Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/a477e9-5ad0-443e-a742-8190dd7c21c4/1/ffyQHUowe9oPOwv2XTEEaCINxeE.mft
File: ffyQHUowe9oPOwv2XTEEaCINxeE.mft (raw, json)
Hash identifier: BKu6MCkJPRP5OP3JBwzCn2Oix/MYLxVJfZx41PH10zE=
Subject key identifier: 80:48:7F:B6:51:3F:BB:55:78:A0:0F:BE:C1:53:A8:80:F4:BA:41:3B
Authority key identifier: 7D:FC:90:1D:4A:30:7B:DA:0F:3B:0B:F6:5D:31:04:68:22:0D:C5:E1
Certificate issuer: /CN=7dfc901d4a307bda0f3b0bf65d310468220dc5e1
Certificate serial: 019A71134D08E18CD61645AC7D3C8CD88438
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ffyQHUowe9oPOwv2XTEEaCINxeE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/a477e9-5ad0-443e-a742-8190dd7c21c4/1/ffyQHUowe9oPOwv2XTEEaCINxeE.mft
Manifest number: 0174
Signing time: Tue 11 Nov 2025 04:01:21 +0000
Manifest this update: Tue 11 Nov 2025 04:01:21 +0000
Manifest next update: Wed 12 Nov 2025 04:01:21 +0000
Files and hashes: 1: ffyQHUowe9oPOwv2XTEEaCINxeE.crl (hash: M0nWGCVU4I3hLbTdsQ9IYFTcoXOkxLMcBREu9SpWOiE=)
2: jQYNkPm-7PL8fW0UL9FVZuPtO60.roa (hash: KBWJmS4cybTN+ONWvg4jGPD1GVeVDhS/4yiWvoMcO6c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/a477e9-5ad0-443e-a742-8190dd7c21c4/1/ffyQHUowe9oPOwv2XTEEaCINxeE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/a477e9-5ad0-443e-a742-8190dd7c21c4/1/ffyQHUowe9oPOwv2XTEEaCINxeE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ffyQHUowe9oPOwv2XTEEaCINxeE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:4d:08:e1:8c:d6:16:45:ac:7d:3c:8c:d8:84:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7dfc901d4a307bda0f3b0bf65d310468220dc5e1
Validity
Not Before: Nov 11 04:01:21 2025 GMT
Not After : Nov 12 04:01:21 2025 GMT
Subject: CN=80487fb6513fbb5578a00fbec153a880f4ba413b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c9:fc:93:f8:01:f4:fd:af:09:a3:37:1c:45:
2d:00:d8:81:d5:f8:98:d2:c4:2e:a4:7c:e1:c9:de:
09:53:27:12:19:26:66:c1:ce:77:b4:74:b9:c3:f2:
d3:82:ee:2d:b0:33:54:bc:24:11:7a:78:82:ff:36:
18:47:86:c6:e4:2e:00:da:f4:9a:cc:ba:4f:bb:c6:
47:47:7f:65:c9:83:cb:94:e9:7f:0e:35:2f:4e:0a:
f7:d4:cb:1b:e3:c9:70:cf:3d:f3:71:e8:c1:da:3a:
05:e9:3c:c0:cf:24:2f:a7:b4:a9:60:12:bc:92:db:
ae:d7:7e:e9:12:53:ee:97:70:5d:79:48:c7:6a:62:
52:c2:32:c6:30:98:69:46:9e:05:f8:a8:44:0b:30:
bb:9b:3a:e0:e9:d8:de:f0:8c:48:b1:eb:7a:08:22:
58:f9:d7:d7:8d:20:fa:0b:43:10:2d:7f:04:be:02:
b7:d9:99:82:fa:dd:bf:8a:72:be:df:c6:da:80:9e:
d8:4c:f1:a5:a4:b0:25:dd:ca:1a:bf:43:8e:43:7d:
5e:c7:ff:c8:2c:f3:de:c1:f3:f7:a7:22:de:5e:bf:
52:6d:bb:a0:cf:05:a9:89:d4:b3:f3:6b:94:00:f5:
01:83:a4:23:60:ef:12:88:cf:83:7a:cc:d2:e9:ab:
ca:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:48:7F:B6:51:3F:BB:55:78:A0:0F:BE:C1:53:A8:80:F4:BA:41:3B
X509v3 Authority Key Identifier:
keyid:7D:FC:90:1D:4A:30:7B:DA:0F:3B:0B:F6:5D:31:04:68:22:0D:C5:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffyQHUowe9oPOwv2XTEEaCINxeE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/a477e9-5ad0-443e-a742-8190dd7c21c4/1/ffyQHUowe9oPOwv2XTEEaCINxeE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/a477e9-5ad0-443e-a742-8190dd7c21c4/1/ffyQHUowe9oPOwv2XTEEaCINxeE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:0f:87:ba:de:71:a2:f6:cd:e4:66:77:06:5b:8c:b5:b5:93:
96:bc:d0:be:2f:29:eb:2e:82:6f:70:2a:e6:e4:6a:ef:08:cb:
c2:8e:17:20:18:2b:e8:e9:d9:6a:5e:f5:8d:6c:6c:11:f4:c3:
c6:38:d2:cf:20:88:aa:86:6d:74:b3:a3:6a:9e:47:46:c9:97:
76:67:60:37:89:c6:ea:d2:42:41:9a:48:ff:cf:9c:e9:17:5c:
3f:d8:a6:79:62:37:a2:bd:f3:d0:ae:76:f3:e8:dc:0b:45:de:
88:76:b0:1f:5d:66:40:d7:2d:bc:d5:bc:61:f6:72:7e:e6:03:
16:9b:17:31:77:98:9e:9f:53:99:ee:0f:3b:ac:aa:73:17:9c:
a5:f6:be:8a:7a:cf:eb:c7:bd:93:34:c6:28:d3:d7:85:5a:3a:
01:94:52:ca:bd:59:ff:ee:c0:49:50:88:a8:d9:8f:be:bb:57:
b4:29:ee:05:9b:b2:11:25:52:27:32:25:20:92:c2:68:b5:a2:
9d:37:96:65:ef:61:86:a3:24:40:1e:5e:e0:ef:d4:05:1d:31:
df:47:9f:2e:ad:fb:86:f7:20:eb:9e:9b:a1:51:f3:a2:6e:e9:
d1:b8:07:be:c0:ef:64:82:6e:df:ca:f1:ba:2f:0b:1a:80:a0:
2a:0d:66:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:04:55 2025 by rpki-client