Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/e27eb8-af64-446e-88ec-d472e49f591e/1/Ff7cFwVXbZf-StICkd4ZhHPYFW8.mft
File: Ff7cFwVXbZf-StICkd4ZhHPYFW8.mft (raw, json)
Hash identifier: JdPoKU33qQKJg0zti5PPay0X4LwD6/PviUNcdEifRWs=
Subject key identifier: 4D:43:92:0B:4A:98:E2:A5:77:41:55:CB:F8:07:BE:AF:F8:A9:99:A3
Authority key identifier: 15:FE:DC:17:05:57:6D:97:FE:4A:D2:02:91:DE:19:84:73:D8:15:6F
Certificate issuer: /CN=15fedc1705576d97fe4ad20291de198473d8156f
Certificate serial: 019A54BF6C4679726AEB248C245973E3DBA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ff7cFwVXbZf-StICkd4ZhHPYFW8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/e27eb8-af64-446e-88ec-d472e49f591e/1/Ff7cFwVXbZf-StICkd4ZhHPYFW8.mft
Manifest number: 170F
Signing time: Wed 05 Nov 2025 16:00:22 +0000
Manifest this update: Wed 05 Nov 2025 16:00:22 +0000
Manifest next update: Thu 06 Nov 2025 16:00:22 +0000
Files and hashes: 1: Ff7cFwVXbZf-StICkd4ZhHPYFW8.crl (hash: ni+oAPjm1Q+ZOw/Q4N4yeEC65OGojBeBs5qeNuBL6sE=)
2: Qv45l9CC_OtB7OS_57aAR1sJyvc.roa (hash: Mv6sqdxR24sbzw3gEqGiuaVF1p5QjBnxJTiW3StRP2M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/e27eb8-af64-446e-88ec-d472e49f591e/1/Ff7cFwVXbZf-StICkd4ZhHPYFW8.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/e27eb8-af64-446e-88ec-d472e49f591e/1/Ff7cFwVXbZf-StICkd4ZhHPYFW8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ff7cFwVXbZf-StICkd4ZhHPYFW8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:bf:6c:46:79:72:6a:eb:24:8c:24:59:73:e3:db:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15fedc1705576d97fe4ad20291de198473d8156f
Validity
Not Before: Nov 5 16:00:22 2025 GMT
Not After : Nov 6 16:00:22 2025 GMT
Subject: CN=4d43920b4a98e2a5774155cbf807beaff8a999a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:6c:05:17:52:d3:5f:f1:84:c8:ae:c7:64:34:
ec:73:73:c6:40:8c:13:ac:f2:30:da:8e:01:8e:5a:
3b:79:b7:ae:cb:2c:44:e1:2f:14:8a:77:5f:73:7b:
02:26:30:4c:75:2a:46:b5:6e:8c:22:3e:93:63:93:
f5:22:2e:77:b5:ee:51:a0:5c:09:10:5c:76:d8:10:
84:f9:95:b5:22:72:25:80:7e:47:74:b4:1d:28:c7:
71:1c:03:c6:10:5d:d4:b8:cf:d2:33:51:cd:23:2a:
97:81:30:bb:c5:3b:a8:8e:03:39:96:aa:63:1a:4a:
41:83:e8:97:b8:8e:bf:6f:7c:95:98:9b:d7:c1:a9:
57:6c:7f:b2:34:11:7a:c7:0a:5e:74:3d:d0:f3:54:
e7:34:ff:fb:74:82:92:6b:67:f4:f8:1c:cc:f1:70:
b0:c8:2b:01:d6:fb:c1:be:cc:86:d2:81:71:9b:0c:
17:fd:fb:b8:19:86:b6:2a:9a:ac:b9:0a:17:fa:fe:
12:ca:64:51:40:78:83:23:2f:7e:36:4e:8a:f3:e9:
a0:f6:bc:fa:c1:e0:b2:17:d3:f7:d7:aa:e4:7d:1e:
f9:7f:9d:ba:8f:af:b4:32:f1:c8:3c:91:37:39:43:
a6:c6:5f:c2:a3:13:aa:cd:94:0f:0f:66:a0:2c:38:
6f:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:43:92:0B:4A:98:E2:A5:77:41:55:CB:F8:07:BE:AF:F8:A9:99:A3
X509v3 Authority Key Identifier:
keyid:15:FE:DC:17:05:57:6D:97:FE:4A:D2:02:91:DE:19:84:73:D8:15:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ff7cFwVXbZf-StICkd4ZhHPYFW8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/e27eb8-af64-446e-88ec-d472e49f591e/1/Ff7cFwVXbZf-StICkd4ZhHPYFW8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/e27eb8-af64-446e-88ec-d472e49f591e/1/Ff7cFwVXbZf-StICkd4ZhHPYFW8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:41:4c:f9:53:61:d1:db:7a:25:8c:4a:c2:a4:9b:c1:54:89:
b9:de:12:2a:83:7d:a2:98:c1:1e:2b:94:67:3b:af:ca:1a:93:
ef:9a:c9:52:aa:1d:cc:bb:1a:bf:4d:f2:45:d6:21:a0:89:6d:
91:23:c1:1c:83:88:95:c5:da:2d:85:94:a5:40:01:b4:99:d5:
ff:04:a1:82:f0:83:59:37:3e:91:b2:09:da:56:f2:05:08:7a:
f9:0f:56:c4:9d:a5:bc:58:e7:60:c4:30:80:da:7d:ea:4d:82:
97:1e:ae:4c:d2:1c:13:e9:1c:bc:26:05:ea:16:f1:76:55:1a:
a1:50:15:34:2a:a1:73:08:11:0e:11:d4:37:af:9f:61:aa:c8:
b1:ca:ad:a7:39:3c:a7:4b:94:48:8a:63:cf:cd:af:e9:08:cd:
dc:a8:b7:fe:7a:5d:ef:c6:63:43:9e:1b:b4:6b:7e:e0:7e:fe:
c4:32:4d:12:ed:f6:14:3b:1d:f6:67:90:f8:f1:e2:83:ec:02:
5a:27:15:51:d0:8d:d9:38:6a:a8:49:be:08:07:18:7a:42:81:
03:1b:eb:88:18:77:ed:21:a6:8e:68:15:3b:61:0a:dd:9f:30:
89:23:de:20:7e:91:4d:f9:8e:ae:6a:f9:67:fe:cd:8a:7c:6f:
1b:87:4e:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 19:13:40 2025 by rpki-client