Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/b55522-0b89-400b-92cc-7b3cc228271d/1/FcTIqdLB0OCm9RZuPqdDZ4Y9zr8.mft
File: FcTIqdLB0OCm9RZuPqdDZ4Y9zr8.mft (raw, json)
Hash identifier: yzJtXvrjtHGbsa6wOmIsKMSTp+IEAcjsaupqZCWAjKQ=
Subject key identifier: 78:E7:F3:F4:A8:F5:D2:1F:B6:9A:4F:50:23:6A:86:4A:63:00:E1:88
Authority key identifier: 15:C4:C8:A9:D2:C1:D0:E0:A6:F5:16:6E:3E:A7:43:67:86:3D:CE:BF
Certificate issuer: /CN=15c4c8a9d2c1d0e0a6f5166e3ea74367863dcebf
Certificate serial: 019A4F62AE90A8A66479EEA97CB3004364C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FcTIqdLB0OCm9RZuPqdDZ4Y9zr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/b55522-0b89-400b-92cc-7b3cc228271d/1/FcTIqdLB0OCm9RZuPqdDZ4Y9zr8.mft
Manifest number: 1629
Signing time: Tue 04 Nov 2025 15:00:58 +0000
Manifest this update: Tue 04 Nov 2025 15:00:58 +0000
Manifest next update: Wed 05 Nov 2025 15:00:58 +0000
Files and hashes: 1: CJUlJDy-56wu6zeQ3niPJdV4COg.roa (hash: L4zbh11FM5FRXP4RaQH2Hk+P+CwUeKC3KbUfcsAdfU4=)
2: FcTIqdLB0OCm9RZuPqdDZ4Y9zr8.crl (hash: voktdlHZSBmn1WWb85kgUdjTSByIEoYTwACSbPQU9qY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/b55522-0b89-400b-92cc-7b3cc228271d/1/FcTIqdLB0OCm9RZuPqdDZ4Y9zr8.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/b55522-0b89-400b-92cc-7b3cc228271d/1/FcTIqdLB0OCm9RZuPqdDZ4Y9zr8.mft
rsync://rpki.ripe.net/repository/DEFAULT/FcTIqdLB0OCm9RZuPqdDZ4Y9zr8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:ae:90:a8:a6:64:79:ee:a9:7c:b3:00:43:64:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15c4c8a9d2c1d0e0a6f5166e3ea74367863dcebf
Validity
Not Before: Nov 4 15:00:58 2025 GMT
Not After : Nov 5 15:00:58 2025 GMT
Subject: CN=78e7f3f4a8f5d21fb69a4f50236a864a6300e188
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:24:96:1a:85:a0:aa:9d:13:96:59:f6:e5:d5:
5b:32:33:f5:b5:20:50:57:a5:8a:ad:e0:7f:f5:9e:
76:ab:4a:ff:11:2f:14:b2:5f:fd:0e:8f:ff:9d:44:
3a:a6:9a:a8:bf:04:e2:1a:47:ff:49:5e:ec:72:96:
d1:d3:78:84:ed:c1:f6:38:30:3a:85:19:ce:36:03:
b1:6d:4e:e2:af:e8:da:62:db:23:d6:ba:c4:c0:a1:
88:61:6a:c7:da:05:73:b9:b1:b5:11:94:e5:c0:b3:
26:09:29:e0:73:f5:76:4b:52:58:4d:c1:c0:a5:c3:
47:9a:85:e7:64:ab:83:b7:cb:e4:53:14:7d:8e:c3:
9b:43:53:eb:e0:54:a6:83:2b:be:cd:86:b9:81:63:
15:49:a5:01:42:8f:d7:11:24:2d:92:dd:e8:22:9e:
6c:a0:fb:2a:fa:66:7e:70:21:f2:5f:51:93:71:b1:
29:dc:bc:b9:5f:e8:90:13:5d:0c:4d:c8:ab:97:f1:
c7:73:c1:79:44:d6:2d:e4:b2:16:ed:1d:4c:70:89:
7e:2f:59:93:6f:73:a8:4f:e6:77:ff:85:d9:67:30:
e0:ab:5b:fe:b0:14:ed:13:34:66:56:22:5c:52:dc:
b1:1a:a1:5d:0e:4e:98:c3:3f:a4:f5:9e:7c:4a:c8:
bb:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:E7:F3:F4:A8:F5:D2:1F:B6:9A:4F:50:23:6A:86:4A:63:00:E1:88
X509v3 Authority Key Identifier:
keyid:15:C4:C8:A9:D2:C1:D0:E0:A6:F5:16:6E:3E:A7:43:67:86:3D:CE:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FcTIqdLB0OCm9RZuPqdDZ4Y9zr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/b55522-0b89-400b-92cc-7b3cc228271d/1/FcTIqdLB0OCm9RZuPqdDZ4Y9zr8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/b55522-0b89-400b-92cc-7b3cc228271d/1/FcTIqdLB0OCm9RZuPqdDZ4Y9zr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:9f:d3:06:68:66:97:80:98:ed:85:7a:7c:f0:1d:05:c4:d0:
a0:45:fe:ce:6e:7d:bf:d0:12:75:5e:4f:78:17:ea:08:d9:db:
60:51:d6:45:a8:87:35:00:a0:02:95:c9:81:b7:13:b5:c4:2c:
44:b9:06:50:e5:ca:ea:ea:73:4c:49:33:5f:26:05:bf:57:42:
4f:5a:a7:7f:37:69:d1:f7:47:fa:1b:eb:7e:83:f4:65:e3:02:
37:de:44:af:f1:80:21:3d:75:c2:b3:5e:91:f9:e2:79:38:ff:
10:c2:37:84:ff:31:07:45:4e:7f:f2:ca:35:ce:c2:e8:0b:81:
f9:8f:09:44:9b:9d:af:f8:d1:1a:0f:56:e7:bc:a6:46:c4:ea:
70:24:26:2c:40:ba:0d:e7:57:92:25:99:3f:ab:65:c4:22:49:
e7:43:d3:94:21:34:f4:5c:f0:de:16:c9:73:4e:75:3a:b4:3b:
02:a7:55:29:87:ae:ab:5b:35:0e:a6:22:57:1f:26:11:14:d0:
99:24:3e:ee:60:26:e8:cb:a8:02:06:fc:88:8a:a1:05:b3:d5:
d4:6c:8e:0c:21:76:1f:3a:ad:73:dc:24:dc:4b:e8:c5:5c:33:
17:17:1c:a1:d1:ea:30:63:21:77:86:4d:79:3a:36:90:a6:9b:
04:ec:ed:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:10:05 2025 by rpki-client