Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/ffkEqxQGbHqf5hpSHVSSoOUpZco.mft
File: ffkEqxQGbHqf5hpSHVSSoOUpZco.mft (raw, json)
Hash identifier: YOEJRXcoyuHjZHwaWmYSigChUFWD3Op1WBSBTsS5rxc=
Subject key identifier: 32:BC:82:7C:EA:3C:CF:EC:BF:15:E2:3D:EA:1B:B5:FE:4E:63:EE:27
Authority key identifier: 7D:F9:04:AB:14:06:6C:7A:9F:E6:1A:52:1D:54:92:A0:E5:29:65:CA
Certificate issuer: /CN=7df904ab14066c7a9fe61a521d5492a0e52965ca
Certificate serial: 0199FD6B0D6611E12F4D31F9A76D34F60F4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ffkEqxQGbHqf5hpSHVSSoOUpZco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/ffkEqxQGbHqf5hpSHVSSoOUpZco.mft
Manifest number: 079B
Signing time: Sun 19 Oct 2025 17:01:15 +0000
Manifest this update: Sun 19 Oct 2025 17:01:15 +0000
Manifest next update: Mon 20 Oct 2025 17:01:15 +0000
Files and hashes: 1: chSUy_WX_Mse1L_Zh-GnPPV45Wk.roa (hash: BdzlPc3HpSD69LQhKLGFCf7tQNLnvI967xxASmmhAH4=)
2: ffkEqxQGbHqf5hpSHVSSoOUpZco.crl (hash: 3WO07uJ1dgHnwt4PsFvErBRJN6WKb/DAE1EX2A+EPAw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/ffkEqxQGbHqf5hpSHVSSoOUpZco.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/ffkEqxQGbHqf5hpSHVSSoOUpZco.mft
rsync://rpki.ripe.net/repository/DEFAULT/ffkEqxQGbHqf5hpSHVSSoOUpZco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6b:0d:66:11:e1:2f:4d:31:f9:a7:6d:34:f6:0f:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7df904ab14066c7a9fe61a521d5492a0e52965ca
Validity
Not Before: Oct 19 17:01:15 2025 GMT
Not After : Oct 20 17:01:15 2025 GMT
Subject: CN=32bc827cea3ccfecbf15e23dea1bb5fe4e63ee27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:00:6f:aa:df:2e:1e:de:1d:c7:b7:20:99:53:
f5:3f:85:42:98:8d:74:12:3f:13:c8:d7:8a:34:c8:
a9:43:94:a3:ab:33:98:4f:01:be:c3:ca:e6:5d:dd:
11:8e:6d:e3:3a:55:8f:22:97:f7:8d:70:19:05:16:
e9:f7:55:1c:df:15:33:99:c3:ba:57:0f:57:d0:ca:
d7:60:e2:a1:4b:9c:ef:60:d0:9a:a3:96:01:73:55:
4b:13:63:69:a9:a8:b0:86:eb:3d:f2:bc:3c:3d:23:
df:18:78:3b:04:d8:04:d3:0c:c0:ea:29:e2:51:c3:
2f:3f:d0:98:bc:74:be:a5:61:2c:6c:34:be:94:a5:
5d:df:44:36:5a:06:48:6f:db:7b:ec:7a:a7:ea:92:
b7:ac:2b:de:23:13:b9:11:cb:66:de:19:62:46:c5:
96:d8:bc:76:98:37:01:7d:d1:df:cd:9f:86:e6:79:
aa:8a:d3:2c:98:76:9b:79:e7:29:0d:40:fb:b0:bd:
29:38:f4:13:05:be:af:75:ac:56:9a:1f:39:b6:0e:
5e:65:dd:f2:84:a5:f9:c4:60:f0:8a:00:53:36:03:
03:28:92:a3:9f:fa:c4:ea:a6:66:83:70:c5:bf:d4:
71:9c:18:11:22:53:97:92:10:2a:87:01:a5:d9:88:
84:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:BC:82:7C:EA:3C:CF:EC:BF:15:E2:3D:EA:1B:B5:FE:4E:63:EE:27
X509v3 Authority Key Identifier:
keyid:7D:F9:04:AB:14:06:6C:7A:9F:E6:1A:52:1D:54:92:A0:E5:29:65:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffkEqxQGbHqf5hpSHVSSoOUpZco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/ffkEqxQGbHqf5hpSHVSSoOUpZco.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/ffkEqxQGbHqf5hpSHVSSoOUpZco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:0c:7e:3d:ec:9e:c5:6f:72:70:8a:09:82:c1:39:6c:76:39:
ac:85:7f:46:67:2d:92:66:97:70:f5:49:c7:a5:76:80:3f:83:
6c:48:63:a0:fe:d6:7f:29:86:30:b3:c1:74:a0:11:4e:84:2a:
09:22:34:2a:0e:b5:f7:c3:3c:a0:f8:33:52:4b:00:c7:ca:6d:
2a:74:dc:5d:86:13:d5:27:c8:41:67:c0:01:c5:95:83:d1:31:
6b:a2:28:cb:b9:16:86:b5:df:d6:b6:e8:c6:a9:b5:d5:d4:41:
87:06:ca:98:8f:0e:56:16:a5:ac:3b:eb:d7:19:2e:25:1c:0c:
38:2c:a3:03:22:8b:82:a7:7d:85:55:12:91:24:d8:31:2e:2b:
17:3c:d5:a5:9c:d7:8d:16:f9:58:dd:16:0e:b6:0a:4a:20:68:
07:03:58:6e:b2:c7:ff:d1:f9:30:0d:04:96:17:f7:5d:35:c2:
f9:22:fc:9b:b0:9c:28:72:e2:5f:5b:ff:76:88:a4:c1:11:b0:
27:24:89:46:e6:de:f7:c8:71:eb:89:00:37:d7:d0:af:ea:6d:
a8:26:66:c0:23:1d:be:54:1b:52:5d:49:ca:9d:1d:20:fa:fb:
40:f1:41:b2:de:37:d4:fc:7a:6a:b5:73:c2:b1:4e:ca:98:b0:
0e:1b:e8:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:42:47 2025 by rpki-client