Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/52e0e2-478b-401d-9385-8ff6cd7747c4/1/FcGBcG9hxLc3zX63j3Iw40zfwUw.mft
File: FcGBcG9hxLc3zX63j3Iw40zfwUw.mft (raw, json)
Hash identifier: YIQ4Pk7djS0qykNfWUAr7d3LG2T+V5sHMF8K6pJ+08Y=
Subject key identifier: A1:CD:24:E6:58:76:AA:1B:A5:96:80:7A:7C:35:CD:3E:75:5B:9B:AD
Authority key identifier: 15:C1:81:70:6F:61:C4:B7:37:CD:7E:B7:8F:72:30:E3:4C:DF:C1:4C
Certificate issuer: /CN=15c181706f61c4b737cd7eb78f7230e34cdfc14c
Certificate serial: 019A515095D3651D19F8CB53F36B9F946A8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FcGBcG9hxLc3zX63j3Iw40zfwUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/52e0e2-478b-401d-9385-8ff6cd7747c4/1/FcGBcG9hxLc3zX63j3Iw40zfwUw.mft
Manifest number: 012E
Signing time: Wed 05 Nov 2025 00:00:26 +0000
Manifest this update: Wed 05 Nov 2025 00:00:26 +0000
Manifest next update: Thu 06 Nov 2025 00:00:26 +0000
Files and hashes: 1: FcGBcG9hxLc3zX63j3Iw40zfwUw.crl (hash: +9XdevsLFkgIqUutZ3xNzavBx9ikB4mENovbMYLkLmE=)
2: TODaCUho62Gehv-2PizceaR7ohg.roa (hash: EEJ5eEmNl9HYrtpyde+m1i67aXqJjeNEtfrXMxwcvR8=)
3: njg2vaPfciqJR5R5nbxzG2lmchg.roa (hash: hRVFVxSb35peMjVcWnWK+AgafRYFP/BZDTvTgJv0dRc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/52e0e2-478b-401d-9385-8ff6cd7747c4/1/FcGBcG9hxLc3zX63j3Iw40zfwUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/52e0e2-478b-401d-9385-8ff6cd7747c4/1/FcGBcG9hxLc3zX63j3Iw40zfwUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/FcGBcG9hxLc3zX63j3Iw40zfwUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:50:95:d3:65:1d:19:f8:cb:53:f3:6b:9f:94:6a:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15c181706f61c4b737cd7eb78f7230e34cdfc14c
Validity
Not Before: Nov 5 00:00:26 2025 GMT
Not After : Nov 6 00:00:26 2025 GMT
Subject: CN=a1cd24e65876aa1ba596807a7c35cd3e755b9bad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:a1:6c:f3:b6:e6:01:3b:5d:06:d2:5c:c9:86:
cd:74:69:0a:9c:d8:f0:7a:05:82:58:8c:47:07:18:
24:1a:85:9e:a2:76:3a:f5:b9:62:30:4d:b9:c1:df:
4b:ee:58:79:6c:8b:38:a1:a2:2a:a2:3a:b8:ba:22:
7f:83:47:01:45:9d:0d:cc:9e:63:e4:cd:ef:df:d7:
29:2e:f1:ff:b3:cd:47:a0:79:8c:e6:ae:d1:40:81:
70:e5:d3:75:cf:e0:79:2e:c1:17:e9:64:9c:86:75:
f9:62:f2:97:d8:74:95:08:15:38:7b:88:41:92:d5:
e2:bb:dc:b7:bd:52:9c:04:68:59:23:b9:e2:29:c0:
49:2d:87:3d:41:5b:af:76:d3:1b:42:b4:d6:92:b5:
c9:eb:98:dd:9d:4b:98:68:d0:7d:1c:81:28:5f:86:
7f:05:43:5e:f4:df:b1:cb:3d:b9:1c:90:2c:8b:1c:
b3:da:81:b4:8a:7d:81:25:b6:b3:6f:aa:d7:33:47:
09:48:89:69:0f:eb:af:8a:fc:14:c0:51:c7:da:48:
5d:8a:b4:c6:7d:ba:15:14:62:d9:ee:0a:8b:68:8f:
7c:2e:26:69:6f:66:a9:02:b6:7b:6c:a6:ae:d6:c3:
a3:59:9b:e8:37:86:d6:a2:bf:0d:a8:dd:d8:c4:f5:
99:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:CD:24:E6:58:76:AA:1B:A5:96:80:7A:7C:35:CD:3E:75:5B:9B:AD
X509v3 Authority Key Identifier:
keyid:15:C1:81:70:6F:61:C4:B7:37:CD:7E:B7:8F:72:30:E3:4C:DF:C1:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FcGBcG9hxLc3zX63j3Iw40zfwUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/52e0e2-478b-401d-9385-8ff6cd7747c4/1/FcGBcG9hxLc3zX63j3Iw40zfwUw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/52e0e2-478b-401d-9385-8ff6cd7747c4/1/FcGBcG9hxLc3zX63j3Iw40zfwUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:ad:12:24:0c:73:ee:10:1d:3d:87:87:c1:39:1e:ef:c5:7d:
cd:e3:0c:82:10:0a:97:23:5b:7b:e9:19:c0:0b:9b:6f:9d:48:
10:35:4a:d5:df:e9:81:27:15:a8:63:28:0b:2d:26:a4:c7:1d:
31:e0:5a:ef:ff:e2:95:08:c2:af:2f:cf:09:a1:e9:8b:fa:e4:
3e:37:01:86:23:69:1c:cb:ab:a9:e4:6a:63:8c:79:51:ef:e1:
ae:b2:70:6b:ee:28:cf:01:43:e5:ad:90:89:2d:ca:9e:07:85:
e5:ba:80:f7:ca:0b:a3:02:29:d0:bd:85:58:41:9f:f7:02:40:
21:60:9f:2f:1d:43:8f:e9:89:1e:2a:53:4d:d7:e7:aa:83:db:
e5:84:64:f6:26:3d:d2:56:d9:cf:b8:b0:b8:18:bb:d0:aa:60:
a1:1a:38:3b:82:27:0c:8c:f2:ae:ad:4c:e5:d4:61:68:43:e2:
80:37:45:43:cb:37:e5:55:4e:19:72:83:a3:62:98:93:a8:ce:
40:8f:09:99:20:11:57:67:97:93:ee:25:1c:58:77:37:69:00:
51:b0:8f:a6:91:6b:dc:2c:75:b4:63:ca:08:d4:b6:c9:70:94:
64:94:c4:89:ef:2b:4a:67:50:39:e9:79:9d:b8:13:53:ff:5c:
c6:b4:8c:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:28:04 2025 by rpki-client