Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/6a89f0-0b22-452c-a659-42a7af882e09/1/FTXSThc2fkBbeA9xEEnl940QHxY.mft
File: FTXSThc2fkBbeA9xEEnl940QHxY.mft (raw, json)
Hash identifier: rIQLC8W8jnh2maAdlpnsAjcu6FWswD9DHTeqK8dASKU=
Subject key identifier: 5C:69:90:62:EE:F3:E2:CD:7E:DC:A3:78:66:D2:70:70:13:CB:63:DA
Authority key identifier: 15:35:D2:4E:17:36:7E:40:5B:78:0F:71:10:49:E5:F7:8D:10:1F:16
Certificate issuer: /CN=1535d24e17367e405b780f711049e5f78d101f16
Certificate serial: 0198D4739C199187EAC3790F893E8F583DB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FTXSThc2fkBbeA9xEEnl940QHxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/6a89f0-0b22-452c-a659-42a7af882e09/1/FTXSThc2fkBbeA9xEEnl940QHxY.mft
Manifest number: 1225
Signing time: Sat 23 Aug 2025 01:03:22 +0000
Manifest this update: Sat 23 Aug 2025 01:03:22 +0000
Manifest next update: Sun 24 Aug 2025 01:03:22 +0000
Files and hashes: 1: 5ogK5Ex4CS4B5KsMhYCUM00RFfQ.roa (hash: ZPbDvWHExMztNeKcllyDlDkCaDogTJsh9sQhQBtO6xU=)
2: FTXSThc2fkBbeA9xEEnl940QHxY.crl (hash: uEtboqpwlHF1j8oM0qDF9uD6pErOg18GFy0xqHSvXAA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/6a89f0-0b22-452c-a659-42a7af882e09/1/FTXSThc2fkBbeA9xEEnl940QHxY.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/6a89f0-0b22-452c-a659-42a7af882e09/1/FTXSThc2fkBbeA9xEEnl940QHxY.mft
rsync://rpki.ripe.net/repository/DEFAULT/FTXSThc2fkBbeA9xEEnl940QHxY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:9c:19:91:87:ea:c3:79:0f:89:3e:8f:58:3d:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1535d24e17367e405b780f711049e5f78d101f16
Validity
Not Before: Aug 23 01:03:22 2025 GMT
Not After : Aug 24 01:03:22 2025 GMT
Subject: CN=5c699062eef3e2cd7edca37866d2707013cb63da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:a9:42:ba:a3:b4:73:4d:11:e1:05:63:ee:81:
65:24:4e:74:2e:52:cb:a3:0c:96:36:05:db:7b:77:
04:b3:07:c1:a5:a7:e5:17:98:d3:21:0d:c1:16:5a:
0e:c8:8e:b9:1f:1a:51:dc:64:15:d8:94:f9:bf:17:
40:2c:c9:bc:6a:79:49:a7:0e:86:ed:7f:56:39:f7:
c0:1f:5b:99:dd:b9:0b:f8:42:37:a7:a4:b9:79:03:
6b:11:1f:c7:9e:ac:42:fc:56:49:b8:3b:ee:54:11:
14:a0:f2:9f:e0:fd:72:9a:75:4b:36:f7:e6:cd:56:
5d:36:1e:40:2a:43:57:98:8e:96:08:f7:c1:be:7f:
11:57:ce:fd:69:fa:25:19:00:b7:6a:8a:a9:9b:c4:
b6:98:57:89:21:b2:9f:41:94:9e:38:36:9f:7f:ae:
34:b7:39:91:b7:0a:de:94:ae:f2:0f:3e:84:e0:f8:
fe:50:cb:17:ab:4e:5b:0e:f8:32:e2:9f:e7:dd:d0:
48:9b:0d:f9:22:75:94:97:85:ce:61:77:6f:e7:45:
27:b6:2f:04:5e:0e:54:12:5c:e0:a5:43:a9:05:a0:
ad:15:62:4d:17:1e:62:79:23:1d:72:05:53:5e:cf:
53:0e:ff:2a:63:ec:99:fd:18:1e:12:45:35:2a:52:
44:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:69:90:62:EE:F3:E2:CD:7E:DC:A3:78:66:D2:70:70:13:CB:63:DA
X509v3 Authority Key Identifier:
keyid:15:35:D2:4E:17:36:7E:40:5B:78:0F:71:10:49:E5:F7:8D:10:1F:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FTXSThc2fkBbeA9xEEnl940QHxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/6a89f0-0b22-452c-a659-42a7af882e09/1/FTXSThc2fkBbeA9xEEnl940QHxY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/6a89f0-0b22-452c-a659-42a7af882e09/1/FTXSThc2fkBbeA9xEEnl940QHxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:2e:04:c1:59:0f:da:f0:30:74:c0:11:62:9d:c1:ba:c8:32:
44:eb:23:0c:a3:52:ad:70:0b:67:21:49:ca:cf:6f:f8:b2:ec:
e0:0e:57:87:cc:39:73:ad:42:e5:56:d6:eb:e9:50:fb:9c:83:
2e:2a:f8:ec:2e:63:c6:f0:66:12:1e:44:d3:85:05:ce:67:51:
81:db:d6:3b:8b:fc:b1:bd:e5:19:8f:fa:c0:80:23:92:b2:10:
af:9c:f9:28:33:03:b7:ed:ea:8d:89:69:e8:85:5d:59:05:de:
69:61:d1:b3:0f:b9:ca:13:89:a1:df:a9:20:e0:c4:51:91:32:
1b:a9:ce:bc:c3:e4:5f:5b:ae:b6:48:ad:5b:48:2b:f8:6b:fe:
e2:77:c3:b7:8c:da:07:78:77:5c:cb:8f:98:27:ec:81:a7:f0:
98:6e:bf:2e:75:06:9a:df:0e:60:2d:ea:d7:ea:de:be:eb:39:
be:f5:ed:0a:b9:f0:19:6c:ee:69:f7:19:da:c9:d8:f2:5e:a5:
38:63:ef:b3:1e:1a:3a:4f:00:ea:44:96:13:be:52:f1:46:6f:
42:9f:88:1c:26:5c:e2:5f:b8:66:94:29:6c:45:20:46:7e:aa:
8d:69:98:24:91:54:b0:43:9a:b9:f7:81:b1:54:98:c3:ab:fd:
d2:3f:2a:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:14:23 2025 by rpki-client