Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/954557-2a5f-4826-ab16-cd517b169f89/1/FTgxwWY1FhxNvRjsWnK5nE7lGeM.mft
File: FTgxwWY1FhxNvRjsWnK5nE7lGeM.mft (raw, json)
Hash identifier: fv0oAHOOaOVe24ShCtFxxq315ypcQGpT4TOoHlq19Gs=
Subject key identifier: AC:CC:9F:75:46:CF:72:73:7F:75:4B:77:49:A1:5F:19:3E:21:13:CF
Authority key identifier: 15:38:31:C1:66:35:16:1C:4D:BD:18:EC:5A:72:B9:9C:4E:E5:19:E3
Certificate issuer: /CN=153831c16635161c4dbd18ec5a72b99c4ee519e3
Certificate serial: 0199FB45C6674CC8CC768E865F10981E59FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FTgxwWY1FhxNvRjsWnK5nE7lGeM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/954557-2a5f-4826-ab16-cd517b169f89/1/FTgxwWY1FhxNvRjsWnK5nE7lGeM.mft
Manifest number: 1354
Signing time: Sun 19 Oct 2025 07:01:17 +0000
Manifest this update: Sun 19 Oct 2025 07:01:17 +0000
Manifest next update: Mon 20 Oct 2025 07:01:17 +0000
Files and hashes: 1: FTgxwWY1FhxNvRjsWnK5nE7lGeM.crl (hash: vaMHSADLcNwoDvecPuvaVo/eg+ko9GFnkJpB0WN47VA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/954557-2a5f-4826-ab16-cd517b169f89/1/FTgxwWY1FhxNvRjsWnK5nE7lGeM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/954557-2a5f-4826-ab16-cd517b169f89/1/FTgxwWY1FhxNvRjsWnK5nE7lGeM.mft
rsync://rpki.ripe.net/repository/DEFAULT/FTgxwWY1FhxNvRjsWnK5nE7lGeM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:45:c6:67:4c:c8:cc:76:8e:86:5f:10:98:1e:59:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=153831c16635161c4dbd18ec5a72b99c4ee519e3
Validity
Not Before: Oct 19 07:01:17 2025 GMT
Not After : Oct 20 07:01:17 2025 GMT
Subject: CN=accc9f7546cf72737f754b7749a15f193e2113cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:65:c5:0a:17:2f:59:66:2c:e4:c3:13:47:d1:
d9:fb:6e:c1:53:6c:c7:97:48:37:a5:72:e7:9b:79:
ce:b5:28:f6:68:bf:6a:bb:95:26:d3:fd:6c:40:bf:
af:ae:3a:d7:12:1a:39:d0:9e:37:7f:cf:5b:9c:e7:
35:d4:b6:e9:d8:16:72:3d:01:60:08:7e:0c:16:4c:
e5:96:c2:e5:2d:2e:f1:e0:b7:0d:86:79:1a:2d:ee:
b2:2f:5a:40:aa:44:d8:7d:fb:33:c4:e0:ff:1b:32:
c3:35:34:f3:65:7b:15:6e:48:2f:53:d0:97:b7:1f:
6c:15:2f:00:a3:8a:80:1f:97:e1:7b:74:88:2d:d6:
f8:7c:7d:4e:d3:e9:1e:4f:66:6e:29:fc:db:fd:91:
0b:d3:b4:41:61:ae:dd:48:cf:1d:e2:d0:a1:cb:33:
0c:b9:f5:1e:f0:1e:90:b6:a0:88:ed:fa:f6:d8:79:
5b:56:08:a9:1d:ef:e6:97:a0:ed:a8:de:92:29:ee:
ba:e2:cc:f9:16:5d:b8:92:af:48:bc:72:05:c6:08:
bd:ef:3d:f0:e8:60:f8:85:fb:c7:22:15:b4:f1:02:
40:ca:58:ce:31:7c:d4:b3:3d:84:8e:cb:75:85:3f:
63:04:7e:14:d5:27:a7:16:17:b6:09:52:1f:1a:90:
df:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:CC:9F:75:46:CF:72:73:7F:75:4B:77:49:A1:5F:19:3E:21:13:CF
X509v3 Authority Key Identifier:
keyid:15:38:31:C1:66:35:16:1C:4D:BD:18:EC:5A:72:B9:9C:4E:E5:19:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FTgxwWY1FhxNvRjsWnK5nE7lGeM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/954557-2a5f-4826-ab16-cd517b169f89/1/FTgxwWY1FhxNvRjsWnK5nE7lGeM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/954557-2a5f-4826-ab16-cd517b169f89/1/FTgxwWY1FhxNvRjsWnK5nE7lGeM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:05:10:df:39:8c:26:e7:35:9a:f8:c8:60:74:7c:86:47:39:
2b:84:eb:bc:22:b2:72:99:87:6c:01:95:ba:1b:e7:41:fd:13:
15:39:9a:6b:95:fe:83:44:43:4f:0d:85:36:84:29:cf:70:79:
4e:b3:0b:ab:df:8a:a0:26:cb:fe:78:ab:44:59:b9:64:3a:cb:
8b:d2:f6:a4:74:11:d4:4c:90:0c:06:95:7a:3d:be:ac:29:24:
05:3f:c3:3e:ba:67:87:75:f8:6b:b7:f6:c0:09:d6:6c:c9:3f:
a2:e3:59:f0:99:14:2f:27:49:36:1e:bb:87:32:a9:91:75:ef:
d5:9d:19:49:91:9e:c5:37:e9:34:eb:80:7f:dd:f6:3f:47:d0:
8a:32:5b:74:e5:94:13:7d:25:65:22:b6:65:4a:61:fc:ff:6e:
5c:0e:4b:24:45:e8:dd:6e:58:4b:4e:b8:23:3a:9f:48:f4:4d:
ed:bc:cd:98:bb:33:04:8e:ed:6a:98:78:43:72:06:5a:5e:3f:
af:7d:0b:6d:84:ea:f3:99:90:d0:7c:60:e3:d2:e1:55:7e:a7:
1b:e3:13:82:73:11:20:39:87:90:d8:a0:85:9a:ca:ce:70:0c:
a1:19:51:f8:2d:b6:b4:4f:00:0b:4a:05:e2:95:24:56:90:13:
75:78:c9:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:11:25 2025 by rpki-client