Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/cb877c-1699-44b9-9dc5-2f63ab46f31c/1/Ff2wiOmOTmQV2UQUIhJEg2kAW0g.mft
File: Ff2wiOmOTmQV2UQUIhJEg2kAW0g.mft (raw, json)
Hash identifier: fQNOx3WqYjjCJPPRQRTYZotWCl1OgxIZd4DRuD6wwfw=
Subject key identifier: 9A:EB:AA:10:85:96:12:E6:A2:23:5D:62:E2:BA:3A:F6:64:0F:C7:F3
Authority key identifier: 15:FD:B0:88:E9:8E:4E:64:15:D9:44:14:22:12:44:83:69:00:5B:48
Certificate issuer: /CN=15fdb088e98e4e6415d944142212448369005b48
Certificate serial: 019A51F5B4440F156F0448844ABE81DACB40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ff2wiOmOTmQV2UQUIhJEg2kAW0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/cb877c-1699-44b9-9dc5-2f63ab46f31c/1/Ff2wiOmOTmQV2UQUIhJEg2kAW0g.mft
Manifest number: 0220
Signing time: Wed 05 Nov 2025 03:00:48 +0000
Manifest this update: Wed 05 Nov 2025 03:00:48 +0000
Manifest next update: Thu 06 Nov 2025 03:00:48 +0000
Files and hashes: 1: 1aDxtk8JRh6i0kM7vqlHAaQrJ3c.roa (hash: Q9hOadBBuPPxo3375iiCb6IfTPJTRKVivBWjEk+2yzQ=)
2: Ff2wiOmOTmQV2UQUIhJEg2kAW0g.crl (hash: uLuhVWKKRevCkYIW3cThk18e0N1o53lMVaUjfRKASiY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/cb877c-1699-44b9-9dc5-2f63ab46f31c/1/Ff2wiOmOTmQV2UQUIhJEg2kAW0g.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/cb877c-1699-44b9-9dc5-2f63ab46f31c/1/Ff2wiOmOTmQV2UQUIhJEg2kAW0g.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ff2wiOmOTmQV2UQUIhJEg2kAW0g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:f5:b4:44:0f:15:6f:04:48:84:4a:be:81:da:cb:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15fdb088e98e4e6415d944142212448369005b48
Validity
Not Before: Nov 5 03:00:48 2025 GMT
Not After : Nov 6 03:00:48 2025 GMT
Subject: CN=9aebaa10859612e6a2235d62e2ba3af6640fc7f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:d7:aa:39:0c:32:c4:be:d0:ac:74:9f:c2:f8:
14:65:55:e2:4e:bf:3c:94:f8:92:75:81:ba:86:ac:
59:ec:ef:73:a1:1c:02:9c:f9:28:13:e8:d8:68:6b:
44:a9:73:ba:dd:e8:1a:1f:4d:66:98:15:50:15:97:
9d:80:f4:97:a7:50:e9:c2:91:7e:7b:4b:ab:0a:cc:
26:e2:66:f6:6d:f5:c3:98:7c:dc:cd:a3:25:b4:2d:
02:4b:75:d6:92:61:19:53:8e:90:27:df:07:5c:7b:
c9:2c:e6:bf:d6:2a:cd:12:a1:6c:1c:de:d8:9b:a7:
12:9e:59:c0:9f:d7:6d:65:67:fb:a7:95:fd:6f:5b:
3b:dd:a9:c5:6f:f5:8a:18:3a:0f:d1:4c:5e:a3:9c:
54:09:a7:1e:0a:87:ff:72:52:db:dd:9f:b4:ca:db:
04:9a:61:e8:e5:9f:51:e6:c8:9d:b6:7c:57:16:d1:
a0:13:2f:e0:5b:98:0a:bd:67:5d:53:eb:90:09:74:
0b:15:6f:4c:cf:77:17:41:e1:be:19:ed:03:e7:ef:
46:93:17:f2:65:1c:be:fe:ae:85:0c:41:22:46:73:
75:a0:4c:1e:59:db:06:89:b8:c5:d6:cd:21:66:71:
d7:d5:d9:16:2c:41:66:05:a7:72:05:83:d6:56:83:
7f:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:EB:AA:10:85:96:12:E6:A2:23:5D:62:E2:BA:3A:F6:64:0F:C7:F3
X509v3 Authority Key Identifier:
keyid:15:FD:B0:88:E9:8E:4E:64:15:D9:44:14:22:12:44:83:69:00:5B:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ff2wiOmOTmQV2UQUIhJEg2kAW0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/cb877c-1699-44b9-9dc5-2f63ab46f31c/1/Ff2wiOmOTmQV2UQUIhJEg2kAW0g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/cb877c-1699-44b9-9dc5-2f63ab46f31c/1/Ff2wiOmOTmQV2UQUIhJEg2kAW0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:b7:b8:b5:f6:f6:5b:23:14:8f:f2:1b:1a:2c:82:93:76:67:
47:7f:ba:db:51:27:06:db:c3:d2:5b:d7:cb:bd:33:5f:7a:9e:
88:5e:85:6c:b8:af:19:36:9f:c2:d6:36:8e:a1:ac:25:5a:db:
a3:f3:b8:3c:42:ce:c0:0c:d5:09:69:a2:c1:73:a8:ef:fc:65:
1f:99:fc:bb:bf:d9:31:06:3a:d0:93:b0:6b:fb:02:dd:39:6c:
52:71:6b:dc:b9:59:8a:4d:0a:2c:3f:0c:84:0b:1c:87:f2:eb:
2f:e1:f3:7a:d5:f8:0c:a7:69:32:0f:d3:7c:70:94:9a:04:d5:
85:18:56:9a:81:14:68:68:20:e5:2f:b7:0a:7c:0f:dc:7d:5a:
e4:f2:67:d0:4a:99:ce:9f:13:08:b2:eb:65:94:f8:8c:d0:c7:
63:d1:3f:d5:e9:1a:e6:ba:bc:fb:ee:94:2d:12:24:3a:24:4f:
dd:64:8c:64:1b:71:02:57:92:58:9a:99:d4:7b:92:aa:19:6a:
bf:ee:d3:7d:b3:1e:ea:45:30:27:3a:ba:bc:e5:e7:eb:6c:7b:
33:dd:a9:0a:b4:ef:28:18:36:01:49:67:64:40:ba:8a:15:9e:
af:99:c7:a5:ab:dc:c0:1e:13:47:71:74:1d:73:0e:0e:26:2b:
7e:39:7f:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 06:50:35 2025 by rpki-client