Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/3925e9-65ea-462e-ae28-d2c29dc042e7/1/ffCJfqs-7W4k7d1nbov5N3-0SAw.mft
File: ffCJfqs-7W4k7d1nbov5N3-0SAw.mft (raw, json)
Hash identifier: WyKMTwzbrlTpU+rHtQxsOkpPpaNWOTsd43bGRA0dwNc=
Subject key identifier: A9:2E:F4:C7:27:90:8E:99:3D:F1:2F:17:07:71:E7:A8:F0:21:58:73
Authority key identifier: 7D:F0:89:7E:AB:3E:ED:6E:24:ED:DD:67:6E:8B:F9:37:7F:B4:48:0C
Certificate issuer: /CN=7df0897eab3eed6e24eddd676e8bf9377fb4480c
Certificate serial: 0198D6298C1513971C5D9136B4A430697B49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ffCJfqs-7W4k7d1nbov5N3-0SAw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/3925e9-65ea-462e-ae28-d2c29dc042e7/1/ffCJfqs-7W4k7d1nbov5N3-0SAw.mft
Manifest number: 0738
Signing time: Sat 23 Aug 2025 09:01:43 +0000
Manifest this update: Sat 23 Aug 2025 09:01:43 +0000
Manifest next update: Sun 24 Aug 2025 09:01:43 +0000
Files and hashes: 1: H_2gNWDkQMk7xYa4CXE3bEG8_PQ.roa (hash: 966jsInoUQGV3YL0kBV6Ow41AMogxPqqfWLLamybyOw=)
2: ffCJfqs-7W4k7d1nbov5N3-0SAw.crl (hash: 2oBN+WQggmkFskNfGH/R68q+CldG0KU8X5+RVBnW2+8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/3925e9-65ea-462e-ae28-d2c29dc042e7/1/ffCJfqs-7W4k7d1nbov5N3-0SAw.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/3925e9-65ea-462e-ae28-d2c29dc042e7/1/ffCJfqs-7W4k7d1nbov5N3-0SAw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ffCJfqs-7W4k7d1nbov5N3-0SAw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:29:8c:15:13:97:1c:5d:91:36:b4:a4:30:69:7b:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7df0897eab3eed6e24eddd676e8bf9377fb4480c
Validity
Not Before: Aug 23 09:01:43 2025 GMT
Not After : Aug 24 09:01:43 2025 GMT
Subject: CN=a92ef4c727908e993df12f170771e7a8f0215873
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:53:65:88:8f:8e:af:36:05:2d:ac:6b:c0:34:
2a:10:68:8f:81:f5:18:16:61:1c:8e:94:9b:df:87:
fa:f7:b9:07:99:61:fc:2a:b3:9e:d3:5d:60:53:7b:
a2:e5:49:d6:dd:32:24:32:fd:82:b7:db:bb:dd:21:
2f:82:90:bb:40:d6:43:86:10:94:41:a1:f9:dd:cb:
43:a1:bc:f9:4c:05:b2:cd:7b:26:05:c1:a2:c5:5a:
11:6e:2f:3a:fa:d2:4c:39:8d:39:06:91:2b:5a:a1:
74:c7:de:93:2c:64:3c:cd:43:8a:79:f3:2e:01:4d:
69:00:76:25:78:07:f1:de:62:50:6f:de:6c:3c:e9:
49:43:b3:80:48:14:09:a8:4e:ac:a7:b6:72:42:98:
6d:c2:b9:c9:c4:82:88:29:67:2e:76:1f:06:d8:8c:
87:4f:7e:f7:75:50:78:70:97:8f:58:f6:29:30:95:
ab:97:46:2e:42:82:6e:0a:e0:7e:0d:90:ef:8d:ac:
a6:83:c6:c9:64:eb:1d:cc:ee:1b:ea:5b:94:ce:eb:
07:ef:54:b3:5f:18:34:52:52:a2:8a:fa:a6:68:5a:
e3:e9:cd:07:72:28:0e:b9:32:65:10:1d:09:5a:b3:
c1:82:ec:73:d3:98:6b:ab:59:0a:ad:41:af:cd:71:
41:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:2E:F4:C7:27:90:8E:99:3D:F1:2F:17:07:71:E7:A8:F0:21:58:73
X509v3 Authority Key Identifier:
keyid:7D:F0:89:7E:AB:3E:ED:6E:24:ED:DD:67:6E:8B:F9:37:7F:B4:48:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffCJfqs-7W4k7d1nbov5N3-0SAw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/3925e9-65ea-462e-ae28-d2c29dc042e7/1/ffCJfqs-7W4k7d1nbov5N3-0SAw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/3925e9-65ea-462e-ae28-d2c29dc042e7/1/ffCJfqs-7W4k7d1nbov5N3-0SAw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:8e:c8:2c:37:d9:d5:44:3f:4f:68:7f:2b:2a:3a:78:cd:dd:
b7:61:91:4d:6f:e2:04:ab:6c:bb:7e:4d:22:e8:6b:c0:19:90:
be:ed:ec:b2:5b:a3:c5:ea:a3:a2:90:02:17:b1:b6:c5:91:39:
1c:5a:d9:88:35:91:6c:51:78:be:76:04:e4:17:e1:1f:fd:22:
67:f5:fc:21:5c:17:47:e5:71:2a:0d:9e:44:5d:46:c9:71:e2:
d6:ce:4d:7f:af:bf:0e:66:08:2e:df:fe:9f:b8:1a:7f:6e:0b:
5c:2a:59:2b:e9:0e:76:42:09:2f:9e:20:2c:07:6e:90:ba:c4:
4e:a3:de:dc:a0:31:29:22:54:3a:63:f7:7f:33:de:81:e6:73:
3e:76:19:bd:b6:0d:cd:6a:ae:3b:44:12:40:69:57:9f:8b:50:
65:56:54:e9:d3:bc:77:49:fe:fc:9b:4c:0c:7c:9c:0a:57:fd:
6c:93:b7:96:79:33:fe:db:42:f6:f8:83:9a:44:bb:40:e1:9c:
63:93:28:68:b3:36:c0:ca:e8:ab:52:30:cb:cf:23:d6:76:cf:
70:5c:50:f5:6e:0d:ed:d2:76:af:c5:ef:e9:7f:ac:4b:60:a3:
4e:c1:54:05:c0:83:4a:70:ed:7c:8e:9b:8b:1f:8f:20:fe:c4:
78:44:dd:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:31:52 2025 by rpki-client