Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/3a20d8-e902-41f5-befa-ab5f39fb8d36/1/ftCMDM2oAs8gznq97qICFOBeR68.mft
File: ftCMDM2oAs8gznq97qICFOBeR68.mft (raw, json)
Hash identifier: mAm7V3XJDmcVhD8PU4BV/WxdIJdcrIVfA3w7Qvp+OGg=
Subject key identifier: 8A:E2:CE:11:76:F6:C5:C8:0D:51:71:F5:01:6F:C0:B3:E4:89:42:2F
Authority key identifier: 7E:D0:8C:0C:CD:A8:02:CF:20:CE:7A:BD:EE:A2:02:14:E0:5E:47:AF
Certificate issuer: /CN=7ed08c0ccda802cf20ce7abdeea20214e05e47af
Certificate serial: 0199228C42D87D9E355737A6652D958D6A6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ftCMDM2oAs8gznq97qICFOBeR68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/3a20d8-e902-41f5-befa-ab5f39fb8d36/1/ftCMDM2oAs8gznq97qICFOBeR68.mft
Manifest number: 1672
Signing time: Sun 07 Sep 2025 05:00:41 +0000
Manifest this update: Sun 07 Sep 2025 05:00:41 +0000
Manifest next update: Mon 08 Sep 2025 05:00:41 +0000
Files and hashes: 1: P79ilXjNNqLG_ABRYWZBAk8XzIM.roa (hash: z414yhHihxRqPfk1ej5lxFnTCRyHE+z/dZVS4h4vn3A=)
2: ftCMDM2oAs8gznq97qICFOBeR68.crl (hash: KK6UWPsBWLsZIbtxCdtab5VNHKnQ2AhpsPEsTwqmf8E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/3a20d8-e902-41f5-befa-ab5f39fb8d36/1/ftCMDM2oAs8gznq97qICFOBeR68.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/3a20d8-e902-41f5-befa-ab5f39fb8d36/1/ftCMDM2oAs8gznq97qICFOBeR68.mft
rsync://rpki.ripe.net/repository/DEFAULT/ftCMDM2oAs8gznq97qICFOBeR68.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:42:d8:7d:9e:35:57:37:a6:65:2d:95:8d:6a:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ed08c0ccda802cf20ce7abdeea20214e05e47af
Validity
Not Before: Sep 7 05:00:41 2025 GMT
Not After : Sep 8 05:00:41 2025 GMT
Subject: CN=8ae2ce1176f6c5c80d5171f5016fc0b3e489422f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:3b:7d:da:31:36:af:77:4e:50:ed:92:e3:c3:
13:e7:85:f3:12:85:50:2f:cf:62:f9:fa:cb:11:29:
d5:5a:16:0c:27:23:d5:b6:00:46:05:c7:b8:56:4f:
e7:89:e5:c4:d9:e6:9a:c8:5c:25:b3:97:f8:f5:49:
6b:ab:44:bf:b6:fd:e0:a0:e6:5b:c2:85:14:36:3d:
b8:f4:8e:92:a2:2f:3a:26:65:ed:c9:12:e7:b6:fc:
7a:a6:fc:f7:9c:a7:bb:d7:6b:c5:03:6c:55:3a:dc:
c0:cd:04:d9:b2:fc:66:67:90:eb:db:87:ff:b3:fa:
2c:e2:61:69:4d:68:8e:e6:c8:8f:43:48:36:ef:41:
ef:11:a8:cc:fe:1d:c1:cc:fc:1b:4c:57:d6:e9:a1:
d3:60:bc:89:67:9a:92:df:9c:52:28:a9:ea:f4:66:
04:6b:58:5d:b5:3c:34:40:1b:74:63:13:d3:37:53:
5b:c5:6f:45:40:33:2a:57:d3:69:86:d5:1f:50:07:
0e:54:2f:d2:6c:8f:28:ea:5d:b8:8c:59:9c:95:89:
c0:5d:f9:2d:17:a1:54:68:f3:d3:9b:99:5d:44:1d:
60:62:ae:23:ef:a1:f0:6b:9b:0e:3f:72:ed:8f:61:
61:1d:d9:46:7e:50:09:f2:48:6d:43:90:7c:5b:0d:
3b:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:E2:CE:11:76:F6:C5:C8:0D:51:71:F5:01:6F:C0:B3:E4:89:42:2F
X509v3 Authority Key Identifier:
keyid:7E:D0:8C:0C:CD:A8:02:CF:20:CE:7A:BD:EE:A2:02:14:E0:5E:47:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ftCMDM2oAs8gznq97qICFOBeR68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/3a20d8-e902-41f5-befa-ab5f39fb8d36/1/ftCMDM2oAs8gznq97qICFOBeR68.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/3a20d8-e902-41f5-befa-ab5f39fb8d36/1/ftCMDM2oAs8gznq97qICFOBeR68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:af:9f:b2:d2:33:28:ee:12:a1:7b:09:ee:d0:04:b4:69:f9:
66:cd:05:b1:08:27:81:f3:a9:39:37:d9:40:e1:07:12:62:47:
e1:b1:b2:a1:f2:28:f1:2f:99:16:8f:e4:a7:02:16:4f:bc:60:
9a:4f:78:2e:4a:34:65:26:ad:a1:ba:78:87:09:7e:95:fa:17:
c4:ea:28:96:62:f0:ca:68:cf:48:7e:cf:27:50:3b:7c:b7:82:
1c:9b:7b:b2:5e:41:cf:7f:99:90:0b:76:54:04:57:1a:3b:7a:
a1:11:f6:8d:99:0c:de:01:a0:32:79:7c:c9:36:b2:93:95:01:
38:ba:9d:8a:01:17:00:ee:b3:3c:83:fc:4d:8d:11:97:cb:4e:
26:50:43:3b:5e:1d:73:42:00:ec:61:f2:93:a5:ab:00:01:04:
cc:5c:92:9c:06:54:da:65:18:76:5c:78:81:1f:d9:83:db:70:
5f:60:f7:ee:95:af:2f:0f:c7:bc:d5:bc:e2:1c:cd:d2:3d:95:
f7:9e:ac:21:74:f2:53:31:6a:30:44:36:e4:f4:49:ad:e7:42:
fc:b0:67:f4:46:95:76:68:74:7a:36:44:41:2b:c7:b0:45:cb:
34:37:c0:3d:22:54:66:a8:b4:a3:c3:79:66:39:62:95:7c:81:
fd:e8:7b:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:34:16 2025 by rpki-client