Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/a477e9-5ad0-443e-a742-8190dd7c21c4/1/ffyQHUowe9oPOwv2XTEEaCINxeE.mft
File: ffyQHUowe9oPOwv2XTEEaCINxeE.mft (raw, json)
Hash identifier: oldmwRAdu89OYDed3UFOXqopNnWt062oyb8Dh1L1/sc=
Subject key identifier: 54:8E:84:08:FF:CE:51:B8:46:77:E6:90:6A:EF:69:1D:4E:87:DF:9E
Authority key identifier: 7D:FC:90:1D:4A:30:7B:DA:0F:3B:0B:F6:5D:31:04:68:22:0D:C5:E1
Certificate issuer: /CN=7dfc901d4a307bda0f3b0bf65d310468220dc5e1
Certificate serial: 019827EC2CBCBF8FB0AE70FDB1677543BA25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ffyQHUowe9oPOwv2XTEEaCINxeE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/a477e9-5ad0-443e-a742-8190dd7c21c4/1/ffyQHUowe9oPOwv2XTEEaCINxeE.mft
Manifest number: 45
Signing time: Sun 20 Jul 2025 13:00:46 +0000
Manifest this update: Sun 20 Jul 2025 13:00:46 +0000
Manifest next update: Mon 21 Jul 2025 13:00:46 +0000
Files and hashes: 1: ffyQHUowe9oPOwv2XTEEaCINxeE.crl (hash: PXmkN40G2a/VyvLCggKw9MSDdLUG1Wg3FalMs6/RlFY=)
2: jQYNkPm-7PL8fW0UL9FVZuPtO60.roa (hash: KBWJmS4cybTN+ONWvg4jGPD1GVeVDhS/4yiWvoMcO6c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/a477e9-5ad0-443e-a742-8190dd7c21c4/1/ffyQHUowe9oPOwv2XTEEaCINxeE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/a477e9-5ad0-443e-a742-8190dd7c21c4/1/ffyQHUowe9oPOwv2XTEEaCINxeE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ffyQHUowe9oPOwv2XTEEaCINxeE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 13:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:27:ec:2c:bc:bf:8f:b0:ae:70:fd:b1:67:75:43:ba:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7dfc901d4a307bda0f3b0bf65d310468220dc5e1
Validity
Not Before: Jul 20 13:00:46 2025 GMT
Not After : Jul 21 13:00:46 2025 GMT
Subject: CN=548e8408ffce51b84677e6906aef691d4e87df9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:9a:94:03:81:93:b1:32:06:6f:44:e2:a4:d9:
1b:cb:03:92:9f:a2:54:fe:1f:44:29:c1:9e:c2:ae:
ad:6f:6a:32:59:81:fd:fe:f2:ad:16:dc:23:87:ab:
f8:4c:0e:3e:f9:e1:36:99:d6:46:24:5a:78:de:52:
5b:c0:fd:a6:1d:06:94:c4:75:6d:82:2d:a3:f8:30:
5c:77:6b:10:42:70:88:3c:c3:d5:af:0d:30:85:ed:
f9:13:49:dd:8b:e6:2e:14:ae:2a:94:50:3c:02:ff:
64:4d:a6:00:42:29:24:ac:be:7d:d2:c6:03:b8:9f:
61:56:dd:57:7a:00:5f:62:a2:c5:4d:8d:8d:b1:a3:
89:b5:9d:6f:ac:a8:42:9e:a7:f2:49:1d:a1:fb:19:
ff:b6:7b:ed:c8:da:53:b0:3a:84:fa:82:7a:a3:df:
e4:39:0c:25:f2:cc:a5:58:53:65:dd:0d:30:1e:91:
cd:9e:3a:af:e9:2a:52:c0:c9:dd:64:9d:65:19:87:
ca:d8:d4:b0:d1:02:48:e9:14:d2:2d:b0:1c:46:13:
ea:5f:ae:5a:5f:9c:5e:9b:53:9c:42:e5:9e:be:97:
92:27:9a:5b:3b:a6:59:62:bc:b3:6a:e0:ac:1b:0d:
63:8e:6f:b4:f1:6c:da:30:48:38:dd:91:60:ad:2a:
bb:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:8E:84:08:FF:CE:51:B8:46:77:E6:90:6A:EF:69:1D:4E:87:DF:9E
X509v3 Authority Key Identifier:
