
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/7a7871-08f3-4757-a9f0-bf1c5cc36b66/1/fffP1siCamf2QqNz0TGVUwjZwco.mft
File: fffP1siCamf2QqNz0TGVUwjZwco.mft (raw, json)
Hash identifier: +emHgDxFDj2/5+jMuCRAfd9a1v9iRUKh6FYttzbvsnc=
Subject key identifier: 8C:8F:E2:A8:B4:5D:01:F5:70:FD:89:6D:BE:B3:42:30:A7:58:14:3B
Authority key identifier: 7D:F7:CF:D6:C8:82:6A:67:F6:42:A3:73:D1:31:95:53:08:D9:C1:CA
Certificate issuer: /CN=7df7cfd6c8826a67f642a373d131955308d9c1ca
Certificate serial: 0198D54E5FB2475A8DE8786307B8CAD17060
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fffP1siCamf2QqNz0TGVUwjZwco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/7a7871-08f3-4757-a9f0-bf1c5cc36b66/1/fffP1siCamf2QqNz0TGVUwjZwco.mft
Manifest number: 150D
Signing time: Sat 23 Aug 2025 05:02:19 +0000
Manifest this update: Sat 23 Aug 2025 05:02:19 +0000
Manifest next update: Sun 24 Aug 2025 05:02:19 +0000
Files and hashes: 1: 1-QIjmT5ytjlZ7ZqLyFbtzizpu4U.roa (hash: XgYeIgk7TzTLjMF5WHOcmWJnxBjJamzS18zkuyda8BY=)
2: fffP1siCamf2QqNz0TGVUwjZwco.crl (hash: WyLaVpYBXrqAFsPIB599a5y1wFog1zdg1MgyQeXAy34=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/7a7871-08f3-4757-a9f0-bf1c5cc36b66/1/fffP1siCamf2QqNz0TGVUwjZwco.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/7a7871-08f3-4757-a9f0-bf1c5cc36b66/1/fffP1siCamf2QqNz0TGVUwjZwco.mft
rsync://rpki.ripe.net/repository/DEFAULT/fffP1siCamf2QqNz0TGVUwjZwco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:5f:b2:47:5a:8d:e8:78:63:07:b8:ca:d1:70:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7df7cfd6c8826a67f642a373d131955308d9c1ca
Validity
Not Before: Aug 23 05:02:19 2025 GMT
Not After : Aug 24 05:02:19 2025 GMT
Subject: CN=8c8fe2a8b45d01f570fd896dbeb34230a758143b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:47:d0:b4:a6:96:f7:78:0b:b8:d1:97:fd:b6:
69:6d:35:db:a0:9f:f1:7c:5b:4f:8a:0c:67:0e:e8:
ed:96:4a:ae:69:6b:3d:a5:e1:ac:dc:bf:a9:eb:6e:
e2:90:df:7b:de:9f:3f:dc:f1:4f:15:19:59:e1:df:
b7:ad:aa:5f:3a:0c:85:da:99:5f:57:77:ad:e8:6e:
27:52:0e:c8:87:b1:29:7a:2c:d0:a9:9e:77:f6:15:
91:88:18:36:3d:b6:ad:61:b6:2b:bc:76:f9:87:9f:
08:2f:a0:79:13:1d:8f:06:a3:de:58:8f:29:7e:09:
87:cd:6d:e5:d3:22:f1:11:93:3d:63:b6:66:87:8c:
f3:a7:4d:21:be:4c:eb:ac:c6:1e:b7:05:b9:54:76:
98:f3:22:eb:b7:3e:07:bf:e2:57:25:53:ed:de:3a:
40:40:1f:55:ab:86:a0:fd:3b:04:1a:e7:44:c6:58:
52:64:c8:98:5d:44:5c:25:6a:19:25:f8:33:b8:93:
38:17:c9:bb:8e:32:52:87:24:6e:52:27:42:be:31:
b9:26:a2:78:20:58:b9:51:82:31:dd:b7:f9:82:60:
7c:29:34:bd:5d:d2:cd:e9:4a:54:2c:e9:ee:8b:7f:
13:3a:71:11:cf:ee:05:c4:5a:a0:e6:cb:6a:e4:1c:
b0:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:8F:E2:A8:B4:5D:01:F5:70:FD:89:6D:BE:B3:42:30:A7:58:14:3B
X509v3 Authority Key Identifier:
keyid:7D:F7:CF:D6:C8:82:6A:67:F6:42:A3:73:D1:31:95:53:08:D9:C1:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fffP1siCamf2QqNz0TGVUwjZwco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/7a7871-08f3-4757-a9f0-bf1c5cc36b66/1/fffP1siCamf2QqNz0TGVUwjZwco.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/7a7871-08f3-4757-a9f0-bf1c5cc36b66/1/fffP1siCamf2QqNz0TGVUwjZwco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:47:b5:d9:f4:c6:4b:55:24:1f:2a:57:e0:3f:ea:ff:2b:30:
98:6a:cc:43:f5:48:17:f7:13:5f:b1:8e:1c:26:ee:92:c6:6f:
e3:2d:44:a9:09:19:5e:50:1c:ec:96:b3:ab:25:32:7a:55:57:
3c:26:fc:b5:87:a2:df:5f:0f:af:a4:d5:95:1a:04:4e:38:94:
fe:af:27:51:d5:5c:1d:0d:27:15:68:7c:1c:38:a1:06:e8:ba:
d6:39:6d:69:9e:13:9f:7e:e3:27:8a:0a:be:c7:ad:4b:83:16:
35:99:79:22:a7:00:2a:fc:bc:e4:90:01:71:41:7d:99:92:cb:
d1:f8:64:d3:75:65:b0:62:9b:34:fc:bb:72:31:b1:4a:95:23:
ec:65:8b:fa:3a:08:eb:8d:24:53:04:92:4d:ad:90:dd:f6:6e:
b0:be:be:fa:33:d5:aa:c3:53:ff:34:95:4b:90:4e:f6:9f:f6:
58:48:55:b6:0d:17:d4:bf:35:a9:9b:cf:b7:fc:72:2b:37:5c:
0f:aa:37:18:63:60:a4:ca:57:5d:62:7b:e9:bb:8f:b4:6e:d9:
a2:07:3b:13:27:94:bd:db:12:3a:b4:47:e8:9b:80:39:a8:05:
5f:a9:4a:e3:bc:7e:3c:b1:f6:33:c8:0f:3f:37:dc:51:97:08:
f4:c1:d6:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:30:28 2025 by rpki-client