Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/ffkEqxQGbHqf5hpSHVSSoOUpZco.mft
File: ffkEqxQGbHqf5hpSHVSSoOUpZco.mft (raw, json)
Hash identifier: isXGoZCNERKWAULBA8Epu5YweZhniFL7+KXH/yKKX9E=
Subject key identifier: 96:C8:CE:E2:37:50:31:02:C6:31:8F:0D:0B:33:67:D4:99:73:25:5F
Authority key identifier: 7D:F9:04:AB:14:06:6C:7A:9F:E6:1A:52:1D:54:92:A0:E5:29:65:CA
Certificate issuer: /CN=7df904ab14066c7a9fe61a521d5492a0e52965ca
Certificate serial: 0198868D1BB4A1D6321FA4FB6F4A1C167ABA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ffkEqxQGbHqf5hpSHVSSoOUpZco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/ffkEqxQGbHqf5hpSHVSSoOUpZco.mft
Manifest number: 06D8
Signing time: Thu 07 Aug 2025 22:00:51 +0000
Manifest this update: Thu 07 Aug 2025 22:00:51 +0000
Manifest next update: Fri 08 Aug 2025 22:00:51 +0000
Files and hashes: 1: bufSM9AIeCa-WaYVpJMLOnf764U.roa (hash: z9xIiROa5k0JCzmUTT7rzACAGOUMOn1C05T/vecBPKE=)
2: chSUy_WX_Mse1L_Zh-GnPPV45Wk.roa (hash: BdzlPc3HpSD69LQhKLGFCf7tQNLnvI967xxASmmhAH4=)
3: ffkEqxQGbHqf5hpSHVSSoOUpZco.crl (hash: NGNz0D7JTd7gxZDzRlKaMshsxGDXO8I5E3hVK1IWK5M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/ffkEqxQGbHqf5hpSHVSSoOUpZco.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/ffkEqxQGbHqf5hpSHVSSoOUpZco.mft
rsync://rpki.ripe.net/repository/DEFAULT/ffkEqxQGbHqf5hpSHVSSoOUpZco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 17:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:86:8d:1b:b4:a1:d6:32:1f:a4:fb:6f:4a:1c:16:7a:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7df904ab14066c7a9fe61a521d5492a0e52965ca
Validity
Not Before: Aug 7 22:00:51 2025 GMT
Not After : Aug 8 22:00:51 2025 GMT
Subject: CN=96c8cee237503102c6318f0d0b3367d49973255f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b7:00:56:5a:29:9f:20:39:28:8f:c4:66:a4:
e4:25:2e:19:68:c6:94:ed:c2:8a:54:5f:3c:a1:35:
7e:02:95:b3:45:8b:c1:11:cd:f8:9b:45:6a:0b:9e:
e3:b9:de:b8:f8:1e:88:3f:d3:31:ee:b8:35:d6:f3:
40:60:ba:e5:f2:12:15:2f:38:af:b0:3c:6b:3b:86:
39:78:e5:80:ad:32:2f:f4:c2:e1:4d:ac:cc:4a:4a:
de:83:f3:d5:cd:92:5a:f4:9e:80:08:4a:58:5e:59:
2d:ac:90:4d:8f:e2:84:76:ab:87:17:2e:70:74:07:
65:ee:e0:bf:d1:c7:c5:6d:d5:d1:60:28:04:1c:b0:
a1:93:28:50:cd:a5:e1:aa:df:35:56:0d:64:ef:96:
b7:1b:a6:f6:63:07:08:71:1f:63:24:71:af:66:c3:
f8:1b:ef:70:e3:52:fc:ae:94:9f:c5:a2:d7:12:08:
9c:9f:e3:6c:90:71:d7:22:20:be:ea:97:f7:c8:86:
10:81:e4:4d:49:ae:b4:ff:3d:7e:e1:8a:09:d3:79:
99:05:88:25:67:a3:fa:61:8b:a6:e2:36:cf:3b:c3:
c2:70:96:e7:b5:8b:96:b2:07:20:b5:2e:40:c9:f7:
7b:13:12:ea:35:0b:dc:47:5a:1f:7a:2d:15:fa:29:
93:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:C8:CE:E2:37:50:31:02:C6:31:8F:0D:0B:33:67:D4:99:73:25:5F
X509v3 Authority Key Identifier:
keyid:7D:F9:04:AB:14:06:6C:7A:9F:E6:1A:52:1D:54:92:A0:E5:29:65:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffkEqxQGbHqf5hpSHVSSoOUpZco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/ffkEqxQGbHqf5hpSHVSSoOUpZco.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/ffkEqxQGbHqf5hpSHVSSoOUpZco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:f0:74:a5:1a:b6:ec:bb:40:9b:9e:cc:74:f6:32:cc:2f:10:
b2:6d:2f:43:26:4a:a5:79:6e:5b:25:6c:73:73:41:db:cf:ff:
03:c9:a6:f7:8f:1f:b5:49:45:a8:a3:b0:43:97:17:71:b8:c0:
b7:38:a6:9f:3d:7d:83:fb:44:df:39:08:e1:15:52:cd:10:bd:
fa:a7:9e:67:13:78:8d:9c:72:a1:bf:2e:76:3c:4f:df:56:83:
6c:25:30:2e:b3:5e:cd:72:f6:02:9d:97:31:c4:92:a0:98:44:
39:19:e0:b0:44:42:19:cf:ee:5d:7e:15:92:53:37:14:31:dd:
e2:ac:3d:60:28:8f:0d:ba:f8:17:ad:5f:e2:47:2f:a4:fa:5c:
7c:f8:4a:6d:a0:fb:07:e3:0c:4b:41:dc:d0:fa:a5:c8:7a:6c:
45:a1:e7:21:3e:84:e4:d2:cd:bd:5a:e3:3c:23:67:b6:9b:62:
39:4e:39:9e:4d:9a:9e:55:82:25:1d:d2:78:4f:d6:79:62:6b:
06:d4:61:03:85:b8:c8:d0:ce:ec:73:9b:1f:35:47:94:f6:01:
41:ed:ba:3c:99:dd:0b:00:f0:c5:d4:1e:ad:24:35:a3:02:d7:
50:4d:19:76:9e:02:2d:d5:3f:52:e1:38:ba:1e:a0:1a:c6:a7:
45:17:13:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 00:39:44 2025 by rpki-client