Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/b9c906-1e85-4573-8f62-8257d51928a9/1/fTXAsgkTXCLMgAWnwuIixjwTbLA.mft
File: fTXAsgkTXCLMgAWnwuIixjwTbLA.mft (raw, json)
Hash identifier: ZaMfOGZnjAQ5gBfI2aGzjNN1BqfNOTnV+UF9mOsIZ9w=
Subject key identifier: 69:0A:4C:8E:4D:66:05:8E:D2:E7:45:5C:69:95:5A:5D:B2:5F:EF:14
Authority key identifier: 7D:35:C0:B2:09:13:5C:22:CC:80:05:A7:C2:E2:22:C6:3C:13:6C:B0
Certificate issuer: /CN=7d35c0b209135c22cc8005a7c2e222c63c136cb0
Certificate serial: 0199345B85086FFD846ACE03A20155272CC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fTXAsgkTXCLMgAWnwuIixjwTbLA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/b9c906-1e85-4573-8f62-8257d51928a9/1/fTXAsgkTXCLMgAWnwuIixjwTbLA.mft
Manifest number: 167A
Signing time: Wed 10 Sep 2025 16:00:36 +0000
Manifest this update: Wed 10 Sep 2025 16:00:36 +0000
Manifest next update: Thu 11 Sep 2025 16:00:36 +0000
Files and hashes: 1: E008mlaZ-98yoVlxucj25N9tnVo.roa (hash: 7h9j4kfENIh6mVCwgI4OQBIMY0MBjmJwFr/fTNDIJFk=)
2: R2-GAax-KT1qCEjDDbUwaoUFHaY.roa (hash: DTrChNvAxi6mH07womaTROYkgqmDr0mKtOiNc7UHhPs=)
3: fTXAsgkTXCLMgAWnwuIixjwTbLA.crl (hash: em2LayRAwxrV2Fzm7lpivBhQgnWCTanZC4vScvwaOek=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/b9c906-1e85-4573-8f62-8257d51928a9/1/fTXAsgkTXCLMgAWnwuIixjwTbLA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/b9c906-1e85-4573-8f62-8257d51928a9/1/fTXAsgkTXCLMgAWnwuIixjwTbLA.mft
rsync://rpki.ripe.net/repository/DEFAULT/fTXAsgkTXCLMgAWnwuIixjwTbLA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 16:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:34:5b:85:08:6f:fd:84:6a:ce:03:a2:01:55:27:2c:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d35c0b209135c22cc8005a7c2e222c63c136cb0
Validity
Not Before: Sep 10 16:00:36 2025 GMT
Not After : Sep 11 16:00:36 2025 GMT
Subject: CN=690a4c8e4d66058ed2e7455c69955a5db25fef14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:e9:09:1e:07:7c:e3:63:29:c2:4a:55:fc:21:
1f:9f:bc:d8:17:5c:ff:e4:a1:7b:50:63:c4:41:e4:
87:1c:4b:a7:26:f0:67:d7:93:ab:ab:20:bd:74:91:
ee:02:ae:97:ff:db:02:80:cf:91:bf:6c:ab:ca:25:
06:2e:5a:d4:ca:f9:4f:2a:3e:59:01:3a:0b:c0:05:
61:ed:a7:dc:30:c5:55:6b:a1:40:17:de:e6:ab:76:
cf:a4:7b:bf:96:b2:f6:0a:03:1d:9b:46:ee:a3:d1:
e7:b3:1c:55:5d:05:55:e2:f3:47:74:93:df:87:07:
90:ca:61:ac:a8:f2:06:9c:08:73:c4:86:ce:03:be:
7b:e0:34:03:ef:dd:97:21:c9:42:bc:5a:e5:50:c4:
a7:1d:18:58:03:b2:7e:f7:ba:20:5a:0e:c3:87:05:
f8:26:85:10:e9:bd:ae:39:1b:54:04:ba:6e:c2:39:
c7:b7:9e:09:3c:f0:37:ba:26:f5:aa:c8:7e:b5:b6:
fe:09:f6:7b:dc:60:94:f6:34:98:d2:63:20:c4:db:
17:c2:ba:aa:b2:97:54:4d:e3:00:b3:7a:5f:7b:61:
24:33:ef:42:5c:bb:34:23:d2:3a:60:de:32:20:5e:
e2:6c:39:ba:9f:2c:a4:d1:4d:2d:81:a2:51:4e:90:
20:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:0A:4C:8E:4D:66:05:8E:D2:E7:45:5C:69:95:5A:5D:B2:5F:EF:14
X509v3 Authority Key Identifier:
keyid:7D:35:C0:B2:09:13:5C:22:CC:80:05:A7:C2:E2:22:C6:3C:13:6C:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fTXAsgkTXCLMgAWnwuIixjwTbLA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b9c906-1e85-4573-8f62-8257d51928a9/1/fTXAsgkTXCLMgAWnwuIixjwTbLA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b9c906-1e85-4573-8f62-8257d51928a9/1/fTXAsgkTXCLMgAWnwuIixjwTbLA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:e1:c4:b8:72:e9:7e:e0:f1:39:78:98:8f:8a:75:71:05:08:
4a:27:9a:db:05:66:45:d9:89:24:ab:6d:89:24:09:f3:3c:c1:
63:52:f4:75:6a:ea:8c:05:01:10:be:ae:a9:8b:f7:2d:53:5e:
dc:c7:d9:82:79:94:8c:d3:73:a5:1a:ff:6c:7e:62:e3:13:c3:
c9:fb:8a:39:20:42:56:9e:84:90:5b:75:52:28:0d:7c:46:5b:
ce:74:c0:62:3d:e0:dd:55:d8:e2:8e:f6:bc:3b:96:d5:2a:66:
a5:fd:3d:91:57:e1:31:a9:3f:c8:7e:f5:b3:78:c3:b2:c2:44:
cf:f4:25:75:95:e9:ed:e9:2f:26:df:e1:d7:eb:93:fe:51:60:
4d:96:db:45:83:d4:06:9e:f8:7e:5d:f8:a7:2d:68:b0:35:c4:
02:41:27:9f:c8:1f:4d:49:dc:66:2d:c4:28:60:d4:9a:a7:53:
6e:39:de:76:47:b1:c7:10:72:86:8e:34:2f:b8:7c:0d:2d:65:
6d:f0:1a:c2:fd:ae:c2:47:a0:72:1e:85:ec:d8:77:e9:23:2a:
d4:57:66:2a:44:58:e2:e5:75:ab:7f:88:d9:91:8e:a2:ad:4f:
c2:b2:d9:57:00:cf:eb:1f:c3:7d:e1:6c:6d:3c:cd:bd:4d:f2:
e0:2b:b0:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 00:49:34 2025 by rpki-client