Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/3925e9-65ea-462e-ae28-d2c29dc042e7/1/ffCJfqs-7W4k7d1nbov5N3-0SAw.mft
File: ffCJfqs-7W4k7d1nbov5N3-0SAw.mft (raw, json)
Hash identifier: +m0TKQIaEwnIHPCNv1AZtJ6MUPhfD/HGjhSl9pcF9YA=
Subject key identifier: EE:F8:94:87:23:C1:E2:B2:6D:31:C0:E6:73:E6:A1:56:31:DF:E2:CB
Authority key identifier: 7D:F0:89:7E:AB:3E:ED:6E:24:ED:DD:67:6E:8B:F9:37:7F:B4:48:0C
Certificate issuer: /CN=7df0897eab3eed6e24eddd676e8bf9377fb4480c
Certificate serial: 01987975FCC683F454436E9EDF548A003381
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ffCJfqs-7W4k7d1nbov5N3-0SAw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/3925e9-65ea-462e-ae28-d2c29dc042e7/1/ffCJfqs-7W4k7d1nbov5N3-0SAw.mft
Manifest number: 0708
Signing time: Tue 05 Aug 2025 09:00:32 +0000
Manifest this update: Tue 05 Aug 2025 09:00:32 +0000
Manifest next update: Wed 06 Aug 2025 09:00:32 +0000
Files and hashes: 1: H_2gNWDkQMk7xYa4CXE3bEG8_PQ.roa (hash: 966jsInoUQGV3YL0kBV6Ow41AMogxPqqfWLLamybyOw=)
2: ffCJfqs-7W4k7d1nbov5N3-0SAw.crl (hash: OGsZPPT6EbpXFpSQrTPWEeEcNGnE1MHZsqn6pVch+RA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/3925e9-65ea-462e-ae28-d2c29dc042e7/1/ffCJfqs-7W4k7d1nbov5N3-0SAw.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/3925e9-65ea-462e-ae28-d2c29dc042e7/1/ffCJfqs-7W4k7d1nbov5N3-0SAw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ffCJfqs-7W4k7d1nbov5N3-0SAw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 09:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:79:75:fc:c6:83:f4:54:43:6e:9e:df:54:8a:00:33:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7df0897eab3eed6e24eddd676e8bf9377fb4480c
Validity
Not Before: Aug 5 09:00:32 2025 GMT
Not After : Aug 6 09:00:32 2025 GMT
Subject: CN=eef8948723c1e2b26d31c0e673e6a15631dfe2cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a3:2a:f9:82:db:1f:6a:62:ca:3a:bf:15:c2:
90:e4:b7:9f:f1:f9:66:f8:65:b9:a4:0c:93:ce:94:
d8:dc:8f:ca:9b:46:4e:40:91:79:86:d8:14:55:c3:
29:e7:77:da:f1:d4:8f:b7:e0:4a:6c:ba:ae:ab:89:
11:01:e2:e2:29:cd:c3:ea:0a:6b:c0:f1:ec:96:d0:
61:37:19:d0:60:80:28:9c:4b:4d:45:c4:d4:01:d7:
5e:a1:92:23:f0:24:ba:b8:e4:39:77:9e:bf:d0:ef:
01:03:ff:f6:d8:44:ea:77:51:b0:ad:be:f1:d1:30:
19:ba:05:6a:95:85:00:af:d4:d9:46:bc:fa:2e:56:
6e:93:a4:e0:e3:1b:85:e8:90:fe:2c:f6:cd:67:ac:
91:b3:5a:70:80:10:28:ee:48:af:bf:40:2b:87:ad:
7a:dd:e4:ba:88:b1:1f:55:d1:f3:8f:18:e5:0a:1e:
94:33:9c:d1:d6:30:ff:a9:1f:3c:86:46:be:2c:4c:
32:e0:c9:a7:31:eb:41:17:7d:b4:8d:40:76:76:03:
b0:3e:03:c8:27:af:a6:df:ac:14:40:4f:c4:5b:04:
23:f7:a1:74:f3:10:4f:a9:ff:41:04:4b:ec:23:23:
b1:e7:42:11:35:90:05:0f:b1:51:26:dc:75:6a:4a:
9a:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:F8:94:87:23:C1:E2:B2:6D:31:C0:E6:73:E6:A1:56:31:DF:E2:CB
X509v3 Authority Key Identifier:
keyid:7D:F0:89:7E:AB:3E:ED:6E:24:ED:DD:67:6E:8B:F9:37:7F:B4:48:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffCJfqs-7W4k7d1nbov5N3-0SAw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/3925e9-65ea-462e-ae28-d2c29dc042e7/1/ffCJfqs-7W4k7d1nbov5N3-0SAw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/3925e9-65ea-462e-ae28-d2c29dc042e7/1/ffCJfqs-7W4k7d1nbov5N3-0SAw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:3b:f7:7a:e9:c7:ff:cb:9a:45:40:6c:52:f6:5d:1b:9f:3d:
19:05:07:c5:3a:f4:50:f3:64:de:a6:14:8b:ab:01:46:68:83:
04:20:2d:55:ec:34:e7:3b:d7:41:48:8e:54:12:65:3b:a8:a1:
d4:4b:f9:69:23:09:6e:2d:a9:54:37:76:d9:a8:e8:e0:1a:6d:
4d:0c:73:2c:25:44:e3:b7:78:7e:f8:60:06:21:d7:e5:1b:29:
00:f7:3b:d9:03:66:a2:88:21:47:a9:bf:f3:c7:ae:ab:74:2d:
bd:e2:59:43:87:33:b0:83:77:7d:f0:62:28:1c:6e:06:39:f4:
02:bc:d0:54:c1:f1:ce:03:ab:02:6b:32:68:7f:09:26:c3:f9:
20:a4:71:f6:4f:41:d7:6d:46:b8:17:ba:b1:b3:91:41:60:ff:
87:e6:c6:03:39:bb:fa:fb:2c:b7:8a:27:db:dd:82:85:58:40:
66:a6:43:71:28:fd:3f:61:a8:ea:84:31:5d:dd:c8:bc:6e:09:
8c:32:e7:30:1a:49:ae:97:27:dc:ff:95:c3:25:f6:df:48:64:
d4:f0:83:d5:c1:22:67:1b:62:f7:22:5e:d7:21:72:5c:71:1a:
e8:25:30:1e:20:32:4f:b8:ba:8d:08:1e:b5:a5:fd:92:c3:61:
3a:10:f2:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 16:47:20 2025 by rpki-client