Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/3a20d8-e902-41f5-befa-ab5f39fb8d36/1/ftCMDM2oAs8gznq97qICFOBeR68.mft
File: ftCMDM2oAs8gznq97qICFOBeR68.mft (raw, json)
Hash identifier: PE1L4RXJS3F4cNJd+oxS00AhD1zqCvQywuIT9CkD/NQ=
Subject key identifier: B3:0F:16:5A:B3:D1:50:D9:8A:7B:AE:44:C9:89:19:FA:51:30:C6:03
Authority key identifier: 7E:D0:8C:0C:CD:A8:02:CF:20:CE:7A:BD:EE:A2:02:14:E0:5E:47:AF
Certificate issuer: /CN=7ed08c0ccda802cf20ce7abdeea20214e05e47af
Certificate serial: 0198D73B01E8AB865A5983C5C782771E900D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ftCMDM2oAs8gznq97qICFOBeR68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/3a20d8-e902-41f5-befa-ab5f39fb8d36/1/ftCMDM2oAs8gznq97qICFOBeR68.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 14:00:25 +0000
Manifest this update: Sat 23 Aug 2025 14:00:25 +0000
Manifest next update: Sun 24 Aug 2025 14:00:25 +0000
Files and hashes: 1: P79ilXjNNqLG_ABRYWZBAk8XzIM.roa (hash: z414yhHihxRqPfk1ej5lxFnTCRyHE+z/dZVS4h4vn3A=)
2: ftCMDM2oAs8gznq97qICFOBeR68.crl (hash: SHJvnr85ML9YJt34dbRmQnrT2jq36Z68zABEkbBme9Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/3a20d8-e902-41f5-befa-ab5f39fb8d36/1/ftCMDM2oAs8gznq97qICFOBeR68.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/3a20d8-e902-41f5-befa-ab5f39fb8d36/1/ftCMDM2oAs8gznq97qICFOBeR68.mft
rsync://rpki.ripe.net/repository/DEFAULT/ftCMDM2oAs8gznq97qICFOBeR68.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3b:01:e8:ab:86:5a:59:83:c5:c7:82:77:1e:90:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ed08c0ccda802cf20ce7abdeea20214e05e47af
Validity
Not Before: Aug 23 14:00:25 2025 GMT
Not After : Aug 24 14:00:25 2025 GMT
Subject: CN=b30f165ab3d150d98a7bae44c98919fa5130c603
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:3b:71:12:77:8d:58:f8:5e:08:d1:10:62:7b:
09:82:a3:f8:de:8c:13:34:2d:8b:33:df:79:b1:4c:
0d:b6:dd:15:17:12:4f:c6:63:d4:da:75:81:06:1a:
cb:42:38:92:37:c7:f7:b6:f3:fe:72:3a:59:c7:ec:
1f:08:df:ae:68:ce:3c:89:ca:b5:bc:18:4b:77:0c:
2f:38:2a:f6:12:04:04:11:3a:d5:a9:35:c6:e5:3a:
97:21:48:8f:c4:f5:c4:94:e8:54:60:c1:4c:89:d3:
48:82:58:07:e8:38:49:99:c9:f8:ea:54:56:9a:59:
10:54:b7:ca:78:96:0f:46:fa:21:8f:20:30:2e:5c:
3f:a7:31:17:b9:07:e6:1a:4f:ff:ce:f8:fa:85:0d:
10:b7:36:61:8e:c0:50:22:d8:85:78:42:80:8e:82:
42:fe:59:40:6c:ba:fd:6e:7f:56:0b:23:9d:e4:5a:
08:8d:16:89:70:59:5f:a9:71:89:31:35:48:f0:7c:
7b:bb:39:b0:09:35:b3:f5:cb:35:e2:f0:54:6c:b3:
2a:f2:9c:0d:bd:c6:20:43:3e:9f:fb:85:9c:c2:c1:
a3:a9:e5:3d:01:b0:a7:61:9b:7a:db:03:b8:90:f0:
9e:65:a8:70:55:58:0d:e6:14:cf:5f:05:19:63:40:
76:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:0F:16:5A:B3:D1:50:D9:8A:7B:AE:44:C9:89:19:FA:51:30:C6:03
X509v3 Authority Key Identifier:
keyid:7E:D0:8C:0C:CD:A8:02:CF:20:CE:7A:BD:EE:A2:02:14:E0:5E:47:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ftCMDM2oAs8gznq97qICFOBeR68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/3a20d8-e902-41f5-befa-ab5f39fb8d36/1/ftCMDM2oAs8gznq97qICFOBeR68.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/3a20d8-e902-41f5-befa-ab5f39fb8d36/1/ftCMDM2oAs8gznq97qICFOBeR68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:c7:26:79:cf:7b:20:e8:b9:6f:23:e8:7a:3a:d7:57:c3:e0:
11:95:c6:8f:bb:2f:9b:d5:ec:1e:9e:a8:0d:82:9b:fe:70:da:
4a:ba:06:1e:f7:13:70:a7:de:0f:5a:95:c1:99:d0:3d:63:c6:
ec:6a:8b:ba:b3:c3:e3:a9:c7:e7:e6:85:7f:88:a1:6e:d4:53:
5f:59:01:52:fc:cb:d6:d6:7e:68:f5:98:a9:97:72:71:cb:31:
c5:54:df:71:82:17:1e:c8:77:7e:1f:b7:2b:a4:5a:34:17:55:
01:1d:0f:ef:f9:38:99:a7:dd:2c:ee:2a:20:50:d4:1b:25:75:
c5:d5:58:e1:dc:b0:ce:20:76:06:d2:c8:5f:2b:ef:39:9f:6c:
cd:e9:aa:0a:b9:2c:1c:9d:fc:3d:ed:8e:e3:d5:a7:de:f1:9a:
36:5d:61:44:1f:25:c9:47:f8:9d:02:67:2d:33:20:35:46:7a:
00:2f:7e:7a:6f:7a:f5:a5:1d:74:16:a9:2b:ee:b3:79:05:d1:
46:8e:ce:70:3e:c6:55:4b:f8:15:cf:a7:51:f6:62:a7:e2:35:
c2:d8:9d:bb:91:e9:b7:5a:9b:2c:fd:bf:ee:32:22:27:20:5a:
8b:bf:1e:f5:9f:76:08:ac:f5:68:61:75:bc:1c:ca:d7:00:2f:
d5:c5:50:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:21:41 2025 by rpki-client