Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/7a7871-08f3-4757-a9f0-bf1c5cc36b66/1/fffP1siCamf2QqNz0TGVUwjZwco.mft
File: fffP1siCamf2QqNz0TGVUwjZwco.mft (raw, json)
Hash identifier: GysoHos986Fk9H4cKWuJf/KoWl/wZ4/zWqjN+zigiuw=
Subject key identifier: 66:52:3D:87:34:22:91:1B:43:81:25:68:FF:31:B1:31:31:32:2E:B3
Authority key identifier: 7D:F7:CF:D6:C8:82:6A:67:F6:42:A3:73:D1:31:95:53:08:D9:C1:CA
Certificate issuer: /CN=7df7cfd6c8826a67f642a373d131955308d9c1ca
Certificate serial: 0199228CDB87B6020B9FED8A7A4E42CA4B78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fffP1siCamf2QqNz0TGVUwjZwco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/7a7871-08f3-4757-a9f0-bf1c5cc36b66/1/fffP1siCamf2QqNz0TGVUwjZwco.mft
Manifest number: 1535
Signing time: Sun 07 Sep 2025 05:01:20 +0000
Manifest this update: Sun 07 Sep 2025 05:01:20 +0000
Manifest next update: Mon 08 Sep 2025 05:01:20 +0000
Files and hashes: 1: 1-QIjmT5ytjlZ7ZqLyFbtzizpu4U.roa (hash: XgYeIgk7TzTLjMF5WHOcmWJnxBjJamzS18zkuyda8BY=)
2: fffP1siCamf2QqNz0TGVUwjZwco.crl (hash: +On1fYaJrIJzNCLxJJ9skLQ9zCibw/CD5UpA79Vfk58=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/7a7871-08f3-4757-a9f0-bf1c5cc36b66/1/fffP1siCamf2QqNz0TGVUwjZwco.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/7a7871-08f3-4757-a9f0-bf1c5cc36b66/1/fffP1siCamf2QqNz0TGVUwjZwco.mft
rsync://rpki.ripe.net/repository/DEFAULT/fffP1siCamf2QqNz0TGVUwjZwco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:db:87:b6:02:0b:9f:ed:8a:7a:4e:42:ca:4b:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7df7cfd6c8826a67f642a373d131955308d9c1ca
Validity
Not Before: Sep 7 05:01:20 2025 GMT
Not After : Sep 8 05:01:20 2025 GMT
Subject: CN=66523d873422911b43812568ff31b13131322eb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:4e:29:25:7d:a9:96:58:b2:b9:8b:67:28:80:
7d:8c:f9:ec:69:a9:c7:08:28:41:6e:51:e2:de:85:
f1:52:7c:fc:95:1d:23:28:cc:04:ed:9d:b6:42:7c:
f8:64:d8:87:12:f2:e2:9a:41:55:cb:1c:11:aa:77:
15:9c:1a:fd:90:38:51:9f:9d:c8:5e:f4:70:63:e8:
35:e7:0b:9b:eb:a4:f3:ab:69:a5:88:89:48:02:84:
0b:6e:87:10:32:2e:19:8e:c2:64:18:c1:94:61:3f:
9c:68:2c:55:6d:af:dd:19:32:b8:5b:49:72:00:1f:
86:29:67:a4:4a:0a:9e:14:a6:9b:96:92:9d:62:b8:
4e:c9:d8:c8:b6:02:14:db:20:4b:34:16:e6:ae:56:
34:08:78:82:5d:b7:4b:cd:90:57:29:e0:b6:c2:ca:
ea:6c:7c:f6:c7:8d:d5:69:3f:dc:68:1f:de:89:4b:
1a:ce:0b:97:f8:71:94:cc:f3:a6:6c:80:5c:96:7b:
86:78:cb:ee:22:3e:b8:dc:09:22:8e:29:4f:40:87:
a6:3f:74:4e:46:50:f9:cf:9e:68:54:a5:b6:ad:76:
01:54:e4:f6:8c:9f:ff:ee:c7:cc:5f:07:9a:89:93:
cc:af:d5:47:c1:35:78:4a:1c:26:af:aa:c6:9f:2c:
5a:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:52:3D:87:34:22:91:1B:43:81:25:68:FF:31:B1:31:31:32:2E:B3
X509v3 Authority Key Identifier:
keyid:7D:F7:CF:D6:C8:82:6A:67:F6:42:A3:73:D1:31:95:53:08:D9:C1:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fffP1siCamf2QqNz0TGVUwjZwco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/7a7871-08f3-4757-a9f0-bf1c5cc36b66/1/fffP1siCamf2QqNz0TGVUwjZwco.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/7a7871-08f3-4757-a9f0-bf1c5cc36b66/1/fffP1siCamf2QqNz0TGVUwjZwco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:1d:fb:68:51:bc:44:59:a0:d0:86:08:93:0c:f0:30:d1:51:
d1:16:01:4d:e6:9f:f9:39:52:c5:bd:ff:ea:a1:fc:cd:d7:09:
69:68:be:d5:88:4c:93:1f:dc:f0:5c:67:1f:78:02:de:f1:e1:
04:e1:9f:d5:04:2c:6a:84:1c:bc:f1:41:dc:f6:15:2f:16:b5:
d0:01:07:b9:fb:b8:72:2a:0b:6b:78:78:b2:aa:40:97:f1:3e:
37:7e:81:e8:3e:e7:08:83:88:2b:6f:03:7d:4e:eb:97:83:b9:
71:db:90:f5:0f:e6:d6:1d:87:17:d5:cd:a8:a5:4a:3c:e5:6a:
a2:b9:c0:bc:8d:25:65:db:3c:94:a0:01:db:98:3c:f6:d4:26:
14:c2:d1:80:4e:81:45:0b:2e:cc:b6:48:c3:e1:8b:36:9b:2a:
f8:bb:02:0f:a4:bc:a9:bd:c6:f8:b0:2b:1e:b7:cd:1e:54:6b:
1d:24:ac:89:f8:49:fb:20:81:3f:fd:3d:47:13:1a:c9:37:86:
5b:42:2e:4c:6d:40:38:c9:fd:c5:1f:17:76:33:31:b8:50:a1:
86:cd:1c:59:69:9e:7a:34:63:7d:62:47:f9:d8:8a:d9:21:85:
11:96:a8:2c:76:ea:b0:2a:6b:cb:50:aa:20:85:ca:77:58:ff:
8b:24:e3:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:44:05 2025 by rpki-client