Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/93e20f-8878-4058-8e01-ad01e30a61b2/1/FfIVrSdPNbJKxqBgsvCTmXEbwX8.mft
File: FfIVrSdPNbJKxqBgsvCTmXEbwX8.mft (raw, json)
Hash identifier: aJS7aiYBDJoZWo7aFiVPE6rHwY4gFlwHr8Wb7kJqHOw=
Subject key identifier: 84:83:0B:F7:F2:49:B6:C7:ED:31:1A:96:81:1C:5A:FA:5E:B8:B2:67
Authority key identifier: 15:F2:15:AD:27:4F:35:B2:4A:C6:A0:60:B2:F0:93:99:71:1B:C1:7F
Certificate issuer: /CN=15f215ad274f35b24ac6a060b2f09399711bc17f
Certificate serial: 019A006C7BBFC11FFC3B0802D6A2A1C0DDFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfIVrSdPNbJKxqBgsvCTmXEbwX8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/93e20f-8878-4058-8e01-ad01e30a61b2/1/FfIVrSdPNbJKxqBgsvCTmXEbwX8.mft
Manifest number: 0F6A
Signing time: Mon 20 Oct 2025 07:01:40 +0000
Manifest this update: Mon 20 Oct 2025 07:01:40 +0000
Manifest next update: Tue 21 Oct 2025 07:01:40 +0000
Files and hashes: 1: FfIVrSdPNbJKxqBgsvCTmXEbwX8.crl (hash: cmNMzGwQVpkAfOUGnCM/ETUMkBVZlckNBP0F79Q/VZk=)
2: saR7C8jPhSxxp1U0l0fw1iLpggA.roa (hash: YzILylPp9VZQ/IVzqGiVAC4yp8xtNGEqB65NyOh5ynQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/93e20f-8878-4058-8e01-ad01e30a61b2/1/FfIVrSdPNbJKxqBgsvCTmXEbwX8.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/93e20f-8878-4058-8e01-ad01e30a61b2/1/FfIVrSdPNbJKxqBgsvCTmXEbwX8.mft
rsync://rpki.ripe.net/repository/DEFAULT/FfIVrSdPNbJKxqBgsvCTmXEbwX8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 07:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:6c:7b:bf:c1:1f:fc:3b:08:02:d6:a2:a1:c0:dd:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f215ad274f35b24ac6a060b2f09399711bc17f
Validity
Not Before: Oct 20 07:01:40 2025 GMT
Not After : Oct 21 07:01:40 2025 GMT
Subject: CN=84830bf7f249b6c7ed311a96811c5afa5eb8b267
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:6f:f4:93:5b:61:83:c7:96:8d:f3:50:f1:fe:
4a:9a:10:13:db:72:a1:f3:f7:61:c7:70:d3:98:65:
54:a0:ae:f4:df:46:4f:d1:d7:fb:e7:0d:d6:5b:01:
21:ed:81:a0:08:71:2c:a0:11:b7:e0:50:12:55:16:
dc:96:a1:bd:f0:c0:e5:9c:d4:c2:51:e4:4c:d6:17:
b7:03:07:49:06:fe:7a:e3:4b:a2:aa:35:ab:de:b6:
83:a9:ff:ce:27:db:d9:f5:78:e1:be:61:a2:ec:5a:
7f:3e:0f:b9:20:a7:60:9e:67:eb:1c:8c:2b:0c:92:
83:b7:48:eb:39:b2:cd:bf:d9:6e:89:58:5f:43:2a:
b0:aa:b1:db:f2:fe:d3:23:81:a5:38:71:f4:d8:e8:
a8:f7:e7:91:c0:49:0f:41:b8:27:e0:1b:9f:70:ed:
a3:17:56:b6:9d:90:a5:38:9f:47:e2:6d:55:ab:c6:
2c:2d:2e:b6:d5:25:3d:29:a3:d6:76:b5:ed:bf:36:
7a:8e:f1:ec:00:29:22:da:c2:e7:25:5b:8e:28:b3:
64:e6:2a:18:9d:aa:41:5f:77:f1:16:e3:87:20:fe:
03:77:6c:aa:b1:b3:1e:4c:44:1e:7f:57:c4:a1:2c:
ae:53:89:06:5b:51:8c:e3:ec:ee:2c:65:98:cd:4f:
47:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:83:0B:F7:F2:49:B6:C7:ED:31:1A:96:81:1C:5A:FA:5E:B8:B2:67
X509v3 Authority Key Identifier:
keyid:15:F2:15:AD:27:4F:35:B2:4A:C6:A0:60:B2:F0:93:99:71:1B:C1:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfIVrSdPNbJKxqBgsvCTmXEbwX8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/93e20f-8878-4058-8e01-ad01e30a61b2/1/FfIVrSdPNbJKxqBgsvCTmXEbwX8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/93e20f-8878-4058-8e01-ad01e30a61b2/1/FfIVrSdPNbJKxqBgsvCTmXEbwX8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:6a:70:18:08:cf:35:a1:1c:6d:af:5f:30:a7:20:4c:9d:58:
d8:79:fe:29:77:f4:12:ab:fb:90:8d:31:0d:e3:4f:04:84:b3:
df:d8:0e:d4:da:d6:c3:2d:7c:c9:75:c2:fa:69:53:10:9c:09:
d5:c3:83:ba:56:2e:17:b0:65:c5:fe:24:a0:81:0d:2d:ca:94:
a3:2e:6f:27:90:3c:35:dd:95:0d:e2:e6:1d:7f:77:ca:01:e3:
47:6a:be:2b:dd:77:8d:ed:9c:0b:37:8a:5e:a0:8b:af:c3:0d:
0e:6d:3a:74:85:fe:d8:86:c4:59:5b:f4:71:d5:ff:f3:0b:7c:
c5:09:3f:cc:11:c2:1a:0f:eb:54:34:c2:de:6d:14:e8:6b:19:
0b:76:59:a0:c1:d7:a2:88:b5:c7:58:5c:24:82:4b:18:7b:93:
d2:05:95:85:bb:85:97:02:13:38:6e:10:9b:1a:38:9d:17:b3:
6e:6f:4a:9c:6c:51:30:82:a8:55:bc:df:b3:02:95:43:15:21:
29:f9:93:a9:7a:bb:25:55:e8:97:65:77:c2:52:c2:58:13:71:
d3:fe:19:73:50:1b:32:5e:13:92:b6:35:20:6c:d5:a6:96:fb:
f1:71:97:73:b0:3f:45:b3:73:17:cd:30:02:69:f3:21:34:b3:
d7:8b:70:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 17:01:41 2025 by rpki-client