Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/b9c906-1e85-4573-8f62-8257d51928a9/1/fTXAsgkTXCLMgAWnwuIixjwTbLA.mft
File: fTXAsgkTXCLMgAWnwuIixjwTbLA.mft (raw, json)
Hash identifier: KncSeTjLvcn71l8q52/8EJmhnRGlOSqdqlhfiyNbduU=
Subject key identifier: 83:C0:12:F0:E4:86:50:67:62:E0:C1:06:09:02:F1:AE:9D:04:88:96
Authority key identifier: 7D:35:C0:B2:09:13:5C:22:CC:80:05:A7:C2:E2:22:C6:3C:13:6C:B0
Certificate issuer: /CN=7d35c0b209135c22cc8005a7c2e222c63c136cb0
Certificate serial: 01984AAE93940748106FFDB38E1B9A10A638
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fTXAsgkTXCLMgAWnwuIixjwTbLA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/b9c906-1e85-4573-8f62-8257d51928a9/1/fTXAsgkTXCLMgAWnwuIixjwTbLA.mft
Manifest number: 1601
Signing time: Sun 27 Jul 2025 07:00:11 +0000
Manifest this update: Sun 27 Jul 2025 07:00:11 +0000
Manifest next update: Mon 28 Jul 2025 07:00:11 +0000
Files and hashes: 1: E008mlaZ-98yoVlxucj25N9tnVo.roa (hash: 7h9j4kfENIh6mVCwgI4OQBIMY0MBjmJwFr/fTNDIJFk=)
2: R2-GAax-KT1qCEjDDbUwaoUFHaY.roa (hash: DTrChNvAxi6mH07womaTROYkgqmDr0mKtOiNc7UHhPs=)
3: fTXAsgkTXCLMgAWnwuIixjwTbLA.crl (hash: aPmSEOqZ2vwAWaLhRWP1PPhSM3fJmUvskgAq0/JiD2k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/b9c906-1e85-4573-8f62-8257d51928a9/1/fTXAsgkTXCLMgAWnwuIixjwTbLA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/b9c906-1e85-4573-8f62-8257d51928a9/1/fTXAsgkTXCLMgAWnwuIixjwTbLA.mft
rsync://rpki.ripe.net/repository/DEFAULT/fTXAsgkTXCLMgAWnwuIixjwTbLA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:ae:93:94:07:48:10:6f:fd:b3:8e:1b:9a:10:a6:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d35c0b209135c22cc8005a7c2e222c63c136cb0
Validity
Not Before: Jul 27 07:00:11 2025 GMT
Not After : Jul 28 07:00:11 2025 GMT
Subject: CN=83c012f0e486506762e0c1060902f1ae9d048896
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:70:e5:1f:94:07:79:e6:5f:23:86:1f:37:aa:
55:09:b8:8b:88:93:11:92:aa:1b:eb:3a:b5:a5:9a:
bf:34:6e:d5:2e:95:bf:03:50:ce:f9:49:cd:b8:ee:
4f:82:14:29:f3:8a:41:80:ea:45:d2:0d:20:f5:45:
43:2c:53:92:97:81:a3:2f:5b:fb:3c:f6:ec:86:55:
88:f8:6a:58:c6:3e:a4:20:ca:e5:c1:e3:06:0a:9c:
3a:55:28:b2:ae:8e:23:43:73:b5:f4:f6:f8:c7:ee:
0d:ad:a5:83:43:52:36:81:6d:04:f3:af:0f:7d:4e:
ca:e4:19:6b:07:1c:4e:da:06:bd:57:e9:68:f7:6a:
c7:9c:0d:7e:22:0b:46:c0:75:cf:31:8b:7f:be:e1:
f2:57:de:9c:95:e2:f8:c1:db:76:ea:cc:10:31:1e:
a4:58:de:d3:76:ae:6d:23:9a:04:3b:db:b2:0a:75:
be:b3:52:c3:1f:97:9c:9e:34:08:3c:80:8e:e1:a6:
ea:4f:72:c4:bd:cd:e0:81:bd:55:10:ca:6c:85:8e:
ef:df:37:47:03:6f:c5:00:11:3a:65:01:b7:df:6a:
73:28:15:f6:0b:a9:23:a6:c3:67:6c:30:b0:d0:6d:
da:40:85:7f:94:56:93:05:da:ac:d1:01:f0:7f:21:
e6:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:C0:12:F0:E4:86:50:67:62:E0:C1:06:09:02:F1:AE:9D:04:88:96
X509v3 Authority Key Identifier:
