Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/Ff-gQhFDATaLQGmr1ooe-6xH_c4.mft
File: Ff-gQhFDATaLQGmr1ooe-6xH_c4.mft (raw, json)
Hash identifier: a++FW0vvW33HYiUUKoEkdtdJUc1Pbgz6hpZdgj4clYM=
Subject key identifier: 22:E6:80:E0:FA:3A:C4:16:A6:61:A0:19:41:C7:E5:04:9E:AC:9F:6D
Authority key identifier: 15:FF:A0:42:11:43:01:36:8B:40:69:AB:D6:8A:1E:FB:AC:47:FD:CE
Certificate issuer: /CN=15ffa042114301368b4069abd68a1efbac47fdce
Certificate serial: 019A4E190D81CA11B6ABAFA8310EE4424BDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ff-gQhFDATaLQGmr1ooe-6xH_c4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/Ff-gQhFDATaLQGmr1ooe-6xH_c4.mft
Manifest number: 1731
Signing time: Tue 04 Nov 2025 09:00:55 +0000
Manifest this update: Tue 04 Nov 2025 09:00:55 +0000
Manifest next update: Wed 05 Nov 2025 09:00:55 +0000
Files and hashes: 1: 6u0Asdv1MK3aB_6LSzkcot6bBic.roa (hash: Unsvdd0urMCZdw1KCmFCBV2OeTjQKyc3NTKlxR83W+g=)
2: AGOQH07CbOv-ptcClhHBm5EQp-4.roa (hash: LGaMLQ5/MFjNXGL657nV7BSt6luG57ujXGiYSAKsY5E=)
3: Ff-gQhFDATaLQGmr1ooe-6xH_c4.crl (hash: fadFrhSkHY66SmVrBF7vNy4iuXhxU3q9yCqm3yBo7kg=)
4: G_eCdr_CtHHYdvx_wsfrWGJQP2E.roa (hash: m4lFNVsxQJtYcVSh1StMkG9TI91ecQZqyflVHyNHncI=)
5: O-SsLGZDDis9x7Hdr9bjMmd2BoY.roa (hash: HishzW2LB7SBBdcbiiTEBoYKX9Z+I6RhesW10ogdrys=)
6: UezMgLKKI-WhO1czQILLBRClTv8.roa (hash: AnuM+KLFPB1elW7al0sjIDYMJlOpGTtEqCymfhnESgE=)
7: pSyaNNQfHIxFiSnrATHPuSm-jfo.roa (hash: OeYszJRRDpsrfoggTZzuEZA5/POYAPXra4Ky725R5xQ=)
8: v2G3M562D4aa-fcy5N8BIvKP6Qw.roa (hash: yF4Vq9anZc2BqQhoqalVt7u7GMXvQAYlbam4m09u8XY=)
9: zXrOjxGX_DI-tXkFUtLuBXotuic.roa (hash: mrO+89Y/llkPbD0Oqqb4OVuncS888EEiNoMgxFZFl6I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/Ff-gQhFDATaLQGmr1ooe-6xH_c4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/Ff-gQhFDATaLQGmr1ooe-6xH_c4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ff-gQhFDATaLQGmr1ooe-6xH_c4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:19:0d:81:ca:11:b6:ab:af:a8:31:0e:e4:42:4b:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15ffa042114301368b4069abd68a1efbac47fdce
Validity
Not Before: Nov 4 09:00:55 2025 GMT
Not After : Nov 5 09:00:55 2025 GMT
Subject: CN=22e680e0fa3ac416a661a01941c7e5049eac9f6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:7d:d5:6b:fd:a8:ca:51:ba:15:6f:b6:85:bf:
f0:8f:b5:56:72:94:91:b1:41:4f:c2:ad:7a:ae:ae:
f6:11:97:fd:d1:f9:07:a8:ed:07:3c:b3:c5:4e:2b:
46:e8:03:21:64:8c:6c:d2:7f:f4:bc:ee:96:8a:c6:
ca:6f:09:65:06:23:71:00:d8:12:5e:16:e4:b5:68:
48:28:f4:3d:85:b2:14:62:16:d4:eb:d6:fb:19:5d:
7f:cf:be:b9:8f:81:c1:99:84:80:4e:33:7d:85:ac:
cc:d8:0b:67:61:d5:19:3b:e2:35:82:12:d8:58:63:
9d:56:ff:2e:29:0f:eb:da:e4:5e:9c:5d:a3:f9:99:
3d:b4:91:23:da:cb:61:ff:d0:6b:6a:d0:4d:7f:06:
b6:2e:e9:d1:53:14:59:ce:21:c4:7c:74:9d:20:4e:
00:9f:4d:4c:f5:ff:a0:24:f4:6c:45:a0:06:cd:70:
83:cd:e2:0f:84:a1:a2:11:b1:0e:84:40:ed:4b:93:
ff:59:6c:7f:6c:82:bb:59:4d:95:9f:4f:55:f6:f9:
fc:d8:9b:79:f8:ce:f8:f0:22:61:fe:6c:e8:7a:6f:
9c:e1:b2:84:84:e9:5b:a8:7b:1e:94:65:4f:c4:43:
66:34:60:52:f4:fc:11:a1:e0:00:46:19:65:4e:44:
96:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:E6:80:E0:FA:3A:C4:16:A6:61:A0:19:41:C7:E5:04:9E:AC:9F:6D
X509v3 Authority Key Identifier:
keyid:15:FF:A0:42:11:43:01:36:8B:40:69:AB:D6:8A:1E:FB:AC:47:FD:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ff-gQhFDATaLQGmr1ooe-6xH_c4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/Ff-gQhFDATaLQGmr1ooe-6xH_c4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/Ff-gQhFDATaLQGmr1ooe-6xH_c4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:4e:a2:9b:be:d4:48:68:c3:ee:f0:b4:2b:1e:79:7e:0d:cb:
2d:61:01:fb:54:24:93:aa:1b:2a:a2:d3:c8:a4:43:7b:78:b8:
f8:15:19:58:b5:82:0e:34:05:bb:6a:3d:bb:e4:4c:c3:d6:35:
05:b4:86:23:8f:4b:90:62:52:63:63:ed:3a:97:c0:06:9a:86:
50:48:d6:02:eb:e5:91:2f:57:85:16:53:78:24:c6:a7:f0:58:
3f:b6:c6:3d:dd:7f:68:bd:a5:ae:01:15:21:9b:d0:ee:13:3b:
e4:b2:7e:f9:43:5c:c4:43:f7:bb:45:0b:76:27:8e:0c:ca:ca:
7a:87:cf:53:b6:c5:91:6f:f0:f0:0b:e0:3f:ec:29:c6:bd:af:
f9:a6:12:9f:2b:8b:d5:ea:12:da:c4:2f:e0:16:69:3a:06:fa:
8c:6c:90:8b:86:2f:66:ab:17:1a:ca:bb:28:04:41:9d:3b:08:
3e:44:c9:72:5f:ee:65:54:ed:75:92:fc:ab:85:55:14:0c:1f:
42:f4:d0:73:36:bb:b8:68:59:7c:12:35:65:74:d6:6a:e0:60:
e9:ec:7c:0a:60:d0:7f:33:01:a2:9a:3b:7d:0a:3e:b6:7f:ee:
c8:94:a9:2d:c2:cf:ee:81:c7:46:4a:ac:be:d6:26:79:53:d4:
dd:3d:2b:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:58:43 2025 by rpki-client