Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/ffkEqxQGbHqf5hpSHVSSoOUpZco.mft
File: ffkEqxQGbHqf5hpSHVSSoOUpZco.mft (raw, json)
Hash identifier: O0vjCNkQstSuYjgOM8SZgnp1ve3sTjr7yk1TAU2IQGg=
Subject key identifier: 04:19:77:46:CC:FC:BF:14:DD:7E:30:A6:2B:44:F1:87:B0:AB:48:3D
Authority key identifier: 7D:F9:04:AB:14:06:6C:7A:9F:E6:1A:52:1D:54:92:A0:E5:29:65:CA
Certificate issuer: /CN=7df904ab14066c7a9fe61a521d5492a0e52965ca
Certificate serial: 019A526378A69285B49E220677FFC4C94A39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ffkEqxQGbHqf5hpSHVSSoOUpZco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/ffkEqxQGbHqf5hpSHVSSoOUpZco.mft
Manifest number: 07C7
Signing time: Wed 05 Nov 2025 05:00:41 +0000
Manifest this update: Wed 05 Nov 2025 05:00:41 +0000
Manifest next update: Thu 06 Nov 2025 05:00:41 +0000
Files and hashes: 1: chSUy_WX_Mse1L_Zh-GnPPV45Wk.roa (hash: BdzlPc3HpSD69LQhKLGFCf7tQNLnvI967xxASmmhAH4=)
2: ffkEqxQGbHqf5hpSHVSSoOUpZco.crl (hash: zWB/h6hqpauB5RcI+948f4MN6S2e9LGuQdhPhEFS48Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/ffkEqxQGbHqf5hpSHVSSoOUpZco.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/ffkEqxQGbHqf5hpSHVSSoOUpZco.mft
rsync://rpki.ripe.net/repository/DEFAULT/ffkEqxQGbHqf5hpSHVSSoOUpZco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:63:78:a6:92:85:b4:9e:22:06:77:ff:c4:c9:4a:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7df904ab14066c7a9fe61a521d5492a0e52965ca
Validity
Not Before: Nov 5 05:00:41 2025 GMT
Not After : Nov 6 05:00:41 2025 GMT
Subject: CN=04197746ccfcbf14dd7e30a62b44f187b0ab483d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e2:f5:81:bf:d2:9d:2a:58:88:4d:19:af:c3:
f7:22:27:99:de:1a:33:e9:fb:b7:ae:f4:ba:5e:58:
9c:5c:06:48:92:a4:63:c5:8c:09:0b:1e:9a:ca:95:
3d:6a:08:ec:dd:55:86:14:31:d5:bd:70:0e:44:94:
e2:ab:c0:c1:12:d1:de:b4:dd:ee:7c:ae:72:87:56:
1d:ab:c2:00:c1:ff:9c:f1:fe:aa:45:ce:6b:64:3b:
db:7a:3e:71:d5:2a:dc:58:7b:c6:47:88:cd:95:99:
7f:ea:6a:7d:2a:fd:ec:b6:9f:c1:ac:be:d9:1a:1a:
a2:a9:6d:ed:91:96:f3:2e:3e:fd:ed:57:6b:06:3b:
0d:73:a4:58:7e:28:b5:bf:69:5a:d2:ae:fe:79:fc:
4c:1c:81:13:6b:49:f3:cf:0e:b0:90:3b:fd:98:ed:
8b:29:2f:02:a7:56:75:1e:de:7d:bb:f0:4a:88:b6:
1f:34:2f:0f:04:bf:a5:9c:55:fa:ed:ca:55:7e:d7:
d6:21:3b:d9:8b:2e:a5:3d:72:0d:9a:fe:ae:72:2b:
94:7a:e8:80:53:a1:e6:8b:3e:bc:1f:2a:45:78:66:
09:3c:47:e9:e6:40:3f:e9:23:df:1c:21:94:c3:28:
5d:98:f5:12:de:7f:ab:b5:4e:e1:3a:13:53:3c:3e:
e0:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:19:77:46:CC:FC:BF:14:DD:7E:30:A6:2B:44:F1:87:B0:AB:48:3D
X509v3 Authority Key Identifier:
