
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/ec4a2b-76d7-4473-9945-2f2f8b590503/1/FfH7EpA6XNS8F6u1mHPJ1tp-abU.mft
File: FfH7EpA6XNS8F6u1mHPJ1tp-abU.mft (raw, json)
Hash identifier: fp6MN8SAm1c0B5ZhXdMwy6X3nbtKJzUgwIa81/54SjA=
Subject key identifier: 2E:66:F8:FE:EC:A7:5F:06:42:9C:80:9C:70:C8:98:6C:36:37:5E:95
Authority key identifier: 15:F1:FB:12:90:3A:5C:D4:BC:17:AB:B5:98:73:C9:D6:DA:7E:69:B5
Certificate issuer: /CN=15f1fb12903a5cd4bc17abb59873c9d6da7e69b5
Certificate serial: 019A503E14D4CA958B25FC193D61E9DC63AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfH7EpA6XNS8F6u1mHPJ1tp-abU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/ec4a2b-76d7-4473-9945-2f2f8b590503/1/FfH7EpA6XNS8F6u1mHPJ1tp-abU.mft
Manifest number: 04BA
Signing time: Tue 04 Nov 2025 19:00:37 +0000
Manifest this update: Tue 04 Nov 2025 19:00:37 +0000
Manifest next update: Wed 05 Nov 2025 19:00:37 +0000
Files and hashes: 1: AQb4NA0iIwYMaS4khoDyVt9RCG4.roa (hash: 58LXgLCBDudul5koOz+4VHQS0wDCBrVYTUIAiNkgAxo=)
2: FfH7EpA6XNS8F6u1mHPJ1tp-abU.crl (hash: sDH5sf3XgZd4UeFr1+alF1ElSb3aE67sm+WY/NhC5Hc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/ec4a2b-76d7-4473-9945-2f2f8b590503/1/FfH7EpA6XNS8F6u1mHPJ1tp-abU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/ec4a2b-76d7-4473-9945-2f2f8b590503/1/FfH7EpA6XNS8F6u1mHPJ1tp-abU.mft
rsync://rpki.ripe.net/repository/DEFAULT/FfH7EpA6XNS8F6u1mHPJ1tp-abU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3e:14:d4:ca:95:8b:25:fc:19:3d:61:e9:dc:63:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f1fb12903a5cd4bc17abb59873c9d6da7e69b5
Validity
Not Before: Nov 4 19:00:37 2025 GMT
Not After : Nov 5 19:00:37 2025 GMT
Subject: CN=2e66f8feeca75f06429c809c70c8986c36375e95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:bc:0d:77:65:c3:76:93:94:3c:ed:d6:d7:24:
d4:86:ce:35:35:15:ea:48:77:50:ba:01:70:7b:e8:
66:53:65:90:e0:c1:6b:e3:d5:29:12:1f:bc:fd:8f:
0a:1c:af:fc:a8:2b:19:61:43:b5:c9:35:7b:4b:db:
bc:50:dc:56:85:c6:eb:64:eb:6a:8d:45:1e:18:4c:
b2:1b:66:ad:0e:93:1b:98:b0:2e:08:ca:f9:9c:35:
19:26:55:c1:ce:fb:4d:fe:e3:fb:a3:26:a6:1f:a6:
8b:a9:fd:94:ab:5a:0e:63:f9:91:63:81:96:0f:52:
4c:4e:45:2c:f4:73:32:2b:85:78:c0:b7:42:63:87:
81:08:01:4d:87:1c:18:78:86:73:25:64:28:51:c5:
57:ff:9e:32:a6:5f:23:39:b3:4d:03:aa:c0:1b:9f:
47:c8:eb:be:cd:d1:e7:94:78:9c:21:8b:d8:89:0a:
65:cc:09:8f:6c:8b:36:ae:fc:97:f6:91:ee:ee:26:
d6:29:02:0d:1f:91:ba:57:0f:49:11:1a:47:a9:f6:
f3:78:89:89:a5:a3:dc:e7:b8:61:35:e4:b4:54:7d:
3b:8d:66:95:63:4b:b4:b5:73:89:f1:e1:17:4c:c6:
e0:42:35:37:04:2f:20:0f:40:60:83:4b:2a:2d:31:
e3:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:66:F8:FE:EC:A7:5F:06:42:9C:80:9C:70:C8:98:6C:36:37:5E:95
X509v3 Authority Key Identifier:
keyid:15:F1:FB:12:90:3A:5C:D4:BC:17:AB:B5:98:73:C9:D6:DA:7E:69:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfH7EpA6XNS8F6u1mHPJ1tp-abU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ec4a2b-76d7-4473-9945-2f2f8b590503/1/FfH7EpA6XNS8F6u1mHPJ1tp-abU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ec4a2b-76d7-4473-9945-2f2f8b590503/1/FfH7EpA6XNS8F6u1mHPJ1tp-abU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:9e:c2:bf:fc:04:39:f4:80:9f:bd:d6:73:e9:8c:3b:c9:d8:
21:33:62:ab:68:a5:d2:cd:b8:55:a9:0e:b7:d2:66:cc:2f:7f:
55:85:37:01:38:90:c1:14:6b:09:bd:00:e5:85:9d:39:a8:aa:
e8:44:13:da:30:bc:6e:1d:ce:a3:99:77:90:df:0a:c6:3c:eb:
1b:6e:de:9b:e2:44:be:5f:3d:91:05:8f:4a:4e:77:e6:8d:fb:
b2:f5:59:f7:66:77:fc:22:99:1f:e8:c5:b6:4f:0d:73:50:1a:
5b:ba:2e:22:7f:75:75:94:c5:5b:1e:ab:97:14:51:49:f6:e3:
00:b3:a8:fe:22:10:4b:5f:c2:c7:0d:41:93:93:9d:88:31:7c:
7a:93:2a:86:a4:15:32:ea:1c:bc:c9:a8:01:d6:b5:e1:e5:e4:
6f:56:2b:88:b4:bb:82:97:e4:ee:c8:9b:74:24:17:46:f0:45:
41:32:a8:a3:4a:59:fe:20:88:c5:92:39:34:68:f6:d2:2f:94:
fb:0d:2a:1a:f5:65:41:1d:18:d9:66:f5:9c:c5:c8:f0:4f:10:
a0:21:eb:33:32:c9:01:1b:8a:c5:7f:bb:63:9a:da:72:99:30:
eb:d8:b1:09:a2:da:4f:16:58:1c:c7:20:e8:74:e3:95:4d:b4:
06:44:1b:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:43:01 2025 by rpki-client