Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/be3c40-1210-4272-a5ea-7835d3208396/1/Ff04BOALngaoLO2fB7NP4_2AOU4.mft
File: Ff04BOALngaoLO2fB7NP4_2AOU4.mft (raw, json)
Hash identifier: udMDwo1z2lMAiL+Y1ZzKw8BRVN/YXoPpN8IX0e8oQTo=
Subject key identifier: 08:63:5F:C0:A8:9D:3E:F7:61:B7:08:78:4C:6A:E3:B1:40:A1:E3:7E
Authority key identifier: 15:FD:38:04:E0:0B:9E:06:A8:2C:ED:9F:07:B3:4F:E3:FD:80:39:4E
Certificate issuer: /CN=15fd3804e00b9e06a82ced9f07b34fe3fd80394e
Certificate serial: 019A7112BE3E49803B9FE784BDAE2CF2A91F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ff04BOALngaoLO2fB7NP4_2AOU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/be3c40-1210-4272-a5ea-7835d3208396/1/Ff04BOALngaoLO2fB7NP4_2AOU4.mft
Manifest number: 0EA9
Signing time: Tue 11 Nov 2025 04:00:44 +0000
Manifest this update: Tue 11 Nov 2025 04:00:44 +0000
Manifest next update: Wed 12 Nov 2025 04:00:44 +0000
Files and hashes: 1: Ff04BOALngaoLO2fB7NP4_2AOU4.crl (hash: 979mzjUM56506P6FTpw991YZGL3d6rBBmH0qLrDxaF4=)
2: sD3TQhmqpMeiNDRMe_Cg9c8gcQg.roa (hash: YpFE/XWsvo+iSqItJdBs7pFneblfjbKHabl7GMSfsrA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/be3c40-1210-4272-a5ea-7835d3208396/1/Ff04BOALngaoLO2fB7NP4_2AOU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/be3c40-1210-4272-a5ea-7835d3208396/1/Ff04BOALngaoLO2fB7NP4_2AOU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ff04BOALngaoLO2fB7NP4_2AOU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:be:3e:49:80:3b:9f:e7:84:bd:ae:2c:f2:a9:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15fd3804e00b9e06a82ced9f07b34fe3fd80394e
Validity
Not Before: Nov 11 04:00:44 2025 GMT
Not After : Nov 12 04:00:44 2025 GMT
Subject: CN=08635fc0a89d3ef761b708784c6ae3b140a1e37e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:88:7b:0d:98:5f:f8:00:20:c1:f1:fe:79:61:
0f:05:76:67:79:39:cd:7b:cf:23:32:a6:e1:64:0c:
76:fd:0d:e0:be:43:67:d9:65:d5:e3:67:fa:f5:ed:
73:8d:ea:32:90:b6:e0:16:ef:37:f1:40:49:5c:c2:
2c:dd:37:9d:26:e1:71:14:35:a7:8e:2e:03:b1:4b:
e1:04:36:0c:db:17:60:04:71:57:2e:ec:a1:ad:47:
1e:4f:f3:7a:36:77:91:f9:35:81:8b:55:81:44:29:
03:73:f4:5f:45:c8:91:03:c3:0e:6a:41:d8:ef:52:
fb:ca:62:09:2d:10:ee:40:85:95:7d:b3:07:db:65:
5e:2b:df:0e:e6:72:52:6a:24:23:4d:5c:75:36:ba:
02:5a:fb:27:4f:c6:de:ee:4d:04:2d:ba:b5:aa:72:
45:43:f1:bb:77:78:d2:15:09:cf:77:a1:cb:52:78:
80:a0:9d:f1:df:d3:df:b4:4a:f2:f5:dd:c3:48:a3:
cf:1a:2d:73:19:a9:f9:8f:3b:0b:ea:ad:79:a3:30:
d7:f4:55:39:1d:57:5c:c7:1f:22:7a:04:8b:c1:cf:
16:34:bf:2a:81:79:b4:10:78:e9:0a:ae:41:d5:28:
87:4f:c6:bc:2e:78:2d:0c:84:40:0d:4b:ca:a7:f8:
e1:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:63:5F:C0:A8:9D:3E:F7:61:B7:08:78:4C:6A:E3:B1:40:A1:E3:7E
X509v3 Authority Key Identifier:
keyid:15:FD:38:04:E0:0B:9E:06:A8:2C:ED:9F:07:B3:4F:E3:FD:80:39:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ff04BOALngaoLO2fB7NP4_2AOU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/be3c40-1210-4272-a5ea-7835d3208396/1/Ff04BOALngaoLO2fB7NP4_2AOU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/be3c40-1210-4272-a5ea-7835d3208396/1/Ff04BOALngaoLO2fB7NP4_2AOU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:cb:fd:6b:56:13:a1:c6:44:bf:0e:80:04:48:3d:dd:f3:26:
ee:eb:d1:69:50:5d:b8:54:b4:68:d1:ae:54:c7:6e:9d:91:75:
9c:b4:7f:9c:cb:8e:ab:30:e5:31:63:06:18:e5:df:2e:c1:1d:
17:02:3b:c1:67:45:56:dc:fb:1c:96:8b:2d:b8:0d:4e:95:60:
48:ce:46:ac:bb:83:28:fe:7d:f0:d1:c0:37:21:8b:a9:25:95:
09:89:1b:0c:b9:c7:72:fb:1d:cc:c2:3d:40:65:ff:65:a8:68:
ce:ff:cb:26:58:94:0f:a2:7b:a1:74:17:1f:9e:0d:e8:ab:c7:
61:20:f5:3b:b9:06:44:c0:55:75:80:d9:27:89:1f:89:38:4b:
9b:a2:39:89:e5:2f:d7:ee:d3:06:83:f5:50:19:60:c1:ad:5b:
ff:90:14:00:a8:49:11:23:10:a4:19:61:f2:91:9f:c5:76:1c:
72:49:6b:f1:14:94:1d:fe:93:48:f3:68:5d:e7:f1:e5:25:38:
4b:33:5f:36:1b:13:5c:ea:74:df:67:59:0d:03:ce:fd:e1:11:
1e:e6:f9:81:b9:b7:14:87:e7:57:1b:b2:71:69:e8:8c:14:10:
d4:d8:7a:d5:c9:ce:7d:1d:79:b2:48:7a:3f:76:84:05:50:2b:
41:6a:5e:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:27:44 2025 by rpki-client