keyid:7D:FC:90:1D:4A:30:7B:DA:0F:3B:0B:F6:5D:31:04:68:22:0D:C5:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffyQHUowe9oPOwv2XTEEaCINxeE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/a477e9-5ad0-443e-a742-8190dd7c21c4/1/ffyQHUowe9oPOwv2XTEEaCINxeE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/a477e9-5ad0-443e-a742-8190dd7c21c4/1/ffyQHUowe9oPOwv2XTEEaCINxeE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:7c:05:45:63:5c:b4:7d:29:6d:81:db:01:7c:ba:fc:e6:5e:
a2:80:a4:4f:16:00:52:70:70:27:86:f2:95:d9:ea:b8:c6:93:
a3:58:ff:27:fa:6e:e2:18:74:61:56:9e:2a:b4:49:01:fc:c9:
a5:10:ed:49:1a:0e:ab:f3:36:e0:67:4d:fb:3d:27:c9:4d:3c:
6b:18:66:f6:45:b0:e2:ff:b2:60:3f:f4:c1:11:24:57:15:89:
a7:11:7f:9d:1a:b7:24:4c:32:ed:c6:06:f4:e0:14:72:3a:3b:
a0:13:21:fa:ac:2f:c0:45:a6:dd:6f:e0:35:0e:fa:3a:f7:81:
94:98:0e:d6:f8:8a:4d:30:4a:a7:23:fa:af:a1:a2:52:56:88:
a3:6a:ff:ac:69:79:f9:7e:dc:71:d8:34:8d:63:96:fc:6d:73:
b5:e5:f7:97:74:c7:c7:10:50:5e:dc:b3:dd:bc:80:df:a8:1c:
88:32:a5:b0:5d:24:98:e1:07:65:71:40:b6:6d:15:d3:ef:39:
e2:d4:ed:43:89:9e:9f:30:ce:b1:f7:46:69:04:d3:8d:68:3b:
a0:b7:2d:b2:c0:e6:c2:88:93:fb:a0:e6:66:b3:7f:a5:93:36:
f0:64:1a:42:75:73:ed:96:76:e8:7d:71:80:1d:bb:8f:ac:88:
f7:11:15:d3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZgn7Cy8v4+wrnD9sWd1Q7olMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkZmM5MDFkNGEzMDdiZGEwZjNiMGJmNjVkMzEwNDY4MjIw
ZGM1ZTEwHhcNMjUwNzIwMTMwMDQ2WhcNMjUwNzIxMTMwMDQ2WjAzMTEwLwYDVQQD
Eyg1NDhlODQwOGZmY2U1MWI4NDY3N2U2OTA2YWVmNjkxZDRlODdkZjllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1pqUA4GTsTIGb0TipNkbywOSn6JU
/h9EKcGewq6tb2oyWYH9/vKtFtwjh6v4TA4++eE2mdZGJFp43lJbwP2mHQaUxHVt
gi2j+DBcd2sQQnCIPMPVrw0whe35E0ndi+YuFK4qlFA8Av9kTaYAQikkrL590sYD
uJ9hVt1XegBfYqLFTY2NsaOJtZ1vrKhCnqfySR2h+xn/tnvtyNpTsDqE+oJ6o9/k
OQwl8sylWFNl3Q0wHpHNnjqv6SpSwMndZJ1lGYfK2NSw0QJI6RTSLbAcRhPqX65a
X5xem1OcQuWevpeSJ5pbO6ZZYryzauCsGw1jjm+08WzaMEg43ZFgrSq7dQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFSOhAj/zlG4RnfmkGrvaR1Oh9+eMB8GA1UdIwQY
MBaAFH38kB1KMHvaDzsL9l0xBGgiDcXhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmZ5UUhVb3dlOW9QT3d2MlhURUVhQ0lOeGVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS9hNDc3ZTktNWFkMC00NDNlLWE3NDIt
ODE5MGRkN2MyMWM0LzEvZmZ5UUhVb3dlOW9QT3d2MlhURUVhQ0lOeGVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS9hNDc3ZTktNWFkMC00NDNlLWE3NDItODE5MGRkN2MyMWM0
LzEvZmZ5UUhVb3dlOW9QT3d2MlhURUVhQ0lOeGVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUnwFRWNc
tH0pbYHbAXy6/OZeooCkTxYAUnBwJ4byldnquMaTo1j/J/pu4hh0YVaeKrRJAfzJ
pRDtSRoOq/M24GdN+z0nyU08axhm9kWw4v+yYD/0wREkVxWJpxF/nRq3JEwy7cYG
9OAUcjo7oBMh+qwvwEWm3W/gNQ76OveBlJgO1viKTTBKpyP6r6GiUlaIo2r/rGl5
+X7ccdg0jWOW/G1zteX3l3THxxBQXtyz3byA36gciDKlsF0kmOEHZXFAtm0V0+85
4tTtQ4menzDOsfdGaQTTjWg7oLctssDmwoiT+6DmZrN/pZM28GQaQnVz7ZZ26H1x
gB27j6yI9xEV0w==
-----END CERTIFICATE-----
Generated at Sun Jul 20 20:11:04 2025 by rpki-client