Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/Ff-gQhFDATaLQGmr1ooe-6xH_c4.mft
File: Ff-gQhFDATaLQGmr1ooe-6xH_c4.mft (raw, json)
Hash identifier: WRONZqdZlToNWkNed7VHP9C38yh0isPne0ewwbT3fVI=
Subject key identifier: D4:2C:80:8C:B7:E1:2B:2E:85:04:86:85:0F:FC:05:71:B0:B4:47:CA
Authority key identifier: 15:FF:A0:42:11:43:01:36:8B:40:69:AB:D6:8A:1E:FB:AC:47:FD:CE
Certificate issuer: /CN=15ffa042114301368b4069abd68a1efbac47fdce
Certificate serial: 0198737460E5C40F1E5BAE1D0DC7044979A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ff-gQhFDATaLQGmr1ooe-6xH_c4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/Ff-gQhFDATaLQGmr1ooe-6xH_c4.mft
Manifest number: 1639
Signing time: Mon 04 Aug 2025 05:01:03 +0000
Manifest this update: Mon 04 Aug 2025 05:01:03 +0000
Manifest next update: Tue 05 Aug 2025 05:01:03 +0000
Files and hashes: 1: 6u0Asdv1MK3aB_6LSzkcot6bBic.roa (hash: Unsvdd0urMCZdw1KCmFCBV2OeTjQKyc3NTKlxR83W+g=)
2: AGOQH07CbOv-ptcClhHBm5EQp-4.roa (hash: LGaMLQ5/MFjNXGL657nV7BSt6luG57ujXGiYSAKsY5E=)
3: Et5vhEXgLOmM5SbkGarS_YGVpLo.roa (hash: uNGZHjxFk4Dk42uVibgGyfbV7WZ6GeCmNMtAi7XVFis=)
4: Ff-gQhFDATaLQGmr1ooe-6xH_c4.crl (hash: /BIrfbEzoS2eLS0E+bxCtwKyyJLsaLMfqcfY+i9UcGs=)
5: G_eCdr_CtHHYdvx_wsfrWGJQP2E.roa (hash: m4lFNVsxQJtYcVSh1StMkG9TI91ecQZqyflVHyNHncI=)
6: O-SsLGZDDis9x7Hdr9bjMmd2BoY.roa (hash: HishzW2LB7SBBdcbiiTEBoYKX9Z+I6RhesW10ogdrys=)
7: UezMgLKKI-WhO1czQILLBRClTv8.roa (hash: AnuM+KLFPB1elW7al0sjIDYMJlOpGTtEqCymfhnESgE=)
8: zXrOjxGX_DI-tXkFUtLuBXotuic.roa (hash: mrO+89Y/llkPbD0Oqqb4OVuncS888EEiNoMgxFZFl6I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/Ff-gQhFDATaLQGmr1ooe-6xH_c4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/Ff-gQhFDATaLQGmr1ooe-6xH_c4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ff-gQhFDATaLQGmr1ooe-6xH_c4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:74:60:e5:c4:0f:1e:5b:ae:1d:0d:c7:04:49:79:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15ffa042114301368b4069abd68a1efbac47fdce
Validity
Not Before: Aug 4 05:01:03 2025 GMT
Not After : Aug 5 05:01:03 2025 GMT
Subject: CN=d42c808cb7e12b2e850486850ffc0571b0b447ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ee:2a:cb:9e:dd:df:f5:c6:81:bc:c6:40:66:
8c:e5:0c:7d:88:21:33:99:27:8f:90:05:51:8a:94:
9e:75:c5:12:44:b7:aa:7c:c2:26:70:3c:5e:42:26:
a4:2c:3b:b1:88:16:e6:09:2f:8c:ba:df:03:b9:b5:
c7:88:79:96:b9:73:9a:db:70:61:fd:b9:84:74:e3:
19:ba:b8:da:d8:18:14:52:67:df:b4:15:4c:ee:aa:
5a:f5:dc:9d:9a:c3:f2:a6:4c:7a:32:00:6c:f0:50:
76:9c:fa:5f:94:d0:0e:42:8d:00:f7:01:df:b7:bf:
50:07:df:9e:75:ff:8c:b7:75:63:2b:4e:1f:83:23:
2e:62:e7:65:5c:e8:b0:44:7e:45:f2:dc:89:84:6c:
f3:cb:83:ce:ca:ae:f1:f1:3b:9f:18:00:90:0a:44:
2a:3a:6c:5d:9d:f5:ed:7d:c4:70:2b:24:e4:6e:58:
9c:29:6c:c4:a8:d0:35:d1:2e:7b:a9:46:1f:07:42:
35:d1:2d:c1:54:f8:be:91:21:5f:4a:8b:ad:c0:d1:
1f:b0:e7:2b:ef:54:e6:a3:3d:39:5b:48:df:4c:bf:
34:6f:b5:1c:77:39:1f:04:a1:6e:ce:70:31:5c:a9:
8e:18:30:99:94:1d:94:55:a3:23:53:0d:43:85:b8:
c2:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:2C:80:8C:B7:E1:2B:2E:85:04:86:85:0F:FC:05:71:B0:B4:47:CA
X509v3 Authority Key Identifier:
keyid:15:FF:A0:42:11:43:01:36:8B:40:69:AB:D6:8A:1E:FB:AC:47:FD:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ff-gQhFDATaLQGmr1ooe-6xH_c4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/Ff-gQhFDATaLQGmr1ooe-6xH_c4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/Ff-gQhFDATaLQGmr1ooe-6xH_c4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:97:d4:fb:85:d8:02:b8:89:00:4b:8e:8b:ec:b0:3f:43:c4:
d0:f9:83:51:b2:01:ad:28:ee:a6:86:d2:45:0a:ba:9d:20:0c:
e5:b1:7c:57:97:d9:67:2a:d0:6e:25:b7:b9:8b:d8:47:b2:86:
51:25:b1:26:a9:7c:59:40:b7:8f:fe:b1:97:74:67:ad:bb:1b:
3c:03:a7:d7:c4:0d:92:e7:ff:2a:39:5c:e0:5c:95:70:97:d8:
c6:95:8f:d3:1f:89:f2:c9:62:58:31:58:05:a8:a0:04:98:b3:
47:07:c6:7e:9e:07:47:20:3b:27:39:f8:66:d3:16:e7:6f:5f:
8c:c5:dd:8b:69:86:eb:be:0e:91:d8:56:37:3d:08:4d:1c:e9:
75:bb:ed:8b:67:e8:13:bb:d2:84:c0:23:f2:4a:56:ea:40:1b:
71:f9:c3:33:15:7c:ca:44:25:7f:de:94:39:3c:8b:2f:32:6e:
56:b9:d9:99:a5:53:19:75:77:8b:6e:ac:8e:c3:c3:e8:e3:7d:
39:7e:be:36:74:29:2b:e0:ae:72:5c:4c:3d:cf:c6:21:14:18:
18:01:94:d5:9b:07:c5:68:40:52:11:19:94:8f:8b:08:11:1d:
c7:3f:23:2e:d9:df:c3:b3:bd:b1:24:5a:3b:1b:e2:59:87:ae:
0e:38:7a:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:12:59 2025 by rpki-client