Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/Ff-gQhFDATaLQGmr1ooe-6xH_c4.mft
File: Ff-gQhFDATaLQGmr1ooe-6xH_c4.mft (raw, json)
Hash identifier: OqVwomSUPfeKZnEuSIFP0CvMQlRwRlHst91OQ+HX8gU=
Subject key identifier: F1:9F:02:86:72:96:D5:71:96:E3:E9:60:4A:E3:4C:6A:E7:33:C9:86
Authority key identifier: 15:FF:A0:42:11:43:01:36:8B:40:69:AB:D6:8A:1E:FB:AC:47:FD:CE
Certificate issuer: /CN=15ffa042114301368b4069abd68a1efbac47fdce
Certificate serial: 0198D5F124ACCB91DEDA7BA1D9C81E34A273
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ff-gQhFDATaLQGmr1ooe-6xH_c4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/Ff-gQhFDATaLQGmr1ooe-6xH_c4.mft
Manifest number: 166C
Signing time: Sat 23 Aug 2025 08:00:07 +0000
Manifest this update: Sat 23 Aug 2025 08:00:07 +0000
Manifest next update: Sun 24 Aug 2025 08:00:07 +0000
Files and hashes: 1: 6u0Asdv1MK3aB_6LSzkcot6bBic.roa (hash: Unsvdd0urMCZdw1KCmFCBV2OeTjQKyc3NTKlxR83W+g=)
2: AGOQH07CbOv-ptcClhHBm5EQp-4.roa (hash: LGaMLQ5/MFjNXGL657nV7BSt6luG57ujXGiYSAKsY5E=)
3: Et5vhEXgLOmM5SbkGarS_YGVpLo.roa (hash: uNGZHjxFk4Dk42uVibgGyfbV7WZ6GeCmNMtAi7XVFis=)
4: Ff-gQhFDATaLQGmr1ooe-6xH_c4.crl (hash: pGVOt+ana5+nhjs6N7+xk3VIEYauuq1nbPiLKy3FDio=)
5: G_eCdr_CtHHYdvx_wsfrWGJQP2E.roa (hash: m4lFNVsxQJtYcVSh1StMkG9TI91ecQZqyflVHyNHncI=)
6: O-SsLGZDDis9x7Hdr9bjMmd2BoY.roa (hash: HishzW2LB7SBBdcbiiTEBoYKX9Z+I6RhesW10ogdrys=)
7: UezMgLKKI-WhO1czQILLBRClTv8.roa (hash: AnuM+KLFPB1elW7al0sjIDYMJlOpGTtEqCymfhnESgE=)
8: zXrOjxGX_DI-tXkFUtLuBXotuic.roa (hash: mrO+89Y/llkPbD0Oqqb4OVuncS888EEiNoMgxFZFl6I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/Ff-gQhFDATaLQGmr1ooe-6xH_c4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/Ff-gQhFDATaLQGmr1ooe-6xH_c4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ff-gQhFDATaLQGmr1ooe-6xH_c4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:24:ac:cb:91:de:da:7b:a1:d9:c8:1e:34:a2:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15ffa042114301368b4069abd68a1efbac47fdce
Validity
Not Before: Aug 23 08:00:07 2025 GMT
Not After : Aug 24 08:00:07 2025 GMT
Subject: CN=f19f02867296d57196e3e9604ae34c6ae733c986
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:81:1a:2c:01:33:43:b8:26:6a:dc:1e:e0:2f:
b6:24:62:4a:99:6d:06:01:85:46:5d:7c:b0:e9:82:
13:4b:fe:38:fd:f0:12:eb:65:88:52:fc:09:0a:bb:
d0:47:96:18:11:36:23:5b:5f:f4:43:2b:b0:1a:f3:
b6:19:a3:46:eb:22:6e:83:af:02:3b:65:43:4d:8d:
57:b5:2c:fc:3b:54:f9:89:4f:ad:e7:51:b4:d1:c7:
be:b8:b4:90:15:2a:d7:b7:77:16:01:e9:51:06:0d:
9d:6a:e3:d0:bd:6e:e7:36:cf:ec:9e:ba:73:6e:d3:
9f:f3:9b:ce:35:2e:19:3f:fb:f4:bf:6f:ab:78:db:
a0:b5:66:1b:d6:4d:7a:e7:7f:5e:ca:0a:1e:94:34:
01:d3:ef:df:7d:37:50:9f:e0:46:e2:14:8f:2d:ee:
fe:07:a6:ff:89:19:8c:74:67:dc:d7:d2:15:1c:26:
e1:f1:8d:0f:9d:88:ce:e9:27:f1:fb:66:db:e7:62:
91:2d:2c:d6:60:ef:a0:44:e9:ac:6a:82:a0:46:8d:
21:ae:3d:15:5f:15:fc:34:50:02:26:12:cb:da:10:
19:57:ac:96:36:ad:5e:0d:9a:61:86:12:36:97:c6:
40:07:d1:a7:5a:34:b9:7d:de:25:b7:27:10:91:97:
92:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:9F:02:86:72:96:D5:71:96:E3:E9:60:4A:E3:4C:6A:E7:33:C9:86
X509v3 Authority Key Identifier:
keyid:15:FF:A0:42:11:43:01:36:8B:40:69:AB:D6:8A:1E:FB:AC:47:FD:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ff-gQhFDATaLQGmr1ooe-6xH_c4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/Ff-gQhFDATaLQGmr1ooe-6xH_c4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/Ff-gQhFDATaLQGmr1ooe-6xH_c4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:74:98:5f:3c:cb:f7:b1:34:3b:da:25:f0:76:05:c7:7a:cb:
f9:93:ad:47:0c:b3:7d:23:fd:39:34:02:81:5d:9c:ba:d8:70:
cc:71:3e:de:52:10:c2:ab:db:d0:33:0e:75:c3:36:38:13:85:
bf:3b:c6:4a:5e:33:54:0f:84:76:b6:78:fc:5b:14:cb:24:fb:
ff:49:f1:3b:2f:2e:91:e0:54:ca:ed:bd:53:89:df:bc:91:37:
87:46:1a:82:1a:4b:7d:18:41:bf:3f:12:74:da:92:79:57:ec:
fd:0c:17:eb:c5:c6:b3:af:50:66:2c:59:a3:cb:6a:ef:0b:c0:
32:93:16:01:7c:87:6b:19:07:bc:2c:70:0e:0f:17:35:d1:c1:
60:01:31:8e:cf:92:22:a7:c7:89:bc:97:b0:b7:2b:ed:32:fa:
fa:66:66:2e:4b:a8:4b:40:c2:4c:5c:14:63:a5:d1:c3:dc:46:
38:a2:fb:bc:14:1c:4e:ef:db:69:8a:e8:c7:7b:43:55:30:e3:
4a:4a:ef:29:9e:c9:0d:a8:3a:d3:eb:d4:fa:7a:d9:93:26:ae:
95:0f:96:d1:60:e3:68:77:18:7d:47:d2:75:4c:c0:d7:5e:21:
55:ff:25:a4:c6:ae:43:af:5e:d5:f1:d2:9c:cb:44:fc:a6:1b:
69:03:3b:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:45:36 2025 by rpki-client