Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/b55522-0b89-400b-92cc-7b3cc228271d/1/FcTIqdLB0OCm9RZuPqdDZ4Y9zr8.mft
File: FcTIqdLB0OCm9RZuPqdDZ4Y9zr8.mft (raw, json)
Hash identifier: GmLS8ND+IAqr+0k7tQflFwNttFq3UCmQgvM01SKjBV8=
Subject key identifier: 40:03:A5:78:9A:7A:5E:3F:6D:8F:97:22:A8:2B:DA:5F:84:43:DC:AB
Authority key identifier: 15:C4:C8:A9:D2:C1:D0:E0:A6:F5:16:6E:3E:A7:43:67:86:3D:CE:BF
Certificate issuer: /CN=15c4c8a9d2c1d0e0a6f5166e3ea74367863dcebf
Certificate serial: 0197D4061D12B6A7F434213BFA6EAEE13632
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FcTIqdLB0OCm9RZuPqdDZ4Y9zr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/b55522-0b89-400b-92cc-7b3cc228271d/1/FcTIqdLB0OCm9RZuPqdDZ4Y9zr8.mft
Manifest number: 14E0
Signing time: Fri 04 Jul 2025 06:00:59 +0000
Manifest this update: Fri 04 Jul 2025 06:00:59 +0000
Manifest next update: Sat 05 Jul 2025 06:00:59 +0000
Files and hashes: 1: CJUlJDy-56wu6zeQ3niPJdV4COg.roa (hash: L4zbh11FM5FRXP4RaQH2Hk+P+CwUeKC3KbUfcsAdfU4=)
2: FcTIqdLB0OCm9RZuPqdDZ4Y9zr8.crl (hash: 2tGRcWvt4phIuPdTXjnfe7A9LZl0k1HrXVN4DxvDawY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/b55522-0b89-400b-92cc-7b3cc228271d/1/FcTIqdLB0OCm9RZuPqdDZ4Y9zr8.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/b55522-0b89-400b-92cc-7b3cc228271d/1/FcTIqdLB0OCm9RZuPqdDZ4Y9zr8.mft
rsync://rpki.ripe.net/repository/DEFAULT/FcTIqdLB0OCm9RZuPqdDZ4Y9zr8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Jul 2025 06:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d4:06:1d:12:b6:a7:f4:34:21:3b:fa:6e:ae:e1:36:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15c4c8a9d2c1d0e0a6f5166e3ea74367863dcebf
Validity
Not Before: Jul 4 06:00:59 2025 GMT
Not After : Jul 5 06:00:59 2025 GMT
Subject: CN=4003a5789a7a5e3f6d8f9722a82bda5f8443dcab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b3:df:df:9d:94:d3:8b:bd:5d:a3:b1:38:c1:
66:d0:8a:83:8c:85:3c:0f:df:2c:ae:61:0d:d3:2e:
5a:68:ff:00:5e:47:fe:35:d5:13:5e:4c:ee:d2:0e:
a6:bf:c6:13:75:8c:92:e1:23:f9:f1:6d:76:b6:b3:
4b:e4:f0:f0:ba:ca:8b:99:37:fe:67:b3:ef:13:c8:
cf:ef:58:b2:00:0a:7c:49:e0:3b:7e:c8:8c:b4:36:
10:81:4f:84:88:d9:34:46:12:a7:f7:b6:f3:0a:7e:
27:4d:14:4c:f2:30:64:d1:49:c6:9e:64:e9:7e:ea:
1c:25:f7:7d:41:be:5a:5c:c3:4e:6d:34:bc:80:c4:
41:65:f7:78:44:fe:e6:30:a9:45:e6:f2:9f:44:df:
f8:6e:14:16:77:cf:07:ce:ed:1d:8f:4e:67:23:c9:
63:4e:d1:13:63:37:07:18:9d:dc:99:82:c3:08:14:
2d:6c:c1:8f:06:2a:ea:83:d5:71:a0:46:64:4f:51:
c1:20:84:79:24:75:4b:30:2e:43:b4:28:a8:72:06:
84:02:1c:dd:85:0f:33:47:be:6d:0a:d7:19:62:21:
f8:58:f0:2f:14:c5:47:64:30:a4:a3:41:31:39:1c:
9d:ca:58:6b:96:75:53:61:43:e4:f6:fd:b7:2e:46:
1c:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:03:A5:78:9A:7A:5E:3F:6D:8F:97:22:A8:2B:DA:5F:84:43:DC:AB
X509v3 Authority Key Identifier:
