Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/3925e9-65ea-462e-ae28-d2c29dc042e7/1/ffCJfqs-7W4k7d1nbov5N3-0SAw.mft
File: ffCJfqs-7W4k7d1nbov5N3-0SAw.mft (raw, json)
Hash identifier: KVFLVWeLuFC1ML5IH856lGITIHYfsyGXpS+bvM8l3Eo=
Subject key identifier: 1F:09:D6:B0:42:B6:D1:B8:D7:A1:F2:B2:CC:56:5A:FB:22:76:3F:41
Authority key identifier: 7D:F0:89:7E:AB:3E:ED:6E:24:ED:DD:67:6E:8B:F9:37:7F:B4:48:0C
Certificate issuer: /CN=7df0897eab3eed6e24eddd676e8bf9377fb4480c
Certificate serial: 0197B857B0291B8079963334293677CF48CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ffCJfqs-7W4k7d1nbov5N3-0SAw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/3925e9-65ea-462e-ae28-d2c29dc042e7/1/ffCJfqs-7W4k7d1nbov5N3-0SAw.mft
Manifest number: 06A4
Signing time: Sat 28 Jun 2025 21:00:43 +0000
Manifest this update: Sat 28 Jun 2025 21:00:43 +0000
Manifest next update: Sun 29 Jun 2025 21:00:43 +0000
Files and hashes: 1: H_2gNWDkQMk7xYa4CXE3bEG8_PQ.roa (hash: 966jsInoUQGV3YL0kBV6Ow41AMogxPqqfWLLamybyOw=)
2: ffCJfqs-7W4k7d1nbov5N3-0SAw.crl (hash: cM+e3tT4CRRNiIy7f+GgUdv9zUsEF1VQSLT/ApF/+yg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/3925e9-65ea-462e-ae28-d2c29dc042e7/1/ffCJfqs-7W4k7d1nbov5N3-0SAw.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/3925e9-65ea-462e-ae28-d2c29dc042e7/1/ffCJfqs-7W4k7d1nbov5N3-0SAw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ffCJfqs-7W4k7d1nbov5N3-0SAw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 21:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:57:b0:29:1b:80:79:96:33:34:29:36:77:cf:48:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7df0897eab3eed6e24eddd676e8bf9377fb4480c
Validity
Not Before: Jun 28 21:00:43 2025 GMT
Not After : Jun 29 21:00:43 2025 GMT
Subject: CN=1f09d6b042b6d1b8d7a1f2b2cc565afb22763f41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:64:c8:24:be:6f:e6:7c:1e:21:72:64:3d:2b:
e2:72:a8:32:c7:f8:61:e7:35:65:36:e3:3e:5b:bf:
ee:45:e7:3f:d5:46:48:82:b7:48:69:05:1b:00:ed:
e6:75:b1:a2:9f:3d:64:fd:f8:e0:72:63:66:99:c4:
46:f5:b1:4f:cf:b3:8b:93:3a:7a:18:18:24:c6:60:
c6:37:4a:2f:a9:3d:04:d3:1b:9f:a0:1d:d4:1c:36:
15:e2:53:8a:df:c0:69:f3:80:f1:75:85:12:10:cb:
d3:b9:c5:0f:78:15:a2:bc:4a:be:1e:33:be:bf:2b:
6f:0b:b8:f6:ba:ed:1a:e8:7e:64:b0:9b:aa:d2:f8:
af:39:3c:f3:dd:3a:d1:ab:8b:c9:fd:30:cf:1a:74:
c5:51:d2:a5:b8:af:b8:b2:35:25:32:a5:88:8b:5b:
20:ab:b9:6b:52:15:29:92:34:2e:62:fb:f3:56:14:
2a:24:70:0c:c6:d3:a6:20:1a:07:9a:58:bb:e2:86:
7b:2e:7f:5d:1e:ce:7e:b7:24:f6:66:15:97:26:6d:
1b:65:23:b5:3b:32:78:c8:cd:49:53:b8:45:d6:7b:
1b:b4:57:3b:69:ac:05:b7:1a:33:11:f9:c8:a3:29:
f3:82:59:76:c5:86:5a:27:7e:d6:6d:7d:a8:2c:58:
9b:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:09:D6:B0:42:B6:D1:B8:D7:A1:F2:B2:CC:56:5A:FB:22:76:3F:41
X509v3 Authority Key Identifier:
