Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/b55522-0b89-400b-92cc-7b3cc228271d/1/FcTIqdLB0OCm9RZuPqdDZ4Y9zr8.mft
File: FcTIqdLB0OCm9RZuPqdDZ4Y9zr8.mft (raw, json)
Hash identifier: t57d6CkqPV0NT7gTYwKztfPxUba79M0fH0gLSb8jmIM=
Subject key identifier: F9:56:FD:0D:8F:2F:9C:30:0E:33:42:29:96:B1:9B:E0:F6:56:11:1C
Authority key identifier: 15:C4:C8:A9:D2:C1:D0:E0:A6:F5:16:6E:3E:A7:43:67:86:3D:CE:BF
Certificate issuer: /CN=15c4c8a9d2c1d0e0a6f5166e3ea74367863dcebf
Certificate serial: 0198D4E06AA6D931D5D27E5A86A058948F53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FcTIqdLB0OCm9RZuPqdDZ4Y9zr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/b55522-0b89-400b-92cc-7b3cc228271d/1/FcTIqdLB0OCm9RZuPqdDZ4Y9zr8.mft
Manifest number: 1565
Signing time: Sat 23 Aug 2025 03:02:13 +0000
Manifest this update: Sat 23 Aug 2025 03:02:13 +0000
Manifest next update: Sun 24 Aug 2025 03:02:13 +0000
Files and hashes: 1: CJUlJDy-56wu6zeQ3niPJdV4COg.roa (hash: L4zbh11FM5FRXP4RaQH2Hk+P+CwUeKC3KbUfcsAdfU4=)
2: FcTIqdLB0OCm9RZuPqdDZ4Y9zr8.crl (hash: Sjl2xGLbHQu5UZNrcccCts/6EhNYL7hQfzzvHuN6gVg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/b55522-0b89-400b-92cc-7b3cc228271d/1/FcTIqdLB0OCm9RZuPqdDZ4Y9zr8.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/b55522-0b89-400b-92cc-7b3cc228271d/1/FcTIqdLB0OCm9RZuPqdDZ4Y9zr8.mft
rsync://rpki.ripe.net/repository/DEFAULT/FcTIqdLB0OCm9RZuPqdDZ4Y9zr8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:6a:a6:d9:31:d5:d2:7e:5a:86:a0:58:94:8f:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15c4c8a9d2c1d0e0a6f5166e3ea74367863dcebf
Validity
Not Before: Aug 23 03:02:13 2025 GMT
Not After : Aug 24 03:02:13 2025 GMT
Subject: CN=f956fd0d8f2f9c300e33422996b19be0f656111c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:89:27:4e:3c:bc:91:77:5a:89:23:a6:9e:22:
a9:fd:51:d4:34:e5:f9:f1:ea:55:0b:f9:c2:b3:09:
9c:94:cd:dc:dd:f3:3c:ef:5f:4d:10:91:4a:e2:e0:
05:01:98:32:c8:30:ed:73:40:bf:77:45:f6:f3:59:
63:8b:34:df:ff:1c:00:98:c9:bd:3a:18:c4:a7:60:
f3:38:16:44:d7:b7:fd:e5:80:68:82:47:b9:54:d5:
e4:b6:c0:a3:01:d8:92:18:34:f0:67:6c:d8:f1:40:
30:c8:60:f5:99:17:27:de:92:83:3b:65:a5:b7:4b:
82:28:fb:4d:67:2c:d3:fd:c9:82:cf:4e:3b:f6:39:
96:46:10:bd:4b:30:9c:3e:0e:e6:7b:d1:60:ef:ff:
f0:3b:c1:57:90:cd:ed:f1:cb:aa:c3:65:30:34:b4:
90:94:f2:67:69:15:18:c3:27:01:31:ae:39:fe:fb:
a0:59:37:c6:7b:46:76:76:8d:28:50:ff:06:43:45:
ad:67:d0:3f:da:c9:15:d8:fc:66:94:65:a2:fd:fc:
01:98:e0:b4:94:d3:fe:a4:fb:f6:2f:00:99:9b:23:
aa:db:ad:14:28:e3:bd:f2:91:f4:a7:86:6e:49:45:
c5:33:b2:6e:75:7f:b5:9e:73:3b:7b:37:ca:02:b6:
da:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:56:FD:0D:8F:2F:9C:30:0E:33:42:29:96:B1:9B:E0:F6:56:11:1C
X509v3 Authority Key Identifier:
