Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/452ba7-3c15-4bba-ad33-2571f7a2d25f/1/ffgoIInih2ZRITPUI2r0FaN709I.mft
File: ffgoIInih2ZRITPUI2r0FaN709I.mft (raw, json)
Hash identifier: ZxhSubly9l1mwDeX9zcA/9EDzYoF14pU8C2WIKmdT5k=
Subject key identifier: 75:CE:81:A7:21:27:0B:71:36:B9:46:27:CF:98:C8:84:0E:29:D2:65
Authority key identifier: 7D:F8:28:20:89:E2:87:66:51:21:33:D4:23:6A:F4:15:A3:7B:D3:D2
Certificate issuer: /CN=7df8282089e28766512133d4236af415a37bd3d2
Certificate serial: 0198D5F1463E90DE7FD8E8247B5BD5DA4732
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ffgoIInih2ZRITPUI2r0FaN709I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/452ba7-3c15-4bba-ad33-2571f7a2d25f/1/ffgoIInih2ZRITPUI2r0FaN709I.mft
Manifest number: 038A
Signing time: Sat 23 Aug 2025 08:00:15 +0000
Manifest this update: Sat 23 Aug 2025 08:00:15 +0000
Manifest next update: Sun 24 Aug 2025 08:00:15 +0000
Files and hashes: 1: ffgoIInih2ZRITPUI2r0FaN709I.crl (hash: ygTC213Q93Wh8IJfNu2kxx3oFX4MYKCMnAQK+Ffagzs=)
2: ig1FgJHLmhVp1HtQnDRiBOwALfo.roa (hash: IlHHwWSfIB2n4wpeo6hZD+s1jPc54zsXsSO0r9HX6WY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/452ba7-3c15-4bba-ad33-2571f7a2d25f/1/ffgoIInih2ZRITPUI2r0FaN709I.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/452ba7-3c15-4bba-ad33-2571f7a2d25f/1/ffgoIInih2ZRITPUI2r0FaN709I.mft
rsync://rpki.ripe.net/repository/DEFAULT/ffgoIInih2ZRITPUI2r0FaN709I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:46:3e:90:de:7f:d8:e8:24:7b:5b:d5:da:47:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7df8282089e28766512133d4236af415a37bd3d2
Validity
Not Before: Aug 23 08:00:15 2025 GMT
Not After : Aug 24 08:00:15 2025 GMT
Subject: CN=75ce81a721270b7136b94627cf98c8840e29d265
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:2f:e8:0b:e9:13:9e:47:e5:ba:3b:32:a5:81:
d4:65:a2:af:79:b6:6f:26:63:0f:d1:43:36:52:fd:
97:2e:85:e2:72:73:0f:41:c0:65:b4:1d:d3:36:fa:
ea:0e:08:52:68:fe:2d:a6:a9:5e:9c:f2:be:e9:75:
80:d9:31:37:d2:d7:1c:1a:ec:f4:ae:b6:bf:34:73:
c3:f8:b1:03:61:aa:37:aa:4e:13:72:c8:88:c5:d3:
b8:e3:ee:a9:c2:05:f7:31:89:06:be:c4:2e:18:68:
7a:63:0b:05:75:9e:a3:06:d0:68:f4:e8:ee:1c:70:
ea:9b:7e:fa:8c:24:15:9b:bd:b9:ad:b2:02:72:86:
90:91:44:be:a4:ea:8c:e0:e4:a6:21:d3:c3:c4:84:
88:35:02:de:d8:4b:d2:82:e2:82:32:88:42:13:24:
e2:86:45:9a:dd:a1:4c:2e:26:e0:cb:95:9c:f2:da:
bb:45:c6:3a:8d:cb:3d:5b:bd:1d:c2:20:48:52:60:
78:b1:c2:34:30:71:1e:ba:44:d9:ff:c8:43:ca:b6:
08:4c:3e:dc:1c:5f:22:9f:c4:00:7b:cf:53:d6:39:
0c:1b:3f:d8:fd:bc:6f:65:a9:79:00:10:6b:06:a9:
d6:90:f7:c6:bb:b3:0c:98:1d:43:d0:1a:15:b3:c2:
93:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:CE:81:A7:21:27:0B:71:36:B9:46:27:CF:98:C8:84:0E:29:D2:65
X509v3 Authority Key Identifier:
keyid:7D:F8:28:20:89:E2:87:66:51:21:33:D4:23:6A:F4:15:A3:7B:D3:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffgoIInih2ZRITPUI2r0FaN709I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/452ba7-3c15-4bba-ad33-2571f7a2d25f/1/ffgoIInih2ZRITPUI2r0FaN709I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/452ba7-3c15-4bba-ad33-2571f7a2d25f/1/ffgoIInih2ZRITPUI2r0FaN709I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:51:dc:60:83:62:ae:ee:14:91:ea:77:28:38:4b:bd:c6:ce:
50:8e:a5:57:8f:d6:e2:6f:8b:73:c5:82:36:39:b8:1e:82:b0:
75:9d:f4:66:65:3a:d2:f7:dd:f3:90:e9:43:fb:4b:35:25:d2:
09:b8:2a:f2:fe:c8:2d:9f:8d:b7:bd:b0:95:db:00:d7:fd:f8:
fa:b4:b4:57:71:3d:38:f8:ed:b2:5b:05:ab:7a:3d:90:21:60:
d5:7d:e2:7c:9f:d9:99:9c:88:e4:97:81:cb:3c:fd:1f:20:c7:
b7:16:96:0a:b0:66:e5:03:a7:4c:32:b8:79:30:05:30:c1:c3:
62:36:04:22:79:b5:be:02:86:8e:e8:cb:dd:ae:22:b0:4b:95:
4f:e9:ba:14:6c:d4:b6:1f:b2:af:70:c2:60:90:de:50:48:9f:
3e:1d:7b:19:1d:93:cd:95:ee:7c:f4:b4:a8:ad:6f:4d:6f:86:
78:dc:68:f1:cb:4b:f6:41:0f:c7:ea:13:da:f7:7e:cb:f0:9d:
bc:d2:c7:e6:df:e7:3f:ec:f0:64:6d:5d:12:14:e5:3d:d5:1c:
4b:8f:45:e5:9a:a0:c3:5a:4f:82:46:ec:15:4e:96:45:36:d9:
9d:73:7d:91:06:ef:27:78:b7:53:68:2f:84:32:c3:dd:b7:58:
56:63:5d:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:41:21 2025 by rpki-client