Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/f952fb-9318-49b6-b946-1e3a195478e0/1/FfiJ_tAIX8IbCPy7slLDEG35mqg.mft
File: FfiJ_tAIX8IbCPy7slLDEG35mqg.mft (raw, json)
Hash identifier: Bvp91p6r8N48o0D9t2vEsq6YdhHkd9+bp8gdr1qB488=
Subject key identifier: A7:A0:C1:01:E4:49:13:DC:52:2B:E7:05:19:23:78:03:74:41:72:25
Authority key identifier: 15:F8:89:FE:D0:08:5F:C2:1B:08:FC:BB:B2:52:C3:10:6D:F9:9A:A8
Certificate issuer: /CN=15f889fed0085fc21b08fcbbb252c3106df99aa8
Certificate serial: 019849D3335C4A1988BDDBEBFD2EBCAFBBEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfiJ_tAIX8IbCPy7slLDEG35mqg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/f952fb-9318-49b6-b946-1e3a195478e0/1/FfiJ_tAIX8IbCPy7slLDEG35mqg.mft
Manifest number: 1601
Signing time: Sun 27 Jul 2025 03:00:34 +0000
Manifest this update: Sun 27 Jul 2025 03:00:34 +0000
Manifest next update: Mon 28 Jul 2025 03:00:34 +0000
Files and hashes: 1: 88FJYTd8b-KHdvH7x_K99lUYWdQ.roa (hash: ghtnktZiVNaMUpHUfiZ1KkJiqbduMhbZsfbCJ/7Zf6E=)
2: FfiJ_tAIX8IbCPy7slLDEG35mqg.crl (hash: Xs9xtS+hFHHiqZnjp4DbUG9ZO2MuXk+U1UTzGuqbZYM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/f952fb-9318-49b6-b946-1e3a195478e0/1/FfiJ_tAIX8IbCPy7slLDEG35mqg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/f952fb-9318-49b6-b946-1e3a195478e0/1/FfiJ_tAIX8IbCPy7slLDEG35mqg.mft
rsync://rpki.ripe.net/repository/DEFAULT/FfiJ_tAIX8IbCPy7slLDEG35mqg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 03:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:33:5c:4a:19:88:bd:db:eb:fd:2e:bc:af:bb:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f889fed0085fc21b08fcbbb252c3106df99aa8
Validity
Not Before: Jul 27 03:00:34 2025 GMT
Not After : Jul 28 03:00:34 2025 GMT
Subject: CN=a7a0c101e44913dc522be7051923780374417225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:7f:c2:28:58:b9:a1:1b:8a:4d:06:32:d9:4c:
56:2b:25:41:04:e1:67:9c:2d:94:bb:c9:8e:84:49:
c7:57:19:72:13:f1:86:57:02:38:d7:2d:e7:83:8c:
3b:5d:a9:c9:41:75:58:18:65:73:6d:d0:54:aa:da:
03:1a:b1:c0:5a:7a:cb:a5:57:cf:47:d6:ce:f5:8c:
6c:db:64:15:21:41:59:58:ef:a9:9f:e9:af:de:50:
b4:cf:a9:6a:de:fc:b0:06:b9:19:5b:aa:05:9e:8a:
f1:fc:b6:c8:c3:fc:b3:bb:25:20:59:67:9a:4a:a4:
65:27:cc:f4:62:78:18:19:3b:eb:5a:df:d3:9d:f6:
70:44:2e:3e:c0:e2:c1:6e:25:52:12:ce:cb:d6:aa:
10:2d:63:a6:15:d4:97:06:e1:7e:a4:9a:c6:7a:99:
2c:0d:0f:e4:61:8a:ea:c9:64:59:21:83:18:48:5e:
ea:51:6d:1f:b2:3a:1d:0e:13:71:8f:ef:95:c8:4d:
1f:ce:c0:b4:3c:75:a6:98:5f:78:07:ff:1b:a4:61:
81:3a:24:66:6f:10:61:3b:f4:3b:fb:22:4a:e5:02:
c6:c2:b8:7f:95:b3:e8:3c:8a:90:fe:57:11:50:b0:
52:e0:eb:c2:d0:f0:26:1d:05:07:5c:82:8c:56:5e:
13:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:A0:C1:01:E4:49:13:DC:52:2B:E7:05:19:23:78:03:74:41:72:25
X509v3 Authority Key Identifier:
keyid:15:F8:89:FE:D0:08:5F:C2:1B:08:FC:BB:B2:52:C3:10:6D:F9:9A:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfiJ_tAIX8IbCPy7slLDEG35mqg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f952fb-9318-49b6-b946-1e3a195478e0/1/FfiJ_tAIX8IbCPy7slLDEG35mqg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f952fb-9318-49b6-b946-1e3a195478e0/1/FfiJ_tAIX8IbCPy7slLDEG35mqg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:8e:52:fd:43:3b:45:2c:0b:ef:15:4c:f9:aa:93:50:3e:e9:
c8:1e:2a:3b:29:65:47:d9:15:c4:fe:0a:a5:c6:f1:9c:0e:e6:
da:78:22:4b:bd:78:48:ea:3c:b8:8a:f2:6b:77:dd:e7:f4:0e:
9c:2f:d0:7f:77:f3:9d:95:bb:57:40:4d:37:af:9c:bd:e1:57:
e6:fa:95:d2:53:14:b4:65:59:2d:95:c9:49:e3:ab:1f:c1:16:
3b:89:63:83:4b:01:de:1d:6b:a7:de:3e:e8:db:84:48:b6:05:
38:53:3b:2b:ff:da:ce:1c:4e:11:4b:43:c4:e0:66:44:b8:1b:
64:1a:0d:32:cd:19:a9:43:9a:3d:f6:af:b3:54:7b:9c:80:4f:
4e:0d:18:5b:e0:c2:5d:fc:44:2c:9e:37:ab:0d:36:83:d6:66:
c2:55:cd:33:37:e3:86:55:73:9d:2c:ee:e4:76:96:36:d3:c7:
2a:20:c9:05:4f:f5:d4:01:fb:3b:ee:12:17:a7:f3:3b:d5:58:
63:31:d0:75:2d:58:76:2e:84:0c:83:5e:6f:7c:40:32:32:0b:
d9:e0:e1:5e:6b:04:15:2b:2b:47:4a:7b:bd:1f:23:ab:0b:41:
a2:8f:62:71:3e:18:23:45:86:b7:6a:16:9b:b7:b0:ce:df:30:
b1:9a:fe:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:22:28 2025 by rpki-client