ec43e54c90bf9594e49c
Validity
Not Before: Sep 10 16:00:56 2025 GMT
Not After : Sep 11 16:00:56 2025 GMT
Subject: CN=fe53fa2b39ff855e51c71e5c4e984fb648cd8cdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:cc:05:ce:aa:40:36:7e:96:bb:e1:75:ed:e5:
bb:73:20:24:b1:41:37:46:3e:28:e8:13:a4:c8:7b:
07:66:cf:65:b6:01:94:50:cc:7f:fe:c0:12:d2:5b:
a9:9e:69:f4:1a:6a:78:47:3b:2b:78:34:1d:33:e8:
17:3b:02:ad:ed:46:68:97:39:8b:33:be:08:ee:aa:
6d:67:ba:58:47:a8:48:ea:fe:05:4b:80:6d:d1:b0:
af:f6:0f:77:d7:69:b2:ba:d6:ab:22:79:41:07:f0:
71:a3:d5:37:09:8b:5a:23:26:65:1b:f3:93:98:ef:
8a:26:63:72:d4:21:77:26:0d:fa:27:bb:33:9e:1f:
1d:ec:df:47:a0:9c:73:12:e3:31:1b:10:0e:96:94:
d2:68:75:06:a1:a1:a7:00:f8:79:f4:cc:55:82:57:
2c:49:d1:30:6e:9e:2d:cd:9e:b0:c3:b0:a5:f9:c0:
94:42:75:f5:47:0a:87:a5:31:69:50:9a:5d:eb:a5:
33:cf:51:07:83:b0:76:25:4c:76:80:9b:ce:1d:ce:
1d:dd:7b:cf:52:05:22:14:1a:ad:3b:3f:75:c1:63:
4a:c1:b5:ae:af:a9:8a:bc:e7:2f:47:28:54:7d:1a:
f5:40:23:ff:97:63:5e:70:00:6a:47:27:68:b8:99:
96:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:53:FA:2B:39:FF:85:5E:51:C7:1E:5C:4E:98:4F:B6:48:CD:8C:DF
X509v3 Authority Key Identifier:
keyid:14:E2:82:CF:61:62:84:B5:8F:85:EC:43:E5:4C:90:BF:95:94:E4:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FOKCz2FihLWPhexD5UyQv5WU5Jw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c8d8ad-cd72-419b-973f-56094fd6cc6c/1/FOKCz2FihLWPhexD5UyQv5WU5Jw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c8d8ad-cd72-419b-973f-56094fd6cc6c/1/FOKCz2FihLWPhexD5UyQv5WU5Jw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:9e:3c:c4:6f:1a:22:df:97:9f:2f:84:f0:30:5b:fe:0a:48:
99:9c:7b:f4:51:1a:85:31:aa:0e:32:8b:3d:fe:ef:78:2b:52:
dc:7d:0a:43:c6:03:82:d3:9e:27:85:90:44:d8:81:0a:b9:aa:
82:e8:40:f2:55:02:a1:fb:dd:c9:64:5c:0b:31:10:25:c6:83:
b8:a5:e8:fb:ab:33:4f:40:45:a8:1e:72:fa:3e:31:b4:2b:5b:
8d:0b:93:55:b8:37:41:9d:d3:e3:08:b0:fe:77:72:8b:93:b4:
06:f7:7e:18:9c:02:94:7e:bf:9a:89:75:56:23:a3:66:1b:c6:
64:69:8c:92:f5:51:19:a4:c8:1f:c9:a1:35:21:04:c8:67:15:
47:16:5d:e0:55:e3:ff:57:4c:74:97:44:51:fa:cf:7e:f8:16:
8a:ac:ac:ad:ee:4f:54:0e:85:de:eb:f7:d7:a5:ba:d9:de:3a:
90:2d:87:36:92:f0:ff:0e:37:fe:04:e3:c1:39:8c:f9:ae:0c:
3a:32:f6:73:31:b7:a0:30:16:e9:7a:0e:d0:9c:69:01:b1:73:
2d:ca:f5:c1:0b:f2:55:5b:94:f1:b0:52:3a:d6:57:b2:9a:d5:
8e:59:45:a9:7f:ad:1b:6d:aa:52:6e:af:6e:bc:46:fa:b8:35:
54:27:c8:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 01:56:29 2025 by rpki-client