Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/64b1e6-0a1f-40ec-9437-04a4c2c41c34/1/FT0HLM7wC_Rk1mDb0F2todoz0sg.mft
File: FT0HLM7wC_Rk1mDb0F2todoz0sg.mft (raw, json)
Hash identifier: iu4FzTlkkpnJ97brCdBL2dNhGEwT2vcha+v8WtTO558=
Subject key identifier: C4:AA:AB:E5:73:FC:0B:66:43:A7:34:98:52:31:AA:6C:50:62:9A:47
Authority key identifier: 15:3D:07:2C:CE:F0:0B:F4:64:D6:60:DB:D0:5D:AD:A1:DA:33:D2:C8
Certificate issuer: /CN=153d072ccef00bf464d660dbd05dada1da33d2c8
Certificate serial: 0199FE46D79090C3FA3B2D74F18708C32C2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FT0HLM7wC_Rk1mDb0F2todoz0sg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/64b1e6-0a1f-40ec-9437-04a4c2c41c34/1/FT0HLM7wC_Rk1mDb0F2todoz0sg.mft
Manifest number: 090A
Signing time: Sun 19 Oct 2025 21:01:19 +0000
Manifest this update: Sun 19 Oct 2025 21:01:19 +0000
Manifest next update: Mon 20 Oct 2025 21:01:19 +0000
Files and hashes: 1: F0iKq1ijjGBYajSFmQyhreXVAQY.roa (hash: m8/L5cr+uaNLauEK1OLTPn18oa9yVQaLyP+GQwyUFcE=)
2: FT0HLM7wC_Rk1mDb0F2todoz0sg.crl (hash: nEI6z1DAIScj1KC/6IyvPyxKpSxscRXRiNSIgbU3aRQ=)
3: _2lRv88Gb4s0UGVaP2Mgmxw3ML8.roa (hash: kqmxs4EHa2TZhRmR5+4BZAkd9MXd2Id3FkNPJK6jmmM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/64b1e6-0a1f-40ec-9437-04a4c2c41c34/1/FT0HLM7wC_Rk1mDb0F2todoz0sg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/64b1e6-0a1f-40ec-9437-04a4c2c41c34/1/FT0HLM7wC_Rk1mDb0F2todoz0sg.mft
rsync://rpki.ripe.net/repository/DEFAULT/FT0HLM7wC_Rk1mDb0F2todoz0sg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:46:d7:90:90:c3:fa:3b:2d:74:f1:87:08:c3:2c:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=153d072ccef00bf464d660dbd05dada1da33d2c8
Validity
Not Before: Oct 19 21:01:19 2025 GMT
Not After : Oct 20 21:01:19 2025 GMT
Subject: CN=c4aaabe573fc0b6643a734985231aa6c50629a47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:93:a0:e9:10:42:01:0a:49:1e:0c:4e:60:2e:
77:ae:a9:d2:b8:90:02:44:9f:28:2c:21:f4:ec:d4:
03:ad:0d:ff:96:28:2c:47:8b:8d:a2:14:0c:6e:a6:
8a:6c:b4:9c:3b:67:ee:cb:cc:2d:84:1b:aa:18:77:
0c:44:d0:2f:9a:49:fe:33:13:43:2e:1e:52:5c:11:
18:ab:7f:89:b7:7b:6c:51:f2:3e:f2:27:cb:58:46:
59:84:3e:d9:7a:97:7f:03:81:82:33:67:e2:64:05:
8c:16:fc:8c:5c:7a:75:46:d3:e5:33:73:ac:b1:3d:
ee:de:b6:9a:22:95:47:e2:14:6b:85:8f:31:55:d2:
87:c3:7a:86:75:42:ec:8f:d1:95:26:b6:81:fb:84:
6f:3a:e6:d2:83:39:41:fa:cc:ca:3c:80:25:80:c6:
76:56:2c:76:7b:e0:64:8e:d7:d9:f2:1b:56:46:3a:
0d:5b:06:d1:97:bb:c2:17:c1:33:b2:56:19:8d:e4:
92:bf:7a:74:b0:6c:bc:ab:01:87:89:4e:8e:87:e1:
d1:38:2a:ee:d8:e6:d1:d2:0f:aa:30:a1:70:40:ec:
74:42:63:40:2e:bd:4d:67:d6:94:4d:fb:18:68:92:
d1:08:f5:db:bd:c1:56:f5:83:e1:97:6c:6d:16:bb:
2c:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:AA:AB:E5:73:FC:0B:66:43:A7:34:98:52:31:AA:6C:50:62:9A:47
X509v3 Authority Key Identifier:
keyid:15:3D:07:2C:CE:F0:0B:F4:64:D6:60:DB:D0:5D:AD:A1:DA:33:D2:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FT0HLM7wC_Rk1mDb0F2todoz0sg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/64b1e6-0a1f-40ec-9437-04a4c2c41c34/1/FT0HLM7wC_Rk1mDb0F2todoz0sg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/64b1e6-0a1f-40ec-9437-04a4c2c41c34/1/FT0HLM7wC_Rk1mDb0F2todoz0sg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:4c:7a:1d:a0:a7:d8:c7:45:27:e8:e2:29:6c:b7:0d:cd:9c:
8c:20:0c:5f:e0:eb:33:16:89:c6:e4:16:7e:cf:43:60:5d:6e:
45:95:75:2c:41:93:96:c7:95:b4:a7:02:f5:2b:e4:9a:fd:9d:
00:d5:53:d1:d2:14:30:70:f7:cc:42:04:a8:fc:51:36:ef:87:
23:b0:6a:60:33:54:2a:ff:66:da:f4:74:a8:50:c5:ce:3b:1d:
55:ce:30:17:3b:ba:55:e4:b9:f3:fb:e8:e1:8e:fc:cf:a4:ef:
d6:1e:bf:8f:a7:52:c4:e2:df:25:a6:bd:2f:da:df:a9:d8:27:
f6:22:28:03:42:c3:9b:10:d1:f7:6c:7e:6d:ed:fe:15:98:ee:
f3:1d:04:bb:07:c4:75:e0:b4:7e:9b:27:17:e7:3f:a7:09:5e:
4f:35:9c:e4:85:02:2f:38:60:97:96:d7:9f:ba:3d:b5:4d:b8:
8c:96:b0:ef:60:71:57:dc:fd:28:5d:dc:18:77:a2:92:89:81:
d4:46:31:12:4f:5e:c4:78:55:45:05:ff:d9:01:78:a6:f7:1a:
f9:86:54:e9:ff:1d:2a:7c:9a:50:ba:99:14:f9:bf:a4:30:74:
17:aa:bd:87:af:b0:8b:27:c9:f0:84:b2:55:1d:89:79:40:c8:
68:a9:89:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:15:52 2025 by rpki-client