Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/cc835f-4906-4c95-b8e5-5be40b14f8df/1/xFIGsdbzkSqG62KPYZxaVSxVNQE.mft
File: xFIGsdbzkSqG62KPYZxaVSxVNQE.mft (raw, json)
Hash identifier: dW5zPcDOKMJR0ftCKUHA+VxAb2MBzmGsBegSl/BspLk=
Subject key identifier: 68:4E:C0:5C:9B:AA:13:16:7E:09:DD:1A:1C:C9:60:5F:0B:EC:53:99
Authority key identifier: C4:52:06:B1:D6:F3:91:2A:86:EB:62:8F:61:9C:5A:55:2C:55:35:01
Certificate issuer: /CN=c45206b1d6f3912a86eb628f619c5a552c553501
Certificate serial: 019894B84541DF35B9D1503862041B47175F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xFIGsdbzkSqG62KPYZxaVSxVNQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/cc835f-4906-4c95-b8e5-5be40b14f8df/1/xFIGsdbzkSqG62KPYZxaVSxVNQE.mft
Manifest number: 01ED
Signing time: Sun 10 Aug 2025 16:02:40 +0000
Manifest this update: Sun 10 Aug 2025 16:02:40 +0000
Manifest next update: Mon 11 Aug 2025 16:02:40 +0000
Files and hashes: 1: 7dcgBIplMkDE9Me9_TBtww4XI9Y.roa (hash: 8O59mET8aiqW0DpLtIYLTmGhal2eNwvoi0MphoxbxkI=)
2: xFIGsdbzkSqG62KPYZxaVSxVNQE.crl (hash: JCe7wLToffegYY3pcRzeCKSrUyaUioo+wWEyyfpQ+7k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/cc835f-4906-4c95-b8e5-5be40b14f8df/1/xFIGsdbzkSqG62KPYZxaVSxVNQE.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/cc835f-4906-4c95-b8e5-5be40b14f8df/1/xFIGsdbzkSqG62KPYZxaVSxVNQE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xFIGsdbzkSqG62KPYZxaVSxVNQE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 16:02:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:94:b8:45:41:df:35:b9:d1:50:38:62:04:1b:47:17:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c45206b1d6f3912a86eb628f619c5a552c553501
Validity
Not Before: Aug 10 16:02:40 2025 GMT
Not After : Aug 11 16:02:40 2025 GMT
Subject: CN=684ec05c9baa13167e09dd1a1cc9605f0bec5399
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:bb:6a:2e:22:95:78:0d:63:54:85:89:cb:9c:
d3:58:41:fd:df:60:f2:18:c2:fb:1e:0f:6a:ea:db:
4a:68:ad:d9:e6:9f:c4:fb:48:64:d0:28:32:9f:d4:
12:cc:0d:2e:84:7a:95:f6:d5:51:df:b7:e5:7d:c8:
65:46:62:34:0a:76:95:01:00:09:07:d1:58:2e:9a:
fd:5b:a9:c7:38:89:98:f3:ac:7e:2d:ae:58:67:b0:
ae:a5:93:0f:62:5c:b1:48:1a:0b:20:92:b3:0c:7f:
3c:94:5a:8c:b4:0b:96:c2:db:66:6d:00:0e:91:16:
ea:42:da:0d:6c:1f:1f:d3:3e:c4:41:d5:10:96:48:
6a:d1:78:06:02:0a:95:45:c6:39:10:e9:8b:c3:0b:
a7:b2:0f:38:d5:a8:68:0f:a0:35:d5:1c:01:8d:ce:
98:27:4b:60:0d:3b:5a:1b:55:2a:21:0e:0f:27:93:
93:06:33:80:b0:ee:54:aa:13:7d:23:f0:39:b7:0c:
e2:7f:b0:1e:de:8b:6e:9d:de:18:a6:08:ab:ee:76:
54:ca:a6:61:76:bc:a1:2a:a1:d6:74:bc:93:b1:3b:
a0:07:af:bd:d9:09:5e:c8:71:ec:bd:3f:f3:7a:f9:
e4:36:7e:6e:88:d3:1d:f7:ff:9a:21:7a:f2:da:2e:
84:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:4E:C0:5C:9B:AA:13:16:7E:09:DD:1A:1C:C9:60:5F:0B:EC:53:99
X509v3 Authority Key Identifier:
keyid:C4:52:06:B1:D6:F3:91:2A:86:EB:62:8F:61:9C:5A:55:2C:55:35:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xFIGsdbzkSqG62KPYZxaVSxVNQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/cc835f-4906-4c95-b8e5-5be40b14f8df/1/xFIGsdbzkSqG62KPYZxaVSxVNQE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/cc835f-4906-4c95-b8e5-5be40b14f8df/1/xFIGsdbzkSqG62KPYZxaVSxVNQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:9a:e7:87:19:3e:cb:43:fd:f7:6a:15:e6:0e:50:b5:60:1f:
cc:35:14:90:4a:7c:3b:1a:c4:4e:77:e2:64:76:f4:0a:fd:7f:
69:8c:f8:92:ca:02:aa:ab:02:af:03:50:21:00:fa:fe:5b:94:
59:ae:1c:01:43:63:43:77:c0:ee:a9:a7:04:12:eb:ad:ca:d5:
1a:83:8d:27:c9:29:6e:53:a8:c0:8e:94:8e:8e:1b:48:69:27:
37:b1:0e:39:46:54:31:b9:c7:8d:1a:78:c7:8e:6e:95:97:7f:
42:0a:f6:ff:88:10:a1:0c:fe:78:13:49:d8:c1:09:03:8f:63:
92:1c:22:f4:83:33:0f:7e:c5:a6:f9:7e:9e:1c:e8:e8:4f:53:
55:10:2d:d7:0e:9d:79:36:9e:c1:40:39:0e:e5:0b:49:12:df:
b9:ce:8f:1b:1e:2b:21:c3:8a:94:76:09:d1:1f:02:bd:49:0c:
17:c5:8a:37:a7:12:1a:1f:8c:6a:ce:0f:c6:c8:db:33:76:d4:
aa:b4:50:ef:b1:bd:df:3e:06:a9:45:34:b0:7e:ee:67:b2:07:
0c:2f:3b:bc:23:3d:16:4d:51:7c:74:af:d3:9c:f3:e4:36:f9:
d7:20:e7:15:d5:d7:36:e9:82:1e:96:af:2e:e0:92:95:82:9e:
6d:11:4a:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 01:46:05 2025 by rpki-client