keyid:7D:F9:04:AB:14:06:6C:7A:9F:E6:1A:52:1D:54:92:A0:E5:29:65:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffkEqxQGbHqf5hpSHVSSoOUpZco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/ffkEqxQGbHqf5hpSHVSSoOUpZco.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/ffkEqxQGbHqf5hpSHVSSoOUpZco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:63:40:ee:f9:b2:65:e8:ea:16:ef:1a:e0:22:2f:7a:d6:6f:
32:d4:12:50:81:29:c7:93:25:cd:b2:5e:e5:9d:5d:3f:93:f7:
91:86:76:00:76:15:38:c1:16:e2:34:49:46:79:b3:4e:6a:25:
34:64:7a:d0:8a:26:0f:8e:c2:f2:8a:30:a1:7c:e0:e9:15:eb:
e8:bb:a9:a0:c1:4b:4d:0d:35:d9:bd:9c:3d:6b:a1:0c:81:39:
a5:8a:87:b3:f7:67:ff:bf:0c:73:73:02:67:c8:a9:9c:2b:75:
3b:58:bb:b1:8b:89:d4:87:19:6c:8a:83:43:4c:c6:10:b3:a5:
e4:fb:9b:67:48:16:d3:d2:96:50:59:2f:dd:ff:1a:82:23:1f:
1b:94:b3:3e:13:5c:7d:57:c6:b3:1f:e7:81:79:03:d0:dc:69:
96:3f:3f:f6:8c:77:98:ca:53:2a:82:82:81:eb:db:89:30:c9:
8d:ef:f8:d4:98:43:e8:32:99:29:d2:14:9a:04:19:fd:11:6e:
4c:7e:4b:34:0b:6b:16:0e:de:31:ce:3e:2d:77:d9:ca:38:14:
05:3a:44:a3:45:7a:cb:9a:6a:63:27:38:6d:27:60:dd:10:dd:
99:cf:a5:39:22:b8:51:c2:33:21:89:83:13:2f:33:fc:19:fb:
5e:39:7d:20
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpSY3imkoW0niIGd//EyUo5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkZjkwNGFiMTQwNjZjN2E5ZmU2MWE1MjFkNTQ5MmEwZTUy
OTY1Y2EwHhcNMjUxMTA1MDUwMDQxWhcNMjUxMTA2MDUwMDQxWjAzMTEwLwYDVQQD
EygwNDE5Nzc0NmNjZmNiZjE0ZGQ3ZTMwYTYyYjQ0ZjE4N2IwYWI0ODNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArOL1gb/SnSpYiE0Zr8P3IieZ3hoz
6fu3rvS6XlicXAZIkqRjxYwJCx6aypU9agjs3VWGFDHVvXAORJTiq8DBEtHetN3u
fK5yh1Ydq8IAwf+c8f6qRc5rZDvbej5x1SrcWHvGR4jNlZl/6mp9Kv3stp/BrL7Z
GhqiqW3tkZbzLj797VdrBjsNc6RYfii1v2la0q7+efxMHIETa0nzzw6wkDv9mO2L
KS8Cp1Z1Ht59u/BKiLYfNC8PBL+lnFX67cpVftfWITvZiy6lPXINmv6uciuUeuiA
U6Hmiz68HypFeGYJPEfp5kA/6SPfHCGUwyhdmPUS3n+rtU7hOhNTPD7g7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAQZd0bM/L8U3X4wpitE8Yewq0g9MB8GA1UdIwQY
MBaAFH35BKsUBmx6n+YaUh1UkqDlKWXKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmZrRXF4UUdiSHFmNWhwU0hWU1NvT1VwWmNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS81M2ZiMzQtMjVkYi00Njg0LTk4NGYt
M2I0NDVmMjlmNWI3LzEvZmZrRXF4UUdiSHFmNWhwU0hWU1NvT1VwWmNvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS81M2ZiMzQtMjVkYi00Njg0LTk4NGYtM2I0NDVmMjlmNWI3
LzEvZmZrRXF4UUdiSHFmNWhwU0hWU1NvT1VwWmNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAmNA7vmy
ZejqFu8a4CIvetZvMtQSUIEpx5MlzbJe5Z1dP5P3kYZ2AHYVOMEW4jRJRnmzTmol
NGR60IomD47C8oowoXzg6RXr6LupoMFLTQ012b2cPWuhDIE5pYqHs/dn/78Mc3MC
Z8ipnCt1O1i7sYuJ1IcZbIqDQ0zGELOl5PubZ0gW09KWUFkv3f8agiMfG5SzPhNc
fVfGsx/ngXkD0Nxplj8/9ox3mMpTKoKCgevbiTDJje/41JhD6DKZKdIUmgQZ/RFu
TH5LNAtrFg7eMc4+LXfZyjgUBTpEo0V6y5pqYyc4bSdg3RDdmc+lOSK4UcIzIYmD
Ey8z/Bn7Xjl9IA==
-----END CERTIFICATE-----
Generated at Wed Nov 5 09:42:10 2025 by rpki-client