Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/1f8a09-4365-4bba-8e35-5ee274eb7eab/1/FCaOTC4CUzDfJv1ATK4PavJszCM.mft
File: FCaOTC4CUzDfJv1ATK4PavJszCM.mft (raw, json)
Hash identifier: 0+SMZDPe6Rj4Og8oFSDTV5EjYTrUa9jF7TqweiUQfOI=
Subject key identifier: BE:BE:31:3A:61:ED:DE:0B:9D:93:B2:0D:6F:97:53:74:8D:81:A9:0D
Authority key identifier: 14:26:8E:4C:2E:02:53:30:DF:26:FD:40:4C:AE:0F:6A:F2:6C:CC:23
Certificate issuer: /CN=14268e4c2e025330df26fd404cae0f6af26ccc23
Certificate serial: 0198D65F331BD111A2DADB00D5E7358C25C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FCaOTC4CUzDfJv1ATK4PavJszCM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/1f8a09-4365-4bba-8e35-5ee274eb7eab/1/FCaOTC4CUzDfJv1ATK4PavJszCM.mft
Manifest number: 0E89
Signing time: Sat 23 Aug 2025 10:00:19 +0000
Manifest this update: Sat 23 Aug 2025 10:00:19 +0000
Manifest next update: Sun 24 Aug 2025 10:00:19 +0000
Files and hashes: 1: FCaOTC4CUzDfJv1ATK4PavJszCM.crl (hash: ilu3B1uJ64bS1RVHMUIznfSo/7kwGPknsFFDzYNo0nM=)
2: u0DOKBtKEXfOYPXrhlfb2Ryk4Zc.roa (hash: VOn09+bdFNjvpl/Gu+Ha0G2LvOgVJGvmVcF7NTjr9S0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/1f8a09-4365-4bba-8e35-5ee274eb7eab/1/FCaOTC4CUzDfJv1ATK4PavJszCM.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/1f8a09-4365-4bba-8e35-5ee274eb7eab/1/FCaOTC4CUzDfJv1ATK4PavJszCM.mft
rsync://rpki.ripe.net/repository/DEFAULT/FCaOTC4CUzDfJv1ATK4PavJszCM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:33:1b:d1:11:a2:da:db:00:d5:e7:35:8c:25:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14268e4c2e025330df26fd404cae0f6af26ccc23
Validity
Not Before: Aug 23 10:00:19 2025 GMT
Not After : Aug 24 10:00:19 2025 GMT
Subject: CN=bebe313a61edde0b9d93b20d6f9753748d81a90d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:3d:d1:44:82:d0:4a:2c:62:33:54:d7:17:5b:
8a:4b:5f:e2:62:f3:e3:e6:f3:60:89:57:af:7f:db:
28:d7:3e:3b:4e:04:fc:ee:09:47:3f:e8:e2:ae:b0:
11:5e:55:dc:f0:d7:bd:00:e9:16:47:4a:5c:a6:48:
9e:1d:df:03:c7:c3:4d:67:87:5b:9e:70:4e:37:62:
92:34:3b:c5:b4:25:53:c3:c5:43:00:a9:d8:93:50:
2d:4f:12:65:95:b2:b0:c5:d5:87:13:ad:41:11:2c:
5a:23:0d:ce:1d:62:2d:1c:d1:9c:34:43:64:1f:f5:
ff:3c:1d:57:da:02:d6:37:2f:d4:8b:67:80:72:06:
0c:5d:a1:ee:c0:35:e2:c9:b6:e0:0c:37:40:a5:0d:
36:43:2e:a5:7c:68:43:03:cf:f5:1e:96:c6:e4:66:
68:fb:34:5f:f9:37:17:46:f7:ea:0c:75:bf:44:c7:
d2:a2:c1:48:15:cf:cc:ed:74:65:6c:c9:cd:f5:4e:
01:d3:b1:9e:0e:6d:c5:a0:f0:cd:5c:53:0f:26:73:
fb:c2:11:24:b6:cf:69:e3:d8:9c:e5:97:ff:92:aa:
c4:c6:96:9d:2a:cc:0a:92:2e:63:70:37:5e:64:47:
ae:5c:ae:08:db:8a:75:bf:ee:52:dd:bb:1e:9d:4c:
f2:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:BE:31:3A:61:ED:DE:0B:9D:93:B2:0D:6F:97:53:74:8D:81:A9:0D
X509v3 Authority Key Identifier:
keyid:14:26:8E:4C:2E:02:53:30:DF:26:FD:40:4C:AE:0F:6A:F2:6C:CC:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FCaOTC4CUzDfJv1ATK4PavJszCM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/1f8a09-4365-4bba-8e35-5ee274eb7eab/1/FCaOTC4CUzDfJv1ATK4PavJszCM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/1f8a09-4365-4bba-8e35-5ee274eb7eab/1/FCaOTC4CUzDfJv1ATK4PavJszCM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:88:9e:f4:10:82:eb:e5:84:b3:6d:0d:c3:43:71:b4:73:c6:
4d:6b:d2:6e:6a:35:0c:f2:54:11:c0:eb:53:b8:a7:ce:ce:a5:
6e:f9:61:c0:ac:6e:34:9f:fe:2c:db:a4:06:b1:4b:83:ec:d9:
fc:63:d4:92:cc:07:a2:f6:4c:a3:1c:44:fa:b2:aa:8b:0f:3e:
5f:d7:d0:7a:df:51:0f:b5:49:9b:04:1b:da:29:32:9d:b7:30:
cb:0b:85:ba:b7:55:3f:63:ad:13:a6:f3:91:0a:95:56:c0:60:
b8:6c:e6:2b:66:a4:7a:53:0c:4e:ae:75:2b:51:e8:3d:3c:6b:
0c:08:e6:ee:e9:55:bc:a0:48:e4:75:5e:4d:94:d0:d7:da:d9:
98:83:29:ac:c3:6f:19:31:46:91:0e:f0:47:b5:29:87:43:f3:
aa:59:96:64:79:7d:a5:7f:62:7f:d0:a9:ce:22:7b:db:79:c5:
87:47:a3:26:e9:07:37:fe:5e:0b:78:89:50:d6:43:df:7d:47:
f0:29:bc:d3:d6:22:d1:d9:cc:9d:57:5e:f8:85:11:6b:68:be:
54:9e:00:f9:48:6f:88:39:1a:e7:30:c4:79:62:c8:7c:72:b1:
d2:1d:05:fc:3d:f5:e0:4e:1b:47:d1:41:eb:92:c2:97:09:d9:
64:da:d3:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:29:41 2025 by rpki-client