Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/52e0e2-478b-401d-9385-8ff6cd7747c4/1/FcGBcG9hxLc3zX63j3Iw40zfwUw.mft
File: FcGBcG9hxLc3zX63j3Iw40zfwUw.mft (raw, json)
Hash identifier: dYJTTYJXVYh0nXbY14dOUd0ot4i3Ej0kVpBFnVYEXG0=
Subject key identifier: 21:1C:55:32:E3:4A:16:04:3D:08:C0:53:42:EF:E0:F7:F0:11:F1:60
Authority key identifier: 15:C1:81:70:6F:61:C4:B7:37:CD:7E:B7:8F:72:30:E3:4C:DF:C1:4C
Certificate issuer: /CN=15c181706f61c4b737cd7eb78f7230e34cdfc14c
Certificate serial: 01988D6AE51131942D385BA1A5F88D376A45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FcGBcG9hxLc3zX63j3Iw40zfwUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/52e0e2-478b-401d-9385-8ff6cd7747c4/1/FcGBcG9hxLc3zX63j3Iw40zfwUw.mft
Manifest number: 44
Signing time: Sat 09 Aug 2025 06:00:49 +0000
Manifest this update: Sat 09 Aug 2025 06:00:49 +0000
Manifest next update: Sun 10 Aug 2025 06:00:49 +0000
Files and hashes: 1: FcGBcG9hxLc3zX63j3Iw40zfwUw.crl (hash: pwj0NMv28NE30VMjVdKDVym57+2ez//NIVWGYZWAINg=)
2: TODaCUho62Gehv-2PizceaR7ohg.roa (hash: EEJ5eEmNl9HYrtpyde+m1i67aXqJjeNEtfrXMxwcvR8=)
3: njg2vaPfciqJR5R5nbxzG2lmchg.roa (hash: hRVFVxSb35peMjVcWnWK+AgafRYFP/BZDTvTgJv0dRc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/52e0e2-478b-401d-9385-8ff6cd7747c4/1/FcGBcG9hxLc3zX63j3Iw40zfwUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/52e0e2-478b-401d-9385-8ff6cd7747c4/1/FcGBcG9hxLc3zX63j3Iw40zfwUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/FcGBcG9hxLc3zX63j3Iw40zfwUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8d:6a:e5:11:31:94:2d:38:5b:a1:a5:f8:8d:37:6a:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15c181706f61c4b737cd7eb78f7230e34cdfc14c
Validity
Not Before: Aug 9 06:00:49 2025 GMT
Not After : Aug 10 06:00:49 2025 GMT
Subject: CN=211c5532e34a16043d08c05342efe0f7f011f160
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:95:bd:0c:d4:51:1c:1e:57:c2:d2:51:4d:01:
9d:d7:f4:81:73:dc:7b:02:62:70:52:ab:ed:4e:f0:
81:df:05:d9:96:eb:3b:48:50:d8:e6:3b:96:ea:3d:
4c:f4:eb:1b:78:45:8a:ec:4c:d0:05:69:a7:c9:07:
69:c1:0b:55:ba:38:50:86:09:db:da:ce:35:b0:9b:
45:ff:98:4a:a4:b6:56:14:f7:20:72:f4:f8:ce:0d:
14:9f:fb:2f:b5:a6:7f:ed:a9:a4:f5:27:1e:44:20:
5d:5c:dd:29:72:a9:22:63:63:b2:37:fb:94:70:18:
1b:61:c3:de:e8:dc:1e:6d:31:cd:40:00:a7:27:e4:
ef:51:3c:2e:99:cf:ff:7f:06:c5:91:00:75:12:b2:
5e:04:4d:8f:ae:08:9e:88:73:cf:18:6d:7e:ec:b6:
f0:8f:0f:fe:ac:05:c3:7e:e3:33:24:a3:ad:1d:53:
bd:b1:43:1c:bb:f6:f3:dd:16:c6:d8:eb:52:91:18:
83:63:3a:7b:02:f1:89:a3:98:f4:e3:f9:b2:a6:4d:
ba:80:d3:29:1b:07:50:b9:07:45:19:46:02:f7:6c:
57:d8:0e:99:34:83:85:0c:a8:5f:28:37:de:6c:ef:
e3:93:f1:22:fe:d2:9e:87:b2:ff:0f:7a:23:05:08:
61:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:1C:55:32:E3:4A:16:04:3D:08:C0:53:42:EF:E0:F7:F0:11:F1:60
X509v3 Authority Key Identifier:
keyid:15:C1:81:70:6F:61:C4:B7:37:CD:7E:B7:8F:72:30:E3:4C:DF:C1:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FcGBcG9hxLc3zX63j3Iw40zfwUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/52e0e2-478b-401d-9385-8ff6cd7747c4/1/FcGBcG9hxLc3zX63j3Iw40zfwUw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/52e0e2-478b-401d-9385-8ff6cd7747c4/1/FcGBcG9hxLc3zX63j3Iw40zfwUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:71:fe:b6:a4:aa:13:43:86:fa:89:45:5a:46:b5:71:5b:7e:
6f:5c:87:39:42:1a:32:63:47:93:12:7e:33:8e:11:80:54:e1:
e8:c0:e6:1d:3c:5e:2e:00:2a:db:9d:42:08:92:b3:fc:a5:19:
a1:b7:00:2c:db:4f:f5:33:ff:7b:0c:d6:97:5d:e3:d6:81:ba:
7c:af:7e:57:85:f0:ed:8a:ba:19:59:1c:68:be:89:80:a0:fd:
22:cc:a5:e9:91:8a:01:d2:42:23:c7:7b:fa:94:ec:b9:c7:1d:
f4:06:23:4b:2d:69:ed:b1:43:80:94:1b:6f:f4:11:8d:e2:d9:
e6:2d:8f:29:94:4c:fa:43:39:a1:35:9c:4f:af:d6:68:ec:3f:
64:76:e7:b0:ae:b0:49:c8:10:6b:7c:6f:ba:79:7a:ea:6c:9c:
a2:3f:ea:a4:62:f9:b0:94:5a:49:ae:8b:eb:92:d5:3f:3b:d9:
a4:25:6e:4c:61:0d:a9:97:84:a4:02:0f:a8:e5:d9:86:87:26:
92:e3:83:97:3e:1d:4b:60:3c:0c:36:b8:2a:3a:28:be:2f:4c:
9c:63:a2:15:70:09:ef:ee:bc:f8:ee:48:6c:5d:cc:f3:51:9f:
25:81:7c:2f:95:d2:ba:55:28:0f:95:01:77:2f:32:bc:1c:3c:
2a:50:a7:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 14:32:52 2025 by rpki-client