Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/b9c906-1e85-4573-8f62-8257d51928a9/1/fTXAsgkTXCLMgAWnwuIixjwTbLA.mft
File: fTXAsgkTXCLMgAWnwuIixjwTbLA.mft (raw, json)
Hash identifier: 04zhf7EviJt4fU/znGNNDJaMzwTb6yeMHve9yDGGSB0=
Subject key identifier: B9:3B:D7:17:2D:BD:C4:43:3A:71:4A:FE:0C:86:28:E4:1B:C9:0F:D3
Authority key identifier: 7D:35:C0:B2:09:13:5C:22:CC:80:05:A7:C2:E2:22:C6:3C:13:6C:B0
Certificate issuer: /CN=7d35c0b209135c22cc8005a7c2e222c63c136cb0
Certificate serial: 019A3EDC860D4EAB0622D14CC11995C609ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fTXAsgkTXCLMgAWnwuIixjwTbLA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/b9c906-1e85-4573-8f62-8257d51928a9/1/fTXAsgkTXCLMgAWnwuIixjwTbLA.mft
Manifest number: 1704
Signing time: Sat 01 Nov 2025 10:00:30 +0000
Manifest this update: Sat 01 Nov 2025 10:00:30 +0000
Manifest next update: Sun 02 Nov 2025 10:00:30 +0000
Files and hashes: 1: E008mlaZ-98yoVlxucj25N9tnVo.roa (hash: 7h9j4kfENIh6mVCwgI4OQBIMY0MBjmJwFr/fTNDIJFk=)
2: R2-GAax-KT1qCEjDDbUwaoUFHaY.roa (hash: DTrChNvAxi6mH07womaTROYkgqmDr0mKtOiNc7UHhPs=)
3: fTXAsgkTXCLMgAWnwuIixjwTbLA.crl (hash: /+CRgYhvbF9HofFKAePo4rfc61HHhFpz+iu5Gfsg1lY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/b9c906-1e85-4573-8f62-8257d51928a9/1/fTXAsgkTXCLMgAWnwuIixjwTbLA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/b9c906-1e85-4573-8f62-8257d51928a9/1/fTXAsgkTXCLMgAWnwuIixjwTbLA.mft
rsync://rpki.ripe.net/repository/DEFAULT/fTXAsgkTXCLMgAWnwuIixjwTbLA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Nov 2025 10:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:3e:dc:86:0d:4e:ab:06:22:d1:4c:c1:19:95:c6:09:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d35c0b209135c22cc8005a7c2e222c63c136cb0
Validity
Not Before: Nov 1 10:00:30 2025 GMT
Not After : Nov 2 10:00:30 2025 GMT
Subject: CN=b93bd7172dbdc4433a714afe0c8628e41bc90fd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:dc:3a:67:52:f5:74:13:17:f7:58:36:56:5a:
e4:1c:8e:65:77:c4:85:cf:84:89:a1:6a:ba:27:1b:
03:6d:04:7a:14:3b:4a:40:71:1c:0c:f8:14:cc:11:
b9:d8:03:58:8f:45:6a:93:90:f6:72:57:25:fe:e9:
58:ba:c2:7b:69:b6:69:cb:72:fe:5d:2d:4d:5d:b5:
aa:03:09:42:b0:6b:48:e1:ec:ba:bf:a4:66:0c:f9:
ce:10:80:59:60:a8:a4:4a:eb:ba:b5:35:b0:d9:63:
7b:df:b3:cf:4e:44:ad:95:f4:20:bc:88:cf:fe:9b:
38:f7:a5:17:9c:8d:fe:e3:24:5b:32:86:0a:91:75:
e0:24:15:f2:ff:a5:62:40:b1:7d:bc:70:e2:26:91:
41:7f:70:57:f5:ef:ee:68:9f:33:da:bb:1c:d8:34:
68:4c:3b:4e:67:7b:19:c5:1d:7c:73:4b:3b:8b:58:
d6:ef:2a:58:43:a1:0a:73:8c:10:bf:69:01:8c:c0:
f7:68:0e:b1:69:7a:a6:4e:35:5c:47:92:be:f6:87:
06:28:93:ba:ca:40:fa:69:29:2c:60:77:76:9d:09:
88:2b:82:d4:eb:9b:a6:42:62:f4:1e:be:91:d2:92:
9d:fb:ac:08:4e:84:e5:21:4e:fc:38:e1:59:a2:d3:
11:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:3B:D7:17:2D:BD:C4:43:3A:71:4A:FE:0C:86:28:E4:1B:C9:0F:D3
X509v3 Authority Key Identifier:
keyid:7D:35:C0:B2:09:13:5C:22:CC:80:05:A7:C2:E2:22:C6:3C:13:6C:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fTXAsgkTXCLMgAWnwuIixjwTbLA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b9c906-1e85-4573-8f62-8257d51928a9/1/fTXAsgkTXCLMgAWnwuIixjwTbLA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b9c906-1e85-4573-8f62-8257d51928a9/1/fTXAsgkTXCLMgAWnwuIixjwTbLA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:e4:c4:3a:e8:3b:1b:69:31:9b:0c:5d:f6:a6:ac:fe:1c:2e:
1d:66:b7:ce:16:20:ae:10:6c:f8:fb:bb:70:d8:a4:12:6c:18:
60:a0:55:e0:f4:2c:12:35:48:21:f5:1e:1d:4a:ba:d6:30:7a:
f4:35:da:71:dd:4d:24:61:70:45:ce:f7:75:97:71:dd:87:fb:
b5:56:0d:c9:4e:cf:e1:80:22:23:38:da:c8:39:73:b2:a0:90:
41:66:94:51:b0:b3:f4:b2:82:9d:db:9c:6d:17:7d:f1:bf:4f:
46:c5:4f:6d:9f:8f:61:40:6d:39:29:d1:9e:86:74:e4:ef:5b:
bd:89:3a:78:d2:9f:55:36:e0:ee:cf:1e:3b:ec:a7:8a:5b:5a:
f9:7c:9f:b4:03:a6:ef:1f:16:3b:39:1d:34:cd:7b:52:83:55:
8c:92:01:dc:a3:c0:be:4e:0e:0e:ec:7c:64:26:5f:c4:b0:8b:
0f:e4:bd:ad:f6:4f:d5:99:5a:10:99:14:5d:89:be:b7:da:37:
99:c6:81:91:e5:0c:52:03:5a:b9:21:e8:bf:d8:3a:c6:3c:1e:
c9:da:12:d0:eb:81:01:69:8f:e1:4c:44:33:41:f0:2b:c1:89:
ab:13:1c:a2:1b:ea:f1:87:fb:8c:6b:37:e1:5b:25:59:dc:e1:
b3:33:27:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 1 15:23:41 2025 by rpki-client