Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/ffkEqxQGbHqf5hpSHVSSoOUpZco.mft
File: ffkEqxQGbHqf5hpSHVSSoOUpZco.mft (raw, json)
Hash identifier: xpOCIGJt9jC1sxAjgeS7BYSJrxYUPV7Nk5rR12ee0OE=
Subject key identifier: 37:CD:AB:5F:E8:C8:D7:9F:52:17:FB:3E:F4:42:B1:4C:4E:10:FD:F8
Authority key identifier: 7D:F9:04:AB:14:06:6C:7A:9F:E6:1A:52:1D:54:92:A0:E5:29:65:CA
Certificate issuer: /CN=7df904ab14066c7a9fe61a521d5492a0e52965ca
Certificate serial: 0199349275E2545A8C93CDA3339C4A25C77C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ffkEqxQGbHqf5hpSHVSSoOUpZco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/ffkEqxQGbHqf5hpSHVSSoOUpZco.mft
Manifest number: 0733
Signing time: Wed 10 Sep 2025 17:00:37 +0000
Manifest this update: Wed 10 Sep 2025 17:00:37 +0000
Manifest next update: Thu 11 Sep 2025 17:00:37 +0000
Files and hashes: 1: chSUy_WX_Mse1L_Zh-GnPPV45Wk.roa (hash: BdzlPc3HpSD69LQhKLGFCf7tQNLnvI967xxASmmhAH4=)
2: ffkEqxQGbHqf5hpSHVSSoOUpZco.crl (hash: YWnnlTCTJxfWeIEQDmpMr4VmjPnjzM9XjjO8w8eDOdI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/ffkEqxQGbHqf5hpSHVSSoOUpZco.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/ffkEqxQGbHqf5hpSHVSSoOUpZco.mft
rsync://rpki.ripe.net/repository/DEFAULT/ffkEqxQGbHqf5hpSHVSSoOUpZco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 11:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:34:92:75:e2:54:5a:8c:93:cd:a3:33:9c:4a:25:c7:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7df904ab14066c7a9fe61a521d5492a0e52965ca
Validity
Not Before: Sep 10 17:00:37 2025 GMT
Not After : Sep 11 17:00:37 2025 GMT
Subject: CN=37cdab5fe8c8d79f5217fb3ef442b14c4e10fdf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:50:aa:b5:04:00:91:ac:f5:f8:34:87:1a:23:
a1:0a:2e:ad:61:29:ae:7a:ec:17:96:ae:97:68:57:
bc:30:e8:a0:c0:20:24:86:4a:10:be:69:11:3b:09:
ad:92:07:ca:7d:fa:44:96:0d:90:9d:a4:33:9b:e4:
e6:1d:fe:3f:f3:29:59:63:a7:da:3a:d9:35:08:a2:
3a:89:8c:42:1d:32:4e:bb:07:a4:48:21:50:94:68:
13:dc:be:78:15:99:6b:7a:80:e9:e3:49:bf:c7:d2:
5b:7f:6d:b5:ef:cb:36:60:1b:c3:be:13:98:2a:2a:
7e:ab:8e:19:bd:64:31:f7:dd:eb:eb:35:b9:0d:34:
e6:76:db:6c:80:a7:2c:b8:f6:99:e5:c3:55:45:ef:
82:58:d6:0c:6f:2d:b7:a7:e6:88:08:4b:ff:ea:f8:
d1:4f:f5:08:bf:4d:a4:c4:79:53:8d:37:5e:a4:54:
8e:1c:ab:3f:24:ad:ee:d0:2a:c8:b7:28:62:4b:2e:
3d:6f:ba:9f:6e:67:56:09:9e:9c:18:f8:f1:2b:80:
39:74:da:e8:6c:45:56:9c:0e:22:97:bd:e7:66:83:
44:e1:a7:d0:3e:3e:6e:87:bd:e4:b9:ec:38:e1:ea:
8c:43:84:54:a7:61:5c:4c:a5:01:d8:5c:6d:ef:98:
5e:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:CD:AB:5F:E8:C8:D7:9F:52:17:FB:3E:F4:42:B1:4C:4E:10:FD:F8
X509v3 Authority Key Identifier:
keyid:7D:F9:04:AB:14:06:6C:7A:9F:E6:1A:52:1D:54:92:A0:E5:29:65:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffkEqxQGbHqf5hpSHVSSoOUpZco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/ffkEqxQGbHqf5hpSHVSSoOUpZco.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/ffkEqxQGbHqf5hpSHVSSoOUpZco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d1:77:94:27:6c:82:c8:a7:ee:33:e4:99:40:0b:27:1e:51:1d:
01:fc:b0:7b:2a:82:71:aa:1c:41:09:28:82:9c:02:68:77:62:
ec:eb:12:69:1e:fc:cb:32:87:bb:f8:6d:01:c7:f7:8a:0c:13:
48:e9:67:a9:7a:05:46:12:f2:0c:ee:4c:1d:ca:d2:d5:61:2e:
ad:87:1b:b0:06:e0:af:c0:b2:c8:b1:ee:08:48:a7:4a:63:30:
d6:03:09:0f:7e:74:a3:28:5c:56:8c:4e:80:3b:2c:60:e0:fb:
f1:7d:f2:12:e2:4d:33:7c:c7:99:97:4b:5e:7d:ad:3a:33:5f:
da:72:cf:cd:7a:3f:9e:ff:73:84:ba:7d:55:45:21:8e:22:d3:
b4:b4:52:b7:ff:fd:c7:81:93:f0:5c:d0:d7:c6:c9:b4:a0:23:
2a:20:4f:e1:40:aa:10:38:16:26:92:71:d9:35:2a:04:77:70:
86:c9:62:75:98:b6:de:a4:16:7b:97:62:50:de:43:e3:74:15:
39:a3:ab:86:47:d9:70:c1:8c:cf:33:dc:f5:5c:85:d1:c6:9f:
fc:6b:93:f3:8c:8e:b6:82:ee:c8:44:a4:7f:8d:83:96:74:76:
76:7f:0a:89:9a:18:1e:e2:9d:bd:3a:a1:3e:f2:2f:fc:7e:92:
c9:be:2b:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 19:10:54 2025 by rpki-client