Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/f952fb-9318-49b6-b946-1e3a195478e0/1/FfiJ_tAIX8IbCPy7slLDEG35mqg.mft
File: FfiJ_tAIX8IbCPy7slLDEG35mqg.mft (raw, json)
Hash identifier: 84hUwsZyXHLh0J7HfDooAZzz+aXs3Q3VCs+mv8HnEFM=
Subject key identifier: 82:C5:B8:FE:53:39:D7:4B:3A:78:B7:2C:C4:E8:AE:E7:E6:C6:3E:2C
Authority key identifier: 15:F8:89:FE:D0:08:5F:C2:1B:08:FC:BB:B2:52:C3:10:6D:F9:9A:A8
Certificate issuer: /CN=15f889fed0085fc21b08fcbbb252c3106df99aa8
Certificate serial: 019A582EAC37CFB6296C2A1C2D3770515EC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfiJ_tAIX8IbCPy7slLDEG35mqg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/f952fb-9318-49b6-b946-1e3a195478e0/1/FfiJ_tAIX8IbCPy7slLDEG35mqg.mft
Manifest number: 1712
Signing time: Thu 06 Nov 2025 08:00:45 +0000
Manifest this update: Thu 06 Nov 2025 08:00:45 +0000
Manifest next update: Fri 07 Nov 2025 08:00:45 +0000
Files and hashes: 1: FfiJ_tAIX8IbCPy7slLDEG35mqg.crl (hash: y0a1bU80zmyWg609RJLnRwXGNXoKJvlottUHvhdEzSc=)
2: c7aVec8wRWh2uY_ep7B9EB_Hd_8.roa (hash: IVR9qhn2n9gPQEgDnZi5eZBL8Hlmr2T2MC2szELxnvc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/f952fb-9318-49b6-b946-1e3a195478e0/1/FfiJ_tAIX8IbCPy7slLDEG35mqg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/f952fb-9318-49b6-b946-1e3a195478e0/1/FfiJ_tAIX8IbCPy7slLDEG35mqg.mft
rsync://rpki.ripe.net/repository/DEFAULT/FfiJ_tAIX8IbCPy7slLDEG35mqg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 07 Nov 2025 06:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:58:2e:ac:37:cf:b6:29:6c:2a:1c:2d:37:70:51:5e:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f889fed0085fc21b08fcbbb252c3106df99aa8
Validity
Not Before: Nov 6 08:00:45 2025 GMT
Not After : Nov 7 08:00:45 2025 GMT
Subject: CN=82c5b8fe5339d74b3a78b72cc4e8aee7e6c63e2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:38:6f:5a:98:78:a9:2d:b9:74:4a:ae:6c:d2:
ca:4f:d7:08:85:c0:cb:12:0e:d4:94:d5:23:27:6b:
04:1d:5e:98:6c:36:85:a3:58:af:07:bf:8e:fd:61:
66:17:f3:37:36:9c:1d:7c:b5:15:51:c4:f6:ad:0c:
87:ae:09:b9:4e:16:dc:2c:14:8c:6a:37:d4:ed:0c:
23:3f:70:b1:88:17:66:61:c7:df:3f:7e:d9:2f:f0:
39:83:17:2c:d9:af:88:38:6e:11:67:79:4c:16:f8:
69:f2:c4:a5:f3:af:8a:28:8c:73:a8:48:00:e6:8c:
39:66:61:6c:7d:3f:8b:09:c3:f9:6c:00:31:0b:23:
03:0f:03:43:10:ac:ed:d2:b5:27:89:5c:95:4d:4c:
b3:8a:b2:c9:32:41:1a:71:9c:ed:0c:ca:b5:f8:f2:
d4:d3:75:f2:d1:ca:71:c8:2d:5f:ba:d7:6c:3b:b6:
49:57:9a:c4:aa:15:f3:7e:e7:5c:74:e9:1c:0c:de:
a0:e0:7c:be:7a:31:c3:fe:bb:8c:4e:9e:3f:70:7d:
ab:93:0a:c9:44:d2:12:5d:16:b5:a0:20:f4:3b:b3:
d3:fd:51:6f:a9:d3:41:db:7d:24:8d:7a:4b:8e:f9:
cf:26:02:57:6a:d5:53:30:07:2c:db:30:82:f4:b6:
bf:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:C5:B8:FE:53:39:D7:4B:3A:78:B7:2C:C4:E8:AE:E7:E6:C6:3E:2C
X509v3 Authority Key Identifier:
