Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/ffkEqxQGbHqf5hpSHVSSoOUpZco.mft
File: ffkEqxQGbHqf5hpSHVSSoOUpZco.mft (raw, json)
Hash identifier: nXNsy8NEZXt5/7ox996+xwkvUwxHXY7BrARj0ifaKls=
Subject key identifier: DD:B3:7E:95:DC:0A:8C:F0:16:C4:1B:67:89:6E:3B:21:F4:AD:0C:A2
Authority key identifier: 7D:F9:04:AB:14:06:6C:7A:9F:E6:1A:52:1D:54:92:A0:E5:29:65:CA
Certificate issuer: /CN=7df904ab14066c7a9fe61a521d5492a0e52965ca
Certificate serial: 019A2DB1AFCEC1CDFD314C316779D949E063
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ffkEqxQGbHqf5hpSHVSSoOUpZco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/ffkEqxQGbHqf5hpSHVSSoOUpZco.mft
Manifest number: 07B4
Signing time: Wed 29 Oct 2025 02:00:10 +0000
Manifest this update: Wed 29 Oct 2025 02:00:10 +0000
Manifest next update: Thu 30 Oct 2025 02:00:10 +0000
Files and hashes: 1: chSUy_WX_Mse1L_Zh-GnPPV45Wk.roa (hash: BdzlPc3HpSD69LQhKLGFCf7tQNLnvI967xxASmmhAH4=)
2: ffkEqxQGbHqf5hpSHVSSoOUpZco.crl (hash: qzDfsSx+aWC8bglObyTPCsIvXS2Vrx1vWjW6UhA950s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/ffkEqxQGbHqf5hpSHVSSoOUpZco.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/ffkEqxQGbHqf5hpSHVSSoOUpZco.mft
rsync://rpki.ripe.net/repository/DEFAULT/ffkEqxQGbHqf5hpSHVSSoOUpZco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Oct 2025 02:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2d:b1:af:ce:c1:cd:fd:31:4c:31:67:79:d9:49:e0:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7df904ab14066c7a9fe61a521d5492a0e52965ca
Validity
Not Before: Oct 29 02:00:10 2025 GMT
Not After : Oct 30 02:00:10 2025 GMT
Subject: CN=ddb37e95dc0a8cf016c41b67896e3b21f4ad0ca2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:56:3e:4f:5d:4a:57:98:14:56:dd:3b:4f:d4:
d0:12:a0:d9:6d:6a:b2:4d:f5:b3:09:4d:f8:1d:e4:
04:0b:2d:98:27:c6:48:16:a9:a9:57:ba:de:15:a4:
28:0e:f9:7c:0c:4f:9f:df:5d:0c:63:fd:dc:18:5b:
80:03:c0:4f:22:ef:e7:ac:8b:30:dd:47:d8:a7:bc:
b9:2a:0d:23:eb:b8:cc:4c:16:e3:6b:31:90:40:8b:
6d:df:39:c4:2c:c9:9a:d6:cd:83:2a:9e:64:51:83:
fc:a2:93:ed:04:62:46:5d:d2:ab:3f:4b:f7:98:4e:
f5:42:c0:dd:fb:e9:9a:18:9f:f8:2e:08:99:52:5a:
e1:67:95:ce:5e:75:0c:b6:b3:9a:4d:62:4b:c1:76:
12:77:6a:87:5e:28:5c:bd:92:c1:49:b2:25:ec:ad:
e3:d2:08:5a:48:33:ed:7d:9a:52:8e:36:6f:a3:e8:
19:1f:ed:0a:44:37:72:d5:d1:84:47:19:c8:4f:49:
b1:43:a3:7f:3e:e2:a4:e3:0b:f6:26:fe:34:97:95:
bb:bd:78:a1:51:39:48:81:2b:c8:62:f8:8f:de:cd:
06:6b:e0:60:44:f8:f2:9f:96:7a:ae:2f:75:d8:1b:
1a:e1:5f:e5:bc:00:15:43:fa:a7:3b:23:ff:7a:6e:
3b:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:B3:7E:95:DC:0A:8C:F0:16:C4:1B:67:89:6E:3B:21:F4:AD:0C:A2
X509v3 Authority Key Identifier:
keyid:7D:F9:04:AB:14:06:6C:7A:9F:E6:1A:52:1D:54:92:A0:E5:29:65:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffkEqxQGbHqf5hpSHVSSoOUpZco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/ffkEqxQGbHqf5hpSHVSSoOUpZco.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/ffkEqxQGbHqf5hpSHVSSoOUpZco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:8a:5d:6c:df:ee:7d:ab:ce:7e:c7:4c:6f:ea:fa:3a:56:d1:
a5:22:d1:91:0c:97:ea:af:fb:e1:16:7f:0b:de:45:fe:5e:3b:
ce:70:61:03:0a:b0:d5:4a:a9:8f:25:21:20:60:86:f1:b2:51:
18:63:ed:0d:fb:74:0d:1e:ab:0a:b4:62:d0:f8:b4:58:3d:d0:
25:36:a6:8d:96:b9:06:1e:1a:99:bc:0a:fe:ed:35:d1:e9:db:
6c:02:96:8b:27:39:2b:96:b3:6c:f3:fd:18:d1:d6:5b:f0:cc:
01:3a:dd:89:58:64:89:6f:4e:5d:38:cc:52:0b:ba:ae:b5:3a:
16:b5:07:a9:0f:cd:25:38:ba:63:cb:03:8c:c7:f8:c9:bd:c2:
0e:f0:c4:c4:09:d1:e1:b3:9c:01:fe:8d:28:58:7e:b4:5a:de:
cf:78:98:6f:c3:b8:19:55:2b:8b:7a:2a:0e:c3:c4:3d:a0:5b:
64:8b:33:72:cf:ee:ca:52:39:c0:0d:35:bc:61:a9:8e:be:0c:
35:31:3e:4f:19:ae:00:8a:3a:e2:36:8c:16:b0:02:54:ef:56:
6d:13:c8:0a:47:3b:e2:3d:34:ec:6a:38:32:c9:8b:58:60:98:
3d:d7:bf:80:e1:5f:16:e1:9e:11:76:18:ce:43:aa:9b:d5:00:
67:e2:61:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 09:49:02 2025 by rpki-client