Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/Ff-gQhFDATaLQGmr1ooe-6xH_c4.mft
File: Ff-gQhFDATaLQGmr1ooe-6xH_c4.mft (raw, json)
Hash identifier: mIaMl+m6etrEa0IKmqzS9ToTSvu3IZxju0QBbdyYNis=
Subject key identifier: DC:31:31:7C:BA:E4:62:67:8D:94:E2:B2:CB:B4:0C:3E:55:05:B3:F2
Authority key identifier: 15:FF:A0:42:11:43:01:36:8B:40:69:AB:D6:8A:1E:FB:AC:47:FD:CE
Certificate issuer: /CN=15ffa042114301368b4069abd68a1efbac47fdce
Certificate serial: 0197B8C6068A731AC68DBEABB436BDEA1B66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ff-gQhFDATaLQGmr1ooe-6xH_c4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/Ff-gQhFDATaLQGmr1ooe-6xH_c4.mft
Manifest number: 15D8
Signing time: Sat 28 Jun 2025 23:01:14 +0000
Manifest this update: Sat 28 Jun 2025 23:01:14 +0000
Manifest next update: Sun 29 Jun 2025 23:01:14 +0000
Files and hashes: 1: 4f5IEbxl_-6ggqEpMyEwMZQV28A.roa (hash: HLOe1eca4Fb9BXBQXSGJm/92QIZLzNHE6QFmeoKJKAE=)
2: 6u0Asdv1MK3aB_6LSzkcot6bBic.roa (hash: Unsvdd0urMCZdw1KCmFCBV2OeTjQKyc3NTKlxR83W+g=)
3: AGOQH07CbOv-ptcClhHBm5EQp-4.roa (hash: LGaMLQ5/MFjNXGL657nV7BSt6luG57ujXGiYSAKsY5E=)
4: Ff-gQhFDATaLQGmr1ooe-6xH_c4.crl (hash: VK5sA1ZjGWhFW0QrRNL58FnxrFfaeivrfqIGKy7F2UU=)
5: G_eCdr_CtHHYdvx_wsfrWGJQP2E.roa (hash: m4lFNVsxQJtYcVSh1StMkG9TI91ecQZqyflVHyNHncI=)
6: O-SsLGZDDis9x7Hdr9bjMmd2BoY.roa (hash: HishzW2LB7SBBdcbiiTEBoYKX9Z+I6RhesW10ogdrys=)
7: UezMgLKKI-WhO1czQILLBRClTv8.roa (hash: AnuM+KLFPB1elW7al0sjIDYMJlOpGTtEqCymfhnESgE=)
8: zXrOjxGX_DI-tXkFUtLuBXotuic.roa (hash: mrO+89Y/llkPbD0Oqqb4OVuncS888EEiNoMgxFZFl6I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/Ff-gQhFDATaLQGmr1ooe-6xH_c4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/Ff-gQhFDATaLQGmr1ooe-6xH_c4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ff-gQhFDATaLQGmr1ooe-6xH_c4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 23:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:c6:06:8a:73:1a:c6:8d:be:ab:b4:36:bd:ea:1b:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15ffa042114301368b4069abd68a1efbac47fdce
Validity
Not Before: Jun 28 23:01:14 2025 GMT
Not After : Jun 29 23:01:14 2025 GMT
Subject: CN=dc31317cbae462678d94e2b2cbb40c3e5505b3f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:8a:4a:f5:60:e6:a3:7a:1f:40:5f:74:7a:49:
df:f3:f9:4e:c6:a0:ab:00:47:31:7a:75:af:2a:11:
c6:35:e8:64:ed:b8:b7:db:18:b8:05:70:bd:21:2d:
9d:c9:40:cb:d4:ef:0b:ae:98:0d:37:a2:68:8e:56:
a1:24:3f:97:1f:ca:92:73:ae:b8:64:95:61:b1:c3:
7e:9d:7e:fc:2c:6e:11:f8:0d:7c:8e:79:0f:70:4c:
7d:2e:16:8f:6c:1b:a9:2e:e2:68:d2:76:c7:46:37:
c6:76:4b:7c:2a:02:b1:f4:e3:01:e8:29:e4:f7:7e:
7c:f7:db:aa:95:17:b9:8b:f6:9c:43:e9:74:ca:e4:
55:5a:28:d1:a8:5f:86:2b:89:4c:43:cd:10:2e:88:
23:fd:a5:ea:ef:56:5a:11:92:c4:4c:d5:da:39:e0:
b1:88:7e:09:09:21:c4:2e:3a:e7:1d:2c:2d:b3:25:
3c:f0:03:e0:f1:ce:a0:71:c5:07:dc:72:c4:92:ed:
2b:40:33:6a:06:75:97:bd:d6:97:75:2f:e4:7b:2c:
f4:27:f0:77:f9:72:fd:13:bf:06:16:ac:8f:89:e2:
ab:ed:47:43:9c:92:f5:5b:a0:b2:de:45:0a:eb:3b:
78:72:ff:9f:87:33:6d:6f:1b:76:0c:28:04:f8:17:
85:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:31:31:7C:BA:E4:62:67:8D:94:E2:B2:CB:B4:0C:3E:55:05:B3:F2
X509v3 Authority Key Identifier:
keyid:15:FF:A0:42:11:43:01:36:8B:40:69:AB:D6:8A:1E:FB:AC:47:FD:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ff-gQhFDATaLQGmr1ooe-6xH_c4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/Ff-gQhFDATaLQGmr1ooe-6xH_c4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/Ff-gQhFDATaLQGmr1ooe-6xH_c4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:79:58:b4:aa:5e:95:ee:8e:18:05:b2:0e:a1:38:50:9e:22:
49:c7:1f:29:1a:0d:20:85:34:7b:58:53:6e:b3:c6:e8:db:c8:
8f:4b:36:23:ba:fb:8d:9d:9a:3b:b3:73:c8:27:92:2a:9c:4c:
26:59:f9:ae:91:8f:16:a3:3a:06:79:57:e1:3c:c3:92:ae:b1:
30:90:79:a0:62:90:99:eb:72:8b:7b:d9:f6:1b:23:02:fc:47:
37:f0:a0:04:9f:05:17:6b:ed:68:9c:a3:70:e8:8a:8f:0b:7f:
e7:d7:2c:0f:36:e5:c6:b5:54:c2:67:a3:f5:2d:34:e3:29:13:
19:9a:ee:87:88:f1:80:fb:62:35:f3:04:ce:f1:5f:ca:dd:ff:
c9:4e:a2:bb:e9:5d:9e:7f:8b:74:83:e0:65:14:85:0b:42:1c:
7b:5e:68:ec:a8:e5:ab:bf:8f:4c:73:3a:b9:f7:87:56:a3:76:
3f:31:89:c3:41:b7:ed:0f:e4:94:c8:ba:a4:15:4f:62:4a:ba:
d7:16:1f:2c:d1:0e:af:aa:7c:4d:e6:aa:36:90:db:74:3c:60:
fb:5b:ed:d3:36:d3:63:f8:f0:e6:92:54:09:05:c1:c5:5a:7b:
f1:c3:75:ea:d9:00:a6:08:92:ee:ef:82:81:dc:86:d5:81:29:
1b:bc:b3:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe4xgaKcxrGjb6rtDa96htmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1ZmZhMDQyMTE0MzAxMzY4YjQwNjlhYmQ2OGExZWZiYWM0
N2ZkY2UwHhcNMjUwNjI4MjMwMTE0WhcNMjUwNjI5MjMwMTE0WjAzMTEwLwYDVQQD
EyhkYzMxMzE3Y2JhZTQ2MjY3OGQ5NGUyYjJjYmI0MGMzZTU1MDViM2YyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuIpK9WDmo3ofQF90eknf8/lOxqCr
AEcxenWvKhHGNehk7bi32xi4BXC9IS2dyUDL1O8LrpgNN6JojlahJD+XH8qSc664
ZJVhscN+nX78LG4R+A18jnkPcEx9LhaPbBupLuJo0nbHRjfGdkt8KgKx9OMB6Cnk
935899uqlRe5i/acQ+l0yuRVWijRqF+GK4lMQ80QLogj/aXq71ZaEZLETNXaOeCx
iH4JCSHELjrnHSwtsyU88APg8c6gccUH3HLEku0rQDNqBnWXvdaXdS/keyz0J/B3
+XL9E78GFqyPieKr7UdDnJL1W6Cy3kUK6zt4cv+fhzNtbxt2DCgE+BeFewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNwxMXy65GJnjZTissu0DD5VBbPyMB8GA1UdIwQY
MBaAFBX/oEIRQwE2i0Bpq9aKHvusR/3OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmYtZ1FoRkRBVGFMUUdtcjFvb2UtNnhIX2M0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi8xNDliYzUtNTFhYS00ZTdiLThmMDMt
YjczYTM2ZDkzOWIyLzEvRmYtZ1FoRkRBVGFMUUdtcjFvb2UtNnhIX2M0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi8xNDliYzUtNTFhYS00ZTdiLThmMDMtYjczYTM2ZDkzOWIy
LzEvRmYtZ1FoRkRBVGFMUUdtcjFvb2UtNnhIX2M0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYnlYtKpe
le6OGAWyDqE4UJ4iSccfKRoNIIU0e1hTbrPG6NvIj0s2I7r7jZ2aO7NzyCeSKpxM
Jln5rpGPFqM6BnlX4TzDkq6xMJB5oGKQmetyi3vZ9hsjAvxHN/CgBJ8FF2vtaJyj
cOiKjwt/59csDzblxrVUwmej9S004ykTGZruh4jxgPtiNfMEzvFfyt3/yU6iu+ld
nn+LdIPgZRSFC0Ice15o7Kjlq7+PTHM6ufeHVqN2PzGJw0G37Q/klMi6pBVPYkq6
1xYfLNEOr6p8TeaqNpDbdDxg+1vt0zbTY/jw5pJUCQXBxVp78cN16tkApgiS7u+C
gdyG1YEpG7yzFw==
-----END CERTIFICATE-----
Generated at Sun Jun 29 05:59:38 2025 by rpki-client