Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/e27eb8-af64-446e-88ec-d472e49f591e/1/Ff7cFwVXbZf-StICkd4ZhHPYFW8.mft
File: Ff7cFwVXbZf-StICkd4ZhHPYFW8.mft (raw, json)
Hash identifier: EDfNMCZ9lSvtGQJJ6D+7AYDnukLvjjTcFKss6UFWSl0=
Subject key identifier: 2C:4E:B3:30:3A:8E:C5:F4:86:FB:93:23:3C:13:ED:C5:4F:A1:28:70
Authority key identifier: 15:FE:DC:17:05:57:6D:97:FE:4A:D2:02:91:DE:19:84:73:D8:15:6F
Certificate issuer: /CN=15fedc1705576d97fe4ad20291de198473d8156f
Certificate serial: 0199277DADFE69499BF67C1AEF098A33C214
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ff7cFwVXbZf-StICkd4ZhHPYFW8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/e27eb8-af64-446e-88ec-d472e49f591e/1/Ff7cFwVXbZf-StICkd4ZhHPYFW8.mft
Manifest number: 1673
Signing time: Mon 08 Sep 2025 04:02:51 +0000
Manifest this update: Mon 08 Sep 2025 04:02:51 +0000
Manifest next update: Tue 09 Sep 2025 04:02:51 +0000
Files and hashes: 1: Ff7cFwVXbZf-StICkd4ZhHPYFW8.crl (hash: OpdzU873dqLxUhviEGFG2ZVC8lofa7kgX7mrGJhPqUE=)
2: Qv45l9CC_OtB7OS_57aAR1sJyvc.roa (hash: Mv6sqdxR24sbzw3gEqGiuaVF1p5QjBnxJTiW3StRP2M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/e27eb8-af64-446e-88ec-d472e49f591e/1/Ff7cFwVXbZf-StICkd4ZhHPYFW8.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/e27eb8-af64-446e-88ec-d472e49f591e/1/Ff7cFwVXbZf-StICkd4ZhHPYFW8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ff7cFwVXbZf-StICkd4ZhHPYFW8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 01:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:27:7d:ad:fe:69:49:9b:f6:7c:1a:ef:09:8a:33:c2:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15fedc1705576d97fe4ad20291de198473d8156f
Validity
Not Before: Sep 8 04:02:51 2025 GMT
Not After : Sep 9 04:02:51 2025 GMT
Subject: CN=2c4eb3303a8ec5f486fb93233c13edc54fa12870
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:0e:aa:d1:51:36:9e:bf:a2:59:da:9e:3d:fd:
f7:c6:fc:ba:c7:ae:3b:28:a4:86:49:c0:4e:21:fd:
71:c5:df:70:02:61:49:b9:20:cf:3a:5b:16:2d:62:
75:19:d7:ff:7d:d5:cf:fb:25:bf:34:05:77:21:32:
bd:0d:6f:0f:a7:f7:39:6a:cd:97:fa:c7:f0:84:e8:
b6:49:f1:ae:b6:d3:96:ba:17:5f:be:2a:ec:11:c0:
78:53:92:45:29:92:af:e5:98:26:0d:41:bc:fc:97:
27:5a:98:d2:ff:6f:5d:90:47:a4:7e:da:bd:f7:fb:
bc:6f:d9:dc:bf:af:fc:d4:e9:e3:fb:6d:03:29:11:
83:f2:27:47:1d:b5:9c:18:bb:8a:bf:49:00:4b:b4:
9b:89:bc:07:61:74:39:3c:25:c4:50:82:15:44:c4:
d1:c9:6b:00:12:d8:ef:df:a8:db:f8:75:38:9c:b0:
09:2e:f1:de:c2:af:11:95:42:28:84:77:a4:c6:3c:
26:04:7c:00:94:03:dd:cf:32:ed:e7:54:36:3d:86:
5e:4e:35:45:04:84:cf:61:6b:ea:0f:01:8d:bd:6e:
23:05:64:92:25:ca:9c:ef:1a:e1:a1:97:dc:84:fa:
2c:a2:d2:61:f9:0a:46:5e:00:01:a7:29:08:ec:5e:
ca:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:4E:B3:30:3A:8E:C5:F4:86:FB:93:23:3C:13:ED:C5:4F:A1:28:70
X509v3 Authority Key Identifier:
