Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/ec4a2b-76d7-4473-9945-2f2f8b590503/1/FfH7EpA6XNS8F6u1mHPJ1tp-abU.mft
File: FfH7EpA6XNS8F6u1mHPJ1tp-abU.mft (raw, json)
Hash identifier: 1gV1L3lCrqbERm007/LO190fEvxUeaeQV+TAVzMdPg0=
Subject key identifier: 8D:C0:B2:2D:D2:D1:B5:A9:BE:84:A0:25:B0:DE:E4:BF:64:C6:D0:5D
Authority key identifier: 15:F1:FB:12:90:3A:5C:D4:BC:17:AB:B5:98:73:C9:D6:DA:7E:69:B5
Certificate issuer: /CN=15f1fb12903a5cd4bc17abb59873c9d6da7e69b5
Certificate serial: 0198D5BC0E702C2E9B3D79692FDEFA87CC19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfH7EpA6XNS8F6u1mHPJ1tp-abU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/ec4a2b-76d7-4473-9945-2f2f8b590503/1/FfH7EpA6XNS8F6u1mHPJ1tp-abU.mft
Manifest number: 03F6
Signing time: Sat 23 Aug 2025 07:02:08 +0000
Manifest this update: Sat 23 Aug 2025 07:02:08 +0000
Manifest next update: Sun 24 Aug 2025 07:02:08 +0000
Files and hashes: 1: AQb4NA0iIwYMaS4khoDyVt9RCG4.roa (hash: 58LXgLCBDudul5koOz+4VHQS0wDCBrVYTUIAiNkgAxo=)
2: FfH7EpA6XNS8F6u1mHPJ1tp-abU.crl (hash: +YaxxYbhlkJwKqJrET+KB1YybzqE1oCMjZPHJ4OOZGw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/ec4a2b-76d7-4473-9945-2f2f8b590503/1/FfH7EpA6XNS8F6u1mHPJ1tp-abU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/ec4a2b-76d7-4473-9945-2f2f8b590503/1/FfH7EpA6XNS8F6u1mHPJ1tp-abU.mft
rsync://rpki.ripe.net/repository/DEFAULT/FfH7EpA6XNS8F6u1mHPJ1tp-abU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:0e:70:2c:2e:9b:3d:79:69:2f:de:fa:87:cc:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f1fb12903a5cd4bc17abb59873c9d6da7e69b5
Validity
Not Before: Aug 23 07:02:08 2025 GMT
Not After : Aug 24 07:02:08 2025 GMT
Subject: CN=8dc0b22dd2d1b5a9be84a025b0dee4bf64c6d05d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:8b:50:6a:0f:d6:29:7c:34:6e:e9:17:1b:75:
c5:0b:e4:a3:33:e2:be:ff:4d:ec:6f:6a:8b:cb:b3:
26:c5:8c:21:0a:2c:22:a6:81:de:dd:bb:18:b0:db:
94:c2:b6:de:78:46:dc:b3:ab:94:6a:e8:fc:5f:9a:
0a:4c:7e:02:6f:f7:72:6b:83:5a:e7:ce:46:d8:ac:
91:f1:b5:77:f0:22:6e:dd:97:35:62:4b:8d:86:4c:
ff:bb:25:90:08:10:25:0b:c6:0f:91:55:64:82:01:
dc:1d:82:fc:eb:e4:be:e5:79:7e:e0:01:dc:f8:e9:
03:9f:e9:d8:25:79:7d:b9:7d:31:e0:48:5e:11:88:
89:33:78:fa:ff:9b:c5:31:76:2b:5e:12:d3:11:5a:
97:43:dd:5d:37:0b:4c:69:a6:50:7c:b8:c5:28:f6:
e7:aa:c0:36:30:b8:3f:38:c0:3f:09:1e:bb:57:04:
49:31:e8:24:8b:b0:ba:b8:4c:8c:54:60:2a:74:b3:
d3:6c:d9:e3:dd:a4:47:7f:25:6b:00:5b:9f:48:3d:
8c:f7:b8:b5:ff:ca:f7:fe:e2:82:14:99:2b:ed:b7:
e7:f1:f9:fb:67:c0:59:d6:a8:b2:a2:b8:b7:52:33:
da:fe:fb:5f:e8:d9:be:d7:d7:a6:7f:c4:3f:ea:ac:
fb:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:C0:B2:2D:D2:D1:B5:A9:BE:84:A0:25:B0:DE:E4:BF:64:C6:D0:5D
X509v3 Authority Key Identifier:
keyid:15:F1:FB:12:90:3A:5C:D4:BC:17:AB:B5:98:73:C9:D6:DA:7E:69:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfH7EpA6XNS8F6u1mHPJ1tp-abU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ec4a2b-76d7-4473-9945-2f2f8b590503/1/FfH7EpA6XNS8F6u1mHPJ1tp-abU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ec4a2b-76d7-4473-9945-2f2f8b590503/1/FfH7EpA6XNS8F6u1mHPJ1tp-abU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:2d:19:19:47:af:b4:8f:cc:38:52:04:93:41:b5:4d:75:d4:
4a:53:e3:68:3c:ca:01:05:61:ba:42:35:7e:33:af:3a:2a:15:
30:6f:74:e6:3f:0e:b6:74:f5:32:e8:15:00:85:e5:19:40:e5:
3c:af:bd:b2:a4:e6:71:5a:70:99:33:e7:0f:f5:c2:6b:fd:78:
9e:5a:b2:04:35:43:c6:90:4b:0c:18:56:9d:3d:35:56:77:e5:
61:81:67:1a:fc:c6:75:30:61:5d:95:25:f1:39:f7:99:b7:0e:
aa:6e:be:8b:d5:e3:29:2d:96:84:f6:2d:56:a7:dc:17:bf:8d:
e5:88:54:05:04:ad:24:9b:a2:63:25:52:aa:44:bc:48:89:15:
78:ce:8a:b2:2d:63:06:a2:90:3b:48:8e:65:0d:1a:1c:e1:73:
ac:ca:f3:c1:93:6e:66:f4:c0:05:7b:18:1a:47:c3:00:45:21:
3f:84:e0:3c:b2:fe:d6:69:28:22:24:09:76:9d:64:4d:7c:af:
73:55:20:05:ce:43:41:07:0c:86:05:97:d7:88:90:af:48:ef:
c4:4f:22:a4:50:4b:5a:52:bd:3a:bc:a8:64:dd:8b:4d:24:1c:
d3:94:43:fe:07:7e:a8:f3:24:42:2b:26:73:0d:1c:64:19:0b:
e9:b4:f2:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:23:25 2025 by rpki-client