keyid:15:C4:C8:A9:D2:C1:D0:E0:A6:F5:16:6E:3E:A7:43:67:86:3D:CE:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FcTIqdLB0OCm9RZuPqdDZ4Y9zr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/b55522-0b89-400b-92cc-7b3cc228271d/1/FcTIqdLB0OCm9RZuPqdDZ4Y9zr8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/b55522-0b89-400b-92cc-7b3cc228271d/1/FcTIqdLB0OCm9RZuPqdDZ4Y9zr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:a6:5b:29:45:79:bc:01:09:9f:e0:4d:69:da:85:f0:58:4b:
54:a7:d9:53:02:0f:65:da:08:1e:ac:f8:8a:e4:8a:17:04:94:
97:15:f1:49:c5:e9:7d:12:32:b4:24:f5:1a:28:db:df:c9:10:
a1:5e:ba:a5:41:45:be:f9:22:9a:1a:68:ad:4e:e9:98:cd:16:
06:f3:70:d2:67:ef:da:96:33:4e:c1:82:6c:64:4c:63:e4:4a:
d8:06:4e:20:e6:5a:06:61:4f:f8:9a:be:0e:a4:fe:77:ba:bf:
52:9a:e6:f7:68:2f:2d:55:51:01:f5:08:af:20:a4:79:da:5c:
8c:b1:fa:e4:a7:1f:fb:33:f9:ff:27:d8:a6:35:e6:6f:c9:e4:
e4:1f:b0:aa:3e:ba:d5:3d:5e:f2:b6:0b:a1:47:04:57:31:1c:
85:61:dd:9f:fb:05:64:0a:ef:a1:69:0f:54:06:17:a7:ff:59:
b2:9f:7d:9c:10:01:f2:9d:62:f1:c4:4e:d7:ed:34:31:ce:ad:
83:4b:8b:8f:ad:07:89:5e:7d:cb:ff:76:b4:26:76:86:82:79:
47:a2:17:59:de:85:a6:f8:ea:53:c2:6b:50:72:2b:7b:53:5b:
54:e0:5d:d2:16:e6:2e:92:78:d6:f7:0f:7c:08:51:33:1b:df:
ca:66:73:5d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjU4Gqm2THV0n5ahqBYlI9TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1YzRjOGE5ZDJjMWQwZTBhNmY1MTY2ZTNlYTc0MzY3ODYz
ZGNlYmYwHhcNMjUwODIzMDMwMjEzWhcNMjUwODI0MDMwMjEzWjAzMTEwLwYDVQQD
EyhmOTU2ZmQwZDhmMmY5YzMwMGUzMzQyMjk5NmIxOWJlMGY2NTYxMTFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqoknTjy8kXdaiSOmniKp/VHUNOX5
8epVC/nCswmclM3c3fM8719NEJFK4uAFAZgyyDDtc0C/d0X281ljizTf/xwAmMm9
OhjEp2DzOBZE17f95YBogke5VNXktsCjAdiSGDTwZ2zY8UAwyGD1mRcn3pKDO2Wl
t0uCKPtNZyzT/cmCz0479jmWRhC9SzCcPg7me9Fg7//wO8FXkM3t8cuqw2UwNLSQ
lPJnaRUYwycBMa45/vugWTfGe0Z2do0oUP8GQ0WtZ9A/2skV2PxmlGWi/fwBmOC0
lNP+pPv2LwCZmyOq260UKOO98pH0p4ZuSUXFM7JudX+1nnM7ezfKArbakQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPlW/Q2PL5wwDjNCKZaxm+D2VhEcMB8GA1UdIwQY
MBaAFBXEyKnSwdDgpvUWbj6nQ2eGPc6/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmNUSXFkTEIwT0NtOVJadVBxZERaNFk5enI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9iNTU1MjItMGI4OS00MDBiLTkyY2Mt
N2IzY2MyMjgyNzFkLzEvRmNUSXFkTEIwT0NtOVJadVBxZERaNFk5enI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9iNTU1MjItMGI4OS00MDBiLTkyY2MtN2IzY2MyMjgyNzFk
LzEvRmNUSXFkTEIwT0NtOVJadVBxZERaNFk5enI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeqZbKUV5
vAEJn+BNadqF8FhLVKfZUwIPZdoIHqz4iuSKFwSUlxXxScXpfRIytCT1Gijb38kQ
oV66pUFFvvkimhporU7pmM0WBvNw0mfv2pYzTsGCbGRMY+RK2AZOIOZaBmFP+Jq+
DqT+d7q/Uprm92gvLVVRAfUIryCkedpcjLH65Kcf+zP5/yfYpjXmb8nk5B+wqj66
1T1e8rYLoUcEVzEchWHdn/sFZArvoWkPVAYXp/9Zsp99nBAB8p1i8cRO1+00Mc6t
g0uLj60HiV59y/92tCZ2hoJ5R6IXWd6FpvjqU8JrUHIre1NbVOBd0hbmLpJ41vcP
fAhRMxvfymZzXQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:41:49 2025 by rpki-client