Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/b9c906-1e85-4573-8f62-8257d51928a9/1/fTXAsgkTXCLMgAWnwuIixjwTbLA.mft
File: fTXAsgkTXCLMgAWnwuIixjwTbLA.mft (raw, json)
Hash identifier: Aeer4GnAYcqnNAaoB1f+/yuyEiKOBi2nzV/OoOyZoHQ=
Subject key identifier: 9C:E5:99:39:DD:69:6F:75:F0:1F:93:8C:E2:4A:83:FE:38:C2:67:FD
Authority key identifier: 7D:35:C0:B2:09:13:5C:22:CC:80:05:A7:C2:E2:22:C6:3C:13:6C:B0
Certificate issuer: /CN=7d35c0b209135c22cc8005a7c2e222c63c136cb0
Certificate serial: 0197B7EA1CA37D740C43FF0585FECFA636EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fTXAsgkTXCLMgAWnwuIixjwTbLA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/b9c906-1e85-4573-8f62-8257d51928a9/1/fTXAsgkTXCLMgAWnwuIixjwTbLA.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 19:01:02 +0000
Manifest this update: Sat 28 Jun 2025 19:01:02 +0000
Manifest next update: Sun 29 Jun 2025 19:01:02 +0000
Files and hashes: 1: E008mlaZ-98yoVlxucj25N9tnVo.roa (hash: 7h9j4kfENIh6mVCwgI4OQBIMY0MBjmJwFr/fTNDIJFk=)
2: R2-GAax-KT1qCEjDDbUwaoUFHaY.roa (hash: DTrChNvAxi6mH07womaTROYkgqmDr0mKtOiNc7UHhPs=)
3: fTXAsgkTXCLMgAWnwuIixjwTbLA.crl (hash: AirFcTzrne0QMomH1e7cBrCrK7x2x2jwVExAWbH8qFQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/b9c906-1e85-4573-8f62-8257d51928a9/1/fTXAsgkTXCLMgAWnwuIixjwTbLA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/b9c906-1e85-4573-8f62-8257d51928a9/1/fTXAsgkTXCLMgAWnwuIixjwTbLA.mft
rsync://rpki.ripe.net/repository/DEFAULT/fTXAsgkTXCLMgAWnwuIixjwTbLA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:1c:a3:7d:74:0c:43:ff:05:85:fe:cf:a6:36:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d35c0b209135c22cc8005a7c2e222c63c136cb0
Validity
Not Before: Jun 28 19:01:02 2025 GMT
Not After : Jun 29 19:01:02 2025 GMT
Subject: CN=9ce59939dd696f75f01f938ce24a83fe38c267fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:49:63:d4:f5:e3:ce:fc:a3:b5:22:e7:ba:14:
d0:ea:15:ba:3b:8b:02:78:b4:a1:a1:b0:32:29:25:
81:03:22:63:0a:7a:50:fc:0f:89:46:02:6b:da:07:
7c:31:22:98:33:30:ab:c0:09:3d:f0:5e:dd:a9:88:
c7:81:89:d5:12:9a:c3:be:94:56:61:0a:a6:5a:69:
e9:3f:d8:c1:35:27:f0:92:f4:e9:34:68:86:63:6b:
87:4d:81:36:b8:1d:4a:de:58:68:6d:f0:84:2b:fa:
a3:cc:8c:c7:91:13:09:04:bf:16:9f:8f:8f:b0:21:
f3:0a:27:9a:f4:6c:23:de:93:52:71:68:d5:a7:4e:
46:21:b5:c3:ea:88:d1:f3:f1:b4:9f:78:b6:50:ef:
61:2c:a9:6a:d7:a4:d2:a2:cf:29:31:df:8a:3c:a4:
46:0d:10:c3:86:d5:6c:dc:9c:50:34:55:6a:d6:f4:
8b:05:04:d6:35:8a:77:3f:26:f9:da:dd:cb:78:3f:
d3:4a:27:4d:7c:28:a3:d1:3b:30:13:b8:01:eb:dc:
7a:f5:86:dc:a3:1b:0c:0b:95:20:e3:73:15:d8:65:
d4:98:9f:d1:16:a5:70:6d:e7:a6:ee:be:f3:2c:2c:
f3:8c:8a:63:e4:93:9a:5a:11:0d:cc:1c:6f:91:01:
2d:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:E5:99:39:DD:69:6F:75:F0:1F:93:8C:E2:4A:83:FE:38:C2:67:FD
X509v3 Authority Key Identifier:
