Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/f32669-977e-4309-a8de-41bc28c1dcac/1/Fc09GKyTtW_SsxgAAWXc1swwE4I.mft
File: Fc09GKyTtW_SsxgAAWXc1swwE4I.mft (raw, json)
Hash identifier: MseaVDEGfLbrehO7PBcpA3+KIeKgVquVraNhipHQKSs=
Subject key identifier: 4E:D9:CB:AE:42:6C:95:B2:C0:C3:46:59:40:93:4D:BA:D2:CF:A0:40
Authority key identifier: 15:CD:3D:18:AC:93:B5:6F:D2:B3:18:00:01:65:DC:D6:CC:30:13:82
Certificate issuer: /CN=15cd3d18ac93b56fd2b318000165dcd6cc301382
Certificate serial: 0198D65F1FF1F05BEA1FE13553B8391BF6C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fc09GKyTtW_SsxgAAWXc1swwE4I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/f32669-977e-4309-a8de-41bc28c1dcac/1/Fc09GKyTtW_SsxgAAWXc1swwE4I.mft
Manifest number: 1648
Signing time: Sat 23 Aug 2025 10:00:14 +0000
Manifest this update: Sat 23 Aug 2025 10:00:14 +0000
Manifest next update: Sun 24 Aug 2025 10:00:14 +0000
Files and hashes: 1: Fc09GKyTtW_SsxgAAWXc1swwE4I.crl (hash: gJ0tKmsDIqkh9HvWBpg4z7VNKmetdWm/z8IxgCHhqqs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/f32669-977e-4309-a8de-41bc28c1dcac/1/Fc09GKyTtW_SsxgAAWXc1swwE4I.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/f32669-977e-4309-a8de-41bc28c1dcac/1/Fc09GKyTtW_SsxgAAWXc1swwE4I.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fc09GKyTtW_SsxgAAWXc1swwE4I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:1f:f1:f0:5b:ea:1f:e1:35:53:b8:39:1b:f6:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15cd3d18ac93b56fd2b318000165dcd6cc301382
Validity
Not Before: Aug 23 10:00:14 2025 GMT
Not After : Aug 24 10:00:14 2025 GMT
Subject: CN=4ed9cbae426c95b2c0c3465940934dbad2cfa040
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:9c:43:52:f1:f7:e2:a7:78:cc:8f:8d:d4:89:
b0:bf:77:a2:4c:ea:09:46:15:ed:eb:c9:63:1a:90:
4c:55:03:4f:8b:7c:f7:fd:7e:97:dc:37:87:a1:6c:
5a:b2:1d:85:c1:52:77:42:7e:1c:af:05:6a:57:96:
76:80:54:db:be:25:c4:51:a0:66:c0:38:bd:c2:f6:
2f:ca:8c:a7:7e:fd:81:be:2c:c3:3b:c8:26:bd:95:
03:83:fa:bd:e8:3c:c2:16:06:4b:05:cd:c4:88:66:
27:70:a6:c8:6f:ae:38:35:65:ea:5c:b8:2e:be:7e:
cb:f4:97:09:98:30:3f:92:01:2c:4e:5d:01:51:96:
a8:f5:04:f4:df:20:4a:1e:3a:49:ac:08:7f:34:de:
28:b8:53:aa:82:fe:cc:74:92:9a:a1:6e:1f:55:28:
10:97:5e:f6:8b:2c:01:fd:b3:7d:f8:a0:2f:a4:ff:
e6:4a:9b:67:92:e8:0f:ac:ee:ac:d6:d9:68:08:16:
9d:dc:f0:a7:14:4a:c8:59:4b:ae:bd:af:0e:77:45:
bf:01:7f:1e:0f:4c:7f:a5:ba:43:78:09:88:aa:d2:
54:7d:6a:ec:cb:24:1f:6b:60:4b:d8:89:62:d6:f7:
0f:97:ca:09:ff:88:64:e0:97:d4:33:aa:8c:9a:07:
a1:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:D9:CB:AE:42:6C:95:B2:C0:C3:46:59:40:93:4D:BA:D2:CF:A0:40
X509v3 Authority Key Identifier:
keyid:15:CD:3D:18:AC:93:B5:6F:D2:B3:18:00:01:65:DC:D6:CC:30:13:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fc09GKyTtW_SsxgAAWXc1swwE4I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f32669-977e-4309-a8de-41bc28c1dcac/1/Fc09GKyTtW_SsxgAAWXc1swwE4I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f32669-977e-4309-a8de-41bc28c1dcac/1/Fc09GKyTtW_SsxgAAWXc1swwE4I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:98:4f:18:96:65:2d:a4:e2:f0:8a:03:bb:5d:92:3c:f5:1c:
d6:14:d7:e3:70:0a:9b:54:11:de:54:ed:d7:09:bc:8d:e1:20:
72:04:91:1a:1f:a1:2e:93:11:29:8f:14:13:c7:86:6e:2c:06:
a9:79:b8:47:ce:02:fd:c9:c4:19:1e:7f:4c:f2:70:8d:96:20:
15:37:26:6e:a2:49:1b:b7:ea:95:00:ae:5b:dd:3b:29:a7:66:
24:9b:b0:ab:11:c2:da:94:c8:6f:99:09:f4:40:30:e5:0f:4c:
7e:ed:04:b9:08:b9:ad:24:0e:5e:4c:f7:58:95:d5:ee:82:9b:
f4:f1:74:30:eb:af:26:10:4f:17:85:79:e6:ef:6c:26:4a:88:
64:cd:be:45:8b:f9:99:a5:03:9d:a2:17:2f:4c:ef:cb:10:f9:
ce:2b:28:6a:c6:b0:58:e3:58:2d:9c:80:76:dd:9c:58:2a:0c:
6e:54:ef:12:a9:ec:db:12:77:9f:dc:e2:4d:6b:d4:ef:ef:37:
3b:63:ef:33:32:30:7d:ee:c1:bf:86:8d:63:67:f8:6c:20:90:
b1:a6:1b:75:f3:61:2d:70:9d:37:52:89:e1:c5:c5:95:77:29:
c3:95:f6:e5:4d:ee:62:7d:f1:5a:65:43:09:89:8d:a0:a3:cd:
0f:61:58:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:14:48 2025 by rpki-client