Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/964035-381a-41b0-9fdd-f65d33a9926b/1/_FlUn23SuDFEuIDCPwb7o7JdOYY.mft
File: _FlUn23SuDFEuIDCPwb7o7JdOYY.mft (raw, json)
Hash identifier: DkThDSc+GJLZY31Y/OG2eLVqy6yGQgnnwsw1YESoxd4=
Subject key identifier: 8E:55:45:E2:D0:C4:15:61:AA:21:49:58:F8:32:27:FD:C3:1C:34:3F
Authority key identifier: FC:59:54:9F:6D:D2:B8:31:44:B8:80:C2:3F:06:FB:A3:B2:5D:39:86
Certificate issuer: /CN=fc59549f6dd2b83144b880c23f06fba3b25d3986
Certificate serial: 0199FBEA80B71FA07BB267284771C2318FA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_FlUn23SuDFEuIDCPwb7o7JdOYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/964035-381a-41b0-9fdd-f65d33a9926b/1/_FlUn23SuDFEuIDCPwb7o7JdOYY.mft
Manifest number: 10DC
Signing time: Sun 19 Oct 2025 10:01:13 +0000
Manifest this update: Sun 19 Oct 2025 10:01:13 +0000
Manifest next update: Mon 20 Oct 2025 10:01:13 +0000
Files and hashes: 1: Z6qviYCXQTeLJoJfMAOJcgB-9Qg.roa (hash: oDapm5Z+x3QJafhm3qUyzSGeINGec4KUVgNU/i7jaZI=)
2: _FlUn23SuDFEuIDCPwb7o7JdOYY.crl (hash: HHohn2ne5W3dfZ5rEsfzsrDCLaPjJEM9YsCbUXwlkyw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/964035-381a-41b0-9fdd-f65d33a9926b/1/_FlUn23SuDFEuIDCPwb7o7JdOYY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/964035-381a-41b0-9fdd-f65d33a9926b/1/_FlUn23SuDFEuIDCPwb7o7JdOYY.mft
rsync://rpki.ripe.net/repository/DEFAULT/_FlUn23SuDFEuIDCPwb7o7JdOYY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:80:b7:1f:a0:7b:b2:67:28:47:71:c2:31:8f:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc59549f6dd2b83144b880c23f06fba3b25d3986
Validity
Not Before: Oct 19 10:01:13 2025 GMT
Not After : Oct 20 10:01:13 2025 GMT
Subject: CN=8e5545e2d0c41561aa214958f83227fdc31c343f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:46:23:43:e2:f6:b8:b2:5e:58:b1:e7:30:94:
6a:8f:ca:14:cd:5e:23:97:57:b7:86:2b:d4:56:e8:
13:bb:5a:ef:e5:9a:5b:c8:2e:7d:0c:b3:ca:22:51:
38:1e:e2:9b:78:85:df:e3:3f:7e:b0:5b:03:f3:b8:
f4:5b:cd:03:2d:99:30:47:3e:c1:90:ba:e9:bb:2c:
86:82:2e:11:be:a8:5e:b3:66:61:d8:b0:c0:d2:da:
e6:a2:74:f4:39:18:ce:6d:46:05:3f:13:b0:ae:1d:
61:16:dd:9c:4f:5b:98:40:44:a6:9d:55:a4:e2:b6:
41:3c:17:f0:40:dc:e3:82:05:c8:0c:da:5c:05:8b:
e3:d1:cc:eb:9a:08:99:6f:aa:90:f8:69:df:52:b9:
74:06:05:67:10:b8:eb:0d:fa:50:29:21:ea:a1:31:
a1:cb:c2:f3:66:0b:58:d4:e0:bd:d0:95:e7:11:53:
5a:37:e8:08:ad:fc:33:b8:f5:96:18:3e:58:48:05:
1c:0a:a2:4f:2a:cf:8a:8b:0d:0c:f7:2d:e1:48:bc:
f1:1f:ee:68:23:3a:6c:99:8d:7d:59:aa:67:e5:f2:
e9:90:2d:50:b8:e6:e9:85:26:58:f7:25:12:c2:b6:
58:7d:49:6a:dc:59:cd:cc:b6:ed:92:bf:ab:fa:e6:
65:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:55:45:E2:D0:C4:15:61:AA:21:49:58:F8:32:27:FD:C3:1C:34:3F
X509v3 Authority Key Identifier:
keyid:FC:59:54:9F:6D:D2:B8:31:44:B8:80:C2:3F:06:FB:A3:B2:5D:39:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_FlUn23SuDFEuIDCPwb7o7JdOYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/964035-381a-41b0-9fdd-f65d33a9926b/1/_FlUn23SuDFEuIDCPwb7o7JdOYY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/964035-381a-41b0-9fdd-f65d33a9926b/1/_FlUn23SuDFEuIDCPwb7o7JdOYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:8a:01:e2:51:b5:39:77:49:96:39:5e:54:a6:bc:d9:08:12:
03:ce:57:50:eb:00:d9:43:02:be:bc:f7:f7:61:c8:76:e2:a9:
76:0d:1d:d4:25:eb:10:9c:08:83:e7:c0:e5:8f:e2:9f:29:98:
91:3a:57:84:f6:c4:3e:60:a7:50:09:97:3b:21:08:7c:00:ef:
83:28:03:b3:89:4a:ce:06:dd:f1:cb:9e:20:5c:25:1c:ab:73:
32:9f:48:2c:ac:aa:ab:4d:f6:22:b9:bf:0e:86:3f:d2:9b:37:
7f:e5:65:e8:4d:da:33:70:02:db:87:85:c7:bf:12:4f:6d:f8:
f2:c4:6d:0a:2e:1a:45:1e:d0:f4:7e:96:9d:46:32:1c:75:a3:
ce:40:1c:2b:e7:96:27:d0:ef:33:c9:a1:c4:c6:69:5a:01:22:
6f:59:e8:a2:76:9c:89:ea:9b:22:3e:67:43:0c:51:6f:70:93:
a2:02:1e:e8:0b:8c:67:6e:0d:56:46:69:55:19:70:1a:88:73:
33:46:4b:f2:6e:32:d8:2b:ca:e4:22:07:aa:c4:ac:a6:ed:c6:
fe:99:cf:37:c8:04:21:d6:68:87:7f:88:c6:68:d1:8f:21:f0:
7c:d8:6d:8f:b2:8a:12:f3:25:91:65:5c:13:56:2a:04:d0:bf:
1c:68:95:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:21:47 2025 by rpki-client