keyid:15:FE:DC:17:05:57:6D:97:FE:4A:D2:02:91:DE:19:84:73:D8:15:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ff7cFwVXbZf-StICkd4ZhHPYFW8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/e27eb8-af64-446e-88ec-d472e49f591e/1/Ff7cFwVXbZf-StICkd4ZhHPYFW8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/e27eb8-af64-446e-88ec-d472e49f591e/1/Ff7cFwVXbZf-StICkd4ZhHPYFW8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:02:05:58:93:5e:52:1f:a5:05:6f:6e:4c:53:d0:d3:05:a2:
fc:6d:23:d3:b0:4d:ca:64:bd:53:63:79:c6:42:cc:88:cb:d8:
49:64:ca:48:a5:bd:4d:3d:6f:82:04:25:16:99:b1:e7:70:5a:
c8:57:c4:71:ee:69:6a:af:22:f8:31:d8:55:12:ed:b5:ed:df:
37:d5:62:99:a3:11:c5:f2:8e:73:c8:56:bc:03:70:90:3a:b7:
80:be:2e:86:16:14:1c:3b:2b:c1:d6:16:7e:93:ae:ce:5e:86:
01:2a:c4:51:d4:72:fa:02:21:14:b8:c7:be:ab:00:4e:8a:11:
7f:2a:e7:00:b2:38:7a:47:4a:57:7e:60:29:46:70:76:46:19:
d1:a3:88:6a:c1:b3:a9:b8:21:89:05:5d:de:e9:ac:66:e0:14:
bd:c4:a8:70:27:56:e9:61:f5:c4:4a:a7:b7:88:fa:8c:8b:ca:
21:f4:1e:dd:5c:c6:14:1d:5b:5c:c6:03:61:7b:1e:89:93:3a:
67:3d:43:74:ff:e9:0e:d5:12:d2:ef:c9:6e:fc:61:98:e6:5e:
42:6a:66:e0:1a:53:4a:01:f1:e9:8c:26:19:0a:a1:c8:d2:c9:
ce:1e:25:95:51:33:85:0e:4f:d3:6c:b5:e7:c0:24:03:22:b2:
40:c8:c8:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZknfa3+aUmb9nwa7wmKM8IUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1ZmVkYzE3MDU1NzZkOTdmZTRhZDIwMjkxZGUxOTg0NzNk
ODE1NmYwHhcNMjUwOTA4MDQwMjUxWhcNMjUwOTA5MDQwMjUxWjAzMTEwLwYDVQQD
EygyYzRlYjMzMDNhOGVjNWY0ODZmYjkzMjMzYzEzZWRjNTRmYTEyODcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0g6q0VE2nr+iWdqePf33xvy6x647
KKSGScBOIf1xxd9wAmFJuSDPOlsWLWJ1Gdf/fdXP+yW/NAV3ITK9DW8Pp/c5as2X
+sfwhOi2SfGuttOWuhdfvirsEcB4U5JFKZKv5ZgmDUG8/JcnWpjS/29dkEekftq9
9/u8b9ncv6/81Onj+20DKRGD8idHHbWcGLuKv0kAS7SbibwHYXQ5PCXEUIIVRMTR
yWsAEtjv36jb+HU4nLAJLvHewq8RlUIohHekxjwmBHwAlAPdzzLt51Q2PYZeTjVF
BITPYWvqDwGNvW4jBWSSJcqc7xrhoZfchPosotJh+QpGXgABpykI7F7KzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCxOszA6jsX0hvuTIzwT7cVPoShwMB8GA1UdIwQY
MBaAFBX+3BcFV22X/krSApHeGYRz2BVvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmY3Y0Z3VlhiWmYtU3RJQ2tkNFpoSFBZRlc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9lMjdlYjgtYWY2NC00NDZlLTg4ZWMt
ZDQ3MmU0OWY1OTFlLzEvRmY3Y0Z3VlhiWmYtU3RJQ2tkNFpoSFBZRlc4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9lMjdlYjgtYWY2NC00NDZlLTg4ZWMtZDQ3MmU0OWY1OTFl
LzEvRmY3Y0Z3VlhiWmYtU3RJQ2tkNFpoSFBZRlc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAawIFWJNe
Uh+lBW9uTFPQ0wWi/G0j07BNymS9U2N5xkLMiMvYSWTKSKW9TT1vggQlFpmx53Ba
yFfEce5paq8i+DHYVRLtte3fN9VimaMRxfKOc8hWvANwkDq3gL4uhhYUHDsrwdYW
fpOuzl6GASrEUdRy+gIhFLjHvqsATooRfyrnALI4ekdKV35gKUZwdkYZ0aOIasGz
qbghiQVd3umsZuAUvcSocCdW6WH1xEqnt4j6jIvKIfQe3VzGFB1bXMYDYXseiZM6
Zz1DdP/pDtUS0u/JbvxhmOZeQmpm4BpTSgHx6YwmGQqhyNLJzh4llVEzhQ5P02y1
58AkAyKyQMjIUA==
-----END CERTIFICATE-----
Generated at Mon Sep 8 08:06:17 2025 by rpki-client