Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/be3c40-1210-4272-a5ea-7835d3208396/1/Ff04BOALngaoLO2fB7NP4_2AOU4.mft
File: Ff04BOALngaoLO2fB7NP4_2AOU4.mft (raw, json)
Hash identifier: IeZxTznBnfk/bIjnhMJB5n2TWQ+zIPXnw2KKrftuyIM=
Subject key identifier: 1D:DE:01:C4:49:AA:93:38:3A:0E:AC:CE:52:38:84:04:C0:36:E9:82
Authority key identifier: 15:FD:38:04:E0:0B:9E:06:A8:2C:ED:9F:07:B3:4F:E3:FD:80:39:4E
Certificate issuer: /CN=15fd3804e00b9e06a82ced9f07b34fe3fd80394e
Certificate serial: 0199FB46257F21F9CCF1E76B42483E1F1B34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ff04BOALngaoLO2fB7NP4_2AOU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/be3c40-1210-4272-a5ea-7835d3208396/1/Ff04BOALngaoLO2fB7NP4_2AOU4.mft
Manifest number: 0E6C
Signing time: Sun 19 Oct 2025 07:01:42 +0000
Manifest this update: Sun 19 Oct 2025 07:01:42 +0000
Manifest next update: Mon 20 Oct 2025 07:01:42 +0000
Files and hashes: 1: Ff04BOALngaoLO2fB7NP4_2AOU4.crl (hash: xRJW1SsKJMDC3pbkxwYwUidVdrzBi9MZjKssPtGaBig=)
2: sD3TQhmqpMeiNDRMe_Cg9c8gcQg.roa (hash: YpFE/XWsvo+iSqItJdBs7pFneblfjbKHabl7GMSfsrA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/be3c40-1210-4272-a5ea-7835d3208396/1/Ff04BOALngaoLO2fB7NP4_2AOU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/be3c40-1210-4272-a5ea-7835d3208396/1/Ff04BOALngaoLO2fB7NP4_2AOU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ff04BOALngaoLO2fB7NP4_2AOU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:46:25:7f:21:f9:cc:f1:e7:6b:42:48:3e:1f:1b:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15fd3804e00b9e06a82ced9f07b34fe3fd80394e
Validity
Not Before: Oct 19 07:01:42 2025 GMT
Not After : Oct 20 07:01:42 2025 GMT
Subject: CN=1dde01c449aa93383a0eacce52388404c036e982
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:7b:35:98:56:58:33:4f:17:b4:d3:79:db:d9:
22:41:24:96:99:6d:20:44:50:e3:5c:f0:23:81:bb:
6c:09:f4:df:86:22:dd:8a:6a:29:e0:c0:0f:5d:e7:
6b:d7:5a:75:d0:ad:4d:98:a4:d6:86:e1:0b:c7:e2:
62:cb:d0:16:95:2c:85:d0:13:93:c8:c7:08:3d:f3:
ed:1c:f0:e4:bb:5c:a7:db:4d:9c:86:c7:07:86:ed:
39:31:8e:a2:c0:66:c6:53:1e:43:ca:13:ef:18:e9:
be:3c:05:5d:d1:11:bb:c3:d7:51:52:e2:48:a9:5c:
66:6a:2d:4d:c2:4e:a2:34:44:17:6b:65:d6:48:26:
55:8d:3f:d1:cd:f2:4a:13:0b:a6:6c:06:d4:cf:51:
85:a4:88:5a:21:37:a3:af:76:c7:d6:26:b3:12:3d:
93:7c:59:d2:de:55:3b:d9:2e:17:97:73:cc:a1:6b:
27:35:f2:71:55:dc:02:10:54:69:7d:b3:2f:c6:ba:
ca:c8:ae:2e:f9:1c:83:00:62:ba:4f:37:83:88:52:
0c:92:85:06:20:37:1f:f1:b9:5d:2c:8b:8b:3e:ad:
85:09:f4:63:2e:6f:1d:08:a2:37:d4:32:78:52:83:
ce:68:0e:26:ac:6c:f3:00:96:c7:55:06:b4:31:9e:
c7:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:DE:01:C4:49:AA:93:38:3A:0E:AC:CE:52:38:84:04:C0:36:E9:82
X509v3 Authority Key Identifier:
keyid:15:FD:38:04:E0:0B:9E:06:A8:2C:ED:9F:07:B3:4F:E3:FD:80:39:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ff04BOALngaoLO2fB7NP4_2AOU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/be3c40-1210-4272-a5ea-7835d3208396/1/Ff04BOALngaoLO2fB7NP4_2AOU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/be3c40-1210-4272-a5ea-7835d3208396/1/Ff04BOALngaoLO2fB7NP4_2AOU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:5d:87:2b:72:f9:00:7c:b0:cd:9e:78:60:00:f7:e7:09:bb:
05:f3:f8:ef:91:7c:66:ae:2e:49:33:43:ab:38:b1:40:fc:d4:
34:5c:0e:27:58:12:44:d6:e9:45:0e:2b:00:0e:2f:70:77:dc:
65:49:db:58:fd:4d:49:5d:fa:18:b4:66:21:de:ed:3f:94:b3:
8f:c2:fe:81:7e:3a:dc:44:99:d2:39:41:b4:73:81:cd:4f:d1:
76:29:41:7b:14:f9:1d:bb:c7:20:50:bd:46:f8:68:4e:f7:2e:
a0:68:38:45:a3:69:ff:7a:80:b1:fc:04:7b:28:4b:8f:35:e8:
16:23:cb:49:98:53:78:e3:b0:fa:13:4c:2c:7a:99:be:7c:19:
00:6b:a0:73:33:1e:64:70:46:28:df:88:cc:81:38:5d:db:0c:
23:56:47:00:3e:87:49:75:62:7c:c1:7c:23:cc:42:e5:83:1c:
eb:f0:2d:da:01:3f:41:1c:76:e1:cb:df:37:12:80:b2:c4:ac:
32:2c:ca:1e:da:a5:e3:a5:b0:97:fe:9f:22:f8:03:03:1e:1b:
65:fd:3b:39:18:e6:ec:29:49:15:00:fa:39:8f:6c:ea:fd:33:
bd:40:24:78:c7:7a:4c:7a:f3:2f:2f:b1:20:3b:08:6b:56:88:
71:57:72:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:20:11 2025 by rpki-client