Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/be3c40-1210-4272-a5ea-7835d3208396/1/Ff04BOALngaoLO2fB7NP4_2AOU4.mft
File: Ff04BOALngaoLO2fB7NP4_2AOU4.mft (raw, json)
Hash identifier: D7jOZUwXsD3fvgnbpTPLWljiUvWBP908FjA+WtWpykQ=
Subject key identifier: 6E:DE:D5:51:C3:75:D3:16:16:8D:6D:88:49:A1:9F:16:A2:EE:5B:48
Authority key identifier: 15:FD:38:04:E0:0B:9E:06:A8:2C:ED:9F:07:B3:4F:E3:FD:80:39:4E
Certificate issuer: /CN=15fd3804e00b9e06a82ced9f07b34fe3fd80394e
Certificate serial: 019846D22CE2044B6125F7C0432D9FC0731D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ff04BOALngaoLO2fB7NP4_2AOU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/be3c40-1210-4272-a5ea-7835d3208396/1/Ff04BOALngaoLO2fB7NP4_2AOU4.mft
Manifest number: 0D8A
Signing time: Sat 26 Jul 2025 13:00:35 +0000
Manifest this update: Sat 26 Jul 2025 13:00:35 +0000
Manifest next update: Sun 27 Jul 2025 13:00:35 +0000
Files and hashes: 1: Ff04BOALngaoLO2fB7NP4_2AOU4.crl (hash: uAZfZNqgMCBt0LBvvR82TAj5P80NV6wDCAcxDAeUqBk=)
2: sD3TQhmqpMeiNDRMe_Cg9c8gcQg.roa (hash: YpFE/XWsvo+iSqItJdBs7pFneblfjbKHabl7GMSfsrA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/be3c40-1210-4272-a5ea-7835d3208396/1/Ff04BOALngaoLO2fB7NP4_2AOU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/be3c40-1210-4272-a5ea-7835d3208396/1/Ff04BOALngaoLO2fB7NP4_2AOU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ff04BOALngaoLO2fB7NP4_2AOU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:d2:2c:e2:04:4b:61:25:f7:c0:43:2d:9f:c0:73:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15fd3804e00b9e06a82ced9f07b34fe3fd80394e
Validity
Not Before: Jul 26 13:00:35 2025 GMT
Not After : Jul 27 13:00:35 2025 GMT
Subject: CN=6eded551c375d316168d6d8849a19f16a2ee5b48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f2:06:48:3f:2d:59:04:f0:df:9e:ef:0e:d2:
c6:90:e2:01:41:c4:ad:3d:8a:a8:05:4d:9b:55:89:
0d:ea:b1:ef:56:a6:cf:a5:b3:83:26:65:8b:02:eb:
4f:75:29:59:aa:f2:c5:76:2c:12:7b:ce:02:99:8c:
c8:1c:e7:69:e3:d0:a5:5a:4a:37:3f:5b:5b:8f:69:
c9:20:c9:0e:4e:a5:46:12:e1:91:86:ea:04:db:e9:
a4:3c:f7:56:91:3a:01:7d:d4:2a:9a:1a:7e:0a:71:
71:57:f7:39:eb:03:c3:71:e9:28:eb:ed:51:1e:59:
78:00:54:3c:c8:6b:b4:a2:73:81:ca:5c:de:aa:f7:
19:9c:57:9a:0d:d3:bf:d5:08:29:a8:03:c6:cf:79:
1e:5d:c5:c0:5e:8a:23:ee:39:02:8d:83:f9:fe:12:
0e:7f:56:6c:1f:63:1d:a5:e9:47:ea:a4:90:0c:aa:
ae:89:74:bf:64:32:c7:55:bb:d8:8a:e1:d0:aa:30:
3a:c2:ee:f9:bc:60:fa:eb:5d:d3:16:0a:57:76:54:
50:47:db:81:bb:48:de:b7:67:f0:5d:98:2d:90:e1:
6e:4f:eb:da:7c:4a:79:e7:62:f5:b7:30:ac:33:8f:
2c:15:a5:92:ed:1b:39:da:81:94:42:40:4d:48:84:
7a:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:DE:D5:51:C3:75:D3:16:16:8D:6D:88:49:A1:9F:16:A2:EE:5B:48
X509v3 Authority Key Identifier:
keyid:15:FD:38:04:E0:0B:9E:06:A8:2C:ED:9F:07:B3:4F:E3:FD:80:39:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ff04BOALngaoLO2fB7NP4_2AOU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/be3c40-1210-4272-a5ea-7835d3208396/1/Ff04BOALngaoLO2fB7NP4_2AOU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/be3c40-1210-4272-a5ea-7835d3208396/1/Ff04BOALngaoLO2fB7NP4_2AOU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:ca:aa:23:3e:bd:31:36:b6:18:ca:6e:50:d0:cd:05:1e:f8:
f0:e8:dc:bf:85:b4:50:06:8c:a3:9b:cd:ba:17:8a:72:52:1f:
dc:77:ce:6b:79:79:fb:c0:fb:98:c4:a4:c2:d1:bd:0e:fd:ce:
8b:fe:d0:6b:3b:80:98:15:e2:4e:86:56:b1:93:21:e9:2b:12:
53:0b:9a:ad:87:3c:17:2f:9e:34:c6:1c:2c:41:93:2d:11:45:
a8:69:68:60:44:8d:ea:71:47:a1:b6:b5:b8:47:e1:ff:c0:9a:
1c:a5:b1:54:f5:14:41:9d:f8:f0:53:70:d8:7b:90:9f:7b:c9:
1f:6d:40:4b:a6:0c:e2:f6:f4:aa:29:ab:37:82:85:31:e3:8c:
73:50:4e:cd:c4:88:63:e4:31:b0:c8:51:76:86:e4:12:3e:dd:
94:c3:52:2b:39:a9:25:ea:36:2c:4d:d6:14:ef:7f:eb:cd:f7:
b3:28:a0:1c:02:6b:47:1a:85:47:1f:9e:df:d0:4a:16:f0:02:
da:a3:be:11:d7:26:1e:14:0c:55:ae:26:f2:f5:cb:d6:6d:03:
eb:57:e7:7a:94:73:4b:0b:a6:ed:0f:e8:67:f3:02:0f:5c:8c:
1f:da:a3:93:84:bb:07:ee:16:cf:22:b8:2c:48:7b:1a:08:7a:
26:65:9c:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 21:07:16 2025 by rpki-client