Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/3925e9-65ea-462e-ae28-d2c29dc042e7/1/ffCJfqs-7W4k7d1nbov5N3-0SAw.mft
File: ffCJfqs-7W4k7d1nbov5N3-0SAw.mft (raw, json)
Hash identifier: jwwSX9sySs8ahPVYtpxsulKC0PLo6qeHjvomtFw6uJE=
Subject key identifier: 38:7D:26:49:93:B3:11:07:11:3D:0B:DB:8E:A3:94:A6:D6:4E:A5:8B
Authority key identifier: 7D:F0:89:7E:AB:3E:ED:6E:24:ED:DD:67:6E:8B:F9:37:7F:B4:48:0C
Certificate issuer: /CN=7df0897eab3eed6e24eddd676e8bf9377fb4480c
Certificate serial: 019A71EEE7A2F49FF3536AC0D089102D0F0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ffCJfqs-7W4k7d1nbov5N3-0SAw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/3925e9-65ea-462e-ae28-d2c29dc042e7/1/ffCJfqs-7W4k7d1nbov5N3-0SAw.mft
Manifest number: 080E
Signing time: Tue 11 Nov 2025 08:01:13 +0000
Manifest this update: Tue 11 Nov 2025 08:01:13 +0000
Manifest next update: Wed 12 Nov 2025 08:01:13 +0000
Files and hashes: 1: ffCJfqs-7W4k7d1nbov5N3-0SAw.crl (hash: MxXmyAGaD5nWQXZsAN2JntTV17/YQu9rw1ZYQqPK1kU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/3925e9-65ea-462e-ae28-d2c29dc042e7/1/ffCJfqs-7W4k7d1nbov5N3-0SAw.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/3925e9-65ea-462e-ae28-d2c29dc042e7/1/ffCJfqs-7W4k7d1nbov5N3-0SAw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ffCJfqs-7W4k7d1nbov5N3-0SAw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:e7:a2:f4:9f:f3:53:6a:c0:d0:89:10:2d:0f:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7df0897eab3eed6e24eddd676e8bf9377fb4480c
Validity
Not Before: Nov 11 08:01:13 2025 GMT
Not After : Nov 12 08:01:13 2025 GMT
Subject: CN=387d264993b31107113d0bdb8ea394a6d64ea58b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:a0:1e:75:43:1d:4d:e0:23:fe:02:e6:0d:35:
16:dc:bb:ab:6a:9a:3d:14:4a:5d:57:c4:0a:0a:da:
ed:e5:02:8d:20:9a:bb:b4:50:8d:41:e7:ac:81:0d:
19:d7:81:ee:b2:bb:13:15:f6:dc:44:38:76:21:38:
a6:56:77:b1:14:e1:c5:93:ab:17:91:5e:6d:65:09:
6c:ce:00:5c:c3:f6:21:6f:c5:6e:e4:4c:7b:63:2f:
19:2b:21:34:46:6c:30:4b:6f:47:65:1e:10:2d:34:
67:1d:41:27:fa:55:3f:94:3f:db:ad:6e:ab:f6:36:
3b:f9:1d:4f:e0:b6:ca:b1:4f:37:2d:a2:84:9e:fd:
bd:a7:15:3c:72:6e:de:bb:ad:cc:e4:f0:8f:fd:95:
53:c4:c9:6c:c8:55:2c:7f:60:f1:fd:db:d9:5c:63:
64:20:d7:03:1d:84:3b:45:16:9b:5c:7c:cc:cd:c7:
32:21:75:a3:8e:61:89:c6:b4:47:ea:0a:08:f2:c8:
d9:6d:0b:f4:78:65:74:c1:49:24:ad:fd:51:bc:4a:
97:45:fd:39:64:7a:2e:c1:31:3d:3b:d0:ba:5a:b1:
78:0d:30:bd:d5:60:96:31:eb:77:49:8c:78:26:a9:
d6:97:14:06:94:02:03:d8:f6:91:f0:ed:0d:9c:c4:
3d:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:7D:26:49:93:B3:11:07:11:3D:0B:DB:8E:A3:94:A6:D6:4E:A5:8B
X509v3 Authority Key Identifier:
keyid:7D:F0:89:7E:AB:3E:ED:6E:24:ED:DD:67:6E:8B:F9:37:7F:B4:48:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffCJfqs-7W4k7d1nbov5N3-0SAw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/3925e9-65ea-462e-ae28-d2c29dc042e7/1/ffCJfqs-7W4k7d1nbov5N3-0SAw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/3925e9-65ea-462e-ae28-d2c29dc042e7/1/ffCJfqs-7W4k7d1nbov5N3-0SAw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:69:90:55:bb:ee:d4:cc:5e:89:93:54:44:f8:27:2c:6b:46:
1c:71:54:37:bc:13:c6:17:80:6f:6f:d2:04:35:9f:e0:fb:23:
72:b5:c3:02:35:94:97:10:87:62:70:8c:bf:04:b5:c7:08:c0:
ae:e4:d0:dd:1e:38:95:0f:58:33:69:12:13:05:43:cb:0a:0d:
80:a1:30:0f:37:a7:07:2a:32:df:5d:a1:53:18:2d:91:85:15:
9c:e1:33:1a:0d:95:0b:27:01:96:16:f1:2c:1a:b4:49:71:ba:
8b:d6:e3:75:56:c0:c4:f8:e9:da:98:ab:3c:35:fa:cd:a8:80:
a0:ca:5d:f4:a9:f8:d1:6a:8a:41:7e:9e:cb:24:fc:50:06:f7:
fa:90:1e:30:a3:d6:29:82:25:75:ec:b9:0c:4e:7e:84:f6:7f:
7d:5f:2d:b1:e4:79:7f:97:c7:94:89:2f:5c:46:00:5c:9c:7c:
a0:d4:23:14:cb:02:9a:c4:0a:c7:78:86:4b:41:db:6c:e5:53:
a8:c6:0a:a4:cc:c3:86:49:1b:a8:10:51:04:df:df:5f:e0:8b:
1f:5d:4e:1e:34:56:a6:d2:2c:27:8e:fe:3f:db:bf:d8:00:01:
49:9e:0f:8e:19:5f:79:8c:20:04:af:cc:07:44:fa:07:48:9f:
37:68:bf:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 16:51:39 2025 by rpki-client