Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/ffkEqxQGbHqf5hpSHVSSoOUpZco.mft
File: ffkEqxQGbHqf5hpSHVSSoOUpZco.mft (raw, json)
Hash identifier: bNn9DbtkjZxlSV98IYezOShMwInkm2ypOSZolaWNsMo=
Subject key identifier: 7A:5E:87:30:D8:3E:16:09:5B:64:6A:B9:72:79:65:94:0B:CC:3B:A6
Authority key identifier: 7D:F9:04:AB:14:06:6C:7A:9F:E6:1A:52:1D:54:92:A0:E5:29:65:CA
Certificate issuer: /CN=7df904ab14066c7a9fe61a521d5492a0e52965ca
Certificate serial: 0198D515B9C782DB762F831D3498CF122F24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ffkEqxQGbHqf5hpSHVSSoOUpZco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/ffkEqxQGbHqf5hpSHVSSoOUpZco.mft
Manifest number: 0701
Signing time: Sat 23 Aug 2025 04:00:27 +0000
Manifest this update: Sat 23 Aug 2025 04:00:27 +0000
Manifest next update: Sun 24 Aug 2025 04:00:27 +0000
Files and hashes: 1: 0ArCn88ad7Gi60vnalz09vRQW5c.roa (hash: 6iRAcdRwqjGbTdLIZY0yjb5Mc3gGZy84vwvdwQHNY88=)
2: chSUy_WX_Mse1L_Zh-GnPPV45Wk.roa (hash: BdzlPc3HpSD69LQhKLGFCf7tQNLnvI967xxASmmhAH4=)
3: ffkEqxQGbHqf5hpSHVSSoOUpZco.crl (hash: fIXRkMgmXymdegIMAxo5rJANArDlrW8gk71YMu+e2NU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/ffkEqxQGbHqf5hpSHVSSoOUpZco.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/ffkEqxQGbHqf5hpSHVSSoOUpZco.mft
rsync://rpki.ripe.net/repository/DEFAULT/ffkEqxQGbHqf5hpSHVSSoOUpZco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:b9:c7:82:db:76:2f:83:1d:34:98:cf:12:2f:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7df904ab14066c7a9fe61a521d5492a0e52965ca
Validity
Not Before: Aug 23 04:00:27 2025 GMT
Not After : Aug 24 04:00:27 2025 GMT
Subject: CN=7a5e8730d83e16095b646ab9727965940bcc3ba6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e3:94:7b:78:d2:3b:ca:2e:4e:3f:8a:7c:9e:
04:ae:ad:ea:7a:76:8b:75:b0:6f:14:41:46:3e:73:
c5:66:4a:e6:b0:d8:06:c3:90:38:20:15:e9:32:8e:
be:62:53:63:99:68:d4:61:f6:d2:79:76:1b:99:eb:
f6:bd:47:b6:ff:5e:28:7e:b2:19:cb:78:79:0c:01:
ab:1c:cb:61:90:f0:52:74:de:34:74:c1:c1:61:84:
57:54:b9:cf:4f:d0:3a:b9:d1:10:61:62:d3:de:84:
f7:08:72:28:a2:bb:68:38:5b:55:d9:98:d5:38:eb:
19:f0:96:98:a4:2e:ed:d5:19:a4:f9:81:ef:e0:77:
a7:23:dc:44:6b:12:5f:4e:9d:14:8e:47:75:65:ad:
bd:2a:e4:34:ba:e6:ca:64:02:bf:9b:80:ea:0c:04:
44:82:5b:b8:ed:fd:82:b1:30:81:1f:77:a2:2c:7f:
7a:be:b9:eb:bb:e9:bc:fa:c6:ac:68:b8:2e:8f:04:
67:58:bd:f9:f0:d3:8e:45:7a:4c:f2:a9:a0:3c:a4:
0e:4f:34:27:17:a3:3a:ab:e7:48:61:b1:80:e7:cf:
61:c4:a6:e8:4b:76:37:e8:07:37:e2:95:11:ba:ec:
23:5b:76:fd:71:00:56:f6:3a:51:08:4c:25:2d:14:
bf:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:5E:87:30:D8:3E:16:09:5B:64:6A:B9:72:79:65:94:0B:CC:3B:A6
X509v3 Authority Key Identifier:
