Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/5986f1-863f-4eec-8551-0a8fe6434bf8/1/FcyIDwoSx7lPcdmy5bAopw0fo0o.mft
File: FcyIDwoSx7lPcdmy5bAopw0fo0o.mft (raw, json)
Hash identifier: mMuVxV9bUaRjpWwWnOUhQQ+jGFiKTA9Mz3Zndc+ffFo=
Subject key identifier: 26:58:09:7D:0C:0A:7A:36:20:14:58:82:23:28:66:DD:F0:DF:55:AD
Authority key identifier: 15:CC:88:0F:0A:12:C7:B9:4F:71:D9:B2:E5:B0:28:A7:0D:1F:A3:4A
Certificate issuer: /CN=15cc880f0a12c7b94f71d9b2e5b028a70d1fa34a
Certificate serial: 019882799A10524E5183EE1E660D7EC0FBFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FcyIDwoSx7lPcdmy5bAopw0fo0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/5986f1-863f-4eec-8551-0a8fe6434bf8/1/FcyIDwoSx7lPcdmy5bAopw0fo0o.mft
Manifest number: 1625
Signing time: Thu 07 Aug 2025 03:01:03 +0000
Manifest this update: Thu 07 Aug 2025 03:01:03 +0000
Manifest next update: Fri 08 Aug 2025 03:01:03 +0000
Files and hashes: 1: FcyIDwoSx7lPcdmy5bAopw0fo0o.crl (hash: b2pklWsg67OureDf816gyiK1Vq9g6sTV7zsxjnwMNfc=)
2: kc-ZCrpFtG9x51LpF4W3iw7kDzs.roa (hash: aN11v2IUXg+LXUfyuCNuVklkgeIw5ckCn/DmdMCJWXk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/5986f1-863f-4eec-8551-0a8fe6434bf8/1/FcyIDwoSx7lPcdmy5bAopw0fo0o.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/5986f1-863f-4eec-8551-0a8fe6434bf8/1/FcyIDwoSx7lPcdmy5bAopw0fo0o.mft
rsync://rpki.ripe.net/repository/DEFAULT/FcyIDwoSx7lPcdmy5bAopw0fo0o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 03:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:82:79:9a:10:52:4e:51:83:ee:1e:66:0d:7e:c0:fb:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15cc880f0a12c7b94f71d9b2e5b028a70d1fa34a
Validity
Not Before: Aug 7 03:01:03 2025 GMT
Not After : Aug 8 03:01:03 2025 GMT
Subject: CN=2658097d0c0a7a3620145882232866ddf0df55ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:96:46:e0:ed:f8:3e:8a:dd:d8:19:b0:45:9e:
61:5a:4c:0f:10:10:42:7a:d4:37:9d:2b:4b:ba:e7:
37:01:2c:89:f4:d5:a5:05:f4:a9:1c:db:f1:53:17:
b3:10:af:23:8c:9c:a1:2d:e2:53:fb:42:b1:f3:8d:
01:25:13:cd:67:ad:c4:d5:56:61:77:2e:62:e5:0a:
fa:76:90:a1:53:43:54:8b:7a:3f:2b:8f:39:47:96:
d6:30:a8:d8:fb:39:f7:11:c0:41:ee:cf:c6:35:d3:
5f:78:a5:7f:28:1e:c8:d7:7e:c6:11:54:fa:7a:5c:
06:41:83:57:55:79:d2:a2:bd:e4:31:10:69:c1:3c:
39:87:d8:d1:8a:d9:67:43:90:fb:86:d9:7e:14:3a:
d6:82:8e:72:7e:ff:f4:ee:20:78:0f:40:5d:8d:cf:
35:8f:f7:d2:dd:9f:83:df:ce:6b:59:95:17:a1:f5:
5e:18:6a:3f:fa:65:96:57:95:0b:19:2d:93:88:16:
75:85:59:89:9f:af:75:03:4a:67:2b:6a:82:b6:ab:
e1:d2:22:be:3c:b2:4b:61:fd:03:a4:e3:6a:23:a4:
21:9e:82:0d:39:ad:c9:0c:02:55:90:1d:a6:fd:90:
34:a7:31:fc:79:bf:2c:29:a3:dd:fd:89:4e:37:90:
a3:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:58:09:7D:0C:0A:7A:36:20:14:58:82:23:28:66:DD:F0:DF:55:AD
X509v3 Authority Key Identifier:
keyid:15:CC:88:0F:0A:12:C7:B9:4F:71:D9:B2:E5:B0:28:A7:0D:1F:A3:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FcyIDwoSx7lPcdmy5bAopw0fo0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/5986f1-863f-4eec-8551-0a8fe6434bf8/1/FcyIDwoSx7lPcdmy5bAopw0fo0o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/5986f1-863f-4eec-8551-0a8fe6434bf8/1/FcyIDwoSx7lPcdmy5bAopw0fo0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:ec:f5:f0:43:72:2f:36:e9:1d:cb:c3:ea:27:c3:9c:ac:6f:
c1:f2:8e:9a:2b:93:2e:65:50:48:8c:d4:f2:75:db:c2:10:a8:
46:73:2f:12:fb:7b:f5:22:5a:42:63:2c:1b:26:b1:50:d1:fa:
9b:03:b7:9c:41:7a:7b:c2:a0:65:9a:86:64:85:af:7d:0a:9c:
e8:d4:2e:28:13:50:37:75:fd:f5:b4:54:18:25:29:67:a1:f1:
89:e3:2b:03:0f:c8:5d:59:22:b7:79:e1:45:fe:88:e4:e3:3d:
c5:a6:3e:19:a9:fd:30:bc:62:39:85:19:49:25:c1:e1:7d:4a:
be:6b:90:a7:82:0c:4a:67:db:d2:cb:95:b1:f5:8a:20:e4:4b:
eb:42:75:87:e7:1a:15:95:59:e5:ba:5b:45:a3:f0:c7:d7:34:
c0:3b:a8:2a:02:6e:0a:f7:48:77:d3:4a:88:66:6e:83:8b:ff:
ae:c5:f5:9a:5a:9a:b4:79:0f:f0:4e:b4:1f:d3:c0:4f:da:04:
44:c7:9d:38:cb:bf:50:f6:aa:d3:10:89:39:7e:00:a6:5e:2a:
98:f8:a8:c6:f5:00:46:d7:00:c2:87:e0:f9:53:1a:8b:98:74:
8a:ec:8c:c3:4f:15:28:2b:2d:eb:15:55:00:a3:82:aa:c7:0f:
77:e8:ab:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 11:26:39 2025 by rpki-client