Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/5986f1-863f-4eec-8551-0a8fe6434bf8/1/FcyIDwoSx7lPcdmy5bAopw0fo0o.mft
File: FcyIDwoSx7lPcdmy5bAopw0fo0o.mft (raw, json)
Hash identifier: SxLsByElpwE2XVr2RPbxjgQNBfVeB164SUa+IH4f3E8=
Subject key identifier: BF:A9:56:BF:2F:09:49:F2:11:91:63:36:86:C3:EB:DB:22:47:AD:8E
Authority key identifier: 15:CC:88:0F:0A:12:C7:B9:4F:71:D9:B2:E5:B0:28:A7:0D:1F:A3:4A
Certificate issuer: /CN=15cc880f0a12c7b94f71d9b2e5b028a70d1fa34a
Certificate serial: 0198D583F1073F2BB9180F5BD3421C4C04EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FcyIDwoSx7lPcdmy5bAopw0fo0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/5986f1-863f-4eec-8551-0a8fe6434bf8/1/FcyIDwoSx7lPcdmy5bAopw0fo0o.mft
Manifest number: 1650
Signing time: Sat 23 Aug 2025 06:00:50 +0000
Manifest this update: Sat 23 Aug 2025 06:00:50 +0000
Manifest next update: Sun 24 Aug 2025 06:00:50 +0000
Files and hashes: 1: FcyIDwoSx7lPcdmy5bAopw0fo0o.crl (hash: OAV4c1K4Rr/2Uf92hxesa3ADi01HxO4fBcQw3vOfICs=)
2: kc-ZCrpFtG9x51LpF4W3iw7kDzs.roa (hash: aN11v2IUXg+LXUfyuCNuVklkgeIw5ckCn/DmdMCJWXk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/5986f1-863f-4eec-8551-0a8fe6434bf8/1/FcyIDwoSx7lPcdmy5bAopw0fo0o.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/5986f1-863f-4eec-8551-0a8fe6434bf8/1/FcyIDwoSx7lPcdmy5bAopw0fo0o.mft
rsync://rpki.ripe.net/repository/DEFAULT/FcyIDwoSx7lPcdmy5bAopw0fo0o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:f1:07:3f:2b:b9:18:0f:5b:d3:42:1c:4c:04:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15cc880f0a12c7b94f71d9b2e5b028a70d1fa34a
Validity
Not Before: Aug 23 06:00:50 2025 GMT
Not After : Aug 24 06:00:50 2025 GMT
Subject: CN=bfa956bf2f0949f21191633686c3ebdb2247ad8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ae:79:e9:35:5a:e8:07:58:d1:95:00:4e:e0:
b9:21:4d:76:11:58:25:b9:d3:e8:fe:0e:2f:23:91:
9b:de:9f:82:ed:9d:91:64:ea:7a:37:28:bd:cb:e8:
d7:b3:b8:e6:16:dc:aa:15:62:80:9c:23:dc:55:a7:
81:ef:8c:b3:4b:86:89:a6:e6:8e:05:5f:c6:fc:a6:
9f:23:2a:4e:b4:98:80:84:e7:11:e9:a2:20:e7:92:
46:b7:a7:f0:2c:fe:fa:6c:5c:e2:ed:7f:3f:a5:e9:
42:1e:d1:2e:29:15:d7:9a:a9:d7:53:11:b1:34:27:
8e:00:bd:c1:0f:1e:68:bd:98:84:3b:b2:3d:52:8c:
2a:fc:12:24:8f:0b:91:b1:ff:aa:c3:37:94:2e:80:
95:74:69:cc:31:ac:a7:e3:43:83:8d:58:0e:f3:07:
38:cb:ef:bc:d3:da:53:5c:6e:0c:44:8f:e5:34:f4:
76:b6:c9:54:8c:70:c7:05:4d:3f:c0:c1:91:25:bc:
ad:4c:f0:be:e2:be:62:a2:ec:ae:f7:6c:38:ff:12:
8b:7c:72:ac:a2:e7:8b:1d:58:a6:88:88:f6:e7:e7:
2a:aa:ef:90:b5:26:48:40:c3:61:1e:cc:b4:24:fe:
72:b0:09:5a:6d:b6:82:d1:1e:a5:44:e2:62:a6:de:
ae:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:A9:56:BF:2F:09:49:F2:11:91:63:36:86:C3:EB:DB:22:47:AD:8E
X509v3 Authority Key Identifier:
keyid:15:CC:88:0F:0A:12:C7:B9:4F:71:D9:B2:E5:B0:28:A7:0D:1F:A3:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FcyIDwoSx7lPcdmy5bAopw0fo0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/5986f1-863f-4eec-8551-0a8fe6434bf8/1/FcyIDwoSx7lPcdmy5bAopw0fo0o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/5986f1-863f-4eec-8551-0a8fe6434bf8/1/FcyIDwoSx7lPcdmy5bAopw0fo0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:23:60:b6:3c:29:bd:41:c1:7f:c4:4c:70:6c:e7:52:e0:0f:
1f:fc:fa:43:60:d5:02:ec:03:69:ce:13:1e:e8:83:99:a2:15:
96:44:a3:fd:ac:99:70:53:fd:0e:cc:ae:a5:23:f1:9e:87:25:
d1:6c:cf:97:a5:41:5a:61:71:7d:6c:5a:6b:d4:72:96:62:dc:
e0:6a:f7:be:23:b0:ef:ab:dc:b5:f2:31:eb:10:6a:cc:85:9e:
d2:29:20:f2:15:29:a8:33:a9:60:cd:18:83:91:91:6f:a4:31:
60:fa:44:9f:aa:28:2a:12:aa:0f:80:91:92:f7:dd:f9:45:ef:
9f:e7:78:21:8e:75:44:ae:22:96:9d:cf:7f:a3:4e:15:00:a9:
e6:c7:54:7c:88:73:05:30:64:8b:4f:14:ef:31:f6:19:1f:af:
fd:c4:2b:59:cd:02:5d:3f:99:f6:5d:b9:a1:47:81:7a:b1:8b:
4c:56:93:74:4d:cb:e9:29:a0:66:e7:26:7d:2e:be:dc:89:00:
5c:26:e2:88:00:e2:2a:41:0c:57:19:a5:e3:99:34:52:ff:9a:
ac:18:42:a6:9a:82:42:4c:d8:b1:d1:15:b7:7a:fc:f9:65:5f:
5a:62:70:69:8a:9b:75:0e:8f:34:91:03:e6:6a:da:dd:cd:a2:
a8:6d:9e:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:23:43 2025 by rpki-client