Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/7bd927-b507-4363-9ada-dee4317f5b14/1/Fc4GtE2NxD3HQsQN472oqjdE4r0.mft
File: Fc4GtE2NxD3HQsQN472oqjdE4r0.mft (raw, json)
Hash identifier: ueGKvbDBzqvKCuewI8ykKOwaWn1ulenQs4DDF4zZafE=
Subject key identifier: 9A:4F:85:36:41:E7:A0:DC:FD:C8:30:0B:14:8C:7B:7B:38:CF:E1:F4
Authority key identifier: 15:CE:06:B4:4D:8D:C4:3D:C7:42:C4:0D:E3:BD:A8:AA:37:44:E2:BD
Certificate issuer: /CN=15ce06b44d8dc43dc742c40de3bda8aa3744e2bd
Certificate serial: 0198D54E63E37064D8023DC23036297D0081
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fc4GtE2NxD3HQsQN472oqjdE4r0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/7bd927-b507-4363-9ada-dee4317f5b14/1/Fc4GtE2NxD3HQsQN472oqjdE4r0.mft
Manifest number: 12DD
Signing time: Sat 23 Aug 2025 05:02:21 +0000
Manifest this update: Sat 23 Aug 2025 05:02:21 +0000
Manifest next update: Sun 24 Aug 2025 05:02:21 +0000
Files and hashes: 1: 52KUDdFP_rD3RmJYr6LMpUPEMmM.roa (hash: usibkDt6eCnub+7x6EZqrdrQgsmz6UQ+udh3uzbsAi0=)
2: Fc4GtE2NxD3HQsQN472oqjdE4r0.crl (hash: l1eX2cgyBDHNV5ZDPeo5vK/Q0G6CKFf3Q6sE9KM60j0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/7bd927-b507-4363-9ada-dee4317f5b14/1/Fc4GtE2NxD3HQsQN472oqjdE4r0.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/7bd927-b507-4363-9ada-dee4317f5b14/1/Fc4GtE2NxD3HQsQN472oqjdE4r0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fc4GtE2NxD3HQsQN472oqjdE4r0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:63:e3:70:64:d8:02:3d:c2:30:36:29:7d:00:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15ce06b44d8dc43dc742c40de3bda8aa3744e2bd
Validity
Not Before: Aug 23 05:02:21 2025 GMT
Not After : Aug 24 05:02:21 2025 GMT
Subject: CN=9a4f853641e7a0dcfdc8300b148c7b7b38cfe1f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:89:5c:32:9e:a8:e5:67:f3:15:36:aa:43:d3:
af:ad:f2:2e:f4:2c:f9:5a:22:12:12:dc:70:d0:a2:
a6:f4:b5:82:5a:dd:5e:eb:94:bd:83:a1:e4:8d:69:
f4:0a:0d:30:bf:10:14:69:d4:8a:b5:57:b2:ca:57:
d4:57:cf:a0:82:82:1e:65:0b:b1:42:70:9a:a8:08:
70:d0:1c:04:21:03:2b:47:bd:ae:a8:ec:bf:f7:f0:
31:ee:d0:5d:0c:3a:af:67:3b:50:ab:c2:bd:66:7b:
06:53:c3:79:06:e6:c2:e0:48:ec:0e:4d:80:4e:75:
bc:c5:16:aa:b1:13:5b:39:25:7d:96:94:be:06:6a:
e5:96:af:6d:60:0c:19:22:6e:8b:b1:6f:62:20:26:
3f:cd:88:fd:44:d7:8e:50:8a:8e:cc:36:43:91:65:
5c:8a:be:ed:14:5b:df:90:e0:30:96:00:fc:b9:d5:
3a:1d:24:c8:5a:ae:7b:be:8d:1b:40:88:15:aa:35:
d4:51:ef:12:7e:29:91:71:56:62:ca:2b:14:6c:d3:
50:b3:39:e0:e0:a0:16:59:40:b7:1a:39:6e:0d:b7:
d9:30:00:86:3a:02:95:a8:77:82:7f:a7:6c:67:73:
7b:f8:f7:14:fc:03:5b:c3:91:29:f6:ea:5a:65:50:
4c:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:4F:85:36:41:E7:A0:DC:FD:C8:30:0B:14:8C:7B:7B:38:CF:E1:F4
X509v3 Authority Key Identifier:
keyid:15:CE:06:B4:4D:8D:C4:3D:C7:42:C4:0D:E3:BD:A8:AA:37:44:E2:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fc4GtE2NxD3HQsQN472oqjdE4r0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/7bd927-b507-4363-9ada-dee4317f5b14/1/Fc4GtE2NxD3HQsQN472oqjdE4r0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/7bd927-b507-4363-9ada-dee4317f5b14/1/Fc4GtE2NxD3HQsQN472oqjdE4r0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:48:f7:9a:b6:2d:97:1c:8c:aa:32:9a:69:0f:53:1a:a7:b3:
f5:b7:7d:94:2b:93:50:b0:df:df:ee:4e:10:d9:4b:99:ce:cf:
07:9a:38:1e:14:14:17:8e:63:49:53:29:30:ac:c4:08:84:df:
66:2b:6b:19:91:c6:7f:9b:8a:19:7b:7c:7f:26:81:ac:d8:51:
da:d0:1f:e1:a1:2d:b1:15:e9:b5:b5:a4:fb:86:bf:c8:bc:fd:
38:77:76:64:fb:6d:74:b0:39:ec:c3:6f:4e:10:32:07:3b:02:
30:7b:a3:b1:3d:e1:d0:9b:bb:e7:8a:d6:63:e1:7c:03:54:9e:
8d:c1:53:b5:42:32:d1:85:82:e5:46:ab:94:25:5f:0f:4d:b8:
2d:50:59:e6:6f:8f:ec:e4:66:c9:64:38:17:ed:fd:be:91:13:
be:9b:e0:73:2c:4f:46:84:06:41:70:b3:9d:a5:da:bc:3b:80:
c3:2d:d4:92:8f:44:c4:90:97:88:1c:e6:85:c9:8b:02:a5:7d:
04:cd:8f:8a:22:b8:8c:7c:da:2d:11:6f:95:39:a3:5a:3c:50:
53:73:6d:b8:f9:53:07:59:57:6c:7c:49:d7:4e:7d:20:1a:8d:
43:4f:90:a2:9d:97:2a:f2:c2:bf:1e:bb:22:fc:9c:57:d4:1a:
c5:7a:64:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:31:02 2025 by rpki-client