Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/452ba7-3c15-4bba-ad33-2571f7a2d25f/1/ffgoIInih2ZRITPUI2r0FaN709I.mft
File: ffgoIInih2ZRITPUI2r0FaN709I.mft (raw, json)
Hash identifier: wox6aD0UnfYwlbteeUJHG0MhZkLoguiSmH7J3jxnvyo=
Subject key identifier: 46:B2:D5:C7:94:B6:C1:E2:07:2A:3B:BB:84:F7:1A:91:75:44:9C:3E
Authority key identifier: 7D:F8:28:20:89:E2:87:66:51:21:33:D4:23:6A:F4:15:A3:7B:D3:D2
Certificate issuer: /CN=7df8282089e28766512133d4236af415a37bd3d2
Certificate serial: 0199FF59C1B73C0CE9328952D0A885A8FEAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ffgoIInih2ZRITPUI2r0FaN709I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/452ba7-3c15-4bba-ad33-2571f7a2d25f/1/ffgoIInih2ZRITPUI2r0FaN709I.mft
Manifest number: 0424
Signing time: Mon 20 Oct 2025 02:01:36 +0000
Manifest this update: Mon 20 Oct 2025 02:01:36 +0000
Manifest next update: Tue 21 Oct 2025 02:01:36 +0000
Files and hashes: 1: ffgoIInih2ZRITPUI2r0FaN709I.crl (hash: wvEDtxGZtm8MZAoqRZgju+J6NS0UBuOupRqhOfCrvTM=)
2: ig1FgJHLmhVp1HtQnDRiBOwALfo.roa (hash: IlHHwWSfIB2n4wpeo6hZD+s1jPc54zsXsSO0r9HX6WY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/452ba7-3c15-4bba-ad33-2571f7a2d25f/1/ffgoIInih2ZRITPUI2r0FaN709I.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/452ba7-3c15-4bba-ad33-2571f7a2d25f/1/ffgoIInih2ZRITPUI2r0FaN709I.mft
rsync://rpki.ripe.net/repository/DEFAULT/ffgoIInih2ZRITPUI2r0FaN709I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:59:c1:b7:3c:0c:e9:32:89:52:d0:a8:85:a8:fe:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7df8282089e28766512133d4236af415a37bd3d2
Validity
Not Before: Oct 20 02:01:36 2025 GMT
Not After : Oct 21 02:01:36 2025 GMT
Subject: CN=46b2d5c794b6c1e2072a3bbb84f71a9175449c3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:44:e1:4f:6b:9f:e0:8a:52:62:a4:5f:8c:ca:
18:a8:b3:3d:b8:b9:3b:b4:af:76:e1:02:cf:6d:19:
50:af:47:5e:e5:d3:bb:67:56:a5:12:7f:e9:68:71:
b6:31:6b:f3:30:8d:a6:fe:09:e9:cc:f0:48:e6:d1:
3a:3f:07:ce:e1:d3:fa:81:bb:e4:63:71:d7:ed:43:
ba:ef:dd:e8:87:8f:1e:60:9b:45:18:a0:e5:6d:25:
b0:fc:75:79:32:fb:87:c6:44:c3:47:41:55:52:3b:
ac:55:94:24:89:9e:0b:e7:4b:b9:8e:ee:00:db:85:
5d:13:eb:4c:75:64:90:37:2c:4f:67:a7:74:24:56:
2c:f8:87:29:a1:0a:ad:1b:23:29:5c:44:e4:b9:34:
c8:1c:18:26:0a:11:1a:9f:09:bb:91:29:7b:ed:92:
41:dd:1d:4d:27:5b:e3:b0:f2:d0:20:42:d2:3a:cb:
38:dd:4b:44:4c:42:2d:6e:0f:68:d9:25:d2:50:76:
d6:51:8f:68:f0:82:d9:c9:0f:96:58:af:a0:50:50:
b9:fa:cf:b5:a0:38:27:da:9a:68:de:fa:70:d6:6c:
26:f3:7b:28:a8:28:ee:ec:31:ca:5b:a8:2f:80:83:
ee:90:c4:5a:c0:18:b6:b9:02:6a:28:40:25:af:bd:
d4:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:B2:D5:C7:94:B6:C1:E2:07:2A:3B:BB:84:F7:1A:91:75:44:9C:3E
X509v3 Authority Key Identifier:
keyid:7D:F8:28:20:89:E2:87:66:51:21:33:D4:23:6A:F4:15:A3:7B:D3:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffgoIInih2ZRITPUI2r0FaN709I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/452ba7-3c15-4bba-ad33-2571f7a2d25f/1/ffgoIInih2ZRITPUI2r0FaN709I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/452ba7-3c15-4bba-ad33-2571f7a2d25f/1/ffgoIInih2ZRITPUI2r0FaN709I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:40:1e:e7:cd:bc:fd:21:cb:b7:96:2b:9b:38:26:50:ee:5e:
a3:49:a2:b5:eb:0e:9e:fd:4b:3a:0e:5d:cf:23:35:77:16:08:
58:33:b5:3e:74:39:d7:a5:4a:c9:bc:78:5b:f8:64:ce:52:13:
14:ff:b9:8e:66:bb:1b:94:12:42:fe:f5:46:d2:02:aa:67:7c:
be:52:db:f3:47:cd:5c:50:ca:73:e0:19:28:1d:5e:f9:10:cd:
5a:d4:1d:98:ab:e1:7f:91:f9:5e:f5:e4:75:cf:3d:28:98:a5:
b7:4c:7c:85:c4:5f:49:5a:3a:8a:9a:c6:65:4f:5b:0f:e1:10:
7b:00:96:7b:8f:a2:60:cc:9a:b5:37:e5:3f:ed:84:26:7c:94:
4b:83:a7:3f:2e:a0:4f:79:ed:8d:a2:f4:a0:1c:45:18:9e:67:
01:fd:15:17:82:be:61:68:3c:8a:59:b3:4e:33:cd:0d:7e:f3:
f7:a5:d8:50:ec:c3:96:37:92:dd:ca:10:cc:b7:59:52:d1:00:
37:09:02:ac:ef:91:15:86:10:b2:9f:9e:02:c4:bd:5f:8c:fe:
c5:19:50:a8:03:a1:5d:2a:69:e3:56:9f:ef:ae:49:b5:e2:a6:
8d:e1:56:7d:1e:c6:a9:20:08:f3:37:02:be:3f:7e:15:f4:96:
e3:8d:12:54
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn/WcG3PAzpMolS0KiFqP6rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkZjgyODIwODllMjg3NjY1MTIxMzNkNDIzNmFmNDE1YTM3
YmQzZDIwHhcNMjUxMDIwMDIwMTM2WhcNMjUxMDIxMDIwMTM2WjAzMTEwLwYDVQQD
Eyg0NmIyZDVjNzk0YjZjMWUyMDcyYTNiYmI4NGY3MWE5MTc1NDQ5YzNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs0ThT2uf4IpSYqRfjMoYqLM9uLk7
tK924QLPbRlQr0de5dO7Z1alEn/paHG2MWvzMI2m/gnpzPBI5tE6PwfO4dP6gbvk
Y3HX7UO6793oh48eYJtFGKDlbSWw/HV5MvuHxkTDR0FVUjusVZQkiZ4L50u5ju4A
24VdE+tMdWSQNyxPZ6d0JFYs+IcpoQqtGyMpXETkuTTIHBgmChEanwm7kSl77ZJB
3R1NJ1vjsPLQIELSOss43UtETEItbg9o2SXSUHbWUY9o8ILZyQ+WWK+gUFC5+s+1
oDgn2ppo3vpw1mwm83soqCju7DHKW6gvgIPukMRawBi2uQJqKEAlr73URwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEay1ceUtsHiByo7u4T3GpF1RJw+MB8GA1UdIwQY
MBaAFH34KCCJ4odmUSEz1CNq9BWje9PSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmZnb0lJbmloMlpSSVRQVUkycjBGYU43MDlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi80NTJiYTctM2MxNS00YmJhLWFkMzMt
MjU3MWY3YTJkMjVmLzEvZmZnb0lJbmloMlpSSVRQVUkycjBGYU43MDlJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi80NTJiYTctM2MxNS00YmJhLWFkMzMtMjU3MWY3YTJkMjVm
LzEvZmZnb0lJbmloMlpSSVRQVUkycjBGYU43MDlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALEAe5828
/SHLt5YrmzgmUO5eo0mitesOnv1LOg5dzyM1dxYIWDO1PnQ516VKybx4W/hkzlIT
FP+5jma7G5QSQv71RtICqmd8vlLb80fNXFDKc+AZKB1e+RDNWtQdmKvhf5H5XvXk
dc89KJilt0x8hcRfSVo6iprGZU9bD+EQewCWe4+iYMyatTflP+2EJnyUS4OnPy6g
T3ntjaL0oBxFGJ5nAf0VF4K+YWg8ilmzTjPNDX7z96XYUOzDljeS3coQzLdZUtEA
NwkCrO+RFYYQsp+eAsS9X4z+xRlQqAOhXSpp41af765JteKmjeFWfR7GqSAI8zcC
vj9+FfSW440SVA==
-----END CERTIFICATE-----
Generated at Mon Oct 20 05:55:47 2025 by rpki-client