Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/ffkEqxQGbHqf5hpSHVSSoOUpZco.mft
File: ffkEqxQGbHqf5hpSHVSSoOUpZco.mft (raw, json)
Hash identifier: yXD52loLG+JKiJBN43RvypXJp4VYkO07Id+nIOp6csI=
Subject key identifier: 55:0B:08:1B:C0:7E:B9:CF:46:F5:89:1E:BF:C3:C7:43:31:B0:4C:90
Authority key identifier: 7D:F9:04:AB:14:06:6C:7A:9F:E6:1A:52:1D:54:92:A0:E5:29:65:CA
Certificate issuer: /CN=7df904ab14066c7a9fe61a521d5492a0e52965ca
Certificate serial: 01984AAF1247EF73996BCCF814390CAEE53D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ffkEqxQGbHqf5hpSHVSSoOUpZco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/ffkEqxQGbHqf5hpSHVSSoOUpZco.mft
Manifest number: 06B9
Signing time: Sun 27 Jul 2025 07:00:44 +0000
Manifest this update: Sun 27 Jul 2025 07:00:44 +0000
Manifest next update: Mon 28 Jul 2025 07:00:44 +0000
Files and hashes: 1: bufSM9AIeCa-WaYVpJMLOnf764U.roa (hash: z9xIiROa5k0JCzmUTT7rzACAGOUMOn1C05T/vecBPKE=)
2: chSUy_WX_Mse1L_Zh-GnPPV45Wk.roa (hash: BdzlPc3HpSD69LQhKLGFCf7tQNLnvI967xxASmmhAH4=)
3: ffkEqxQGbHqf5hpSHVSSoOUpZco.crl (hash: kxqWYvxJczQNFpwHFdYXtsBJesnb7C/Dk+Ngs68Grco=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/ffkEqxQGbHqf5hpSHVSSoOUpZco.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/ffkEqxQGbHqf5hpSHVSSoOUpZco.mft
rsync://rpki.ripe.net/repository/DEFAULT/ffkEqxQGbHqf5hpSHVSSoOUpZco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:af:12:47:ef:73:99:6b:cc:f8:14:39:0c:ae:e5:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7df904ab14066c7a9fe61a521d5492a0e52965ca
Validity
Not Before: Jul 27 07:00:44 2025 GMT
Not After : Jul 28 07:00:44 2025 GMT
Subject: CN=550b081bc07eb9cf46f5891ebfc3c74331b04c90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:13:86:9f:e0:e3:d9:a5:ad:82:78:1e:21:90:
71:f2:c3:5e:f6:1d:c8:16:0e:b7:40:10:0a:6a:2c:
fd:be:4d:5f:a6:96:1e:ec:c6:6c:26:da:05:dc:46:
12:e1:73:a6:f3:c1:ef:90:5d:b6:1d:08:2d:17:3e:
fc:fb:0d:ad:b5:3a:e6:81:5f:e5:c7:b9:6c:42:0b:
69:56:0a:33:22:e5:39:8f:1a:15:1b:d3:ba:49:d7:
49:ab:bc:84:26:fc:f2:14:21:2c:3c:aa:41:0f:49:
01:cc:9b:4e:a5:e8:53:35:52:e1:d0:99:79:62:87:
5a:e5:9f:e6:3b:43:a9:25:a4:3d:da:17:26:74:72:
be:52:95:6c:3e:ac:36:3e:2c:7e:8d:1b:bc:a6:02:
9e:9b:76:9f:88:52:79:70:69:66:c1:7c:6e:d9:d2:
c3:05:99:ae:b3:6a:c2:47:a9:51:d7:23:35:bb:aa:
0e:b2:ed:40:b3:9a:13:2d:af:e6:8d:60:9f:41:fc:
8f:46:f4:da:3f:02:f1:fa:a9:e8:3e:a7:60:f1:90:
7c:7e:95:48:d9:cb:46:38:84:96:f1:b0:45:58:06:
99:25:bc:e1:0a:b1:ea:39:c8:78:fe:24:8d:4f:dc:
ba:42:7e:72:05:b8:61:1e:39:d7:1c:8a:ee:17:54:
50:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:0B:08:1B:C0:7E:B9:CF:46:F5:89:1E:BF:C3:C7:43:31:B0:4C:90
X509v3 Authority Key Identifier:
keyid:7D:F9:04:AB:14:06:6C:7A:9F:E6:1A:52:1D:54:92:A0:E5:29:65:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffkEqxQGbHqf5hpSHVSSoOUpZco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/ffkEqxQGbHqf5hpSHVSSoOUpZco.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/ffkEqxQGbHqf5hpSHVSSoOUpZco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:f1:fc:26:a3:77:ca:52:be:41:a8:11:00:44:c6:97:50:07:
74:a7:e0:64:f4:4a:5f:15:15:06:df:7a:3d:9f:65:a7:1e:a1:
a5:40:2c:58:c2:ac:ab:a8:0f:ef:7c:ca:ab:33:fa:84:14:16:
cb:df:5d:8d:45:58:9e:28:66:a5:83:1d:06:21:f2:46:fc:9c:
8a:83:46:2d:0d:61:45:39:ea:90:ff:56:8f:a5:96:11:ae:22:
36:a7:bc:1a:19:cd:7b:53:2f:e4:19:95:b9:76:de:ff:c6:0a:
b3:53:35:d2:c3:6a:a2:65:dd:a5:ee:df:93:36:fc:e0:1e:55:
a2:68:fb:fa:1b:27:d0:89:48:55:99:93:f6:70:54:0c:fc:2d:
04:e2:2a:7e:f8:0c:66:05:e5:1f:60:28:36:67:ab:8f:a4:b9:
39:a2:1a:09:7a:62:b9:06:94:4a:b6:1c:46:2d:52:ee:5c:a7:
cb:ff:9e:8b:28:cf:78:ae:86:e2:5a:cd:95:80:44:a8:6e:05:
3e:de:ca:38:7c:d3:5c:57:3a:68:d5:ed:0e:21:51:34:13:64:
49:b3:39:2f:48:46:3b:4e:ca:cf:46:4a:a9:31:bc:d1:ea:1a:
77:27:ee:36:7d:68:a3:3a:9d:09:bc:4f:5f:1d:5a:fb:24:2e:
d8:9c:0b:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:16:24 2025 by rpki-client