Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/5986f1-863f-4eec-8551-0a8fe6434bf8/1/FcyIDwoSx7lPcdmy5bAopw0fo0o.mft
File: FcyIDwoSx7lPcdmy5bAopw0fo0o.mft (raw, json)
Hash identifier: yBP5NHN28iEGsRvUX66HNtFT/lAOTqAu9ouQQe5WWJc=
Subject key identifier: E8:22:10:03:1A:98:83:EB:57:06:E2:21:A6:EF:60:16:45:F3:CD:D1
Authority key identifier: 15:CC:88:0F:0A:12:C7:B9:4F:71:D9:B2:E5:B0:28:A7:0D:1F:A3:4A
Certificate issuer: /CN=15cc880f0a12c7b94f71d9b2e5b028a70d1fa34a
Certificate serial: 0197B7B357358456D87B0152BC0E635BBFA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FcyIDwoSx7lPcdmy5bAopw0fo0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/5986f1-863f-4eec-8551-0a8fe6434bf8/1/FcyIDwoSx7lPcdmy5bAopw0fo0o.mft
Manifest number: 15BC
Signing time: Sat 28 Jun 2025 18:01:13 +0000
Manifest this update: Sat 28 Jun 2025 18:01:13 +0000
Manifest next update: Sun 29 Jun 2025 18:01:13 +0000
Files and hashes: 1: FcyIDwoSx7lPcdmy5bAopw0fo0o.crl (hash: YLCh4iQcqVrvmNrlg1vDxk7H2TzAIL0L3cmJTQ2a3hY=)
2: kc-ZCrpFtG9x51LpF4W3iw7kDzs.roa (hash: aN11v2IUXg+LXUfyuCNuVklkgeIw5ckCn/DmdMCJWXk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/5986f1-863f-4eec-8551-0a8fe6434bf8/1/FcyIDwoSx7lPcdmy5bAopw0fo0o.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/5986f1-863f-4eec-8551-0a8fe6434bf8/1/FcyIDwoSx7lPcdmy5bAopw0fo0o.mft
rsync://rpki.ripe.net/repository/DEFAULT/FcyIDwoSx7lPcdmy5bAopw0fo0o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:57:35:84:56:d8:7b:01:52:bc:0e:63:5b:bf:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15cc880f0a12c7b94f71d9b2e5b028a70d1fa34a
Validity
Not Before: Jun 28 18:01:13 2025 GMT
Not After : Jun 29 18:01:13 2025 GMT
Subject: CN=e82210031a9883eb5706e221a6ef601645f3cdd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:8e:10:2e:6a:0e:79:ee:82:c9:3c:77:27:f1:
53:d7:ee:34:eb:4c:4a:00:fb:ef:b7:63:21:23:f0:
e8:91:39:2c:14:41:41:f6:29:f8:81:86:06:ab:c4:
b8:88:c2:d2:97:5b:16:a7:2f:10:94:e2:3c:4b:11:
ac:ad:6b:b8:6d:2e:c0:7f:85:4f:98:9c:57:58:5f:
a6:d5:be:4d:78:f3:2c:86:b2:d2:37:3a:f5:34:60:
b7:b7:19:4e:ff:83:35:74:42:06:74:b9:1b:5e:29:
f3:8b:4d:f9:a2:de:56:ca:2f:f9:0f:c4:98:33:92:
5b:58:f5:db:5f:b6:52:06:cc:a4:0f:ef:79:31:6e:
fe:2e:b0:8b:82:f6:2e:7c:b8:42:78:9f:2b:7d:c5:
31:ee:0e:13:3c:b0:f4:40:d6:ef:af:bd:87:34:6f:
8d:79:94:cd:c6:89:1d:91:87:3a:7d:8f:0e:c1:9e:
81:d3:0c:b9:ca:0b:81:d1:41:c1:e0:8b:bd:d5:76:
90:f9:e3:29:12:c9:92:e4:18:96:15:dd:52:09:2a:
08:59:ca:f0:9a:aa:c6:c9:29:71:84:5c:9c:b5:20:
6c:58:c8:2c:87:fb:1d:3f:f3:88:a0:28:8a:a5:f8:
4c:ce:89:03:c8:af:44:aa:09:5c:ab:cd:9a:3f:c4:
e2:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:22:10:03:1A:98:83:EB:57:06:E2:21:A6:EF:60:16:45:F3:CD:D1
X509v3 Authority Key Identifier:
keyid:15:CC:88:0F:0A:12:C7:B9:4F:71:D9:B2:E5:B0:28:A7:0D:1F:A3:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FcyIDwoSx7lPcdmy5bAopw0fo0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/5986f1-863f-4eec-8551-0a8fe6434bf8/1/FcyIDwoSx7lPcdmy5bAopw0fo0o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/5986f1-863f-4eec-8551-0a8fe6434bf8/1/FcyIDwoSx7lPcdmy5bAopw0fo0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:f4:9e:55:01:0c:9d:e3:e4:2a:b1:6e:7b:6c:ee:93:c7:f0:
6b:3a:e4:ad:36:cf:84:6d:d2:8e:2b:0a:76:ea:88:e7:56:d2:
80:76:c6:31:c0:a7:f8:18:36:3c:3c:3a:36:33:8a:c9:ce:f4:
c4:fa:cf:1e:c4:2b:c2:80:13:ef:64:7a:c5:c9:4d:cc:35:d4:
d4:2d:1b:44:7b:b2:3a:41:87:4f:95:9d:e1:fa:a6:24:be:c6:
ee:bf:da:fc:8a:ce:99:92:41:24:da:15:72:90:78:17:7b:b4:
52:7c:f8:8f:83:06:49:1c:c4:82:b7:02:47:c7:59:e7:81:fa:
4f:c9:e9:c1:cb:75:3a:ec:39:d7:1b:64:b0:d7:18:4c:1b:17:
5e:7f:40:a8:6d:8f:34:f2:c4:ed:b2:7f:03:0d:1c:13:92:1c:
22:af:01:2d:30:23:f9:e8:04:2c:b0:f8:86:ec:96:04:0b:ad:
29:70:74:51:74:0b:2f:ee:67:c4:d9:a8:85:47:c4:94:2f:81:
3f:55:04:c5:f1:86:b1:99:76:9e:3b:09:4e:b1:bc:1a:32:34:
c7:74:88:db:63:67:59:78:9a:13:2a:61:11:18:e9:01:2c:b5:
5b:b7:c1:85:01:e7:32:99:d5:7d:33:04:87:bf:df:37:ac:1b:
94:23:6a:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:31:42 2025 by rpki-client