keyid:15:C4:C8:A9:D2:C1:D0:E0:A6:F5:16:6E:3E:A7:43:67:86:3D:CE:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FcTIqdLB0OCm9RZuPqdDZ4Y9zr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/b55522-0b89-400b-92cc-7b3cc228271d/1/FcTIqdLB0OCm9RZuPqdDZ4Y9zr8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/b55522-0b89-400b-92cc-7b3cc228271d/1/FcTIqdLB0OCm9RZuPqdDZ4Y9zr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:d0:50:63:93:0c:bf:d3:12:d7:41:24:72:fc:29:22:a7:20:
c9:af:85:e6:c4:60:f3:1d:b3:63:3d:75:fc:d2:a3:5a:e3:55:
5d:9e:63:6e:19:3c:ab:f2:ac:ee:84:28:5d:ef:32:a5:d3:59:
3b:a0:19:c8:ac:83:d4:87:56:a5:30:c7:a7:44:ce:f7:5b:0e:
a9:cf:a7:4b:b3:02:85:85:02:e3:3f:b4:47:8c:7b:d6:2d:c0:
3e:6f:c3:f8:b0:32:d5:fb:0b:12:a5:bd:80:9d:5e:52:74:90:
bf:bf:a2:2f:33:10:e4:93:d2:4e:69:10:4b:94:38:5f:1c:72:
b5:52:ee:2a:38:fe:8d:6c:de:37:38:53:9a:4a:58:1e:d6:10:
f9:ad:b4:9a:88:06:76:76:b5:fb:ce:2b:58:8d:c2:4b:f6:50:
88:42:28:2f:1f:ab:cb:e9:c8:22:5a:1c:60:8a:02:64:42:cc:
dc:38:54:dd:69:a3:9e:8f:8b:f7:f3:8b:f3:d2:e6:af:9d:04:
e0:fe:41:8e:88:fd:07:1d:07:ef:85:16:80:d2:e4:62:b2:92:
b8:dd:a3:23:62:a8:32:8e:fb:d3:1a:01:21:80:8d:f9:8d:d8:
11:b1:4d:1f:7e:fe:d9:a0:8b:eb:d2:1f:8b:25:e7:24:4a:14:
3c:19:fd:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfUBh0Stqf0NCE7+m6u4TYyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1YzRjOGE5ZDJjMWQwZTBhNmY1MTY2ZTNlYTc0MzY3ODYz
ZGNlYmYwHhcNMjUwNzA0MDYwMDU5WhcNMjUwNzA1MDYwMDU5WjAzMTEwLwYDVQQD
Eyg0MDAzYTU3ODlhN2E1ZTNmNmQ4Zjk3MjJhODJiZGE1Zjg0NDNkY2FiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvLPf352U04u9XaOxOMFm0IqDjIU8
D98srmEN0y5aaP8AXkf+NdUTXkzu0g6mv8YTdYyS4SP58W12trNL5PDwusqLmTf+
Z7PvE8jP71iyAAp8SeA7fsiMtDYQgU+EiNk0RhKn97bzCn4nTRRM8jBk0UnGnmTp
fuocJfd9Qb5aXMNObTS8gMRBZfd4RP7mMKlF5vKfRN/4bhQWd88Hzu0dj05nI8lj
TtETYzcHGJ3cmYLDCBQtbMGPBirqg9VxoEZkT1HBIIR5JHVLMC5DtCiocgaEAhzd
hQ8zR75tCtcZYiH4WPAvFMVHZDCko0ExORydylhrlnVTYUPk9v23LkYcJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEADpXiael4/bY+XIqgr2l+EQ9yrMB8GA1UdIwQY
MBaAFBXEyKnSwdDgpvUWbj6nQ2eGPc6/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmNUSXFkTEIwT0NtOVJadVBxZERaNFk5enI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9iNTU1MjItMGI4OS00MDBiLTkyY2Mt
N2IzY2MyMjgyNzFkLzEvRmNUSXFkTEIwT0NtOVJadVBxZERaNFk5enI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9iNTU1MjItMGI4OS00MDBiLTkyY2MtN2IzY2MyMjgyNzFk
LzEvRmNUSXFkTEIwT0NtOVJadVBxZERaNFk5enI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH9BQY5MM
v9MS10EkcvwpIqcgya+F5sRg8x2zYz11/NKjWuNVXZ5jbhk8q/Ks7oQoXe8ypdNZ
O6AZyKyD1IdWpTDHp0TO91sOqc+nS7MChYUC4z+0R4x71i3APm/D+LAy1fsLEqW9
gJ1eUnSQv7+iLzMQ5JPSTmkQS5Q4XxxytVLuKjj+jWzeNzhTmkpYHtYQ+a20mogG
dna1+84rWI3CS/ZQiEIoLx+ry+nIIlocYIoCZELM3DhU3Wmjno+L9/OL89Lmr50E
4P5Bjoj9Bx0H74UWgNLkYrKSuN2jI2KoMo770xoBIYCN+Y3YEbFNH37+2aCL69If
iyXnJEoUPBn9dQ==
-----END CERTIFICATE-----
Generated at Fri Jul 4 14:43:11 2025 by rpki-client