Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/Ff-gQhFDATaLQGmr1ooe-6xH_c4.mft
File: Ff-gQhFDATaLQGmr1ooe-6xH_c4.mft (raw, json)
Hash identifier: Zdpde3KWr89f7bWAdb5UQm/b6kP1Yt0BJllganVQoQ4=
Subject key identifier: B1:C5:B7:8C:21:75:6A:0E:B7:03:1F:96:37:04:A0:39:4A:27:75:D2
Authority key identifier: 15:FF:A0:42:11:43:01:36:8B:40:69:AB:D6:8A:1E:FB:AC:47:FD:CE
Certificate issuer: /CN=15ffa042114301368b4069abd68a1efbac47fdce
Certificate serial: 0198529F8AC2C8BBABFC977BB9AD7C4309CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ff-gQhFDATaLQGmr1ooe-6xH_c4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/Ff-gQhFDATaLQGmr1ooe-6xH_c4.mft
Manifest number: 1628
Signing time: Mon 28 Jul 2025 20:00:43 +0000
Manifest this update: Mon 28 Jul 2025 20:00:43 +0000
Manifest next update: Tue 29 Jul 2025 20:00:43 +0000
Files and hashes: 1: 6u0Asdv1MK3aB_6LSzkcot6bBic.roa (hash: Unsvdd0urMCZdw1KCmFCBV2OeTjQKyc3NTKlxR83W+g=)
2: AGOQH07CbOv-ptcClhHBm5EQp-4.roa (hash: LGaMLQ5/MFjNXGL657nV7BSt6luG57ujXGiYSAKsY5E=)
3: Et5vhEXgLOmM5SbkGarS_YGVpLo.roa (hash: uNGZHjxFk4Dk42uVibgGyfbV7WZ6GeCmNMtAi7XVFis=)
4: Ff-gQhFDATaLQGmr1ooe-6xH_c4.crl (hash: tCSoii+qSGrdx7P3aiy3YfFBaQ/1xtrS5XiqE4XLtg4=)
5: G_eCdr_CtHHYdvx_wsfrWGJQP2E.roa (hash: m4lFNVsxQJtYcVSh1StMkG9TI91ecQZqyflVHyNHncI=)
6: O-SsLGZDDis9x7Hdr9bjMmd2BoY.roa (hash: HishzW2LB7SBBdcbiiTEBoYKX9Z+I6RhesW10ogdrys=)
7: UezMgLKKI-WhO1czQILLBRClTv8.roa (hash: AnuM+KLFPB1elW7al0sjIDYMJlOpGTtEqCymfhnESgE=)
8: zXrOjxGX_DI-tXkFUtLuBXotuic.roa (hash: mrO+89Y/llkPbD0Oqqb4OVuncS888EEiNoMgxFZFl6I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/Ff-gQhFDATaLQGmr1ooe-6xH_c4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/Ff-gQhFDATaLQGmr1ooe-6xH_c4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ff-gQhFDATaLQGmr1ooe-6xH_c4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 20:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:52:9f:8a:c2:c8:bb:ab:fc:97:7b:b9:ad:7c:43:09:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15ffa042114301368b4069abd68a1efbac47fdce
Validity
Not Before: Jul 28 20:00:43 2025 GMT
Not After : Jul 29 20:00:43 2025 GMT
Subject: CN=b1c5b78c21756a0eb7031f963704a0394a2775d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:7f:b7:c9:fa:69:1b:4f:44:6a:8f:82:b8:d3:
cc:62:fc:6d:cb:b1:99:02:68:86:2e:36:c7:f8:e3:
10:b9:e8:2d:b0:22:56:7c:f0:5a:79:c1:5e:2d:d7:
37:04:5d:cb:41:08:3c:87:87:23:8f:6c:bc:91:2f:
26:62:36:a1:e3:fa:0c:65:5d:80:b5:61:72:2a:6a:
32:e2:3e:d7:36:06:ab:cf:7b:34:ff:b8:f0:af:be:
c3:01:21:cd:55:12:11:bc:db:a9:88:4c:96:91:83:
b5:2f:01:d2:b7:37:85:5a:56:c6:b4:01:ba:b8:ba:
75:63:14:e2:41:77:d9:c7:67:16:42:0d:bb:06:97:
56:8a:86:4f:1a:6c:03:9d:a4:21:0a:ec:84:89:8b:
ab:3e:5f:ea:9d:2c:80:48:37:92:e1:74:ae:90:49:
af:47:ff:25:b0:48:b3:f0:4a:51:05:47:e6:78:00:
01:49:f8:15:07:6e:ba:50:95:61:d2:35:a8:48:36:
91:db:a0:9f:fd:c8:58:e2:79:c4:fd:e9:28:72:01:
d6:6d:1e:d0:f7:be:3f:f7:39:6b:1c:65:46:5e:b8:
d5:a9:bc:a7:25:bd:3b:f3:ca:ca:1f:6f:19:69:12:
65:2d:f9:b1:d0:a7:82:7d:48:5e:fe:84:b5:39:a7:
d5:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:C5:B7:8C:21:75:6A:0E:B7:03:1F:96:37:04:A0:39:4A:27:75:D2
X509v3 Authority Key Identifier:
keyid:15:FF:A0:42:11:43:01:36:8B:40:69:AB:D6:8A:1E:FB:AC:47:FD:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ff-gQhFDATaLQGmr1ooe-6xH_c4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/Ff-gQhFDATaLQGmr1ooe-6xH_c4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/Ff-gQhFDATaLQGmr1ooe-6xH_c4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:ab:61:5b:2f:07:69:3f:d1:90:29:10:b4:01:27:c6:36:23:
a5:3a:fb:b4:b9:a1:4d:25:ee:d4:c3:e0:0b:e9:fc:10:16:11:
4e:b4:f1:83:d1:39:70:c1:3f:51:20:58:00:15:cc:88:f1:be:
fb:5b:5c:a5:49:af:05:4e:27:3d:46:02:1f:f4:37:a7:48:de:
eb:62:3a:9a:db:70:be:e6:e3:6a:02:f4:94:02:93:87:9a:85:
30:7e:26:15:2a:5e:80:89:2c:25:fb:3a:6f:ca:52:0f:a7:79:
87:bf:1e:80:ce:43:6a:9f:9c:c3:4e:f7:b3:d8:e9:7b:6d:b7:
69:54:5a:79:03:89:58:67:f1:36:0a:df:d9:d5:d2:19:27:e5:
09:70:09:a1:05:45:c2:4f:98:45:d9:5e:17:a8:f4:1a:c4:d3:
c0:d8:47:25:85:6b:32:66:ae:3f:50:ed:58:9e:5f:0a:1b:f4:
1b:b2:74:ab:59:20:84:88:47:87:50:52:e0:3d:af:f9:65:8d:
78:ed:bc:f5:e7:42:18:08:02:39:90:4d:e6:08:06:55:77:bb:
92:e9:ff:21:ea:44:3f:c9:56:a5:50:4d:c2:72:22:d4:50:0f:
e6:70:24:40:b3:4b:33:c5:29:bc:4a:64:b7:c1:b8:98:aa:b4:
47:29:99:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 04:36:38 2025 by rpki-client