Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/f0832e-675b-4ec2-a802-9b26cab79451/1/FFXKMFkjEziJJe4UQQCa0x1LtB8.mft
File: FFXKMFkjEziJJe4UQQCa0x1LtB8.mft (raw, json)
Hash identifier: fSEXwxvHzA0ZRmGVgBfgu5MEDnkEykPzqIWBVnroshI=
Subject key identifier: 34:C3:AF:80:CC:CE:66:4F:C3:76:CA:8B:83:90:01:F9:20:68:E9:D8
Authority key identifier: 14:55:CA:30:59:23:13:38:89:25:EE:14:41:00:9A:D3:1D:4B:B4:1F
Certificate issuer: /CN=1455ca30592313388925ee1441009ad31d4bb41f
Certificate serial: 019A52630277F7710DBD83147369FABD829F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FFXKMFkjEziJJe4UQQCa0x1LtB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/f0832e-675b-4ec2-a802-9b26cab79451/1/FFXKMFkjEziJJe4UQQCa0x1LtB8.mft
Manifest number: 0158
Signing time: Wed 05 Nov 2025 05:00:11 +0000
Manifest this update: Wed 05 Nov 2025 05:00:11 +0000
Manifest next update: Thu 06 Nov 2025 05:00:11 +0000
Files and hashes: 1: C93S1dgJ4_A0KrqfhcJ2wbpt_r8.roa (hash: msQwNZJRyoBH47m4enHwmGpM3uJN0VQWiUcpw8JNFl4=)
2: FFXKMFkjEziJJe4UQQCa0x1LtB8.crl (hash: lmZiDZ9KVfYXykn6bW6F0RtjVzszujJmviMHvVHMGmY=)
3: VQlcAscFdh0J4xPTNEltNmOm0pM.roa (hash: FpJBUNA/PxvqCTcDhgg5jBSXRUYz8a5StP5dcgti0hc=)
4: wcv6Vtvj_8KzJMQubxYX_mtNkA0.roa (hash: 0NzmIEPG+guESJal/NU9sf3xAOXj6eL+XwYUVrhagog=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/f0832e-675b-4ec2-a802-9b26cab79451/1/FFXKMFkjEziJJe4UQQCa0x1LtB8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/f0832e-675b-4ec2-a802-9b26cab79451/1/FFXKMFkjEziJJe4UQQCa0x1LtB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/FFXKMFkjEziJJe4UQQCa0x1LtB8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:63:02:77:f7:71:0d:bd:83:14:73:69:fa:bd:82:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1455ca30592313388925ee1441009ad31d4bb41f
Validity
Not Before: Nov 5 05:00:11 2025 GMT
Not After : Nov 6 05:00:11 2025 GMT
Subject: CN=34c3af80ccce664fc376ca8b839001f92068e9d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:2a:6b:ca:80:13:25:8b:49:17:a3:fa:a9:e6:
dc:02:21:05:2f:c2:1f:94:e4:71:bb:e1:40:39:d5:
87:c3:6f:50:02:ab:96:54:27:7e:c9:0c:b1:db:91:
cb:fd:9d:f0:de:b1:ad:0c:fd:cc:72:81:34:eb:45:
fa:9b:5a:c8:3e:06:6d:38:05:48:32:24:5b:67:64:
57:9a:73:af:08:51:b0:d6:23:eb:71:9b:af:eb:8b:
36:f5:ee:60:80:82:e5:34:05:ac:a1:81:9d:94:1f:
7e:9e:77:95:a4:96:ec:53:9d:a2:c5:84:bb:47:ba:
7e:42:07:3e:dd:99:26:4e:2f:29:e6:f2:87:75:40:
92:27:ce:25:c7:78:67:d5:db:5f:6d:10:bf:5e:71:
1b:d3:45:5c:d7:bd:4b:f9:c3:e6:0e:76:0a:93:b5:
ea:e9:b2:e2:ad:0f:04:db:01:48:c1:04:de:f7:8e:
9a:82:2e:40:74:7a:f4:2b:14:64:07:a2:25:c1:32:
4c:26:76:91:af:61:d3:d5:83:5b:f3:45:ee:1f:fe:
24:c6:cc:79:69:d6:d3:da:85:3c:c3:ce:5c:f6:25:
ed:41:09:27:f1:c8:a0:27:67:71:51:be:cb:54:07:
4f:3b:c6:97:32:5e:cf:07:22:61:44:ec:46:75:28:
79:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:C3:AF:80:CC:CE:66:4F:C3:76:CA:8B:83:90:01:F9:20:68:E9:D8
X509v3 Authority Key Identifier:
keyid:14:55:CA:30:59:23:13:38:89:25:EE:14:41:00:9A:D3:1D:4B:B4:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FFXKMFkjEziJJe4UQQCa0x1LtB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f0832e-675b-4ec2-a802-9b26cab79451/1/FFXKMFkjEziJJe4UQQCa0x1LtB8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f0832e-675b-4ec2-a802-9b26cab79451/1/FFXKMFkjEziJJe4UQQCa0x1LtB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:40:3a:14:73:bb:a6:f7:69:ab:d3:91:6f:dc:e5:4c:a8:cb:
45:e9:44:c8:8c:aa:bd:6c:95:d6:ae:ba:c5:68:33:53:39:1f:
95:0e:3e:46:d5:11:b6:ba:8a:74:96:f9:1c:97:0e:e4:a7:25:
4d:d1:69:bc:27:7a:8b:5a:98:65:47:40:97:60:25:7c:5a:cc:
3e:5a:e9:90:12:ee:e5:9e:dc:95:bd:26:94:8d:c7:6d:93:22:
09:17:12:9a:0f:d1:74:41:76:67:5c:59:0d:0b:8b:95:62:5e:
72:56:58:c3:9d:fd:b5:88:a6:d1:0d:99:84:9e:30:ae:2a:90:
15:4d:0a:64:76:63:6e:65:74:d9:37:5a:c8:72:2f:97:9e:a6:
6c:0b:44:08:d9:11:94:0f:60:c3:8b:d0:f7:24:6c:62:63:ea:
3d:a2:65:c5:7e:83:4e:cb:86:85:99:a2:2f:eb:5f:98:40:ab:
26:96:98:cf:ed:d1:c5:6e:12:68:4b:b1:2a:fc:f3:52:03:3f:
2f:4c:5b:a8:94:6e:d5:f0:16:a7:e5:33:0d:3d:9d:69:15:fa:
d3:0c:d4:23:dc:02:da:f8:13:b5:08:3a:7d:f3:96:3c:57:1f:
52:41:1b:8b:6c:54:83:a8:e5:8c:dd:23:a1:e6:7f:5b:24:8e:
5b:3c:8f:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:42:29 2025 by rpki-client