Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/5d5d42-e843-4411-90f9-015f7664b9d7/1/FTJBXDGfrWWHW9GqA1pViIzrcz4.mft
File: FTJBXDGfrWWHW9GqA1pViIzrcz4.mft (raw, json)
Hash identifier: pCN3zMkeaJXSPd4CR2Js+GditgX3ud+wn/hHO0CG5qI=
Subject key identifier: BF:2B:E2:D3:86:18:47:CD:72:DB:D1:2B:07:FB:F0:51:92:82:26:5F
Authority key identifier: 15:32:41:5C:31:9F:AD:65:87:5B:D1:AA:03:5A:55:88:8C:EB:73:3E
Certificate issuer: /CN=1532415c319fad65875bd1aa035a55888ceb733e
Certificate serial: 0198D5BBBBCB9D49EF0D73BCDB1D170530E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FTJBXDGfrWWHW9GqA1pViIzrcz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/5d5d42-e843-4411-90f9-015f7664b9d7/1/FTJBXDGfrWWHW9GqA1pViIzrcz4.mft
Manifest number: 1624
Signing time: Sat 23 Aug 2025 07:01:46 +0000
Manifest this update: Sat 23 Aug 2025 07:01:46 +0000
Manifest next update: Sun 24 Aug 2025 07:01:46 +0000
Files and hashes: 1: FTJBXDGfrWWHW9GqA1pViIzrcz4.crl (hash: +igQn/jETkambCEcbtoO2WpiEwedZABKgcq0/4yovco=)
2: _QEsBnvbshc1c-Oa6SonU64QEfk.roa (hash: yLyPG52nHMG7xe0cgh96djTLDEljXisJslyJOhCNEoc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/5d5d42-e843-4411-90f9-015f7664b9d7/1/FTJBXDGfrWWHW9GqA1pViIzrcz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/5d5d42-e843-4411-90f9-015f7664b9d7/1/FTJBXDGfrWWHW9GqA1pViIzrcz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/FTJBXDGfrWWHW9GqA1pViIzrcz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:bb:cb:9d:49:ef:0d:73:bc:db:1d:17:05:30:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1532415c319fad65875bd1aa035a55888ceb733e
Validity
Not Before: Aug 23 07:01:46 2025 GMT
Not After : Aug 24 07:01:46 2025 GMT
Subject: CN=bf2be2d3861847cd72dbd12b07fbf0519282265f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:90:a0:f0:cd:38:b0:87:dd:03:38:08:be:fd:
0c:af:92:4f:05:0f:f2:cb:3e:97:7d:62:0b:94:c8:
d7:15:81:d9:62:b0:7f:0e:fb:94:55:53:78:0e:10:
ea:4a:53:f5:a1:b7:f7:7a:97:87:c3:9a:dd:00:12:
b7:bd:dd:7b:66:8d:fa:d1:a0:19:94:18:cf:b4:92:
21:e9:ca:44:29:ca:b7:36:41:7c:53:1b:ae:3f:8a:
d3:3b:0a:82:f2:17:53:c2:72:49:22:f2:9b:ce:5e:
c2:28:e5:80:e0:39:ce:cf:89:02:7d:26:a0:9c:18:
f5:c0:fd:97:5d:56:10:55:56:84:45:5d:7b:af:c7:
8c:f9:23:63:43:54:3a:93:3e:5c:bc:22:45:63:78:
ff:12:b6:25:78:20:c5:94:50:71:4e:32:b6:c1:31:
80:b9:87:46:98:ca:02:03:13:88:f8:82:83:c4:a9:
53:e7:9f:cf:d4:c1:81:59:81:8e:1c:ed:9a:dd:79:
f3:0b:d8:d7:0c:44:bd:0d:6f:10:17:3b:21:d3:26:
f7:fb:ec:41:56:5a:ad:5b:9c:a1:6c:cc:2e:67:f6:
0d:93:2b:e7:21:2a:b1:cc:c5:69:d1:e7:60:9f:04:
d2:6c:7f:26:1f:3d:ed:3f:27:c0:5e:f2:6f:21:e6:
4c:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:2B:E2:D3:86:18:47:CD:72:DB:D1:2B:07:FB:F0:51:92:82:26:5F
X509v3 Authority Key Identifier:
keyid:15:32:41:5C:31:9F:AD:65:87:5B:D1:AA:03:5A:55:88:8C:EB:73:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FTJBXDGfrWWHW9GqA1pViIzrcz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/5d5d42-e843-4411-90f9-015f7664b9d7/1/FTJBXDGfrWWHW9GqA1pViIzrcz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/5d5d42-e843-4411-90f9-015f7664b9d7/1/FTJBXDGfrWWHW9GqA1pViIzrcz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:46:a3:94:d4:7c:3e:76:ae:ab:ef:2a:6f:5b:7f:63:a0:5f:
a1:a6:52:31:8c:e7:c8:86:53:5d:97:7c:88:0e:6d:5b:b9:10:
61:63:fb:da:93:49:35:cd:9f:60:a4:b6:08:36:d3:3f:2d:63:
6e:24:8e:d5:23:ea:52:1c:b9:0e:91:18:30:db:14:77:5a:5a:
f6:2a:fa:ff:64:20:17:a9:b6:e5:ab:36:9c:8d:ef:f8:eb:ac:
b5:84:de:2b:ec:2d:16:72:56:ae:18:6d:c9:b6:d0:fc:73:ab:
cc:a3:6a:e5:04:c4:7f:27:f4:d0:e6:04:48:75:80:89:57:03:
81:97:9a:66:0b:99:ac:27:51:bd:16:e3:4a:69:8a:44:ed:5c:
94:c5:f1:20:97:a2:fb:ae:a0:fa:42:e3:9f:64:b1:68:e6:e4:
5e:75:68:ad:81:5d:95:87:db:e1:6e:69:10:82:59:c8:5f:1c:
ff:16:1f:68:54:fb:88:76:70:50:be:f2:f6:d4:1b:9f:cc:d7:
6a:bf:b4:79:8f:27:ab:03:01:5d:c7:ca:62:ff:ba:ec:9e:ff:
66:5d:c0:4f:9c:71:44:66:87:54:9f:5e:e3:d1:e1:f5:f0:1a:
34:0a:02:08:f7:70:e0:8c:ce:f6:ed:b7:f9:0c:b5:82:89:7a:
0a:cb:f7:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:39:09 2025 by rpki-client