keyid:7D:F9:04:AB:14:06:6C:7A:9F:E6:1A:52:1D:54:92:A0:E5:29:65:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffkEqxQGbHqf5hpSHVSSoOUpZco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/ffkEqxQGbHqf5hpSHVSSoOUpZco.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/ffkEqxQGbHqf5hpSHVSSoOUpZco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:07:51:7e:96:e8:61:df:06:75:bc:cb:e8:cc:fc:2d:f4:9a:
92:17:e3:ca:5f:25:35:ce:74:7a:8c:e6:78:78:62:7c:e7:77:
68:b2:c7:7b:11:c5:b9:94:3d:b1:8a:3f:70:ab:34:7c:06:6f:
1d:df:3b:ad:e4:c7:c3:17:ff:bc:a7:ee:7d:82:a1:2c:21:19:
59:f6:dd:b3:a4:42:02:30:32:36:c7:3a:99:fe:fc:e8:94:d9:
09:28:92:3f:e6:a0:ab:d3:3f:6e:bb:2e:26:2c:b1:46:1f:e2:
b1:2b:6f:d5:d7:f5:ff:da:5e:bc:de:29:bb:64:1e:e8:2d:64:
33:e3:88:0b:a7:af:95:1d:87:8b:4e:95:5a:ce:7f:39:a0:80:
c5:62:a4:35:f9:67:78:d9:e9:f0:4b:22:dc:9a:a9:a3:32:67:
5e:3a:b9:58:67:ec:34:26:12:8c:0b:98:52:fa:c4:f9:7a:e8:
70:a2:0c:60:bf:22:21:34:93:7f:84:be:01:3f:ae:97:9a:1e:
9b:b9:a3:71:df:9c:ea:b6:42:03:b7:ad:27:00:07:16:c6:8d:
16:e2:4d:c4:c6:2a:f9:d2:9a:ab:0e:ff:9a:32:92:a0:84:be:
38:cf:51:94:00:07:54:4c:35:72:c8:33:09:6a:bc:00:c5:92:
38:04:aa:f3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVFbnHgtt2L4MdNJjPEi8kMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkZjkwNGFiMTQwNjZjN2E5ZmU2MWE1MjFkNTQ5MmEwZTUy
OTY1Y2EwHhcNMjUwODIzMDQwMDI3WhcNMjUwODI0MDQwMDI3WjAzMTEwLwYDVQQD
Eyg3YTVlODczMGQ4M2UxNjA5NWI2NDZhYjk3Mjc5NjU5NDBiY2MzYmE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoeOUe3jSO8ouTj+KfJ4Erq3qenaL
dbBvFEFGPnPFZkrmsNgGw5A4IBXpMo6+YlNjmWjUYfbSeXYbmev2vUe2/14ofrIZ
y3h5DAGrHMthkPBSdN40dMHBYYRXVLnPT9A6udEQYWLT3oT3CHIoortoOFtV2ZjV
OOsZ8JaYpC7t1Rmk+YHv4HenI9xEaxJfTp0Ujkd1Za29KuQ0uubKZAK/m4DqDARE
glu47f2CsTCBH3eiLH96vrnru+m8+sasaLgujwRnWL358NOORXpM8qmgPKQOTzQn
F6M6q+dIYbGA589hxKboS3Y36Ac34pURuuwjW3b9cQBW9jpRCEwlLRS/ewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHpehzDYPhYJW2RquXJ5ZZQLzDumMB8GA1UdIwQY
MBaAFH35BKsUBmx6n+YaUh1UkqDlKWXKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmZrRXF4UUdiSHFmNWhwU0hWU1NvT1VwWmNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS81M2ZiMzQtMjVkYi00Njg0LTk4NGYt
M2I0NDVmMjlmNWI3LzEvZmZrRXF4UUdiSHFmNWhwU0hWU1NvT1VwWmNvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS81M2ZiMzQtMjVkYi00Njg0LTk4NGYtM2I0NDVmMjlmNWI3
LzEvZmZrRXF4UUdiSHFmNWhwU0hWU1NvT1VwWmNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlwdRfpbo
Yd8GdbzL6Mz8LfSakhfjyl8lNc50eozmeHhifOd3aLLHexHFuZQ9sYo/cKs0fAZv
Hd87reTHwxf/vKfufYKhLCEZWfbds6RCAjAyNsc6mf786JTZCSiSP+agq9M/brsu
JiyxRh/isStv1df1/9pevN4pu2Qe6C1kM+OIC6evlR2Hi06VWs5/OaCAxWKkNfln
eNnp8Esi3JqpozJnXjq5WGfsNCYSjAuYUvrE+XrocKIMYL8iITSTf4S+AT+ul5oe
m7mjcd+c6rZCA7etJwAHFsaNFuJNxMYq+dKaqw7/mjKSoIS+OM9RlAAHVEw1csgz
CWq8AMWSOASq8w==
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:29:49 2025 by rpki-client