Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/be3c40-1210-4272-a5ea-7835d3208396/1/Ff04BOALngaoLO2fB7NP4_2AOU4.mft
File: Ff04BOALngaoLO2fB7NP4_2AOU4.mft (raw, json)
Hash identifier: V5LPJh1CJiSb6tzGT5Nsi6v84GGZyy/XF0/8RcFYvOY=
Subject key identifier: 30:E2:2B:46:19:72:EC:CD:C1:48:E4:CB:CE:BF:06:B7:31:29:73:D5
Authority key identifier: 15:FD:38:04:E0:0B:9E:06:A8:2C:ED:9F:07:B3:4F:E3:FD:80:39:4E
Certificate issuer: /CN=15fd3804e00b9e06a82ced9f07b34fe3fd80394e
Certificate serial: 0197B9D8B4F2D60557B5E7AD3AAD7A5739AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ff04BOALngaoLO2fB7NP4_2AOU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/be3c40-1210-4272-a5ea-7835d3208396/1/Ff04BOALngaoLO2fB7NP4_2AOU4.mft
Manifest number: 0D41
Signing time: Sun 29 Jun 2025 04:01:16 +0000
Manifest this update: Sun 29 Jun 2025 04:01:16 +0000
Manifest next update: Mon 30 Jun 2025 04:01:16 +0000
Files and hashes: 1: Ff04BOALngaoLO2fB7NP4_2AOU4.crl (hash: nYqGRl1uKFnNzoNwC1KNI0D5zPFzCH1hq4IMZaPJCBg=)
2: sD3TQhmqpMeiNDRMe_Cg9c8gcQg.roa (hash: YpFE/XWsvo+iSqItJdBs7pFneblfjbKHabl7GMSfsrA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/be3c40-1210-4272-a5ea-7835d3208396/1/Ff04BOALngaoLO2fB7NP4_2AOU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/be3c40-1210-4272-a5ea-7835d3208396/1/Ff04BOALngaoLO2fB7NP4_2AOU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ff04BOALngaoLO2fB7NP4_2AOU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:d8:b4:f2:d6:05:57:b5:e7:ad:3a:ad:7a:57:39:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15fd3804e00b9e06a82ced9f07b34fe3fd80394e
Validity
Not Before: Jun 29 04:01:16 2025 GMT
Not After : Jun 30 04:01:16 2025 GMT
Subject: CN=30e22b461972eccdc148e4cbcebf06b7312973d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:bd:dd:99:21:07:ed:e9:72:4c:37:fa:fc:f5:
2f:86:2f:e3:bf:b6:73:36:19:0e:73:d0:3c:e7:19:
70:81:56:bc:7a:c8:d3:ab:17:c0:ef:f4:07:7f:70:
11:a1:5f:41:b6:17:78:c3:15:c3:a6:cf:c4:a3:d4:
98:37:d0:35:f7:aa:db:d9:87:2f:02:7c:b7:9a:f0:
35:83:b0:74:c6:72:a9:71:ee:92:0a:28:16:bc:90:
7e:6e:e0:db:f7:8e:a0:d7:13:46:ee:d6:77:05:89:
d5:b6:68:f6:dd:0a:0c:c4:ab:a3:26:57:99:6f:cc:
82:60:a9:84:ff:1f:2a:af:f0:28:89:1a:b6:37:af:
a1:f2:e3:9d:59:ff:d4:98:8e:1e:85:2f:f1:46:5a:
e8:b8:7d:3b:94:63:39:59:b4:bb:fc:45:41:96:95:
f4:b9:71:9a:2c:eb:77:12:e8:45:b1:1f:36:cd:ed:
e1:a1:5f:b4:b6:8b:76:5f:59:f4:84:3e:11:c9:11:
91:c3:f6:34:a3:2d:30:2e:ab:10:07:81:f6:11:ec:
6e:68:2a:e7:63:98:d8:e8:2c:bc:e8:96:fa:d6:da:
3f:ad:81:fa:96:14:e3:9a:7b:b9:6f:8e:5d:05:af:
78:e6:ad:39:06:7d:bf:c4:c2:ce:e0:93:bd:e7:4c:
8f:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:E2:2B:46:19:72:EC:CD:C1:48:E4:CB:CE:BF:06:B7:31:29:73:D5
X509v3 Authority Key Identifier:
keyid:15:FD:38:04:E0:0B:9E:06:A8:2C:ED:9F:07:B3:4F:E3:FD:80:39:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ff04BOALngaoLO2fB7NP4_2AOU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/be3c40-1210-4272-a5ea-7835d3208396/1/Ff04BOALngaoLO2fB7NP4_2AOU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/be3c40-1210-4272-a5ea-7835d3208396/1/Ff04BOALngaoLO2fB7NP4_2AOU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:44:05:7a:eb:5a:e1:71:f7:4d:10:9f:af:7a:f8:29:17:08:
06:a9:7b:4c:53:c1:46:18:2f:c8:e1:51:6a:4e:1d:dd:ef:eb:
99:07:86:be:70:03:60:26:b2:bd:72:2b:a7:10:8d:c4:41:b8:
ab:f1:4d:c4:69:50:b8:f1:06:38:6f:56:da:4f:d9:b8:a5:ab:
8c:63:d7:8a:01:3b:64:74:88:91:6f:65:71:e8:c1:30:82:74:
ef:41:54:87:51:43:08:06:3f:8f:14:4a:aa:a8:69:ef:2b:1e:
39:ce:8b:4b:2d:00:cd:5a:22:32:aa:c8:1c:bc:02:6b:3e:aa:
32:97:50:b3:1a:cd:26:92:0e:a0:07:b9:8c:95:6f:c4:f2:08:
9f:43:48:16:4d:36:48:98:db:29:2c:6e:5f:8c:a5:fc:01:75:
43:84:bd:de:74:6f:b0:44:f1:cb:bb:91:7f:ed:21:17:38:85:
e4:f3:15:28:b9:0d:67:c5:3d:ee:a2:13:70:16:a0:8a:fe:8b:
95:5c:cd:da:39:4f:3a:7e:bd:cd:5b:fc:37:ae:16:07:e5:fc:
56:80:f0:26:be:35:ab:c7:da:34:88:88:2a:70:2c:df:f2:15:
f1:dd:31:22:08:d2:87:97:08:76:27:89:0f:ea:3d:df:dd:c5:
5f:c8:cb:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 08:07:16 2025 by rpki-client