keyid:15:F8:89:FE:D0:08:5F:C2:1B:08:FC:BB:B2:52:C3:10:6D:F9:9A:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfiJ_tAIX8IbCPy7slLDEG35mqg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f952fb-9318-49b6-b946-1e3a195478e0/1/FfiJ_tAIX8IbCPy7slLDEG35mqg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f952fb-9318-49b6-b946-1e3a195478e0/1/FfiJ_tAIX8IbCPy7slLDEG35mqg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:34:42:a2:33:04:67:3c:eb:8a:a8:5c:be:f8:c3:25:dd:0c:
89:7c:bf:76:17:13:5c:c1:15:c4:48:9d:b9:5c:32:98:f6:34:
fb:85:90:23:ec:7a:ea:ba:47:36:2a:ee:a7:70:98:5a:c0:d0:
a4:2e:e7:6d:88:cc:e1:f6:e3:6c:27:d0:4c:e1:6e:e6:88:f6:
6c:b9:d6:12:de:ab:df:ab:e9:e8:07:86:e4:86:f9:7d:9b:1f:
01:a3:fa:67:5e:7e:83:8c:4c:83:c6:3a:14:37:79:93:1a:e6:
a4:15:75:6d:86:0f:82:58:2d:82:94:87:db:76:0c:ce:ee:00:
5f:b4:f9:df:6b:8c:34:11:db:a0:e6:e5:c3:10:2e:a9:b5:97:
65:23:ed:24:3a:ff:b8:13:17:a3:44:b4:de:7c:be:c7:4b:cf:
2b:7f:9f:71:54:45:ac:6f:43:9e:44:0c:71:0b:39:1f:b1:60:
b9:cb:1d:dc:e5:e7:d1:23:74:bd:90:86:25:24:08:5c:41:0c:
02:54:86:01:69:42:ef:15:45:b2:3b:7b:82:a6:ad:40:46:13:
89:58:70:cc:6d:ae:ad:9c:f1:2d:fe:1f:9e:58:2a:ed:78:51:
a1:a2:2c:56:6e:ee:40:4a:27:87:84:50:4f:ba:63:81:20:65:
08:9f:7b:83
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpYLqw3z7YpbCocLTdwUV7CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1Zjg4OWZlZDAwODVmYzIxYjA4ZmNiYmIyNTJjMzEwNmRm
OTlhYTgwHhcNMjUxMTA2MDgwMDQ1WhcNMjUxMTA3MDgwMDQ1WjAzMTEwLwYDVQQD
Eyg4MmM1YjhmZTUzMzlkNzRiM2E3OGI3MmNjNGU4YWVlN2U2YzYzZTJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApjhvWph4qS25dEqubNLKT9cIhcDL
Eg7UlNUjJ2sEHV6YbDaFo1ivB7+O/WFmF/M3NpwdfLUVUcT2rQyHrgm5ThbcLBSM
ajfU7QwjP3CxiBdmYcffP37ZL/A5gxcs2a+IOG4RZ3lMFvhp8sSl86+KKIxzqEgA
5ow5ZmFsfT+LCcP5bAAxCyMDDwNDEKzt0rUniVyVTUyzirLJMkEacZztDMq1+PLU
03Xy0cpxyC1futdsO7ZJV5rEqhXzfudcdOkcDN6g4Hy+ejHD/ruMTp4/cH2rkwrJ
RNISXRa1oCD0O7PT/VFvqdNB230kjXpLjvnPJgJXatVTMAcs2zCC9La/RQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFILFuP5TOddLOni3LMTorufmxj4sMB8GA1UdIwQY
MBaAFBX4if7QCF/CGwj8u7JSwxBt+ZqoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmZpSl90QUlYOEliQ1B5N3NsTERFRzM1bXFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC9mOTUyZmItOTMxOC00OWI2LWI5NDYt
MWUzYTE5NTQ3OGUwLzEvRmZpSl90QUlYOEliQ1B5N3NsTERFRzM1bXFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC9mOTUyZmItOTMxOC00OWI2LWI5NDYtMWUzYTE5NTQ3OGUw
LzEvRmZpSl90QUlYOEliQ1B5N3NsTERFRzM1bXFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFzRCojME
ZzzriqhcvvjDJd0MiXy/dhcTXMEVxEiduVwymPY0+4WQI+x66rpHNirup3CYWsDQ
pC7nbYjM4fbjbCfQTOFu5oj2bLnWEt6r36vp6AeG5Ib5fZsfAaP6Z15+g4xMg8Y6
FDd5kxrmpBV1bYYPglgtgpSH23YMzu4AX7T532uMNBHboOblwxAuqbWXZSPtJDr/
uBMXo0S03ny+x0vPK3+fcVRFrG9DnkQMcQs5H7Fgucsd3OXn0SN0vZCGJSQIXEEM
AlSGAWlC7xVFsjt7gqatQEYTiVhwzG2urZzxLf4fnlgq7XhRoaIsVm7uQEonh4RQ
T7pjgSBlCJ97gw==
-----END CERTIFICATE-----
Generated at Thu Nov 6 12:15:11 2025 by rpki-client