Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/f952fb-9318-49b6-b946-1e3a195478e0/1/FfiJ_tAIX8IbCPy7slLDEG35mqg.mft
File: FfiJ_tAIX8IbCPy7slLDEG35mqg.mft (raw, json)
Hash identifier: fAa7TAMjY3skzbOD0tDqgG4/DBI05N2prsJOMP3/o1g=
Subject key identifier: 8E:B1:BF:F2:D1:43:CC:DA:A7:EC:15:2B:AB:D1:7A:B1:11:CC:9E:70
Authority key identifier: 15:F8:89:FE:D0:08:5F:C2:1B:08:FC:BB:B2:52:C3:10:6D:F9:9A:A8
Certificate issuer: /CN=15f889fed0085fc21b08fcbbb252c3106df99aa8
Certificate serial: 019A0035027600AC03E40A428E406FFBE973
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfiJ_tAIX8IbCPy7slLDEG35mqg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/f952fb-9318-49b6-b946-1e3a195478e0/1/FfiJ_tAIX8IbCPy7slLDEG35mqg.mft
Manifest number: 16E4
Signing time: Mon 20 Oct 2025 06:01:05 +0000
Manifest this update: Mon 20 Oct 2025 06:01:05 +0000
Manifest next update: Tue 21 Oct 2025 06:01:05 +0000
Files and hashes: 1: 88FJYTd8b-KHdvH7x_K99lUYWdQ.roa (hash: ghtnktZiVNaMUpHUfiZ1KkJiqbduMhbZsfbCJ/7Zf6E=)
2: FfiJ_tAIX8IbCPy7slLDEG35mqg.crl (hash: /u+D5KSv4ADpt0jhQkrUOvdfAcpOy15rjcLbKcbunL0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/f952fb-9318-49b6-b946-1e3a195478e0/1/FfiJ_tAIX8IbCPy7slLDEG35mqg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/f952fb-9318-49b6-b946-1e3a195478e0/1/FfiJ_tAIX8IbCPy7slLDEG35mqg.mft
rsync://rpki.ripe.net/repository/DEFAULT/FfiJ_tAIX8IbCPy7slLDEG35mqg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:35:02:76:00:ac:03:e4:0a:42:8e:40:6f:fb:e9:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f889fed0085fc21b08fcbbb252c3106df99aa8
Validity
Not Before: Oct 20 06:01:05 2025 GMT
Not After : Oct 21 06:01:05 2025 GMT
Subject: CN=8eb1bff2d143ccdaa7ec152babd17ab111cc9e70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:f4:3e:69:0b:58:be:68:16:9c:d6:4e:e5:cf:
87:75:92:ee:20:8a:9a:ad:e2:db:db:5a:f1:12:99:
41:52:2e:cb:6d:72:f8:f0:67:2d:15:05:d4:fd:84:
1e:b3:b9:78:b3:75:7e:eb:9f:5b:98:07:b6:e5:6f:
dc:e8:70:70:90:dc:d0:23:e9:50:a7:e9:32:6c:07:
2a:21:a4:19:48:c9:7f:33:3e:3c:39:05:46:1f:10:
52:e6:b8:46:9c:8c:e6:3a:e6:8e:2f:6d:23:af:bb:
db:fd:19:de:5c:9a:17:02:cf:24:0f:4c:62:fe:5d:
25:ad:21:ea:39:f2:5c:a7:2a:37:a2:a0:b2:b8:74:
18:55:a1:94:bc:6e:42:b9:ee:a8:ba:c8:e4:6d:7d:
de:fb:14:42:0e:1a:46:df:22:85:ba:ee:d3:0b:79:
08:e7:dc:44:a0:c1:01:7b:5f:ff:22:5d:26:44:db:
77:2d:65:75:dd:06:23:f9:44:e9:11:93:c3:32:66:
82:66:c6:33:a0:37:9f:e7:ae:c4:8a:0f:d3:45:16:
d4:80:48:f5:80:b4:e4:56:de:f5:20:dd:68:24:39:
de:da:f0:03:ef:31:ef:99:16:1d:b4:6e:71:8f:6d:
d0:0a:94:9a:d1:6f:8b:6d:c1:95:f8:49:02:10:29:
83:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:B1:BF:F2:D1:43:CC:DA:A7:EC:15:2B:AB:D1:7A:B1:11:CC:9E:70
X509v3 Authority Key Identifier:
keyid:15:F8:89:FE:D0:08:5F:C2:1B:08:FC:BB:B2:52:C3:10:6D:F9:9A:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfiJ_tAIX8IbCPy7slLDEG35mqg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f952fb-9318-49b6-b946-1e3a195478e0/1/FfiJ_tAIX8IbCPy7slLDEG35mqg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f952fb-9318-49b6-b946-1e3a195478e0/1/FfiJ_tAIX8IbCPy7slLDEG35mqg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:74:07:79:5c:0a:24:6b:5f:c4:20:60:7f:d7:2f:ef:d3:fe:
21:51:c5:9f:5e:1c:49:80:70:0a:c1:47:9d:c0:af:d1:8b:57:
ba:48:a5:35:0e:9d:d6:69:39:a2:15:4b:62:94:bb:be:55:5f:
9a:9d:80:ca:68:2f:e6:39:67:be:b8:4d:b3:c6:77:d3:d2:d9:
62:cd:a4:13:4f:2f:16:8b:a8:c6:d1:de:b9:3e:22:d8:37:e6:
87:34:25:dc:cc:ab:60:5f:77:1c:43:ae:5e:f0:56:4f:6b:5b:
1c:ff:12:87:f6:df:1a:69:5b:97:49:7f:e3:20:60:3c:91:bc:
60:9a:67:90:5e:fe:2f:f4:f3:d2:65:e7:db:8e:92:29:ee:99:
ac:aa:80:9e:67:16:9a:7b:15:ff:1a:d1:e4:66:4a:d1:4b:3b:
97:19:cb:03:1a:ff:dd:2b:09:31:eb:0d:9c:34:23:b8:9c:44:
03:b9:da:00:f7:8d:ba:43:bf:6b:56:4a:c4:81:5b:ce:e5:46:
d7:9f:ef:7f:90:4e:03:94:c2:f5:c1:af:23:56:75:df:28:4f:
71:a8:dd:c3:fd:9e:13:5f:a4:0b:c2:24:e0:91:7b:0e:71:4f:
03:9f:ea:6f:e9:6b:1a:a8:cc:8c:98:16:cf:2e:4b:63:b6:60:
48:7e:f6:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:28:20 2025 by rpki-client