Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/3925e9-65ea-462e-ae28-d2c29dc042e7/1/ffCJfqs-7W4k7d1nbov5N3-0SAw.mft
File: ffCJfqs-7W4k7d1nbov5N3-0SAw.mft (raw, json)
Hash identifier: FPl65PI4mm3SEHiGmo1/q96D34sakWJq+DxZm5G5UM4=
Subject key identifier: 17:A6:FD:34:F0:BB:C1:9E:FE:61:EC:D9:19:D1:E1:27:D6:5C:95:91
Authority key identifier: 7D:F0:89:7E:AB:3E:ED:6E:24:ED:DD:67:6E:8B:F9:37:7F:B4:48:0C
Certificate issuer: /CN=7df0897eab3eed6e24eddd676e8bf9377fb4480c
Certificate serial: 0199FB7CBCE97F34BB76DBD5BF3FF5462D53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ffCJfqs-7W4k7d1nbov5N3-0SAw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/3925e9-65ea-462e-ae28-d2c29dc042e7/1/ffCJfqs-7W4k7d1nbov5N3-0SAw.mft
Manifest number: 07D0
Signing time: Sun 19 Oct 2025 08:01:20 +0000
Manifest this update: Sun 19 Oct 2025 08:01:20 +0000
Manifest next update: Mon 20 Oct 2025 08:01:20 +0000
Files and hashes: 1: H_2gNWDkQMk7xYa4CXE3bEG8_PQ.roa (hash: 966jsInoUQGV3YL0kBV6Ow41AMogxPqqfWLLamybyOw=)
2: ffCJfqs-7W4k7d1nbov5N3-0SAw.crl (hash: Dh6jK6+iCl1ARY1fUa5Uvmi1oENt0HBItubItKos5V0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/3925e9-65ea-462e-ae28-d2c29dc042e7/1/ffCJfqs-7W4k7d1nbov5N3-0SAw.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/3925e9-65ea-462e-ae28-d2c29dc042e7/1/ffCJfqs-7W4k7d1nbov5N3-0SAw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ffCJfqs-7W4k7d1nbov5N3-0SAw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:bc:e9:7f:34:bb:76:db:d5:bf:3f:f5:46:2d:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7df0897eab3eed6e24eddd676e8bf9377fb4480c
Validity
Not Before: Oct 19 08:01:20 2025 GMT
Not After : Oct 20 08:01:20 2025 GMT
Subject: CN=17a6fd34f0bbc19efe61ecd919d1e127d65c9591
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:61:bf:6c:54:61:97:18:48:8e:24:2a:92:f6:
54:f3:6f:46:b0:c2:c7:97:7c:06:66:27:90:4a:e3:
fa:8f:fb:3f:68:01:56:c0:27:28:b9:67:23:de:28:
4f:d0:7c:4d:7f:5e:f1:0d:5a:d1:d8:3c:ec:e1:d3:
e5:45:55:fb:dc:b8:22:6e:b9:ab:fd:f1:48:3b:8c:
40:e0:26:21:0b:aa:b0:98:15:9c:c7:78:84:f9:9e:
ea:64:da:e3:ef:5a:f4:e9:85:3a:bd:d1:5e:37:ce:
9b:29:ab:cf:d6:cd:9f:87:7e:64:03:0a:78:57:e4:
ef:db:9d:11:3b:5a:9d:c9:19:87:da:f3:e3:e6:d3:
21:d7:6e:67:8b:14:e5:1f:72:3b:44:6f:67:84:2a:
10:cb:48:6d:31:db:de:a1:42:34:29:0f:77:fa:6e:
8b:ab:ed:3f:62:96:46:9f:7b:93:55:53:8e:b6:62:
10:f7:ce:1b:4b:a8:38:8c:75:85:dc:fb:c5:f2:a7:
66:af:dd:cf:e1:5b:8d:eb:8c:d5:4c:51:59:52:51:
eb:cf:3b:ab:30:95:ab:01:e8:f9:75:7d:6c:73:e7:
ec:b4:e9:d1:49:f7:d7:0f:53:79:61:59:4e:db:7e:
66:1e:f0:5a:6d:39:bd:9b:e3:be:83:d3:3b:2f:2a:
b2:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:A6:FD:34:F0:BB:C1:9E:FE:61:EC:D9:19:D1:E1:27:D6:5C:95:91
X509v3 Authority Key Identifier:
keyid:7D:F0:89:7E:AB:3E:ED:6E:24:ED:DD:67:6E:8B:F9:37:7F:B4:48:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffCJfqs-7W4k7d1nbov5N3-0SAw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/3925e9-65ea-462e-ae28-d2c29dc042e7/1/ffCJfqs-7W4k7d1nbov5N3-0SAw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/3925e9-65ea-462e-ae28-d2c29dc042e7/1/ffCJfqs-7W4k7d1nbov5N3-0SAw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:82:3e:57:eb:19:a0:ef:12:97:8d:eb:d6:df:84:3c:07:40:
a3:a1:d1:ad:fe:b1:ac:87:76:97:33:11:99:68:52:a7:ab:6f:
6b:d9:63:b0:b8:1e:a8:18:94:51:fb:e0:bb:15:0d:08:73:72:
73:ea:0a:23:d6:71:a9:64:7d:24:96:ad:40:45:5a:1a:a1:1a:
ec:de:60:d1:ae:b4:94:91:81:6f:47:6c:83:1f:58:b5:9a:49:
b3:62:5a:6a:9f:f0:69:6a:65:af:e0:95:bb:62:7a:c6:88:f6:
8d:1e:ca:33:05:ee:d7:7f:9c:2d:ce:b0:86:f3:7b:04:73:b2:
53:5d:be:3d:b4:eb:38:65:d5:c3:c6:f5:5b:3e:aa:12:1c:04:
de:74:bd:75:56:2e:af:7e:54:f9:6b:52:f3:7a:da:6b:af:3e:
02:0e:68:fa:e9:f4:08:55:1f:a5:d1:65:60:30:2a:0c:0b:f9:
c9:5a:98:8e:6e:6c:21:11:87:dd:b8:ac:21:09:41:f8:6c:aa:
d3:cf:bb:fc:be:39:a2:e2:f0:25:61:26:ba:23:a4:8a:d3:83:
b7:86:73:43:c5:03:bb:cd:86:42:7e:c9:ff:4b:c3:40:94:21:
7d:bb:fd:59:97:75:00:0c:46:8f:a1:d5:f1:14:88:d9:b7:f9:
33:a9:f0:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:07:10 2025 by rpki-client