Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/f952fb-9318-49b6-b946-1e3a195478e0/1/FfiJ_tAIX8IbCPy7slLDEG35mqg.mft
File: FfiJ_tAIX8IbCPy7slLDEG35mqg.mft (raw, json)
Hash identifier: hHF3xPY2tVDd1FEDVHu84DAatkUZ4kuRYrb3Nqo+50s=
Subject key identifier: E7:86:09:AD:93:47:50:9D:0F:3D:D7:74:DF:54:AB:A4:86:63:02:B2
Authority key identifier: 15:F8:89:FE:D0:08:5F:C2:1B:08:FC:BB:B2:52:C3:10:6D:F9:9A:A8
Certificate issuer: /CN=15f889fed0085fc21b08fcbbb252c3106df99aa8
Certificate serial: 019A4E867F257661A038CE8949914FD4AC9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfiJ_tAIX8IbCPy7slLDEG35mqg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/f952fb-9318-49b6-b946-1e3a195478e0/1/FfiJ_tAIX8IbCPy7slLDEG35mqg.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 11:00:28 +0000
Manifest this update: Tue 04 Nov 2025 11:00:28 +0000
Manifest next update: Wed 05 Nov 2025 11:00:28 +0000
Files and hashes: 1: FfiJ_tAIX8IbCPy7slLDEG35mqg.crl (hash: PnB7hTCm+Dp3pGCh1Z8WPJsrhYUjbcQ+lqxvvaYu4Iw=)
2: c7aVec8wRWh2uY_ep7B9EB_Hd_8.roa (hash: IVR9qhn2n9gPQEgDnZi5eZBL8Hlmr2T2MC2szELxnvc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/f952fb-9318-49b6-b946-1e3a195478e0/1/FfiJ_tAIX8IbCPy7slLDEG35mqg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/f952fb-9318-49b6-b946-1e3a195478e0/1/FfiJ_tAIX8IbCPy7slLDEG35mqg.mft
rsync://rpki.ripe.net/repository/DEFAULT/FfiJ_tAIX8IbCPy7slLDEG35mqg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:7f:25:76:61:a0:38:ce:89:49:91:4f:d4:ac:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f889fed0085fc21b08fcbbb252c3106df99aa8
Validity
Not Before: Nov 4 11:00:28 2025 GMT
Not After : Nov 5 11:00:28 2025 GMT
Subject: CN=e78609ad9347509d0f3dd774df54aba4866302b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:d8:62:80:3e:06:d0:7f:e5:9b:d5:6a:b0:67:
21:f4:80:62:39:e6:cb:9f:3c:36:6f:6d:ed:dc:80:
57:89:13:37:9a:f1:41:05:4e:ce:8c:38:47:87:cd:
db:7d:51:cf:8f:38:5e:bb:43:50:62:7f:0c:df:23:
07:a4:1c:f0:0b:2d:c1:27:c4:50:cc:54:f1:d9:2d:
56:1f:c3:3f:8d:1b:df:65:ec:af:5e:97:ae:95:87:
26:41:6d:b8:88:2b:20:fc:be:54:c9:4d:1e:7a:18:
2f:c5:7b:c0:60:64:34:7c:78:28:85:7c:a1:18:70:
a5:66:78:41:10:38:6d:0b:08:76:ea:00:f8:c4:46:
2c:76:d0:35:4d:e5:bf:ce:b7:53:34:46:93:54:8c:
7b:87:e3:96:4f:f0:4c:7f:ff:fa:a0:01:87:53:40:
91:dc:fb:41:43:fd:d6:fe:36:ea:d9:6b:b0:16:87:
04:5d:76:bf:19:4c:07:f6:77:a0:b8:26:2a:6c:df:
60:15:a2:d3:bc:36:33:99:41:6f:d1:81:3c:0b:be:
30:fb:2c:1f:3e:f0:68:f0:e0:0e:2a:ce:0a:31:95:
9f:32:29:75:0d:35:10:7b:87:ec:7c:38:b8:bd:32:
65:be:1b:14:20:7f:ec:8f:58:d6:16:fd:a2:8f:2e:
14:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:86:09:AD:93:47:50:9D:0F:3D:D7:74:DF:54:AB:A4:86:63:02:B2
X509v3 Authority Key Identifier:
keyid:15:F8:89:FE:D0:08:5F:C2:1B:08:FC:BB:B2:52:C3:10:6D:F9:9A:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfiJ_tAIX8IbCPy7slLDEG35mqg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f952fb-9318-49b6-b946-1e3a195478e0/1/FfiJ_tAIX8IbCPy7slLDEG35mqg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f952fb-9318-49b6-b946-1e3a195478e0/1/FfiJ_tAIX8IbCPy7slLDEG35mqg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:65:a1:2f:1d:93:69:6c:db:8c:8f:64:60:81:52:bd:54:5e:
ed:39:d1:f4:b2:12:56:1e:5f:33:91:cd:9c:99:7d:04:cf:8a:
76:90:6e:37:32:25:1d:3a:87:46:9b:f2:cc:6c:d7:84:86:eb:
ca:cd:d0:47:da:70:e2:a0:f0:f6:8e:bd:a4:3f:6a:b6:6b:42:
56:27:3c:4f:fe:ff:71:a1:46:c7:af:e3:fc:8b:f8:6b:ef:ef:
97:c9:47:32:b5:58:b1:2a:46:75:b3:ef:37:d4:83:1b:95:42:
36:73:15:52:f7:64:f9:f1:d4:80:b2:30:0f:8f:54:be:b2:77:
db:b9:60:81:fb:df:40:7c:3f:6d:a5:46:b8:e2:6b:2c:f5:7e:
1a:f6:51:36:2c:3c:52:1f:55:5b:1a:ed:d8:36:32:39:77:46:
9c:16:bd:58:22:cd:44:58:00:a4:39:53:46:77:ad:d8:89:de:
93:52:c9:e4:74:df:f8:95:67:b9:58:0f:8d:84:6e:87:87:b1:
c3:01:ab:94:89:98:95:58:65:78:53:0a:52:d7:5f:13:4c:52:
f8:87:46:27:ae:9d:06:b3:c4:9e:cb:93:a3:f9:70:e1:13:b1:
26:af:9d:eb:22:44:83:3a:e6:34:1d:d7:94:d8:aa:7f:cc:6d:
77:90:7e:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:37:22 2025 by rpki-client