keyid:7D:35:C0:B2:09:13:5C:22:CC:80:05:A7:C2:E2:22:C6:3C:13:6C:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fTXAsgkTXCLMgAWnwuIixjwTbLA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b9c906-1e85-4573-8f62-8257d51928a9/1/fTXAsgkTXCLMgAWnwuIixjwTbLA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b9c906-1e85-4573-8f62-8257d51928a9/1/fTXAsgkTXCLMgAWnwuIixjwTbLA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:10:eb:20:65:cf:43:53:b1:4e:af:8b:f5:83:36:02:d2:e3:
29:d1:12:e9:81:d5:89:aa:d3:e4:bb:c2:e9:b3:27:4a:75:aa:
81:38:6e:13:84:1b:94:9a:d2:09:8a:72:00:d9:80:83:9b:ad:
f9:ce:a1:34:36:56:41:4f:23:87:50:5c:a0:fb:fd:2e:9a:ae:
b7:f9:6e:2b:f9:3d:52:0c:17:46:69:99:a6:c9:cb:01:7f:b6:
d2:7f:c6:d2:09:b0:2a:9d:c1:28:31:76:cd:c6:97:2c:5b:c0:
fb:7c:ef:76:9d:84:6c:a5:72:1e:8e:26:41:d2:fd:cb:4e:1e:
fa:0c:fc:73:2e:11:2e:94:81:6d:92:c6:96:6a:1c:64:5d:74:
75:6d:50:0b:d6:8e:fd:1f:70:27:06:74:26:bc:3c:ca:fa:58:
f2:f1:85:2c:76:91:98:4b:44:97:02:1c:41:7c:fc:c8:57:76:
c1:0e:28:b4:cc:95:78:0b:37:39:eb:df:4a:1d:50:bf:ee:19:
08:7b:43:e2:1e:f1:cb:a9:3c:99:a1:4b:17:67:37:af:14:e1:
c9:49:3f:da:6f:d7:54:28:54:59:92:a9:63:b2:aa:8c:88:9b:
90:5e:c3:e5:76:61:cf:ea:b4:03:e4:62:29:b4:86:5f:0a:7a:
27:b1:d4:9d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhKrpOUB0gQb/2zjhuaEKY4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkMzVjMGIyMDkxMzVjMjJjYzgwMDVhN2MyZTIyMmM2M2Mx
MzZjYjAwHhcNMjUwNzI3MDcwMDExWhcNMjUwNzI4MDcwMDExWjAzMTEwLwYDVQQD
Eyg4M2MwMTJmMGU0ODY1MDY3NjJlMGMxMDYwOTAyZjFhZTlkMDQ4ODk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwnDlH5QHeeZfI4YfN6pVCbiLiJMR
kqob6zq1pZq/NG7VLpW/A1DO+UnNuO5PghQp84pBgOpF0g0g9UVDLFOSl4GjL1v7
PPbshlWI+GpYxj6kIMrlweMGCpw6VSiyro4jQ3O19Pb4x+4NraWDQ1I2gW0E868P
fU7K5BlrBxxO2ga9V+lo92rHnA1+IgtGwHXPMYt/vuHyV96cleL4wdt26swQMR6k
WN7Tdq5tI5oEO9uyCnW+s1LDH5ecnjQIPICO4abqT3LEvc3ggb1VEMpshY7v3zdH
A2/FABE6ZQG332pzKBX2C6kjpsNnbDCw0G3aQIV/lFaTBdqs0QHwfyHm+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIPAEvDkhlBnYuDBBgkC8a6dBIiWMB8GA1UdIwQY
MBaAFH01wLIJE1wizIAFp8LiIsY8E2ywMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlRYQXNna1RYQ0xNZ0FXbnd1SWl4andUYkxBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9iOWM5MDYtMWU4NS00NTczLThmNjIt
ODI1N2Q1MTkyOGE5LzEvZlRYQXNna1RYQ0xNZ0FXbnd1SWl4andUYkxBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy9iOWM5MDYtMWU4NS00NTczLThmNjItODI1N2Q1MTkyOGE5
LzEvZlRYQXNna1RYQ0xNZ0FXbnd1SWl4andUYkxBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAShDrIGXP
Q1OxTq+L9YM2AtLjKdES6YHViarT5LvC6bMnSnWqgThuE4QblJrSCYpyANmAg5ut
+c6hNDZWQU8jh1BcoPv9Lpqut/luK/k9UgwXRmmZpsnLAX+20n/G0gmwKp3BKDF2
zcaXLFvA+3zvdp2EbKVyHo4mQdL9y04e+gz8cy4RLpSBbZLGlmocZF10dW1QC9aO
/R9wJwZ0Jrw8yvpY8vGFLHaRmEtElwIcQXz8yFd2wQ4otMyVeAs3OevfSh1Qv+4Z
CHtD4h7xy6k8maFLF2c3rxThyUk/2m/XVChUWZKpY7KqjIibkF7D5XZhz+q0A+Ri
KbSGXwp6J7HUnQ==
-----END CERTIFICATE-----
Generated at Sun Jul 27 12:09:17 2025 by rpki-client