Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/7bd927-b507-4363-9ada-dee4317f5b14/1/Fc4GtE2NxD3HQsQN472oqjdE4r0.mft
File: Fc4GtE2NxD3HQsQN472oqjdE4r0.mft (raw, json)
Hash identifier: iQaZPoUwcmjTIYQl+b77HX04x0DoQXQFpgXS+HvD4II=
Subject key identifier: 7D:D3:5D:F5:CB:93:99:49:BD:F0:02:54:E6:AA:09:CF:7A:4A:2F:E5
Authority key identifier: 15:CE:06:B4:4D:8D:C4:3D:C7:42:C4:0D:E3:BD:A8:AA:37:44:E2:BD
Certificate issuer: /CN=15ce06b44d8dc43dc742c40de3bda8aa3744e2bd
Certificate serial: 01987E662F847A8012BCC966D7E93D121A87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fc4GtE2NxD3HQsQN472oqjdE4r0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/7bd927-b507-4363-9ada-dee4317f5b14/1/Fc4GtE2NxD3HQsQN472oqjdE4r0.mft
Manifest number: 12B0
Signing time: Wed 06 Aug 2025 08:01:22 +0000
Manifest this update: Wed 06 Aug 2025 08:01:22 +0000
Manifest next update: Thu 07 Aug 2025 08:01:22 +0000
Files and hashes: 1: 52KUDdFP_rD3RmJYr6LMpUPEMmM.roa (hash: usibkDt6eCnub+7x6EZqrdrQgsmz6UQ+udh3uzbsAi0=)
2: Fc4GtE2NxD3HQsQN472oqjdE4r0.crl (hash: ukss0QdPyDmuIonI+ngYW8TJcyGpkix4RKb6q3e/LvI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/7bd927-b507-4363-9ada-dee4317f5b14/1/Fc4GtE2NxD3HQsQN472oqjdE4r0.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/7bd927-b507-4363-9ada-dee4317f5b14/1/Fc4GtE2NxD3HQsQN472oqjdE4r0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fc4GtE2NxD3HQsQN472oqjdE4r0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:66:2f:84:7a:80:12:bc:c9:66:d7:e9:3d:12:1a:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15ce06b44d8dc43dc742c40de3bda8aa3744e2bd
Validity
Not Before: Aug 6 08:01:22 2025 GMT
Not After : Aug 7 08:01:22 2025 GMT
Subject: CN=7dd35df5cb939949bdf00254e6aa09cf7a4a2fe5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:83:61:b3:74:f9:40:24:09:3a:13:5f:c6:cb:
02:c5:62:0f:2f:1c:84:df:aa:17:d4:91:a8:86:d5:
13:d4:65:66:3a:74:5f:45:ea:ab:dc:28:09:a3:70:
66:f7:29:4a:ad:4e:95:c7:29:ae:83:20:d9:ad:86:
78:5b:d0:f5:43:08:b9:e5:7d:16:f4:7e:34:5a:13:
8a:7d:3e:5e:ff:f5:8e:33:f3:f6:db:16:c6:d6:15:
9d:fe:d7:2e:fb:ca:92:94:cd:a3:a1:19:1c:40:8e:
31:df:f6:02:e1:85:d4:40:70:bd:d7:20:00:a0:36:
90:30:2b:7f:83:36:53:8a:67:3d:da:f9:a2:83:f7:
30:a6:c8:df:6c:63:5d:8d:2f:01:54:64:28:ec:75:
65:52:fe:ce:19:1e:1e:81:4f:84:1a:9c:bf:e2:0f:
f4:51:6e:59:10:57:ed:22:30:ae:27:41:81:4e:bd:
18:e0:b0:a2:a8:7b:01:06:39:22:49:f8:d7:87:b6:
30:cb:11:a1:4d:5e:35:f2:41:34:62:7d:f3:11:cd:
b7:34:0d:de:13:b5:68:7f:e2:ac:cd:a6:be:f5:ff:
4d:1c:b2:40:3a:78:f5:80:2d:37:42:32:6c:29:1b:
c7:f2:b2:79:10:e7:1f:16:0e:d4:eb:08:5e:4a:76:
b8:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:D3:5D:F5:CB:93:99:49:BD:F0:02:54:E6:AA:09:CF:7A:4A:2F:E5
X509v3 Authority Key Identifier:
keyid:15:CE:06:B4:4D:8D:C4:3D:C7:42:C4:0D:E3:BD:A8:AA:37:44:E2:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fc4GtE2NxD3HQsQN472oqjdE4r0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/7bd927-b507-4363-9ada-dee4317f5b14/1/Fc4GtE2NxD3HQsQN472oqjdE4r0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/7bd927-b507-4363-9ada-dee4317f5b14/1/Fc4GtE2NxD3HQsQN472oqjdE4r0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:ba:ca:71:36:48:f8:15:9b:38:37:e1:17:24:dd:92:cb:47:
cc:a1:d7:77:a1:bf:24:17:43:21:be:a3:0f:2b:6e:f9:fa:0c:
97:ce:1c:24:d9:3b:ea:09:9f:55:24:1c:1c:9b:69:a9:1e:ff:
e4:b7:f2:77:e3:cc:fb:90:27:c2:6a:79:64:ce:37:a1:c4:c5:
52:2c:7b:e9:4a:fb:50:4d:32:f4:38:7b:0a:ef:21:c1:89:06:
3c:1f:5c:9a:b4:40:f5:2c:7f:25:06:25:79:d9:05:6b:50:5c:
56:eb:2e:8d:1c:92:28:a9:ac:54:d5:fd:dd:ad:7d:79:76:b9:
84:64:5e:a9:76:f2:7d:cd:b7:27:4f:a1:db:32:e1:74:82:07:
52:6f:db:4c:3f:3d:1e:9f:20:24:33:bc:ab:85:32:34:f1:bf:
9c:2e:d0:fd:bd:3f:0c:a8:0b:e8:21:93:f2:90:29:9e:59:01:
00:6f:df:85:6f:1e:09:cd:9f:c0:f3:64:b2:23:fd:41:01:bc:
b9:2e:77:2a:82:99:34:c8:55:f9:ed:40:8a:8b:63:cf:06:e4:
69:f2:d1:51:0e:e0:31:1a:e2:81:8e:ad:98:2b:69:49:61:22:
f1:78:3f:d7:c3:ba:f1:23:c1:89:09:44:e0:5f:9b:84:ee:69:
d8:09:4e:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 16:12:52 2025 by rpki-client