Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/85b29b-0ea2-4741-b439-e4b66a3fe5bc/1/ffEaMWDbjOeRi_PsWLXF4ePpOCE.mft
File: ffEaMWDbjOeRi_PsWLXF4ePpOCE.mft (raw, json)
Hash identifier: B5GnZaAQs5A5+6yADoJL5/3BaZ9kycdpUutrerBkB5E=
Subject key identifier: C2:97:A9:AD:72:A0:EB:CB:02:F1:0B:E5:91:66:CD:E6:E7:1F:C4:F1
Authority key identifier: 7D:F1:1A:31:60:DB:8C:E7:91:8B:F3:EC:58:B5:C5:E1:E3:E9:38:21
Certificate issuer: /CN=7df11a3160db8ce7918bf3ec58b5c5e1e3e93821
Certificate serial: 0199FDA1BC8B61E063A434AAC11269B822B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ffEaMWDbjOeRi_PsWLXF4ePpOCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/85b29b-0ea2-4741-b439-e4b66a3fe5bc/1/ffEaMWDbjOeRi_PsWLXF4ePpOCE.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 18:00:59 +0000
Manifest this update: Sun 19 Oct 2025 18:00:59 +0000
Manifest next update: Mon 20 Oct 2025 18:00:59 +0000
Files and hashes: 1: Hdo0JQgTFMLfp514_zX_eH0BV28.roa (hash: 1zoX3E+YpaDl71akpZOBfWw1Iq/htQIg0CTgRLbNZSk=)
2: ffEaMWDbjOeRi_PsWLXF4ePpOCE.crl (hash: R5dB7im0d96w5IRD7REeQMCFb4RbZkcR/tceI1icovE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/85b29b-0ea2-4741-b439-e4b66a3fe5bc/1/ffEaMWDbjOeRi_PsWLXF4ePpOCE.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/85b29b-0ea2-4741-b439-e4b66a3fe5bc/1/ffEaMWDbjOeRi_PsWLXF4ePpOCE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ffEaMWDbjOeRi_PsWLXF4ePpOCE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:a1:bc:8b:61:e0:63:a4:34:aa:c1:12:69:b8:22:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7df11a3160db8ce7918bf3ec58b5c5e1e3e93821
Validity
Not Before: Oct 19 18:00:59 2025 GMT
Not After : Oct 20 18:00:59 2025 GMT
Subject: CN=c297a9ad72a0ebcb02f10be59166cde6e71fc4f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:a6:4f:22:54:ae:55:83:c7:a5:a1:cd:54:4b:
7c:d9:c8:38:eb:85:e9:44:b1:67:b5:c3:1d:f3:36:
4d:f6:fd:f9:68:46:fb:1e:08:04:68:2e:1e:f8:53:
b4:22:83:0b:71:83:e2:5f:f9:b8:31:e8:ab:23:cc:
19:e9:6a:10:56:64:eb:7c:c0:e4:08:72:04:b7:d0:
a6:15:aa:9a:3d:f3:c0:5f:bb:b6:62:6b:5a:a4:fa:
a6:80:ff:18:8c:8f:4c:e2:3c:48:2f:ce:a7:55:45:
5a:8f:96:d9:cd:12:f0:dc:56:3e:e4:23:f2:32:d6:
27:8b:7c:00:18:8a:53:e2:84:f6:f3:ac:4d:f4:a0:
ea:30:c2:f7:47:15:82:de:d5:d2:ab:52:1a:9c:cc:
54:82:18:aa:09:74:59:af:ef:09:85:28:a0:2d:43:
87:75:b7:01:5f:ae:61:01:e4:8e:db:0d:c5:a8:76:
54:d9:c3:b9:d8:ac:ec:b3:ac:df:20:28:14:8b:6c:
90:18:e9:42:b0:49:e6:57:70:65:8c:bc:cb:fb:c3:
3c:5c:7e:eb:42:83:d3:48:df:5f:8a:5e:be:14:b1:
92:b9:03:31:15:01:c4:c4:4c:07:ba:d8:5d:1c:71:
75:da:8e:0b:8e:d5:60:2e:60:81:c5:36:4f:49:b8:
72:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:97:A9:AD:72:A0:EB:CB:02:F1:0B:E5:91:66:CD:E6:E7:1F:C4:F1
X509v3 Authority Key Identifier:
keyid:7D:F1:1A:31:60:DB:8C:E7:91:8B:F3:EC:58:B5:C5:E1:E3:E9:38:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffEaMWDbjOeRi_PsWLXF4ePpOCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/85b29b-0ea2-4741-b439-e4b66a3fe5bc/1/ffEaMWDbjOeRi_PsWLXF4ePpOCE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/85b29b-0ea2-4741-b439-e4b66a3fe5bc/1/ffEaMWDbjOeRi_PsWLXF4ePpOCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:c2:a4:2b:da:91:03:b5:4a:c1:05:78:d5:12:20:14:6f:e6:
c6:67:34:0f:94:8c:31:f5:bf:e3:06:13:57:16:48:68:d2:74:
63:ce:44:4a:50:1b:02:42:ac:d4:31:75:4e:99:92:fd:c8:6a:
13:5e:22:0b:f7:3e:0a:45:33:c3:32:2c:db:73:78:8e:c0:08:
05:bf:2c:40:36:e5:e7:dd:b2:f6:a3:fb:4c:ff:1d:7c:33:64:
59:fb:03:7f:32:0d:c9:62:f8:ec:78:90:2f:f7:81:b0:31:5a:
40:7d:e7:9e:c2:36:ed:78:25:e5:96:b5:c0:4d:93:b8:ca:ab:
a8:e7:69:fe:e4:6c:44:1e:d9:64:b6:92:5c:07:fd:84:0e:52:
28:f8:05:08:e9:07:f9:dc:90:eb:9f:3b:0b:eb:21:3e:a6:20:
95:1a:54:9a:19:ce:91:19:16:43:3a:5b:c9:2d:3d:76:b2:ea:
5d:7f:e9:72:47:c1:f4:09:c3:40:e3:c8:ab:a5:9c:9e:0d:93:
90:81:c3:8a:23:d3:95:92:d5:48:2b:fb:91:74:6e:bf:03:54:
c3:1c:fe:99:5e:37:26:11:ec:2c:f6:26:1b:cb:e9:95:38:a4:
28:1a:6b:be:f1:a4:d9:58:e6:ed:0e:15:8a:a5:ed:1b:ae:e4:
0b:70:d5:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:32:52 2025 by rpki-client