Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/ec4a2b-76d7-4473-9945-2f2f8b590503/1/FfH7EpA6XNS8F6u1mHPJ1tp-abU.mft
File: FfH7EpA6XNS8F6u1mHPJ1tp-abU.mft (raw, json)
Hash identifier: 7a88tFqVVjzi6XAZj5u+kPEtOHn8gynJS8BZ342VCbs=
Subject key identifier: 2D:A6:9C:03:B6:72:EC:9C:B9:9C:2B:AD:E2:2D:41:10:1A:10:3B:65
Authority key identifier: 15:F1:FB:12:90:3A:5C:D4:BC:17:AB:B5:98:73:C9:D6:DA:7E:69:B5
Certificate issuer: /CN=15f1fb12903a5cd4bc17abb59873c9d6da7e69b5
Certificate serial: 019922FA888F6B0819BF6D8EFAB694A6D1D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfH7EpA6XNS8F6u1mHPJ1tp-abU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/ec4a2b-76d7-4473-9945-2f2f8b590503/1/FfH7EpA6XNS8F6u1mHPJ1tp-abU.mft
Manifest number: 041E
Signing time: Sun 07 Sep 2025 07:01:07 +0000
Manifest this update: Sun 07 Sep 2025 07:01:07 +0000
Manifest next update: Mon 08 Sep 2025 07:01:07 +0000
Files and hashes: 1: AQb4NA0iIwYMaS4khoDyVt9RCG4.roa (hash: 58LXgLCBDudul5koOz+4VHQS0wDCBrVYTUIAiNkgAxo=)
2: FfH7EpA6XNS8F6u1mHPJ1tp-abU.crl (hash: Z3wz7truWvDjsaFd8X2GL3pcyjiPe2MTNdmdcyI6EGs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/ec4a2b-76d7-4473-9945-2f2f8b590503/1/FfH7EpA6XNS8F6u1mHPJ1tp-abU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/ec4a2b-76d7-4473-9945-2f2f8b590503/1/FfH7EpA6XNS8F6u1mHPJ1tp-abU.mft
rsync://rpki.ripe.net/repository/DEFAULT/FfH7EpA6XNS8F6u1mHPJ1tp-abU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:88:8f:6b:08:19:bf:6d:8e:fa:b6:94:a6:d1:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f1fb12903a5cd4bc17abb59873c9d6da7e69b5
Validity
Not Before: Sep 7 07:01:07 2025 GMT
Not After : Sep 8 07:01:07 2025 GMT
Subject: CN=2da69c03b672ec9cb99c2bade22d41101a103b65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:17:66:59:d9:fa:56:3b:74:23:f4:ec:c3:12:
34:de:75:8e:ec:66:da:e8:8e:55:e8:98:9c:f8:52:
e2:fe:1d:56:93:b8:32:96:e9:ba:e8:24:19:64:77:
37:a0:a9:b5:fc:5c:05:23:c1:46:f5:81:18:44:85:
39:38:35:8a:10:28:7f:22:41:9f:fb:92:32:47:97:
35:3a:17:13:76:64:2e:a8:23:9e:e8:67:79:22:a8:
de:9e:66:29:f9:57:24:2f:78:21:51:ab:b0:9f:eb:
a8:f8:ac:2c:67:ff:f4:57:9a:7c:2b:58:80:90:4a:
53:0a:cb:57:89:78:f0:0e:63:0b:01:0d:f9:ec:e3:
7d:c0:b3:6e:32:9f:93:ae:11:ee:84:bd:fc:67:4b:
fc:5f:23:dc:f8:71:b0:5f:6d:ab:1f:29:16:1a:f9:
10:01:bc:49:9d:9a:5a:dd:ac:87:a0:3a:90:03:81:
10:fa:b3:0f:50:17:6f:9f:01:96:f2:5a:91:b2:ee:
5e:ac:24:49:9b:b2:4c:4e:ec:a1:c8:78:ed:f4:34:
6b:8c:3f:3e:7f:7e:2c:f8:57:5b:a9:35:f0:88:71:
0d:a6:a2:99:79:33:e8:17:cb:a7:f7:34:c7:80:84:
31:6d:a3:b4:31:8f:92:07:97:d6:bb:f5:10:95:62:
be:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:A6:9C:03:B6:72:EC:9C:B9:9C:2B:AD:E2:2D:41:10:1A:10:3B:65
X509v3 Authority Key Identifier:
keyid:15:F1:FB:12:90:3A:5C:D4:BC:17:AB:B5:98:73:C9:D6:DA:7E:69:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfH7EpA6XNS8F6u1mHPJ1tp-abU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ec4a2b-76d7-4473-9945-2f2f8b590503/1/FfH7EpA6XNS8F6u1mHPJ1tp-abU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ec4a2b-76d7-4473-9945-2f2f8b590503/1/FfH7EpA6XNS8F6u1mHPJ1tp-abU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:3c:f9:09:be:18:f4:e8:dd:2e:1e:9a:f1:df:7c:44:26:3a:
12:19:27:ef:a6:18:e0:57:63:9b:ce:4d:b8:ec:47:99:6a:e6:
74:49:19:3f:0c:a6:e5:a3:ce:3a:a6:8a:b1:6f:56:0c:bb:f5:
25:e3:39:47:d2:64:3d:74:a0:a4:1d:60:13:91:ec:6c:7f:64:
3e:b5:6b:58:b6:d2:51:23:23:1f:1e:56:e3:d1:83:5d:b9:29:
61:e5:c1:11:5b:f0:3c:3e:96:9c:a9:94:d2:fa:9f:a6:ac:81:
53:70:ea:b7:eb:e2:14:60:5b:4a:af:ab:c3:66:2e:3a:ef:58:
2c:68:39:8e:08:7e:74:fc:11:e2:d3:b8:59:08:72:59:f3:05:
ae:51:9c:ec:1b:6e:4f:40:86:03:af:d5:de:d3:8e:04:a1:8f:
50:6a:1a:2d:69:dc:e0:04:b4:db:a3:04:d0:b9:7c:87:63:6b:
0a:cf:b0:e0:dd:b0:54:e8:ca:c7:f8:1a:5f:df:4d:b5:d6:e8:
c7:29:bc:9e:ed:72:c0:67:e0:35:df:a2:94:2f:41:ad:39:b0:
e1:a6:d7:3a:af:dd:44:08:17:a8:53:ce:27:5d:0d:ae:7d:a2:
fb:60:d9:c3:17:a1:c5:62:dc:4e:ec:89:1d:d9:01:3b:a0:b0:
12:e2:07:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:21:35 2025 by rpki-client