Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/9af87c-e272-4f84-9143-6682f7827df0/1/FczgYdJAjZqPayuUFi0fdPrD3Kw.mft
File: FczgYdJAjZqPayuUFi0fdPrD3Kw.mft (raw, json)
Hash identifier: 7gExlAETNTb7guIXJl24gx8ZTqOJQhgTjUVFRkY0gCw=
Subject key identifier: A9:5A:63:E0:14:BF:3E:2B:D5:84:1A:4D:2E:EA:A6:B3:A6:CA:E6:5A
Authority key identifier: 15:CC:E0:61:D2:40:8D:9A:8F:6B:2B:94:16:2D:1F:74:FA:C3:DC:AC
Certificate issuer: /CN=15cce061d2408d9a8f6b2b94162d1f74fac3dcac
Certificate serial: 0197B7EA902319BB6B50FE81883CC8C0A321
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FczgYdJAjZqPayuUFi0fdPrD3Kw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/9af87c-e272-4f84-9143-6682f7827df0/1/FczgYdJAjZqPayuUFi0fdPrD3Kw.mft
Manifest number: 0ED9
Signing time: Sat 28 Jun 2025 19:01:32 +0000
Manifest this update: Sat 28 Jun 2025 19:01:32 +0000
Manifest next update: Sun 29 Jun 2025 19:01:32 +0000
Files and hashes: 1: AHAoAS0NTz8rAfdAi1-FKZQiZzo.roa (hash: UPpJLytuKjP0PEtk9/ACh8gURBOrfTZUj6sBll9GGNE=)
2: FczgYdJAjZqPayuUFi0fdPrD3Kw.crl (hash: yyTk4eODSJg09ZMc4cejEZumeICyUMt8v8jg+iGBeCg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/9af87c-e272-4f84-9143-6682f7827df0/1/FczgYdJAjZqPayuUFi0fdPrD3Kw.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/9af87c-e272-4f84-9143-6682f7827df0/1/FczgYdJAjZqPayuUFi0fdPrD3Kw.mft
rsync://rpki.ripe.net/repository/DEFAULT/FczgYdJAjZqPayuUFi0fdPrD3Kw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:90:23:19:bb:6b:50:fe:81:88:3c:c8:c0:a3:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15cce061d2408d9a8f6b2b94162d1f74fac3dcac
Validity
Not Before: Jun 28 19:01:32 2025 GMT
Not After : Jun 29 19:01:32 2025 GMT
Subject: CN=a95a63e014bf3e2bd5841a4d2eeaa6b3a6cae65a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:de:a9:77:69:49:65:8c:f2:24:53:df:b4:6c:
1c:93:68:cb:19:78:19:1b:7f:e3:be:5a:d3:a1:e0:
17:c1:d0:35:27:3e:02:5d:5e:29:e7:48:87:c8:ad:
c3:9d:ff:ca:48:bc:10:4f:8d:8b:bd:a5:61:89:0d:
1f:fb:bf:33:72:b9:77:22:af:51:d4:a7:b5:af:53:
2e:e8:98:3d:b1:75:11:8c:0a:fb:83:b9:6b:8f:6e:
fb:1f:a2:ba:05:4d:09:40:28:0f:86:37:42:80:75:
2f:56:60:01:76:59:76:1b:22:a0:62:94:16:a1:f2:
e7:19:61:f7:17:77:db:f5:fd:66:21:4a:59:de:83:
53:98:36:7a:94:9f:22:5f:2a:d6:f0:ff:93:62:e4:
a7:0c:0a:6d:40:a2:d4:74:6d:35:16:5b:20:ca:85:
8a:ea:e8:57:93:ec:fb:b2:0e:dd:4d:e1:cd:c5:a8:
c8:68:06:1a:1b:be:25:27:0b:7c:61:5a:c2:c8:38:
67:c6:b3:46:9e:b1:a7:89:49:de:03:92:54:2f:9c:
93:50:7d:5e:af:78:21:2c:3f:bb:39:c9:59:f0:68:
2a:1f:65:35:aa:4d:00:a9:1d:f3:73:d4:2b:d9:f2:
bb:f2:84:16:a7:b0:d7:b2:4a:f5:9f:64:a9:87:6b:
f8:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:5A:63:E0:14:BF:3E:2B:D5:84:1A:4D:2E:EA:A6:B3:A6:CA:E6:5A
X509v3 Authority Key Identifier:
keyid:15:CC:E0:61:D2:40:8D:9A:8F:6B:2B:94:16:2D:1F:74:FA:C3:DC:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FczgYdJAjZqPayuUFi0fdPrD3Kw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/9af87c-e272-4f84-9143-6682f7827df0/1/FczgYdJAjZqPayuUFi0fdPrD3Kw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/9af87c-e272-4f84-9143-6682f7827df0/1/FczgYdJAjZqPayuUFi0fdPrD3Kw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:fa:e2:c2:47:9b:eb:16:34:1a:8d:9f:89:e2:f5:3d:f4:7f:
ba:2b:0d:d4:b5:a8:5d:8a:30:f1:6f:fa:f0:03:03:ad:b2:f4:
4a:5b:76:fb:3e:7e:fe:0f:5c:fc:de:bd:3b:8c:f1:54:42:07:
37:0f:8d:32:b0:5c:f0:1a:82:74:5d:f2:d0:82:96:4e:42:27:
58:14:46:d8:6d:eb:44:45:34:80:70:54:74:80:37:32:35:b0:
35:b1:b3:4a:b5:c1:fb:da:99:e2:0e:ac:69:15:b8:7e:17:c1:
43:42:dd:01:67:1a:32:cb:d9:ca:89:69:63:d7:b7:a6:d8:e7:
40:86:d9:1e:dc:09:52:25:78:e0:12:ed:a6:4e:4d:2a:c6:89:
ce:84:9a:ba:b7:62:96:bf:ee:68:b0:dc:7b:3a:3f:32:09:b2:
d3:ac:c2:25:eb:40:c2:fd:c1:e3:46:70:78:37:83:32:5a:5e:
8d:f9:e4:14:87:04:c8:47:f5:a6:19:8c:13:5d:65:0d:59:b0:
9a:d5:95:c1:4e:67:84:dd:18:64:e6:bf:a3:aa:eb:d0:6b:ca:
82:3f:23:2c:dd:0e:77:64:43:98:9c:77:0e:5d:58:56:b1:9f:
64:35:bc:10:10:79:51:0f:20:33:c8:14:b2:f1:42:e4:3c:7d:
03:36:e8:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:15:37 2025 by rpki-client