Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/b9c906-1e85-4573-8f62-8257d51928a9/1/fTXAsgkTXCLMgAWnwuIixjwTbLA.mft
File: fTXAsgkTXCLMgAWnwuIixjwTbLA.mft (raw, json)
Hash identifier: Q0xZOteXiIZx6xZbFl0bTm6YuW55Pn+T0G9k/DOMtH4=
Subject key identifier: 21:9B:7C:42:29:77:B3:57:EA:B6:99:1E:6F:51:4F:5D:A7:63:4E:A6
Authority key identifier: 7D:35:C0:B2:09:13:5C:22:CC:80:05:A7:C2:E2:22:C6:3C:13:6C:B0
Certificate issuer: /CN=7d35c0b209135c22cc8005a7c2e222c63c136cb0
Certificate serial: 0198D5BBBA3A6EE64A747A2874300A75B0E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fTXAsgkTXCLMgAWnwuIixjwTbLA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/b9c906-1e85-4573-8f62-8257d51928a9/1/fTXAsgkTXCLMgAWnwuIixjwTbLA.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 07:01:46 +0000
Manifest this update: Sat 23 Aug 2025 07:01:46 +0000
Manifest next update: Sun 24 Aug 2025 07:01:46 +0000
Files and hashes: 1: E008mlaZ-98yoVlxucj25N9tnVo.roa (hash: 7h9j4kfENIh6mVCwgI4OQBIMY0MBjmJwFr/fTNDIJFk=)
2: R2-GAax-KT1qCEjDDbUwaoUFHaY.roa (hash: DTrChNvAxi6mH07womaTROYkgqmDr0mKtOiNc7UHhPs=)
3: fTXAsgkTXCLMgAWnwuIixjwTbLA.crl (hash: qydZcNILK5j5sw3Bpp9kRAJDbu8lfrvizSm6NC6BEF8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/b9c906-1e85-4573-8f62-8257d51928a9/1/fTXAsgkTXCLMgAWnwuIixjwTbLA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/b9c906-1e85-4573-8f62-8257d51928a9/1/fTXAsgkTXCLMgAWnwuIixjwTbLA.mft
rsync://rpki.ripe.net/repository/DEFAULT/fTXAsgkTXCLMgAWnwuIixjwTbLA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:ba:3a:6e:e6:4a:74:7a:28:74:30:0a:75:b0:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d35c0b209135c22cc8005a7c2e222c63c136cb0
Validity
Not Before: Aug 23 07:01:46 2025 GMT
Not After : Aug 24 07:01:46 2025 GMT
Subject: CN=219b7c422977b357eab6991e6f514f5da7634ea6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:18:12:1d:71:0b:46:1c:65:2c:e5:6e:df:b7:
e9:d5:74:8c:78:dc:a6:9a:10:59:d3:d8:17:15:ee:
e7:7d:be:1b:13:8b:b7:ee:78:91:8d:a3:49:73:1c:
df:6f:c0:90:55:22:f6:80:07:90:ee:38:0f:13:c5:
a0:88:96:12:33:48:82:5f:27:38:e8:9a:07:f6:95:
cd:4c:47:f0:30:28:09:ef:e9:9d:6e:3a:f6:75:17:
5d:85:63:0d:5d:cc:7f:c8:a8:2c:a9:cd:49:a8:77:
e4:c8:09:73:fc:b3:c8:8f:76:17:9e:a5:35:91:60:
b7:70:88:33:21:79:ab:3f:93:fd:86:00:d4:5d:ea:
01:4d:ca:89:e4:ee:ea:ab:63:ee:35:a3:50:ee:31:
74:84:f2:dd:0b:82:18:b2:a6:e3:b3:c2:73:d9:14:
28:89:5e:10:6a:1c:81:83:d4:b8:74:bd:e0:75:a1:
93:d9:b0:96:6d:26:00:b4:e5:87:23:7d:29:1c:f3:
fd:0b:93:c7:ad:e3:66:30:49:4a:8b:89:68:3a:18:
e8:e0:0e:66:6b:7a:16:1b:d7:78:f8:1b:35:25:8f:
d4:d1:47:73:1d:e1:78:6e:c3:54:04:13:51:5f:a9:
d1:1b:9b:c8:62:c7:94:5c:2c:91:31:53:48:52:e8:
b8:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:9B:7C:42:29:77:B3:57:EA:B6:99:1E:6F:51:4F:5D:A7:63:4E:A6
X509v3 Authority Key Identifier:
keyid:7D:35:C0:B2:09:13:5C:22:CC:80:05:A7:C2:E2:22:C6:3C:13:6C:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fTXAsgkTXCLMgAWnwuIixjwTbLA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b9c906-1e85-4573-8f62-8257d51928a9/1/fTXAsgkTXCLMgAWnwuIixjwTbLA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b9c906-1e85-4573-8f62-8257d51928a9/1/fTXAsgkTXCLMgAWnwuIixjwTbLA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:ff:f1:47:19:c2:1c:af:ca:aa:7c:ec:8d:84:d5:f0:fb:90:
db:0d:fa:10:27:29:03:3f:ed:e3:1a:64:f5:66:34:db:0d:51:
f5:f5:3a:76:a1:da:fb:b5:1d:bb:3f:04:37:10:a8:03:d0:02:
71:a2:16:41:17:30:af:53:10:74:42:98:33:4b:2d:47:07:4b:
1d:d6:36:75:bb:80:86:d6:2e:31:c3:b8:92:3c:e6:a6:91:43:
54:e7:d5:d5:13:99:03:88:59:6c:f7:b5:56:0d:f6:c2:6d:a1:
15:40:79:71:e8:1d:00:65:7b:63:09:a0:99:ae:89:e6:ae:6b:
19:64:9b:08:66:8e:43:31:37:c9:d4:4d:0c:79:c2:9f:bb:3d:
34:ba:53:eb:97:db:bf:68:ff:ad:af:85:37:b6:0c:8e:25:92:
12:4a:ca:4e:6d:0d:c4:b2:b3:7a:7b:0f:44:f0:40:70:15:b3:
4e:e0:f2:96:58:70:5c:ed:3f:ed:60:80:10:1d:b6:bd:af:29:
f9:9a:a8:03:ec:0b:aa:01:73:fd:7d:c3:be:15:d6:08:e5:e1:
3c:e3:7e:e3:79:82:fa:d4:09:70:0a:b7:ac:70:07:3e:27:fd:
90:23:72:46:1f:f2:ff:16:2a:e6:af:08:e7:9f:04:7d:3d:a5:
cc:b4:d7:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:22:41 2025 by rpki-client