Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/586375-bc8d-4065-83dc-0aeb9d37787e/1/FtQJAygYpijNKyg4OALXfnSUolI.mft
File: FtQJAygYpijNKyg4OALXfnSUolI.mft (raw, json)
Hash identifier: xZP4OKtfM/1U/BWKyZ50ehyAVyLdkORmDoCYLjIEFqw=
Subject key identifier: 0D:E0:52:BB:FC:5F:63:61:17:6B:AE:E9:D8:A8:FB:30:C5:CC:71:AB
Authority key identifier: 16:D4:09:03:28:18:A6:28:CD:2B:28:38:38:02:D7:7E:74:94:A2:52
Certificate issuer: /CN=16d409032818a628cd2b28383802d77e7494a252
Certificate serial: 019A104C343225D14605E6D6D0362598782C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FtQJAygYpijNKyg4OALXfnSUolI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/586375-bc8d-4065-83dc-0aeb9d37787e/1/FtQJAygYpijNKyg4OALXfnSUolI.mft
Manifest number: AE
Signing time: Thu 23 Oct 2025 09:00:20 +0000
Manifest this update: Thu 23 Oct 2025 09:00:20 +0000
Manifest next update: Fri 24 Oct 2025 09:00:20 +0000
Files and hashes: 1: FtQJAygYpijNKyg4OALXfnSUolI.crl (hash: 6DwUInDcT8B+p5Iq216PsaQbVoa/ggssJK6ADak7AQU=)
2: X-F4EV-F2ag_5pD7ZZ_5QP_Tg_k.roa (hash: 1FxaidkVHdKLmVU/qFLpds7lpUrV/YLVa1N6wBCOD8g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/586375-bc8d-4065-83dc-0aeb9d37787e/1/FtQJAygYpijNKyg4OALXfnSUolI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/586375-bc8d-4065-83dc-0aeb9d37787e/1/FtQJAygYpijNKyg4OALXfnSUolI.mft
rsync://rpki.ripe.net/repository/DEFAULT/FtQJAygYpijNKyg4OALXfnSUolI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Oct 2025 09:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:10:4c:34:32:25:d1:46:05:e6:d6:d0:36:25:98:78:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16d409032818a628cd2b28383802d77e7494a252
Validity
Not Before: Oct 23 09:00:20 2025 GMT
Not After : Oct 24 09:00:20 2025 GMT
Subject: CN=0de052bbfc5f6361176baee9d8a8fb30c5cc71ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:e3:73:df:99:96:ad:83:6f:99:0a:e5:bd:8d:
5e:4c:a6:23:f8:92:30:fc:4d:32:c8:88:62:b6:48:
ba:80:c4:2c:b3:5c:1b:11:d3:71:d4:92:8e:50:0a:
51:aa:fb:d7:18:eb:4b:dc:bf:ed:be:70:ca:74:96:
56:66:df:a0:f6:ed:f8:b2:22:56:7b:44:7d:65:d7:
34:81:30:02:64:1d:63:7b:fa:af:28:4d:d1:38:1d:
7b:e1:f2:b4:98:e6:b5:73:2a:0b:16:46:99:86:a9:
0a:39:d2:65:36:18:e8:47:35:36:41:1c:23:99:6d:
34:84:fc:d6:f9:f3:2e:82:02:67:80:80:f5:94:4f:
55:30:38:39:82:af:a7:75:b3:f6:b5:29:4f:4e:eb:
16:6b:52:25:fb:97:50:fb:cf:27:4c:72:48:c2:57:
4e:7c:ac:03:0b:53:da:e8:d5:39:3e:43:5b:00:9b:
d1:40:26:b6:68:78:3d:59:27:80:da:0b:19:62:4e:
00:19:e5:ad:23:1f:2b:13:01:82:36:52:41:8e:f1:
a4:2f:57:6f:da:e0:80:48:91:de:c9:cb:56:96:3c:
3f:93:a0:df:34:99:10:00:db:fb:cc:95:7a:65:20:
af:85:ef:2d:9a:a4:b3:81:b7:ae:cd:e7:2b:11:71:
82:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:E0:52:BB:FC:5F:63:61:17:6B:AE:E9:D8:A8:FB:30:C5:CC:71:AB
X509v3 Authority Key Identifier:
keyid:16:D4:09:03:28:18:A6:28:CD:2B:28:38:38:02:D7:7E:74:94:A2:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FtQJAygYpijNKyg4OALXfnSUolI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/586375-bc8d-4065-83dc-0aeb9d37787e/1/FtQJAygYpijNKyg4OALXfnSUolI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/586375-bc8d-4065-83dc-0aeb9d37787e/1/FtQJAygYpijNKyg4OALXfnSUolI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:eb:6a:60:28:4e:3b:b4:41:5e:7a:9f:d6:66:9b:4d:58:86:
6a:e6:7b:e2:74:38:01:de:f5:72:1c:49:93:8e:66:46:cb:a5:
68:37:a3:0f:a1:4d:0f:49:87:f1:de:42:2a:49:ba:74:ee:5f:
25:9e:05:3f:0b:1d:aa:51:20:11:f9:86:52:68:c3:0c:9a:ba:
18:3e:ae:b7:b5:22:41:10:97:2b:d9:94:e2:51:a2:66:9b:86:
7d:c7:b6:88:a7:ac:3b:6f:fb:3c:b2:bf:f8:51:dc:a9:c0:cc:
c5:ce:6e:3b:3d:40:39:f5:59:5c:df:4d:2e:4d:48:b0:1c:ef:
ed:36:7b:f5:d4:ea:24:f2:fd:2a:3e:2a:97:72:04:6c:a4:f4:
b9:fb:c4:76:0d:81:f0:20:62:70:a6:58:bf:f1:47:3a:18:4d:
7c:c3:63:23:09:a9:e3:80:e3:34:3c:be:3f:9b:4d:e2:1b:3a:
0c:2b:a3:48:ca:dc:c3:1c:f4:a1:a4:e7:f5:a8:e5:03:22:c0:
ca:77:78:1c:5f:bc:7c:39:80:0d:25:6a:32:24:81:96:c2:56:
b6:58:1b:b4:67:0b:90:d9:42:36:2a:00:2e:77:4c:d7:95:1b:
6d:c6:c0:4f:79:2d:34:26:32:b8:f3:3c:68:8e:ce:f9:2c:15:
5b:30:6f:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 23 16:39:02 2025 by rpki-client