Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/be3c40-1210-4272-a5ea-7835d3208396/1/Ff04BOALngaoLO2fB7NP4_2AOU4.mft
File: Ff04BOALngaoLO2fB7NP4_2AOU4.mft (raw, json)
Hash identifier: YV9zd/yRN0QBIJoV9d74c0o+ye1F/UO6lw1xlBjryI8=
Subject key identifier: BD:87:EF:0B:5F:52:AC:39:9D:69:55:79:F5:C4:E5:1B:54:2E:9D:91
Authority key identifier: 15:FD:38:04:E0:0B:9E:06:A8:2C:ED:9F:07:B3:4F:E3:FD:80:39:4E
Certificate issuer: /CN=15fd3804e00b9e06a82ced9f07b34fe3fd80394e
Certificate serial: 0198D5BBCF05D71463C9F89C6AC63848348D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ff04BOALngaoLO2fB7NP4_2AOU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/be3c40-1210-4272-a5ea-7835d3208396/1/Ff04BOALngaoLO2fB7NP4_2AOU4.mft
Manifest number: 0DD4
Signing time: Sat 23 Aug 2025 07:01:51 +0000
Manifest this update: Sat 23 Aug 2025 07:01:51 +0000
Manifest next update: Sun 24 Aug 2025 07:01:51 +0000
Files and hashes: 1: Ff04BOALngaoLO2fB7NP4_2AOU4.crl (hash: kEFnEVflmvXZ088PU0WT9IZvt7kfDIOYgW0bdm2SR90=)
2: sD3TQhmqpMeiNDRMe_Cg9c8gcQg.roa (hash: YpFE/XWsvo+iSqItJdBs7pFneblfjbKHabl7GMSfsrA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/be3c40-1210-4272-a5ea-7835d3208396/1/Ff04BOALngaoLO2fB7NP4_2AOU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/be3c40-1210-4272-a5ea-7835d3208396/1/Ff04BOALngaoLO2fB7NP4_2AOU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ff04BOALngaoLO2fB7NP4_2AOU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:cf:05:d7:14:63:c9:f8:9c:6a:c6:38:48:34:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15fd3804e00b9e06a82ced9f07b34fe3fd80394e
Validity
Not Before: Aug 23 07:01:51 2025 GMT
Not After : Aug 24 07:01:51 2025 GMT
Subject: CN=bd87ef0b5f52ac399d695579f5c4e51b542e9d91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:0b:5b:fa:d9:37:88:e9:58:42:84:e8:f4:22:
83:9b:a2:71:de:5d:a3:2c:ee:12:9f:33:7d:d9:db:
3b:96:ec:ec:eb:67:a0:78:77:37:bf:4f:4a:4a:95:
12:24:13:6a:bf:a5:bf:64:40:4b:f1:b4:90:34:eb:
68:93:1c:9e:ac:b7:86:7f:dc:61:ed:72:48:1b:73:
dd:b2:a8:54:a4:6f:5d:f8:45:6b:6e:7e:1e:d3:9f:
ec:92:11:32:09:d8:d2:d2:b2:9d:20:96:e6:bb:e3:
2d:36:bb:22:49:68:38:c2:23:8a:d1:d6:d2:32:68:
55:58:ae:61:75:e7:d3:7e:5c:a5:5b:5a:35:3d:c2:
36:a9:21:4c:d7:80:8d:6a:ef:ee:64:b5:ce:76:18:
f5:e1:46:b1:c0:b7:aa:93:41:4b:ab:b3:ea:1b:b3:
aa:5c:35:91:98:59:d8:63:88:38:aa:ed:19:4a:d6:
7a:b5:22:0c:32:a4:cf:98:3f:01:e0:34:39:01:0b:
66:99:54:d7:33:33:c6:6e:55:bb:de:01:06:70:06:
70:7f:61:ca:82:8e:64:cc:d4:08:5c:c8:f4:bf:a6:
b9:d4:30:62:23:b3:8d:85:a7:6d:a7:ec:4f:ea:c3:
1f:fc:de:ac:6a:79:94:3c:5b:44:98:40:8f:13:54:
b3:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:87:EF:0B:5F:52:AC:39:9D:69:55:79:F5:C4:E5:1B:54:2E:9D:91
X509v3 Authority Key Identifier:
keyid:15:FD:38:04:E0:0B:9E:06:A8:2C:ED:9F:07:B3:4F:E3:FD:80:39:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ff04BOALngaoLO2fB7NP4_2AOU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/be3c40-1210-4272-a5ea-7835d3208396/1/Ff04BOALngaoLO2fB7NP4_2AOU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/be3c40-1210-4272-a5ea-7835d3208396/1/Ff04BOALngaoLO2fB7NP4_2AOU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:7c:99:fc:d5:63:90:0d:66:a5:ce:03:f8:67:04:82:c4:ec:
bb:8b:56:88:54:0d:8c:04:5b:00:59:e3:d4:05:92:1f:8f:ec:
55:97:5e:4c:d9:56:2a:f3:0b:96:c1:e3:82:ae:cd:65:e9:41:
46:70:f9:bb:5f:a2:94:37:b6:35:fa:4c:0d:ed:a0:d9:7d:36:
ba:42:7a:0c:b6:6b:f7:c1:2e:4b:4f:72:f4:fa:1f:a8:bf:2f:
cc:7b:a3:ae:dc:27:7b:7b:02:47:32:e4:67:8b:7e:6a:4e:1c:
bc:f7:90:f4:5e:15:a1:96:b0:f6:ff:26:fc:8b:59:cb:88:3f:
79:3c:7a:e7:68:67:e2:15:b6:9e:d6:b4:60:23:5c:73:8c:46:
9e:20:94:03:00:b3:c0:ef:5d:02:db:58:2e:d3:04:96:93:be:
57:5f:68:50:02:0e:c2:29:7a:90:c2:3e:16:48:2f:d6:69:ca:
33:67:47:c7:61:c8:51:1c:24:f0:a3:da:98:e3:ad:4d:6b:95:
1e:2b:f3:ed:c7:53:fc:31:fa:75:73:20:b3:31:db:0c:46:ce:
a8:fc:61:ab:94:7e:b0:03:8b:a6:d4:f6:7d:bd:4f:ed:d1:96:
17:c4:7f:2d:8d:55:ec:8a:bd:9c:7f:58:e6:22:05:d5:34:08:
6e:53:85:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:42:15 2025 by rpki-client