Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/64b1e6-0a1f-40ec-9437-04a4c2c41c34/1/FT0HLM7wC_Rk1mDb0F2todoz0sg.mft
File: FT0HLM7wC_Rk1mDb0F2todoz0sg.mft (raw, json)
Hash identifier: Gs22Yb9mSEzctyjKiGs2RAQWYeV3LXo1h/CxX3L5tLg=
Subject key identifier: 1C:42:1D:95:7B:03:F0:44:ED:CF:48:3E:F1:C1:65:8D:9F:61:49:A2
Authority key identifier: 15:3D:07:2C:CE:F0:0B:F4:64:D6:60:DB:D0:5D:AD:A1:DA:33:D2:C8
Certificate issuer: /CN=153d072ccef00bf464d660dbd05dada1da33d2c8
Certificate serial: 0198D4E0B3AD3EDCC95F78A08FFB86E0ED9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FT0HLM7wC_Rk1mDb0F2todoz0sg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/64b1e6-0a1f-40ec-9437-04a4c2c41c34/1/FT0HLM7wC_Rk1mDb0F2todoz0sg.mft
Manifest number: 0870
Signing time: Sat 23 Aug 2025 03:02:32 +0000
Manifest this update: Sat 23 Aug 2025 03:02:32 +0000
Manifest next update: Sun 24 Aug 2025 03:02:32 +0000
Files and hashes: 1: F0iKq1ijjGBYajSFmQyhreXVAQY.roa (hash: m8/L5cr+uaNLauEK1OLTPn18oa9yVQaLyP+GQwyUFcE=)
2: FT0HLM7wC_Rk1mDb0F2todoz0sg.crl (hash: 3JF2zFdQOiJjGVsxJAqIUgMSGLA8xbFSaoWYIS+Qx3o=)
3: _2lRv88Gb4s0UGVaP2Mgmxw3ML8.roa (hash: kqmxs4EHa2TZhRmR5+4BZAkd9MXd2Id3FkNPJK6jmmM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/64b1e6-0a1f-40ec-9437-04a4c2c41c34/1/FT0HLM7wC_Rk1mDb0F2todoz0sg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/64b1e6-0a1f-40ec-9437-04a4c2c41c34/1/FT0HLM7wC_Rk1mDb0F2todoz0sg.mft
rsync://rpki.ripe.net/repository/DEFAULT/FT0HLM7wC_Rk1mDb0F2todoz0sg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:b3:ad:3e:dc:c9:5f:78:a0:8f:fb:86:e0:ed:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=153d072ccef00bf464d660dbd05dada1da33d2c8
Validity
Not Before: Aug 23 03:02:32 2025 GMT
Not After : Aug 24 03:02:32 2025 GMT
Subject: CN=1c421d957b03f044edcf483ef1c1658d9f6149a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:97:75:d9:c4:fa:c4:ab:73:6c:45:dd:b9:1f:
64:ba:86:0a:d9:62:22:ee:aa:06:c3:dc:8c:cd:d2:
7e:b7:ef:3c:38:8f:86:14:68:ee:16:43:25:38:31:
5b:41:0c:6d:9e:36:16:d5:05:4c:84:bd:83:7a:c6:
50:3c:fe:ae:a4:73:ff:09:71:78:c8:f2:f1:aa:87:
20:e8:6f:1c:00:87:c5:7e:ea:6b:48:dc:f8:e3:e5:
5a:61:90:31:05:86:e2:b1:38:7c:46:11:65:92:03:
0c:67:4b:1d:44:b9:51:5c:24:e3:4b:40:15:c3:2b:
d5:60:d8:2f:4f:5c:f7:72:11:cd:94:7d:83:11:0b:
d3:7c:c4:32:86:c2:98:b2:59:c5:c7:f3:3f:32:31:
db:cd:0b:ea:64:9f:3b:86:2d:d7:bf:27:7e:b0:6f:
13:bd:b1:77:0f:15:19:e7:da:4d:17:7c:79:68:03:
51:1b:a8:e1:2a:9f:b2:62:87:0e:3c:4b:45:fe:4e:
6a:5a:7b:a0:4e:b8:a3:7d:57:63:bb:20:22:55:c3:
75:c6:6b:b1:8b:08:15:ce:51:42:00:e8:8a:e9:c8:
e0:2c:15:9a:bd:d0:29:01:88:24:a3:0c:44:8e:0e:
3d:8d:7e:08:0a:30:37:b4:d9:5a:9b:55:45:af:02:
1b:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:42:1D:95:7B:03:F0:44:ED:CF:48:3E:F1:C1:65:8D:9F:61:49:A2
X509v3 Authority Key Identifier:
keyid:15:3D:07:2C:CE:F0:0B:F4:64:D6:60:DB:D0:5D:AD:A1:DA:33:D2:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FT0HLM7wC_Rk1mDb0F2todoz0sg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/64b1e6-0a1f-40ec-9437-04a4c2c41c34/1/FT0HLM7wC_Rk1mDb0F2todoz0sg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/64b1e6-0a1f-40ec-9437-04a4c2c41c34/1/FT0HLM7wC_Rk1mDb0F2todoz0sg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:5e:ad:85:38:dc:77:70:69:32:70:28:dd:d4:ed:1b:ee:e6:
37:2e:75:c9:71:ba:45:84:95:44:74:83:47:00:5b:94:ac:65:
8f:4e:0f:3a:f8:f1:4e:cd:96:dc:35:3a:73:71:50:e0:b4:98:
99:4e:a2:57:8a:c7:9f:23:9a:9e:5d:e4:c8:34:4b:d2:98:a9:
56:dc:8a:2e:ed:b3:d9:95:0e:d5:f1:62:3a:d8:d4:78:e1:67:
6a:50:f9:5d:9a:13:be:36:51:ed:bf:36:b3:de:76:a9:87:2e:
02:d7:c2:a7:57:07:80:fd:55:ce:58:67:45:c7:43:37:be:c8:
c8:51:93:5d:10:a7:3e:93:80:4e:12:4c:18:84:b6:f1:46:3b:
81:2d:c0:73:cf:85:b9:52:67:36:40:61:a7:4b:6c:33:e6:99:
eb:b8:31:c6:cb:c1:56:54:56:c4:6b:91:fa:0f:74:37:67:13:
d5:e5:48:06:3d:d4:e3:c0:fd:d9:e6:6a:78:38:95:c8:ae:31:
72:9e:6f:c2:7d:cc:8c:38:dd:2d:7c:92:cf:b4:ca:33:6f:4f:
c8:f2:8e:ad:87:38:23:72:ba:3d:44:e1:ff:05:de:2b:5d:dd:
26:06:1d:be:07:bb:cc:fe:b8:1a:20:7d:0e:8d:65:f8:29:71:
60:6a:64:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:23:53 2025 by rpki-client