Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/6f8157-8d76-4d3e-8938-7e53d1c558d9/1/FcGKKQjOvZCF4BJmuwL7ivIkdzU.mft
File: FcGKKQjOvZCF4BJmuwL7ivIkdzU.mft (raw, json)
Hash identifier: MDdVOyS6TDrit/2s0W76tBF3y743xrxkX+PdDBJnU00=
Subject key identifier: 4E:2D:69:5D:67:40:5D:EC:20:31:A6:A2:1C:70:BE:F9:45:8F:73:B2
Authority key identifier: 15:C1:8A:29:08:CE:BD:90:85:E0:12:66:BB:02:FB:8A:F2:24:77:35
Certificate issuer: /CN=15c18a2908cebd9085e01266bb02fb8af2247735
Certificate serial: 0197789D3A5673D9F3DA4F1CC72ECD98DE69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FcGKKQjOvZCF4BJmuwL7ivIkdzU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/6f8157-8d76-4d3e-8938-7e53d1c558d9/1/FcGKKQjOvZCF4BJmuwL7ivIkdzU.mft
Manifest number: 4A
Signing time: Mon 16 Jun 2025 12:00:59 +0000
Manifest this update: Mon 16 Jun 2025 12:00:59 +0000
Manifest next update: Tue 17 Jun 2025 12:00:59 +0000
Files and hashes: 1: 2KNjtYfkkvpIBPVL-Dk7JZfM4jU.roa (hash: YZgrPPEN8zGqhO8cwF6VGe00Dd89Opm5ALHWcKmIHgM=)
2: FcGKKQjOvZCF4BJmuwL7ivIkdzU.crl (hash: g044QJtxYkHohhCGkrZcULzFaPwnrGOO2Afw6y6ZBqw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/6f8157-8d76-4d3e-8938-7e53d1c558d9/1/FcGKKQjOvZCF4BJmuwL7ivIkdzU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/6f8157-8d76-4d3e-8938-7e53d1c558d9/1/FcGKKQjOvZCF4BJmuwL7ivIkdzU.mft
rsync://rpki.ripe.net/repository/DEFAULT/FcGKKQjOvZCF4BJmuwL7ivIkdzU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 12:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:78:9d:3a:56:73:d9:f3:da:4f:1c:c7:2e:cd:98:de:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15c18a2908cebd9085e01266bb02fb8af2247735
Validity
Not Before: Jun 16 12:00:59 2025 GMT
Not After : Jun 17 12:00:59 2025 GMT
Subject: CN=4e2d695d67405dec2031a6a21c70bef9458f73b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:0a:ac:c7:0e:9e:db:e3:14:36:88:42:57:7b:
76:c7:07:d5:79:16:8d:e1:9e:8a:33:36:e9:c3:f1:
5f:7e:ac:7a:e8:e6:2a:35:09:82:6a:68:98:35:de:
e6:67:a5:59:05:d7:32:79:f5:90:8c:9a:e3:57:6b:
da:a1:e9:77:db:96:27:1c:2f:e8:3b:9d:54:04:61:
73:2b:1a:81:ee:eb:ae:e5:d3:f6:f8:9c:57:21:e0:
da:a9:aa:a5:8a:ba:c2:6a:79:33:ca:64:90:d4:dd:
84:75:c5:83:37:c2:6a:70:8c:ee:0e:4f:77:7c:29:
01:a8:89:33:2f:af:54:e5:f0:d9:35:9d:a4:8a:61:
21:a8:b6:dc:b7:c2:4d:9d:8d:ef:4f:64:35:9c:a3:
37:33:9e:3a:e2:71:0d:4e:de:36:cf:fc:ee:48:e7:
e0:fe:ea:20:32:c5:d1:ba:9d:a9:0e:cf:df:f6:19:
3b:60:19:bc:14:50:d5:99:4b:0b:36:f6:ea:45:c0:
a2:7c:9d:0b:2b:53:85:32:a5:00:5b:55:35:0f:71:
c3:3c:d7:59:e5:0a:f9:fa:af:a4:53:e1:9f:cf:dd:
09:16:cc:db:09:a6:92:ab:56:b1:49:b2:99:01:fb:
9f:2d:8f:c9:e0:64:3c:83:4a:67:46:23:02:e9:bb:
80:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:2D:69:5D:67:40:5D:EC:20:31:A6:A2:1C:70:BE:F9:45:8F:73:B2
X509v3 Authority Key Identifier:
keyid:15:C1:8A:29:08:CE:BD:90:85:E0:12:66:BB:02:FB:8A:F2:24:77:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FcGKKQjOvZCF4BJmuwL7ivIkdzU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6f8157-8d76-4d3e-8938-7e53d1c558d9/1/FcGKKQjOvZCF4BJmuwL7ivIkdzU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6f8157-8d76-4d3e-8938-7e53d1c558d9/1/FcGKKQjOvZCF4BJmuwL7ivIkdzU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:ea:3a:4d:14:fc:57:b3:24:17:33:b3:2b:e6:fe:3e:d8:6a:
7e:18:e9:01:6d:c6:ce:db:c5:9e:f6:3c:f0:ae:f8:85:c4:a1:
cf:0e:29:5d:47:73:1b:4d:5c:04:ca:45:57:da:e1:69:75:17:
cc:84:34:d5:9b:2c:80:11:fd:ac:dc:83:47:38:17:a6:67:d4:
d5:7d:1b:bf:58:aa:19:f1:df:cb:21:b0:74:ab:31:75:58:78:
03:14:ba:be:a0:3d:56:f9:39:a3:23:29:e7:27:6b:52:64:4e:
a7:b3:2c:45:be:9b:90:3b:4c:f9:ad:ea:f8:a7:3b:85:de:6b:
60:16:c1:1d:4f:eb:8a:7a:94:a8:ee:f0:6a:e8:53:be:c8:e3:
1c:cc:6e:c7:69:f9:35:58:fa:f4:d2:9f:3e:b6:34:a6:5b:b3:
0e:e2:77:78:5f:20:88:bd:53:f9:a0:d3:55:d1:b8:4c:c7:df:
cc:fa:24:c7:e5:ec:16:3f:cf:04:86:2e:85:d2:01:63:2c:06:
8a:08:74:9b:b7:9b:e8:78:4f:8d:e6:d2:ba:90:5b:65:67:26:
d4:b1:61:ec:d3:f8:c3:ef:3f:be:58:37:1c:e1:1b:19:af:0e:
8e:8c:a9:f4:23:9b:5d:d5:ee:01:c0:d6:fb:02:1c:ab:bc:bf:
39:18:ed:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 21:28:19 2025 by rpki-client