
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/f952fb-9318-49b6-b946-1e3a195478e0/1/FfiJ_tAIX8IbCPy7slLDEG35mqg.mft
File: FfiJ_tAIX8IbCPy7slLDEG35mqg.mft (raw, json)
Hash identifier: Vi6EdnkbKYYw9x3eAr/g8hRPbcOPbNzb1Im3rdEx8PI=
Subject key identifier: 68:2B:4D:AB:E1:B6:FA:04:97:BA:3C:81:6F:14:21:97:13:3E:5B:6E
Authority key identifier: 15:F8:89:FE:D0:08:5F:C2:1B:08:FC:BB:B2:52:C3:10:6D:F9:9A:A8
Certificate issuer: /CN=15f889fed0085fc21b08fcbbb252c3106df99aa8
Certificate serial: 0198744FCC00E44DB6D14F0B52BFE17B2CBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfiJ_tAIX8IbCPy7slLDEG35mqg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/f952fb-9318-49b6-b946-1e3a195478e0/1/FfiJ_tAIX8IbCPy7slLDEG35mqg.mft
Manifest number: 1617
Signing time: Mon 04 Aug 2025 09:00:43 +0000
Manifest this update: Mon 04 Aug 2025 09:00:43 +0000
Manifest next update: Tue 05 Aug 2025 09:00:43 +0000
Files and hashes: 1: 88FJYTd8b-KHdvH7x_K99lUYWdQ.roa (hash: ghtnktZiVNaMUpHUfiZ1KkJiqbduMhbZsfbCJ/7Zf6E=)
2: FfiJ_tAIX8IbCPy7slLDEG35mqg.crl (hash: pcxowIaj2G1x+B3I6rI24rHpP9YekJeJbv3zbZiB03Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/f952fb-9318-49b6-b946-1e3a195478e0/1/FfiJ_tAIX8IbCPy7slLDEG35mqg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/f952fb-9318-49b6-b946-1e3a195478e0/1/FfiJ_tAIX8IbCPy7slLDEG35mqg.mft
rsync://rpki.ripe.net/repository/DEFAULT/FfiJ_tAIX8IbCPy7slLDEG35mqg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:4f:cc:00:e4:4d:b6:d1:4f:0b:52:bf:e1:7b:2c:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f889fed0085fc21b08fcbbb252c3106df99aa8
Validity
Not Before: Aug 4 09:00:43 2025 GMT
Not After : Aug 5 09:00:43 2025 GMT
Subject: CN=682b4dabe1b6fa0497ba3c816f142197133e5b6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:27:45:1e:1b:30:e4:fc:4d:bd:89:80:03:a6:
4f:52:02:2b:64:73:44:97:fa:5e:ca:b2:3e:4b:1d:
88:77:75:7b:7e:de:1b:3d:3d:aa:d3:ea:b6:15:9a:
ef:de:46:ab:02:6d:d2:de:b6:68:0b:73:d5:a0:e0:
7e:83:8c:18:73:a2:42:2e:1a:5b:73:47:f8:a1:b9:
2e:3b:b5:39:3e:3b:46:dd:50:a0:c9:04:20:f6:dd:
dc:6b:bd:e1:cf:56:af:62:7f:b2:c3:15:f3:65:f1:
8c:75:0e:1a:62:14:38:5c:25:a1:e7:ec:db:ce:78:
80:2b:a9:42:30:72:e2:cd:5b:5e:5f:e3:54:5f:d4:
94:7b:ea:06:a2:af:20:96:cf:1d:b9:91:34:02:b5:
9b:cd:30:2e:3e:e0:93:52:18:c1:6e:8c:2f:92:1b:
4b:81:58:ab:28:4c:a1:fb:e2:77:a3:49:3f:10:0a:
14:7e:d8:e9:2c:f5:27:4f:e1:dc:ca:e3:c5:af:de:
16:79:61:e8:82:64:93:fb:8d:12:9a:8e:ff:21:ee:
24:9f:3a:fc:9c:4b:95:13:b9:1d:49:28:d5:6c:ff:
f7:e3:63:cb:c1:60:e4:a9:f2:7e:f4:2e:8b:ac:8c:
eb:c4:a1:d3:3b:15:91:46:8c:bd:05:4c:79:e8:6f:
d8:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:2B:4D:AB:E1:B6:FA:04:97:BA:3C:81:6F:14:21:97:13:3E:5B:6E
X509v3 Authority Key Identifier:
keyid:15:F8:89:FE:D0:08:5F:C2:1B:08:FC:BB:B2:52:C3:10:6D:F9:9A:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfiJ_tAIX8IbCPy7slLDEG35mqg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f952fb-9318-49b6-b946-1e3a195478e0/1/FfiJ_tAIX8IbCPy7slLDEG35mqg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f952fb-9318-49b6-b946-1e3a195478e0/1/FfiJ_tAIX8IbCPy7slLDEG35mqg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:35:8a:8c:a9:ca:2a:9b:64:21:59:d6:ed:83:2b:5a:d5:6b:
31:1b:91:df:f6:14:ae:f3:07:02:97:a0:9c:84:79:20:21:bc:
bb:82:12:8d:8c:b0:9a:e9:2a:52:38:e4:37:c2:4d:19:17:54:
1f:8c:62:ec:55:ff:1c:1c:05:b2:8c:08:1f:74:7e:ca:11:f6:
24:c0:e5:ce:74:70:bf:4f:31:37:30:52:05:6d:ea:71:a7:1b:
2e:82:aa:f6:9e:db:d3:f1:40:52:ec:2e:e6:fd:d6:43:b3:0c:
37:47:0f:76:d8:f5:a7:d7:4d:8e:01:04:05:0e:f8:a8:5b:97:
61:b9:a0:f0:10:41:16:c5:c0:b9:f1:18:cb:8b:19:7a:6a:c0:
42:51:3c:68:82:6b:f4:8a:5a:be:8c:db:e1:7d:3b:3b:a6:07:
0a:9b:58:36:82:4b:0a:41:c6:f5:ba:2c:3f:52:2d:3a:66:20:
2a:ed:e8:62:84:eb:82:31:47:e0:86:e4:26:68:72:d1:98:fa:
cd:45:a5:7b:e0:b7:c8:80:d2:b6:e1:d1:b6:76:0d:88:05:60:
05:91:6b:61:cb:6a:73:f6:0a:34:fc:c3:d9:98:c0:b5:d1:49:
fd:30:bc:34:14:34:50:2e:6d:8d:7a:ab:9d:49:e0:4d:6a:c3:
c0:27:57:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh0T8wA5E220U8LUr/heyy+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1Zjg4OWZlZDAwODVmYzIxYjA4ZmNiYmIyNTJjMzEwNmRm
OTlhYTgwHhcNMjUwODA0MDkwMDQzWhcNMjUwODA1MDkwMDQzWjAzMTEwLwYDVQQD
Eyg2ODJiNGRhYmUxYjZmYTA0OTdiYTNjODE2ZjE0MjE5NzEzM2U1YjZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9CdFHhsw5PxNvYmAA6ZPUgIrZHNE
l/peyrI+Sx2Id3V7ft4bPT2q0+q2FZrv3karAm3S3rZoC3PVoOB+g4wYc6JCLhpb
c0f4obkuO7U5PjtG3VCgyQQg9t3ca73hz1avYn+ywxXzZfGMdQ4aYhQ4XCWh5+zb
zniAK6lCMHLizVteX+NUX9SUe+oGoq8gls8duZE0ArWbzTAuPuCTUhjBbowvkhtL
gVirKEyh++J3o0k/EAoUftjpLPUnT+HcyuPFr94WeWHogmST+40Smo7/Ie4knzr8
nEuVE7kdSSjVbP/342PLwWDkqfJ+9C6LrIzrxKHTOxWRRoy9BUx56G/YcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGgrTavhtvoEl7o8gW8UIZcTPltuMB8GA1UdIwQY
MBaAFBX4if7QCF/CGwj8u7JSwxBt+ZqoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmZpSl90QUlYOEliQ1B5N3NsTERFRzM1bXFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC9mOTUyZmItOTMxOC00OWI2LWI5NDYt
MWUzYTE5NTQ3OGUwLzEvRmZpSl90QUlYOEliQ1B5N3NsTERFRzM1bXFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC9mOTUyZmItOTMxOC00OWI2LWI5NDYtMWUzYTE5NTQ3OGUw
LzEvRmZpSl90QUlYOEliQ1B5N3NsTERFRzM1bXFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAljWKjKnK
KptkIVnW7YMrWtVrMRuR3/YUrvMHApegnIR5ICG8u4ISjYywmukqUjjkN8JNGRdU
H4xi7FX/HBwFsowIH3R+yhH2JMDlznRwv08xNzBSBW3qcacbLoKq9p7b0/FAUuwu
5v3WQ7MMN0cPdtj1p9dNjgEEBQ74qFuXYbmg8BBBFsXAufEYy4sZemrAQlE8aIJr
9Ipavozb4X07O6YHCptYNoJLCkHG9bosP1ItOmYgKu3oYoTrgjFH4IbkJmhy0Zj6
zUWle+C3yIDStuHRtnYNiAVgBZFrYctqc/YKNPzD2ZjAtdFJ/TC8NBQ0UC5tjXqr
nUngTWrDwCdX9g==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:05:34 2025 by rpki-client