Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/a477e9-5ad0-443e-a742-8190dd7c21c4/1/ffyQHUowe9oPOwv2XTEEaCINxeE.mft
File: ffyQHUowe9oPOwv2XTEEaCINxeE.mft (raw, json)
Hash identifier: d67Qyo6aFCs/r5Xa95f865y34mdWuOjMuPnsYD/6mgQ=
Subject key identifier: 1E:86:A4:8E:1A:48:6E:B1:F5:DA:F0:18:31:42:06:E8:B7:8E:8A:C3
Authority key identifier: 7D:FC:90:1D:4A:30:7B:DA:0F:3B:0B:F6:5D:31:04:68:22:0D:C5:E1
Certificate issuer: /CN=7dfc901d4a307bda0f3b0bf65d310468220dc5e1
Certificate serial: 019922FA8C4EA2C2ECF89FD270D2099EA362
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ffyQHUowe9oPOwv2XTEEaCINxeE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/a477e9-5ad0-443e-a742-8190dd7c21c4/1/ffyQHUowe9oPOwv2XTEEaCINxeE.mft
Manifest number: C7
Signing time: Sun 07 Sep 2025 07:01:09 +0000
Manifest this update: Sun 07 Sep 2025 07:01:09 +0000
Manifest next update: Mon 08 Sep 2025 07:01:09 +0000
Files and hashes: 1: ffyQHUowe9oPOwv2XTEEaCINxeE.crl (hash: QWA0WNyMyn612cs8DQ4Zl1o3ydfoiHUZh/rWNr0bc0w=)
2: jQYNkPm-7PL8fW0UL9FVZuPtO60.roa (hash: KBWJmS4cybTN+ONWvg4jGPD1GVeVDhS/4yiWvoMcO6c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/a477e9-5ad0-443e-a742-8190dd7c21c4/1/ffyQHUowe9oPOwv2XTEEaCINxeE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/a477e9-5ad0-443e-a742-8190dd7c21c4/1/ffyQHUowe9oPOwv2XTEEaCINxeE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ffyQHUowe9oPOwv2XTEEaCINxeE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:8c:4e:a2:c2:ec:f8:9f:d2:70:d2:09:9e:a3:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7dfc901d4a307bda0f3b0bf65d310468220dc5e1
Validity
Not Before: Sep 7 07:01:09 2025 GMT
Not After : Sep 8 07:01:09 2025 GMT
Subject: CN=1e86a48e1a486eb1f5daf018314206e8b78e8ac3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:0e:fb:d0:ca:9e:5e:b7:1d:80:17:ec:19:4f:
5e:16:ca:99:50:6d:f2:89:8a:05:8d:86:bf:d2:f2:
68:5c:0a:c4:2e:47:f3:d9:42:1f:e3:c2:33:07:2a:
22:9f:59:7a:ed:b5:48:16:60:18:cd:0a:c0:e2:03:
9a:42:fa:24:fe:4d:96:70:26:13:a1:3e:4e:40:2b:
9d:7e:6d:6b:9f:02:60:09:4b:e1:ff:1b:ed:ed:d6:
42:45:74:6b:1f:82:2a:79:91:e9:b8:19:44:a0:2d:
e1:c7:5b:c7:2c:79:e5:7f:73:a0:b4:32:28:0f:f7:
3e:29:31:65:86:13:49:6b:03:c6:c4:43:4e:4a:51:
bd:bf:6a:b6:b1:fc:ff:5d:06:54:df:68:2b:ea:75:
3d:91:22:f9:ed:0f:31:2d:57:4b:04:f4:a0:3c:8c:
b5:32:0b:c3:f4:9e:65:67:34:50:85:ab:ec:c3:43:
79:4a:44:c8:1a:2b:2e:da:09:27:52:99:3b:3e:b9:
1d:53:ab:c6:35:2d:a4:86:b0:cf:dc:57:41:43:13:
42:dd:20:c4:78:12:b1:23:44:d3:39:bc:52:60:de:
8d:86:96:f9:49:05:e6:d6:61:c3:33:62:0a:b1:23:
61:32:ba:ba:42:ed:6a:17:f5:11:90:0b:68:4d:12:
77:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:86:A4:8E:1A:48:6E:B1:F5:DA:F0:18:31:42:06:E8:B7:8E:8A:C3
X509v3 Authority Key Identifier:
keyid:7D:FC:90:1D:4A:30:7B:DA:0F:3B:0B:F6:5D:31:04:68:22:0D:C5:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffyQHUowe9oPOwv2XTEEaCINxeE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/a477e9-5ad0-443e-a742-8190dd7c21c4/1/ffyQHUowe9oPOwv2XTEEaCINxeE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/a477e9-5ad0-443e-a742-8190dd7c21c4/1/ffyQHUowe9oPOwv2XTEEaCINxeE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:12:9c:f5:a5:1a:1b:7a:60:42:fd:37:4a:55:bd:53:d3:96:
c1:0c:eb:24:ca:f3:73:fe:d6:dd:ba:38:20:47:09:7d:10:9a:
46:a2:be:b5:e7:94:8a:2a:cc:b7:b9:6f:ec:c7:d0:13:99:cd:
0b:7c:4e:57:cd:0e:0f:9c:b9:52:9b:6e:b4:1a:1e:7e:27:27:
17:df:6b:36:80:47:84:ce:cb:76:7e:78:c5:1c:33:01:01:c7:
e4:67:6d:8d:d2:93:81:f4:d6:30:03:f7:0b:b3:31:20:e4:18:
b1:99:86:ed:c6:05:77:d2:0e:78:98:14:1f:64:3f:3e:ed:16:
08:43:fe:57:62:1a:1a:4d:46:26:3d:c4:e0:aa:f2:62:cc:b8:
bd:8d:20:eb:20:6a:ee:b8:d1:14:7a:4c:30:ae:80:0e:8a:75:
a0:5e:bb:f0:63:ef:ff:16:8c:03:76:78:e6:64:33:7c:5b:e8:
86:ed:4e:88:4f:bf:d9:8e:7e:2d:fe:4c:43:f5:94:18:3c:7f:
73:45:7f:33:0f:c8:0a:b4:5d:34:a6:83:53:3e:b9:ed:ea:07:
8e:8b:3c:8d:85:95:5e:3a:5a:13:4a:9d:b5:9a:a6:2c:b9:e9:
c8:a7:29:45:31:92:26:0a:c8:b8:db:ae:eb:30:b6:c6:7a:5e:
91:fb:54:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:36:21 2025 by rpki-client