Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/6a89f0-0b22-452c-a659-42a7af882e09/1/FTXSThc2fkBbeA9xEEnl940QHxY.mft
File: FTXSThc2fkBbeA9xEEnl940QHxY.mft (raw, json)
Hash identifier: Nte9evo1MjlFbwa3OXqoMgkb/xo+8nKSQpE6iOe/mzA=
Subject key identifier: 00:C1:00:8E:7F:5F:E8:5D:E2:C7:1B:62:BF:53:D1:1C:BA:8A:D7:CC
Authority key identifier: 15:35:D2:4E:17:36:7E:40:5B:78:0F:71:10:49:E5:F7:8D:10:1F:16
Certificate issuer: /CN=1535d24e17367e405b780f711049e5f78d101f16
Certificate serial: 0198530CDA95FC32B8D8F57710FDFEC24AA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FTXSThc2fkBbeA9xEEnl940QHxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/6a89f0-0b22-452c-a659-42a7af882e09/1/FTXSThc2fkBbeA9xEEnl940QHxY.mft
Manifest number: 11E2
Signing time: Mon 28 Jul 2025 22:00:07 +0000
Manifest this update: Mon 28 Jul 2025 22:00:07 +0000
Manifest next update: Tue 29 Jul 2025 22:00:07 +0000
Files and hashes: 1: 5ogK5Ex4CS4B5KsMhYCUM00RFfQ.roa (hash: ZPbDvWHExMztNeKcllyDlDkCaDogTJsh9sQhQBtO6xU=)
2: FTXSThc2fkBbeA9xEEnl940QHxY.crl (hash: wMVETP1ZD1P+HIZli8pLd4J0Ju+ALln8GKWBMcoCgKI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/6a89f0-0b22-452c-a659-42a7af882e09/1/FTXSThc2fkBbeA9xEEnl940QHxY.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/6a89f0-0b22-452c-a659-42a7af882e09/1/FTXSThc2fkBbeA9xEEnl940QHxY.mft
rsync://rpki.ripe.net/repository/DEFAULT/FTXSThc2fkBbeA9xEEnl940QHxY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 22:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:0c:da:95:fc:32:b8:d8:f5:77:10:fd:fe:c2:4a:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1535d24e17367e405b780f711049e5f78d101f16
Validity
Not Before: Jul 28 22:00:07 2025 GMT
Not After : Jul 29 22:00:07 2025 GMT
Subject: CN=00c1008e7f5fe85de2c71b62bf53d11cba8ad7cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b5:4b:f2:75:74:46:c4:4f:06:91:ac:c2:b9:
cb:88:9b:8b:21:5a:a3:fe:97:cc:27:d5:91:70:a5:
cd:d2:34:64:a1:d4:41:ef:06:65:3f:8b:c1:e1:ed:
bf:a2:13:52:8c:e3:36:4d:32:28:69:99:bc:38:43:
92:e4:51:19:47:a4:0d:f4:24:97:6f:d4:75:15:d2:
a1:76:49:53:50:b4:9c:5e:be:c8:e4:9f:b6:e8:9d:
d0:34:2b:62:4f:d2:c5:bb:9f:99:71:9e:17:5e:24:
a9:b0:f0:12:47:52:07:ae:c2:20:9f:12:ee:e6:fd:
4d:cd:a4:5c:0f:3a:74:c8:38:b4:ff:13:a3:d3:13:
73:b5:e0:e5:db:74:c3:48:1a:55:02:41:82:d2:7a:
f4:5b:f5:1d:a1:68:0d:29:a3:71:d2:a5:eb:0b:eb:
05:b3:13:74:45:f5:a0:da:33:4b:bf:06:58:87:e9:
d7:e7:4f:f4:25:44:e5:b9:0d:aa:b6:b8:97:c5:1f:
84:f2:b6:bf:46:4f:b7:3c:3e:6d:40:e9:fe:7b:68:
47:ad:6e:77:30:67:bd:78:d0:0e:e7:69:40:ed:41:
11:07:08:a2:22:c8:df:f0:4b:63:43:78:96:ce:7c:
ed:3e:45:82:6c:f2:4d:ad:be:bc:dd:d7:bb:6e:f9:
ff:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:C1:00:8E:7F:5F:E8:5D:E2:C7:1B:62:BF:53:D1:1C:BA:8A:D7:CC
X509v3 Authority Key Identifier:
keyid:15:35:D2:4E:17:36:7E:40:5B:78:0F:71:10:49:E5:F7:8D:10:1F:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FTXSThc2fkBbeA9xEEnl940QHxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/6a89f0-0b22-452c-a659-42a7af882e09/1/FTXSThc2fkBbeA9xEEnl940QHxY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/6a89f0-0b22-452c-a659-42a7af882e09/1/FTXSThc2fkBbeA9xEEnl940QHxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:c8:33:0d:bb:98:9a:d9:68:02:63:eb:8c:d3:60:35:73:7a:
0b:b4:08:02:6e:2e:db:8c:0b:3c:35:03:62:8d:87:6f:b0:6d:
77:59:cb:92:79:ab:2f:71:bb:2b:3a:b1:05:6d:67:c7:96:87:
0e:26:56:13:21:5d:36:e6:af:b5:94:3d:0e:c1:50:ea:26:e4:
28:91:12:af:74:72:3a:6e:d2:26:f3:5f:2b:b3:82:30:10:60:
99:0d:9b:6d:8a:97:53:17:59:2c:33:74:b2:bf:b7:39:c7:58:
29:64:af:19:5f:df:0b:9f:94:a4:db:e8:94:39:60:89:5a:34:
8a:93:4c:5c:d1:1f:3c:11:e4:f2:38:11:4e:e0:47:e4:75:6f:
f3:12:28:66:b2:87:26:5d:e6:c8:0d:e6:5a:55:dc:b9:7a:1a:
53:78:ef:19:4f:39:4d:2a:91:67:4b:f2:0b:85:26:66:2a:c7:
e0:7e:d4:95:6a:7d:42:cd:d0:f7:fd:95:3b:6c:74:33:27:21:
0a:c1:45:e6:bf:e8:44:0e:51:57:66:2d:8d:66:11:21:4f:40:
97:88:85:f3:3d:c6:c8:20:77:2d:fc:a3:ad:a3:cc:48:ff:5d:
d9:8c:90:5c:ef:29:e9:c5:d9:3b:6c:c8:b5:e3:04:bf:ef:1d:
6b:b6:f6:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 07:11:44 2025 by rpki-client