keyid:7D:35:C0:B2:09:13:5C:22:CC:80:05:A7:C2:E2:22:C6:3C:13:6C:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fTXAsgkTXCLMgAWnwuIixjwTbLA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b9c906-1e85-4573-8f62-8257d51928a9/1/fTXAsgkTXCLMgAWnwuIixjwTbLA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b9c906-1e85-4573-8f62-8257d51928a9/1/fTXAsgkTXCLMgAWnwuIixjwTbLA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:90:6a:9c:fb:db:39:92:1a:e9:22:b2:6e:2e:a3:6b:45:48:
a5:3f:dc:e8:2a:4a:09:e4:86:9d:ef:3a:ef:79:8c:3c:89:66:
f0:66:ca:1c:3b:a8:a7:f0:90:8d:a3:5d:f4:65:4e:93:1c:00:
f5:54:d0:1d:15:8c:30:84:cd:33:74:84:e4:99:60:d0:aa:36:
a6:9b:73:76:9f:04:8d:20:ac:27:23:b2:bf:41:ad:09:64:76:
44:7f:aa:3c:16:7e:fa:00:70:0a:f4:55:58:f9:d0:c8:21:28:
80:76:d0:9b:5c:dd:86:57:e7:ec:67:0e:df:9c:19:8b:05:91:
ba:18:81:be:58:75:76:33:38:0a:6f:1e:67:6c:7b:9e:0a:dc:
f6:5a:50:f1:92:a1:8b:b9:ba:86:75:4d:59:7b:d8:2f:1a:fb:
ea:f3:f2:3f:f0:fc:4c:50:18:2d:52:9d:53:e4:6f:8e:27:d7:
00:9a:9b:31:7a:00:40:6f:51:11:a0:63:e0:46:1d:d0:1e:06:
a9:9d:50:a8:ad:93:d8:40:c1:de:ce:b8:f9:c8:cb:bb:80:7e:
71:77:ae:c6:d6:09:c8:e4:55:6d:73:e5:52:a3:ae:b5:a6:b0:
c4:65:37:ab:fa:50:7d:d6:0d:a0:c9:6d:ed:62:81:2f:82:ac:
11:bc:3e:44
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe36hyjfXQMQ/8Fhf7PpjbsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkMzVjMGIyMDkxMzVjMjJjYzgwMDVhN2MyZTIyMmM2M2Mx
MzZjYjAwHhcNMjUwNjI4MTkwMTAyWhcNMjUwNjI5MTkwMTAyWjAzMTEwLwYDVQQD
Eyg5Y2U1OTkzOWRkNjk2Zjc1ZjAxZjkzOGNlMjRhODNmZTM4YzI2N2ZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn0lj1PXjzvyjtSLnuhTQ6hW6O4sC
eLShobAyKSWBAyJjCnpQ/A+JRgJr2gd8MSKYMzCrwAk98F7dqYjHgYnVEprDvpRW
YQqmWmnpP9jBNSfwkvTpNGiGY2uHTYE2uB1K3lhobfCEK/qjzIzHkRMJBL8Wn4+P
sCHzCiea9Gwj3pNScWjVp05GIbXD6ojR8/G0n3i2UO9hLKlq16TSos8pMd+KPKRG
DRDDhtVs3JxQNFVq1vSLBQTWNYp3Pyb52t3LeD/TSidNfCij0TswE7gB69x69Ybc
oxsMC5Ug43MV2GXUmJ/RFqVwbeem7r7zLCzzjIpj5JOaWhENzBxvkQEt+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJzlmTndaW918B+TjOJKg/44wmf9MB8GA1UdIwQY
MBaAFH01wLIJE1wizIAFp8LiIsY8E2ywMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlRYQXNna1RYQ0xNZ0FXbnd1SWl4andUYkxBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9iOWM5MDYtMWU4NS00NTczLThmNjIt
ODI1N2Q1MTkyOGE5LzEvZlRYQXNna1RYQ0xNZ0FXbnd1SWl4andUYkxBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy9iOWM5MDYtMWU4NS00NTczLThmNjItODI1N2Q1MTkyOGE5
LzEvZlRYQXNna1RYQ0xNZ0FXbnd1SWl4andUYkxBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf5BqnPvb
OZIa6SKybi6ja0VIpT/c6CpKCeSGne8673mMPIlm8GbKHDuop/CQjaNd9GVOkxwA
9VTQHRWMMITNM3SE5Jlg0Ko2pptzdp8EjSCsJyOyv0GtCWR2RH+qPBZ++gBwCvRV
WPnQyCEogHbQm1zdhlfn7GcO35wZiwWRuhiBvlh1djM4Cm8eZ2x7ngrc9lpQ8ZKh
i7m6hnVNWXvYLxr76vPyP/D8TFAYLVKdU+RvjifXAJqbMXoAQG9REaBj4EYd0B4G
qZ1QqK2T2EDB3s64+cjLu4B+cXeuxtYJyORVbXPlUqOutaawxGU3q/pQfdYNoMlt
7WKBL4KsEbw+RA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:55:44 2025 by rpki-client