Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/be3c40-1210-4272-a5ea-7835d3208396/1/Ff04BOALngaoLO2fB7NP4_2AOU4.mft
File: Ff04BOALngaoLO2fB7NP4_2AOU4.mft (raw, json)
Hash identifier: f0d8mR1MvV0piWORrfFDZWBRsYnmUpBrX3f/1RBSYKY=
Subject key identifier: 41:3C:52:AA:F3:A0:9C:87:B3:9E:47:30:AF:C3:00:84:27:AF:21:7B
Authority key identifier: 15:FD:38:04:E0:0B:9E:06:A8:2C:ED:9F:07:B3:4F:E3:FD:80:39:4E
Certificate issuer: /CN=15fd3804e00b9e06a82ced9f07b34fe3fd80394e
Certificate serial: 01987AF68A2E5DE6B0CDE00AE9FE082775E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ff04BOALngaoLO2fB7NP4_2AOU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/be3c40-1210-4272-a5ea-7835d3208396/1/Ff04BOALngaoLO2fB7NP4_2AOU4.mft
Manifest number: 0DA5
Signing time: Tue 05 Aug 2025 16:00:34 +0000
Manifest this update: Tue 05 Aug 2025 16:00:34 +0000
Manifest next update: Wed 06 Aug 2025 16:00:34 +0000
Files and hashes: 1: Ff04BOALngaoLO2fB7NP4_2AOU4.crl (hash: MW/4Yhezd80xZYNlUgH9d/NkNmtrTkKOJv6w/n5U89M=)
2: sD3TQhmqpMeiNDRMe_Cg9c8gcQg.roa (hash: YpFE/XWsvo+iSqItJdBs7pFneblfjbKHabl7GMSfsrA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/be3c40-1210-4272-a5ea-7835d3208396/1/Ff04BOALngaoLO2fB7NP4_2AOU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/be3c40-1210-4272-a5ea-7835d3208396/1/Ff04BOALngaoLO2fB7NP4_2AOU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ff04BOALngaoLO2fB7NP4_2AOU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 14:37:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7a:f6:8a:2e:5d:e6:b0:cd:e0:0a:e9:fe:08:27:75:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15fd3804e00b9e06a82ced9f07b34fe3fd80394e
Validity
Not Before: Aug 5 16:00:34 2025 GMT
Not After : Aug 6 16:00:34 2025 GMT
Subject: CN=413c52aaf3a09c87b39e4730afc3008427af217b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:1d:11:2b:9f:c2:ec:c9:f8:03:80:9b:69:f3:
8f:df:45:a0:8f:4b:54:dd:bf:cc:b6:95:8e:a2:99:
33:2d:2b:f7:a4:fd:97:bb:e2:57:39:ea:48:92:b6:
79:63:b5:d4:98:d1:51:66:60:8d:a4:41:56:f6:9f:
69:97:64:c8:c5:7f:94:f9:c9:ce:b8:51:15:51:f5:
86:56:da:28:82:14:4a:31:d1:11:a7:3b:43:a2:84:
e7:13:76:cc:49:13:62:fb:7d:8d:74:c7:83:ec:ce:
5a:24:f0:25:01:dd:4a:52:1b:14:10:c1:5a:df:fa:
33:a8:fe:b9:f0:19:4e:5e:80:fc:04:2f:24:fb:b0:
cf:1a:d2:bd:71:7c:cb:ef:12:0c:5d:ef:a3:1c:9c:
64:1e:ac:05:62:68:39:24:81:a3:a9:a5:28:69:30:
6c:97:95:0f:38:e9:7e:f0:a3:f3:36:62:8d:9c:b5:
02:3a:f5:65:9b:fa:df:ce:68:4f:a5:4b:57:ab:ac:
0d:e6:7d:51:1e:72:9d:65:5d:d4:5a:5b:3b:38:ad:
85:48:57:b0:1c:dc:fc:79:a3:25:24:42:47:f8:a7:
9d:cd:9c:4d:26:e1:2d:6f:1a:d8:67:6a:bc:4d:a4:
3a:97:1c:bf:98:c6:47:49:83:7a:57:5e:93:6f:eb:
19:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:3C:52:AA:F3:A0:9C:87:B3:9E:47:30:AF:C3:00:84:27:AF:21:7B
X509v3 Authority Key Identifier:
keyid:15:FD:38:04:E0:0B:9E:06:A8:2C:ED:9F:07:B3:4F:E3:FD:80:39:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ff04BOALngaoLO2fB7NP4_2AOU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/be3c40-1210-4272-a5ea-7835d3208396/1/Ff04BOALngaoLO2fB7NP4_2AOU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/be3c40-1210-4272-a5ea-7835d3208396/1/Ff04BOALngaoLO2fB7NP4_2AOU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:ce:64:a1:11:6f:c3:3f:dc:4d:40:09:95:fe:c5:75:23:15:
8b:3a:a5:bc:3f:d3:fe:30:9b:a9:24:34:e0:d6:f5:c6:4f:2d:
a1:66:71:8d:07:1f:cc:27:00:a5:82:32:23:71:fd:61:b6:73:
2e:19:03:77:84:6a:07:ef:c0:bc:d4:b9:fe:63:3d:6c:fd:d0:
fe:1d:f2:5b:11:6f:5e:8e:be:ca:0d:fa:f2:db:9c:b1:d4:00:
ea:94:40:e4:41:a8:e9:36:4d:fd:d4:49:1c:c9:6c:c9:c2:3a:
8a:85:db:c8:de:6c:38:fd:f1:7c:71:03:d2:34:e1:1f:c7:6b:
e0:57:7d:95:9b:23:72:54:45:cb:a1:bb:c2:d2:f3:df:b5:a9:
24:a5:f2:83:88:47:19:f8:c1:97:5d:18:8e:94:95:65:b1:f6:
85:6a:e8:b4:22:82:00:b2:94:0d:2b:99:0f:75:d4:1e:9a:56:
05:81:99:dc:c8:7d:e1:e5:dc:b9:b9:7c:6a:8b:09:88:60:9a:
ec:83:af:84:bd:a7:83:d1:11:f4:66:d9:ee:39:2a:91:e6:14:
f0:28:48:e2:4f:50:4a:9f:f8:8e:c4:d3:39:80:fd:c6:30:61:
a1:23:49:a6:c8:de:19:f0:81:79:43:85:38:e6:9e:f9:a4:a0:
53:af:2e:c1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh69oouXeawzeAK6f4IJ3XoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1ZmQzODA0ZTAwYjllMDZhODJjZWQ5ZjA3YjM0ZmUzZmQ4
MDM5NGUwHhcNMjUwODA1MTYwMDM0WhcNMjUwODA2MTYwMDM0WjAzMTEwLwYDVQQD
Eyg0MTNjNTJhYWYzYTA5Yzg3YjM5ZTQ3MzBhZmMzMDA4NDI3YWYyMTdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyh0RK5/C7Mn4A4CbafOP30Wgj0tU
3b/MtpWOopkzLSv3pP2Xu+JXOepIkrZ5Y7XUmNFRZmCNpEFW9p9pl2TIxX+U+cnO
uFEVUfWGVtooghRKMdERpztDooTnE3bMSRNi+32NdMeD7M5aJPAlAd1KUhsUEMFa
3/ozqP658BlOXoD8BC8k+7DPGtK9cXzL7xIMXe+jHJxkHqwFYmg5JIGjqaUoaTBs
l5UPOOl+8KPzNmKNnLUCOvVlm/rfzmhPpUtXq6wN5n1RHnKdZV3UWls7OK2FSFew
HNz8eaMlJEJH+KedzZxNJuEtbxrYZ2q8TaQ6lxy/mMZHSYN6V16Tb+sZdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEE8UqrzoJyHs55HMK/DAIQnryF7MB8GA1UdIwQY
MBaAFBX9OATgC54GqCztnwezT+P9gDlOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmYwNEJPQUxuZ2FvTE8yZkI3TlA0XzJBT1U0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS9iZTNjNDAtMTIxMC00MjcyLWE1ZWEt
NzgzNWQzMjA4Mzk2LzEvRmYwNEJPQUxuZ2FvTE8yZkI3TlA0XzJBT1U0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS9iZTNjNDAtMTIxMC00MjcyLWE1ZWEtNzgzNWQzMjA4Mzk2
LzEvRmYwNEJPQUxuZ2FvTE8yZkI3TlA0XzJBT1U0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR85koRFv
wz/cTUAJlf7FdSMVizqlvD/T/jCbqSQ04Nb1xk8toWZxjQcfzCcApYIyI3H9YbZz
LhkDd4RqB+/AvNS5/mM9bP3Q/h3yWxFvXo6+yg368tucsdQA6pRA5EGo6TZN/dRJ
HMlsycI6ioXbyN5sOP3xfHED0jThH8dr4Fd9lZsjclRFy6G7wtLz37WpJKXyg4hH
GfjBl10YjpSVZbH2hWrotCKCALKUDSuZD3XUHppWBYGZ3Mh94eXcubl8aosJiGCa
7IOvhL2ng9ER9GbZ7jkqkeYU8ChI4k9QSp/4jsTTOYD9xjBhoSNJpsjeGfCBeUOF
OOae+aSgU68uwQ==
-----END CERTIFICATE-----
Generated at Tue Aug 5 23:04:07 2025 by rpki-client