Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/Ff-gQhFDATaLQGmr1ooe-6xH_c4.mft
File: Ff-gQhFDATaLQGmr1ooe-6xH_c4.mft (raw, json)
Hash identifier: TiIe9WJ1Fv1/zBTbUBIE6jZwQ9VkDy/hf3Mom49UhOQ=
Subject key identifier: 2D:AA:41:DC:0B:93:C9:04:03:71:56:D8:5F:D8:08:88:02:CA:87:C1
Authority key identifier: 15:FF:A0:42:11:43:01:36:8B:40:69:AB:D6:8A:1E:FB:AC:47:FD:CE
Certificate issuer: /CN=15ffa042114301368b4069abd68a1efbac47fdce
Certificate serial: 019A104C9A51E18E73232D08D684E0F28C04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ff-gQhFDATaLQGmr1ooe-6xH_c4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/Ff-gQhFDATaLQGmr1ooe-6xH_c4.mft
Manifest number: 1711
Signing time: Thu 23 Oct 2025 09:00:46 +0000
Manifest this update: Thu 23 Oct 2025 09:00:46 +0000
Manifest next update: Fri 24 Oct 2025 09:00:46 +0000
Files and hashes: 1: 6u0Asdv1MK3aB_6LSzkcot6bBic.roa (hash: Unsvdd0urMCZdw1KCmFCBV2OeTjQKyc3NTKlxR83W+g=)
2: AGOQH07CbOv-ptcClhHBm5EQp-4.roa (hash: LGaMLQ5/MFjNXGL657nV7BSt6luG57ujXGiYSAKsY5E=)
3: Ff-gQhFDATaLQGmr1ooe-6xH_c4.crl (hash: lidlU2Rc3PeL7PrvDpos7xPNRLessiW/cuJSJpNnc/8=)
4: G_eCdr_CtHHYdvx_wsfrWGJQP2E.roa (hash: m4lFNVsxQJtYcVSh1StMkG9TI91ecQZqyflVHyNHncI=)
5: O-SsLGZDDis9x7Hdr9bjMmd2BoY.roa (hash: HishzW2LB7SBBdcbiiTEBoYKX9Z+I6RhesW10ogdrys=)
6: UezMgLKKI-WhO1czQILLBRClTv8.roa (hash: AnuM+KLFPB1elW7al0sjIDYMJlOpGTtEqCymfhnESgE=)
7: pSyaNNQfHIxFiSnrATHPuSm-jfo.roa (hash: OeYszJRRDpsrfoggTZzuEZA5/POYAPXra4Ky725R5xQ=)
8: v2G3M562D4aa-fcy5N8BIvKP6Qw.roa (hash: yF4Vq9anZc2BqQhoqalVt7u7GMXvQAYlbam4m09u8XY=)
9: zXrOjxGX_DI-tXkFUtLuBXotuic.roa (hash: mrO+89Y/llkPbD0Oqqb4OVuncS888EEiNoMgxFZFl6I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/Ff-gQhFDATaLQGmr1ooe-6xH_c4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/Ff-gQhFDATaLQGmr1ooe-6xH_c4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ff-gQhFDATaLQGmr1ooe-6xH_c4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Oct 2025 09:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:10:4c:9a:51:e1:8e:73:23:2d:08:d6:84:e0:f2:8c:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15ffa042114301368b4069abd68a1efbac47fdce
Validity
Not Before: Oct 23 09:00:46 2025 GMT
Not After : Oct 24 09:00:46 2025 GMT
Subject: CN=2daa41dc0b93c904037156d85fd8088802ca87c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:8e:13:78:99:99:62:18:08:80:81:7e:e7:d5:
4d:e3:63:65:1b:9e:6c:4c:d9:d8:65:bf:ff:c6:a5:
9b:4c:fc:05:b7:1c:ae:cc:ee:9b:eb:d8:de:aa:17:
a0:fd:59:df:14:4d:0d:af:08:96:25:76:fb:06:7a:
60:fa:f7:60:05:8d:cc:30:1f:81:75:2c:8d:6f:c3:
02:2d:d7:5f:7a:fd:ac:ab:d4:cf:fd:52:05:34:35:
58:a8:61:62:8c:68:aa:e4:42:a1:96:8e:6d:8e:1f:
3c:de:98:ea:ea:04:d3:29:85:9b:d1:ea:51:26:e1:
9e:2e:86:42:98:da:57:89:bb:0f:7e:e6:8d:7d:e3:
1a:a3:16:c9:5a:c1:bd:5b:01:a5:e6:11:1b:20:5e:
99:62:5e:d8:01:16:00:82:0a:23:23:5e:4c:e4:c2:
33:02:5d:2a:f4:ba:b3:b0:3e:cb:34:2f:a9:d7:d1:
72:85:16:36:33:67:5e:2c:60:84:79:4b:1c:f2:da:
8e:55:fe:92:5c:8b:60:9b:c8:10:fd:84:5d:ab:5d:
36:b0:a9:77:9f:e9:83:01:70:84:e6:f3:79:8b:09:
b4:6a:8c:e0:e7:6f:dd:a4:23:e4:03:a5:e2:c3:f8:
33:72:3c:eb:52:59:6d:fa:c1:e0:8f:da:67:8c:12:
da:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:AA:41:DC:0B:93:C9:04:03:71:56:D8:5F:D8:08:88:02:CA:87:C1
X509v3 Authority Key Identifier:
keyid:15:FF:A0:42:11:43:01:36:8B:40:69:AB:D6:8A:1E:FB:AC:47:FD:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ff-gQhFDATaLQGmr1ooe-6xH_c4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/Ff-gQhFDATaLQGmr1ooe-6xH_c4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/Ff-gQhFDATaLQGmr1ooe-6xH_c4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:e0:67:3a:ee:b6:be:b5:66:a8:04:91:65:0b:06:15:7d:ea:
a9:1c:22:d7:89:a4:3b:79:5d:66:82:a6:2a:34:87:e6:06:76:
2c:81:da:1f:30:de:9a:5e:d1:dd:e5:21:66:73:53:ac:77:05:
8d:01:bf:2d:d2:da:63:95:08:b4:ad:91:b5:59:12:2b:a2:a6:
67:80:04:7d:10:94:f9:d0:3c:80:ef:04:96:da:9e:da:3c:1e:
24:8c:58:d8:11:51:8d:3f:25:a3:25:ac:e9:5a:8e:2b:22:ab:
f2:66:b3:09:70:01:d8:53:53:46:51:84:c8:e2:c9:21:d6:0b:
c9:35:12:b9:2f:d3:ed:bc:67:52:1c:b2:1d:e3:08:b7:1a:3b:
13:fc:3c:87:f2:4b:6e:25:4a:3e:a4:c5:63:09:d8:53:5b:d1:
5c:12:ab:15:46:9d:a4:bd:9d:c5:08:e5:4c:89:a6:d3:40:76:
1c:49:be:a1:a2:fa:f3:8a:ac:2e:00:84:fa:4d:07:f1:e3:ba:
13:cd:d2:8b:b4:4d:f8:b8:75:f0:f6:3f:50:fb:19:fd:88:45:
48:1f:70:2c:0d:ea:fd:6a:2a:9c:58:22:af:f4:04:30:93:53:
03:2a:09:b2:75:5b:d2:7b:a0:a1:74:da:40:e1:6e:d8:4d:65:
80:9a:88:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 23 16:07:05 2025 by rpki-client