Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/ec4a2b-76d7-4473-9945-2f2f8b590503/1/FfH7EpA6XNS8F6u1mHPJ1tp-abU.mft
File: FfH7EpA6XNS8F6u1mHPJ1tp-abU.mft (raw, json)
Hash identifier: YacVw6WLD6LpLcpaHdXerwLjAVjl/9Pf8u0dsyrEfLw=
Subject key identifier: 57:34:1C:36:4C:4E:96:51:6C:10:31:82:DA:F9:41:DF:AE:C7:E5:6D
Authority key identifier: 15:F1:FB:12:90:3A:5C:D4:BC:17:AB:B5:98:73:C9:D6:DA:7E:69:B5
Certificate issuer: /CN=15f1fb12903a5cd4bc17abb59873c9d6da7e69b5
Certificate serial: 019A711353EEBE4559D8D7BD7129CDBF265C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfH7EpA6XNS8F6u1mHPJ1tp-abU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/ec4a2b-76d7-4473-9945-2f2f8b590503/1/FfH7EpA6XNS8F6u1mHPJ1tp-abU.mft
Manifest number: 04CB
Signing time: Tue 11 Nov 2025 04:01:23 +0000
Manifest this update: Tue 11 Nov 2025 04:01:23 +0000
Manifest next update: Wed 12 Nov 2025 04:01:23 +0000
Files and hashes: 1: AQb4NA0iIwYMaS4khoDyVt9RCG4.roa (hash: 58LXgLCBDudul5koOz+4VHQS0wDCBrVYTUIAiNkgAxo=)
2: FfH7EpA6XNS8F6u1mHPJ1tp-abU.crl (hash: zX9Vo4cx8rRvq7IUxeH5wJdM2OckodKji90vrFqDMng=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/ec4a2b-76d7-4473-9945-2f2f8b590503/1/FfH7EpA6XNS8F6u1mHPJ1tp-abU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/ec4a2b-76d7-4473-9945-2f2f8b590503/1/FfH7EpA6XNS8F6u1mHPJ1tp-abU.mft
rsync://rpki.ripe.net/repository/DEFAULT/FfH7EpA6XNS8F6u1mHPJ1tp-abU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:53:ee:be:45:59:d8:d7:bd:71:29:cd:bf:26:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f1fb12903a5cd4bc17abb59873c9d6da7e69b5
Validity
Not Before: Nov 11 04:01:23 2025 GMT
Not After : Nov 12 04:01:23 2025 GMT
Subject: CN=57341c364c4e96516c103182daf941dfaec7e56d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a3:b9:ff:65:33:78:e4:68:73:da:d4:5b:dd:
a8:6f:20:96:39:4a:bc:ae:78:29:8b:61:76:12:81:
0e:c6:69:ba:d7:a6:5a:ff:f0:f1:6d:54:55:86:9d:
28:d4:8d:8d:85:13:de:5e:9d:11:7c:be:44:a1:3e:
a0:1f:ec:fd:c5:05:4c:35:cd:92:19:50:33:d5:99:
d3:15:3e:32:da:da:ff:d7:18:0b:3b:53:cd:0c:2f:
44:35:ec:6a:fa:b8:be:dd:9b:d3:f3:0e:ff:8a:00:
5e:5a:6a:00:18:17:10:68:00:3e:a1:c4:4f:26:c9:
f5:74:9c:2e:74:8f:1e:be:9d:eb:58:02:37:66:24:
6a:c9:72:e0:43:92:72:d5:61:2e:97:bc:3f:64:ec:
d0:95:9f:47:02:76:59:cc:9d:d4:40:6d:13:9b:b6:
de:65:fd:05:62:c5:a5:02:23:8e:23:95:05:1d:9e:
ea:f5:57:76:05:82:64:7f:c6:a9:39:3f:24:ca:b3:
3a:7a:e8:c6:c6:e8:ec:56:82:50:9f:1d:47:62:a2:
28:b5:15:d8:34:cb:36:d6:fa:08:b9:fa:f8:88:1a:
94:8a:84:70:99:58:fc:e3:6e:b3:72:8c:75:d2:21:
82:76:dd:83:1f:07:96:73:47:43:7d:5d:44:9c:06:
c5:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:34:1C:36:4C:4E:96:51:6C:10:31:82:DA:F9:41:DF:AE:C7:E5:6D
X509v3 Authority Key Identifier:
keyid:15:F1:FB:12:90:3A:5C:D4:BC:17:AB:B5:98:73:C9:D6:DA:7E:69:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfH7EpA6XNS8F6u1mHPJ1tp-abU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ec4a2b-76d7-4473-9945-2f2f8b590503/1/FfH7EpA6XNS8F6u1mHPJ1tp-abU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ec4a2b-76d7-4473-9945-2f2f8b590503/1/FfH7EpA6XNS8F6u1mHPJ1tp-abU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:d6:09:76:5e:a3:5b:1d:94:f6:92:e7:76:c4:5a:2e:0c:53:
7c:77:02:47:22:cc:72:c1:82:67:7f:ac:91:b0:0e:fc:18:ac:
3c:e3:83:f9:41:c7:5a:37:8c:66:9d:87:61:95:ac:ac:13:4c:
7d:7a:b8:71:fa:db:4c:06:d8:d8:f4:62:ee:69:35:af:66:53:
58:0d:bd:92:19:a5:f5:2d:a6:0a:ee:81:a1:72:45:4c:8e:b3:
34:b7:cd:d0:e3:5a:8b:c8:fc:9d:78:8c:61:b3:3f:73:d9:15:
7d:19:38:e6:a5:93:a0:ef:96:ab:70:16:2c:31:c8:ba:3e:0d:
96:09:c6:15:5b:4a:45:ca:b6:1c:0b:6f:ff:fe:9b:c4:05:ca:
53:37:3b:79:73:09:ec:64:c4:dc:da:bb:b0:13:b3:b2:1b:ce:
c5:18:6f:60:71:0f:95:bd:cf:57:99:68:63:28:2a:6c:15:eb:
52:7c:35:86:33:f4:40:08:ec:ff:99:65:73:4d:06:d0:e5:09:
6f:61:7b:da:8d:19:17:6b:0e:29:01:f3:24:df:ef:78:fa:b8:
d5:4a:96:67:89:ea:c2:10:f0:35:20:ec:c0:c7:df:0a:2a:83:
4b:36:32:74:ff:8e:95:cc:67:86:64:6f:9e:41:e5:91:d3:51:
fe:3a:77:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:15:58 2025 by rpki-client