Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/6a89f0-0b22-452c-a659-42a7af882e09/1/FTXSThc2fkBbeA9xEEnl940QHxY.mft
File: FTXSThc2fkBbeA9xEEnl940QHxY.mft (raw, json)
Hash identifier: hWphSK+pczd3S3cDvYIk4ZMQegVmo/TmgjBEr+donSQ=
Subject key identifier: 08:11:69:6E:3E:EF:39:23:B3:92:41:F6:DB:71:0D:13:14:04:42:A0
Authority key identifier: 15:35:D2:4E:17:36:7E:40:5B:78:0F:71:10:49:E5:F7:8D:10:1F:16
Certificate issuer: /CN=1535d24e17367e405b780f711049e5f78d101f16
Certificate serial: 0199FDDA46024F10EE5395ECFA734CA2D4F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FTXSThc2fkBbeA9xEEnl940QHxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/6a89f0-0b22-452c-a659-42a7af882e09/1/FTXSThc2fkBbeA9xEEnl940QHxY.mft
Manifest number: 12BF
Signing time: Sun 19 Oct 2025 19:02:44 +0000
Manifest this update: Sun 19 Oct 2025 19:02:44 +0000
Manifest next update: Mon 20 Oct 2025 19:02:44 +0000
Files and hashes: 1: 5ogK5Ex4CS4B5KsMhYCUM00RFfQ.roa (hash: ZPbDvWHExMztNeKcllyDlDkCaDogTJsh9sQhQBtO6xU=)
2: FTXSThc2fkBbeA9xEEnl940QHxY.crl (hash: MgvJvywaWeelaFxsQ/GFRSGPRDqR/ccUXKADDetzqr4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/6a89f0-0b22-452c-a659-42a7af882e09/1/FTXSThc2fkBbeA9xEEnl940QHxY.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/6a89f0-0b22-452c-a659-42a7af882e09/1/FTXSThc2fkBbeA9xEEnl940QHxY.mft
rsync://rpki.ripe.net/repository/DEFAULT/FTXSThc2fkBbeA9xEEnl940QHxY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:da:46:02:4f:10:ee:53:95:ec:fa:73:4c:a2:d4:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1535d24e17367e405b780f711049e5f78d101f16
Validity
Not Before: Oct 19 19:02:44 2025 GMT
Not After : Oct 20 19:02:44 2025 GMT
Subject: CN=0811696e3eef3923b39241f6db710d13140442a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:35:87:ce:35:50:24:72:d7:78:07:26:a5:51:
ab:31:cb:6e:ee:96:5c:07:5b:67:b2:b4:66:27:9a:
36:27:4e:80:70:ac:d6:f7:63:cb:56:0f:1c:37:38:
c9:69:67:81:a2:f5:cd:21:7c:1e:03:e1:bc:ce:85:
6b:48:62:4f:2a:40:f1:fc:53:69:47:5b:00:50:d3:
a0:b0:e1:e9:c0:4f:4e:24:e8:07:b6:1d:d9:71:15:
76:a3:69:32:96:e6:d9:da:2d:7c:7d:6f:04:ac:aa:
42:d7:db:2a:4d:bb:e7:f1:75:9d:b0:29:ac:92:42:
c5:2d:8a:e1:b9:27:14:62:b0:28:7f:cc:a9:ab:7d:
60:8a:62:d8:5b:4a:2b:31:b4:92:66:96:0d:22:71:
ee:1f:59:77:de:52:82:b3:10:4e:9d:c3:d4:50:24:
fc:c5:30:4f:00:09:49:2e:31:5b:5f:33:19:d3:1e:
2c:35:07:eb:3c:13:e9:29:9b:07:4c:f4:05:bb:d0:
08:00:b5:1c:00:8f:14:cd:1d:e5:47:b7:68:9d:1b:
df:51:7a:df:cd:9c:99:d7:26:2f:5b:d9:58:35:e4:
f4:8f:c4:89:11:92:07:c1:49:c7:8d:17:b7:ac:12:
fe:9e:59:72:e7:21:fc:f6:80:e8:99:f0:21:9e:d6:
8d:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:11:69:6E:3E:EF:39:23:B3:92:41:F6:DB:71:0D:13:14:04:42:A0
X509v3 Authority Key Identifier:
keyid:15:35:D2:4E:17:36:7E:40:5B:78:0F:71:10:49:E5:F7:8D:10:1F:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FTXSThc2fkBbeA9xEEnl940QHxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/6a89f0-0b22-452c-a659-42a7af882e09/1/FTXSThc2fkBbeA9xEEnl940QHxY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/6a89f0-0b22-452c-a659-42a7af882e09/1/FTXSThc2fkBbeA9xEEnl940QHxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:09:af:da:76:e1:1c:39:43:e1:91:c0:d0:ab:1d:59:b1:79:
d8:dd:9e:f4:64:b0:a6:2b:3e:a8:c4:26:41:57:8c:c7:e7:99:
1f:b1:45:ae:51:5e:c9:75:cb:3f:e6:f8:87:e2:2b:0f:03:ba:
02:81:12:bd:c9:f5:bf:ce:d8:8a:87:08:6d:c2:d1:d4:27:cb:
fc:d3:51:d6:1a:b0:df:58:4c:af:62:b3:72:75:d4:bf:52:f5:
63:93:32:ec:8c:0a:14:31:d7:41:4e:2a:78:9a:00:59:b8:ef:
11:f6:6d:8c:7e:78:64:0b:e0:da:b1:e1:97:46:d1:d3:8b:a5:
95:14:04:e4:4c:c4:1d:20:d7:4f:af:84:e0:cd:47:b2:e0:10:
b9:ed:b5:9d:75:3e:06:b0:bc:14:87:38:10:69:4e:0c:51:f2:
4c:fb:3e:79:89:b0:cb:3a:ee:82:ea:0b:08:97:d1:88:b7:fe:
62:9a:1e:87:5e:d4:43:28:d5:91:d2:d5:fb:ac:60:7d:e8:a5:
69:89:d1:c6:52:57:89:df:90:65:76:2f:c6:43:bb:85:d4:ff:
09:38:a8:55:06:df:0f:17:11:00:d9:93:1f:f4:82:77:b6:48:
01:89:43:98:77:6b:9d:48:8c:02:ab:2e:d2:8e:6c:fc:2b:bb:
71:6c:ee:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:17:43 2025 by rpki-client