Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/b9c906-1e85-4573-8f62-8257d51928a9/1/fTXAsgkTXCLMgAWnwuIixjwTbLA.mft
File: fTXAsgkTXCLMgAWnwuIixjwTbLA.mft (raw, json)
Hash identifier: 8lVqT+sq+xW7+tjaA67L0zspOShtgQW24pQ1cF0Dfa8=
Subject key identifier: BF:CB:33:83:AE:8D:DE:B0:0A:03:56:9F:FA:CF:85:C5:D7:89:77:63
Authority key identifier: 7D:35:C0:B2:09:13:5C:22:CC:80:05:A7:C2:E2:22:C6:3C:13:6C:B0
Certificate issuer: /CN=7d35c0b209135c22cc8005a7c2e222c63c136cb0
Certificate serial: 0199FB45D244EB9A177063C03DD1FD0096D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fTXAsgkTXCLMgAWnwuIixjwTbLA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/b9c906-1e85-4573-8f62-8257d51928a9/1/fTXAsgkTXCLMgAWnwuIixjwTbLA.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 07:01:20 +0000
Manifest this update: Sun 19 Oct 2025 07:01:20 +0000
Manifest next update: Mon 20 Oct 2025 07:01:20 +0000
Files and hashes: 1: E008mlaZ-98yoVlxucj25N9tnVo.roa (hash: 7h9j4kfENIh6mVCwgI4OQBIMY0MBjmJwFr/fTNDIJFk=)
2: R2-GAax-KT1qCEjDDbUwaoUFHaY.roa (hash: DTrChNvAxi6mH07womaTROYkgqmDr0mKtOiNc7UHhPs=)
3: fTXAsgkTXCLMgAWnwuIixjwTbLA.crl (hash: dzHSQHU5mz+Cc64Wkgl6yYTb1iYbKQE76CLxMlr/Epw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/b9c906-1e85-4573-8f62-8257d51928a9/1/fTXAsgkTXCLMgAWnwuIixjwTbLA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/b9c906-1e85-4573-8f62-8257d51928a9/1/fTXAsgkTXCLMgAWnwuIixjwTbLA.mft
rsync://rpki.ripe.net/repository/DEFAULT/fTXAsgkTXCLMgAWnwuIixjwTbLA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:45:d2:44:eb:9a:17:70:63:c0:3d:d1:fd:00:96:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d35c0b209135c22cc8005a7c2e222c63c136cb0
Validity
Not Before: Oct 19 07:01:20 2025 GMT
Not After : Oct 20 07:01:20 2025 GMT
Subject: CN=bfcb3383ae8ddeb00a03569ffacf85c5d7897763
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:db:19:54:95:0d:17:7a:ee:07:8a:7a:25:d6:
68:45:6c:71:61:a7:14:d3:64:18:89:00:ef:e3:2f:
b3:aa:19:bb:1c:23:f0:ea:15:bf:73:d8:7b:6b:ec:
11:43:39:59:73:74:60:27:df:89:f1:bb:c6:f1:d0:
b9:52:90:2b:30:91:8d:e3:b6:08:91:61:9a:60:78:
c5:12:9f:4d:0b:9c:76:6a:7a:83:2b:cd:2f:fc:24:
e8:b5:9b:cf:a8:fe:41:1c:a4:31:2a:39:99:62:01:
fb:90:a4:46:fc:55:c7:48:8d:dc:d4:86:f7:fe:6c:
23:55:96:cd:4f:8c:9d:70:8c:21:2c:4a:44:f1:bd:
2f:00:a6:db:6b:28:92:b1:e9:58:56:d2:73:7e:87:
db:ff:4f:42:58:54:49:4f:0b:e1:ae:43:b8:d3:af:
b5:af:46:87:12:09:81:d7:aa:74:21:81:e2:cd:2d:
b2:92:97:30:3f:48:5f:e1:24:e2:40:eb:73:9b:48:
f2:32:5a:41:03:17:d6:e3:7b:d8:d4:fa:0d:d5:4f:
11:a5:b4:6b:53:04:21:f5:2c:ba:4c:bc:b3:bd:ed:
19:ac:52:1c:18:2d:0b:61:8f:66:e8:70:b0:c5:39:
1e:c5:0b:29:45:9e:65:6d:3c:14:21:20:11:a8:08:
93:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:CB:33:83:AE:8D:DE:B0:0A:03:56:9F:FA:CF:85:C5:D7:89:77:63
X509v3 Authority Key Identifier:
keyid:7D:35:C0:B2:09:13:5C:22:CC:80:05:A7:C2:E2:22:C6:3C:13:6C:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fTXAsgkTXCLMgAWnwuIixjwTbLA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b9c906-1e85-4573-8f62-8257d51928a9/1/fTXAsgkTXCLMgAWnwuIixjwTbLA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b9c906-1e85-4573-8f62-8257d51928a9/1/fTXAsgkTXCLMgAWnwuIixjwTbLA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:0f:dd:86:1b:49:68:73:f4:12:70:94:5d:1c:ca:ab:9d:a1:
74:29:0e:2c:93:ab:d2:11:db:a2:5c:9e:12:b4:f9:f2:0b:9f:
de:03:5e:81:6e:8a:94:b8:62:ed:2f:6f:ad:12:bc:a9:b2:97:
80:fd:75:5c:4e:c6:79:42:24:3b:d6:be:c3:a6:c9:13:8a:16:
e4:14:98:05:08:3d:ed:2e:8c:27:1d:bf:ab:bd:2f:6f:fa:05:
22:ba:f3:b8:8c:02:55:f2:48:92:9f:cd:aa:4b:94:cb:5c:fd:
f2:cc:d5:4f:7e:7d:a2:71:1e:ad:0b:90:6f:8c:d7:85:fc:be:
89:04:16:68:54:e5:f6:5c:36:fa:e8:7a:c9:a4:2a:62:86:e6:
44:99:d9:6d:1f:ca:96:45:60:95:39:b9:17:52:25:d4:ff:85:
bd:55:b6:0f:75:81:6b:f1:d2:44:e1:dd:1d:25:92:ad:da:16:
0e:13:b9:cd:ed:f6:00:c2:13:b8:88:7a:09:5e:68:37:10:52:
84:da:cd:25:d4:b1:b1:b9:e8:16:0c:e2:f6:48:7b:9f:b4:e2:
30:9e:88:12:63:ee:8e:64:ac:8d:fe:9f:4f:83:43:81:f7:ac:
4b:1b:bb:45:d7:37:1a:1a:2e:d8:04:f8:c8:bc:bc:d4:81:7f:
61:cd:0f:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:11:27 2025 by rpki-client