keyid:7D:F0:89:7E:AB:3E:ED:6E:24:ED:DD:67:6E:8B:F9:37:7F:B4:48:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffCJfqs-7W4k7d1nbov5N3-0SAw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/3925e9-65ea-462e-ae28-d2c29dc042e7/1/ffCJfqs-7W4k7d1nbov5N3-0SAw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/3925e9-65ea-462e-ae28-d2c29dc042e7/1/ffCJfqs-7W4k7d1nbov5N3-0SAw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:fb:d4:2a:a6:05:6a:04:04:08:90:01:c4:48:72:c2:58:e0:
5c:67:7c:fc:2c:e4:8d:26:d7:20:03:c9:77:37:59:e7:b0:0a:
2c:e9:99:44:7b:ec:66:34:54:c0:8b:e7:05:7b:d9:ae:28:81:
87:07:48:ca:27:5e:24:bf:ba:12:34:19:70:06:48:74:39:2f:
1a:2c:97:2c:73:fd:c0:41:b3:56:3a:c0:a0:41:0c:21:eb:13:
3f:d4:ab:df:9b:f0:3e:7e:3b:c3:4e:7a:07:51:79:46:bb:ab:
5f:87:bc:a0:66:63:dd:58:fa:72:30:1b:46:b6:c4:3e:63:cc:
7d:5e:e4:60:25:31:a6:4f:e2:8b:f2:da:04:95:0f:f9:90:64:
f9:85:e4:a1:ca:1c:7b:67:12:2b:a5:73:b0:6d:4f:71:64:f8:
73:fb:4f:09:d4:c3:31:b5:d7:ff:6d:07:b7:11:99:9a:69:e6:
80:2a:3f:de:91:7e:7f:73:bf:dc:94:86:e6:ff:f2:8a:50:fd:
9f:0d:14:4b:bf:96:c1:cb:c8:3b:60:e7:4a:21:a6:7c:0e:9b:
0e:b5:34:b1:23:a0:4b:28:11:89:c1:90:ed:10:9d:13:cd:bf:
b6:52:0a:7c:26:1c:a1:5e:f1:fb:0b:12:55:6f:c8:0a:8f:e8:
3c:1e:73:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe4V7ApG4B5ljM0KTZ3z0jLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkZjA4OTdlYWIzZWVkNmUyNGVkZGQ2NzZlOGJmOTM3N2Zi
NDQ4MGMwHhcNMjUwNjI4MjEwMDQzWhcNMjUwNjI5MjEwMDQzWjAzMTEwLwYDVQQD
EygxZjA5ZDZiMDQyYjZkMWI4ZDdhMWYyYjJjYzU2NWFmYjIyNzYzZjQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyWTIJL5v5nweIXJkPSvicqgyx/hh
5zVlNuM+W7/uRec/1UZIgrdIaQUbAO3mdbGinz1k/fjgcmNmmcRG9bFPz7OLkzp6
GBgkxmDGN0ovqT0E0xufoB3UHDYV4lOK38Bp84DxdYUSEMvTucUPeBWivEq+HjO+
vytvC7j2uu0a6H5ksJuq0vivOTzz3TrRq4vJ/TDPGnTFUdKluK+4sjUlMqWIi1sg
q7lrUhUpkjQuYvvzVhQqJHAMxtOmIBoHmli74oZ7Ln9dHs5+tyT2ZhWXJm0bZSO1
OzJ4yM1JU7hF1nsbtFc7aawFtxozEfnIoynzgll2xYZaJ37WbX2oLFibcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB8J1rBCttG416HyssxWWvsidj9BMB8GA1UdIwQY
MBaAFH3wiX6rPu1uJO3dZ26L+Td/tEgMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmZDSmZxcy03VzRrN2QxbmJvdjVOMy0wU0F3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy8zOTI1ZTktNjVlYS00NjJlLWFlMjgt
ZDJjMjlkYzA0MmU3LzEvZmZDSmZxcy03VzRrN2QxbmJvdjVOMy0wU0F3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy8zOTI1ZTktNjVlYS00NjJlLWFlMjgtZDJjMjlkYzA0MmU3
LzEvZmZDSmZxcy03VzRrN2QxbmJvdjVOMy0wU0F3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhPvUKqYF
agQECJABxEhywljgXGd8/CzkjSbXIAPJdzdZ57AKLOmZRHvsZjRUwIvnBXvZriiB
hwdIyideJL+6EjQZcAZIdDkvGiyXLHP9wEGzVjrAoEEMIesTP9Sr35vwPn47w056
B1F5RrurX4e8oGZj3Vj6cjAbRrbEPmPMfV7kYCUxpk/ii/LaBJUP+ZBk+YXkococ
e2cSK6VzsG1PcWT4c/tPCdTDMbXX/20HtxGZmmnmgCo/3pF+f3O/3JSG5v/yilD9
nw0US7+WwcvIO2DnSiGmfA6bDrU0sSOgSygRicGQ7RCdE82/tlIKfCYcoV7x+wsS
VW/ICo/oPB5zQQ==
-----END CERTIFICATE-----
Generated at Sun Jun 29 06:33:23 2025 by rpki-client