Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/f56d7f-1b78-4453-81e7-ba56378a6476/1/FTtGcCg5p5W6uo2NFezcymN-M2w.mft
File: FTtGcCg5p5W6uo2NFezcymN-M2w.mft (raw, json)
Hash identifier: 8PcJzpmjngyMbrJ/mqqEPecwNQ5Rgv4u6sN3VeCgX2U=
Subject key identifier: E6:22:1E:F4:ED:B6:5B:5B:5B:02:2C:DA:DF:5D:CB:31:48:32:09:96
Authority key identifier: 15:3B:46:70:28:39:A7:95:BA:BA:8D:8D:15:EC:DC:CA:63:7E:33:6C
Certificate issuer: /CN=153b46702839a795baba8d8d15ecdcca637e336c
Certificate serial: 019A7149E91B0DD1B3BE462267DE24A63582
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FTtGcCg5p5W6uo2NFezcymN-M2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/f56d7f-1b78-4453-81e7-ba56378a6476/1/FTtGcCg5p5W6uo2NFezcymN-M2w.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 05:01:00 +0000
Manifest this update: Tue 11 Nov 2025 05:01:00 +0000
Manifest next update: Wed 12 Nov 2025 05:01:00 +0000
Files and hashes: 1: 7LfdpybXjkO1zp9O6nzu1fNfc88.roa (hash: QAPjHN/iZlfmzhgOwFaV5zDBEKY0r/wVKeB2R6gKrqA=)
2: FTtGcCg5p5W6uo2NFezcymN-M2w.crl (hash: rKC3TJSamx1yOubW+qvPkhtcQmEUXHu2r0rcZu/Sn5k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/f56d7f-1b78-4453-81e7-ba56378a6476/1/FTtGcCg5p5W6uo2NFezcymN-M2w.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/f56d7f-1b78-4453-81e7-ba56378a6476/1/FTtGcCg5p5W6uo2NFezcymN-M2w.mft
rsync://rpki.ripe.net/repository/DEFAULT/FTtGcCg5p5W6uo2NFezcymN-M2w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:e9:1b:0d:d1:b3:be:46:22:67:de:24:a6:35:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=153b46702839a795baba8d8d15ecdcca637e336c
Validity
Not Before: Nov 11 05:01:00 2025 GMT
Not After : Nov 12 05:01:00 2025 GMT
Subject: CN=e6221ef4edb65b5b5b022cdadf5dcb3148320996
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:91:11:71:95:10:e4:8a:92:f7:8d:8c:e1:d7:
d8:3c:31:f9:16:ad:8a:ad:8c:ee:9c:38:c1:ca:47:
38:38:1b:53:6c:b3:f2:2e:b8:67:30:2b:20:7a:3b:
8d:34:2b:52:b6:03:91:b5:28:f8:31:7e:33:3f:61:
e1:a5:59:51:e4:da:01:56:40:7d:2c:cf:e2:d2:ed:
59:a0:ec:f5:52:9c:3d:15:a1:fa:42:b4:57:60:68:
10:af:56:a5:4a:be:38:99:80:02:9f:a8:4a:60:e1:
10:2f:7b:c1:5d:8e:96:c5:26:7b:ac:cb:61:bd:7c:
eb:7f:fb:f9:7b:ab:38:1a:73:29:82:c4:64:31:33:
b9:10:75:8b:43:7c:b0:18:dc:de:1a:80:cc:4e:06:
9c:53:ee:6e:41:86:e3:fb:c1:b6:6f:3c:01:ce:6a:
ac:11:33:73:6b:f6:8e:f2:02:e2:32:11:eb:72:bf:
3b:b2:3f:b1:2b:aa:39:c8:55:da:ab:58:36:53:71:
b9:8e:69:9b:2e:3e:a9:32:08:f5:75:92:40:ff:c7:
77:da:89:75:76:00:fd:6f:01:88:e1:92:5c:72:ff:
96:2f:28:23:f0:1b:9e:d7:10:ae:de:5b:91:fb:db:
49:95:80:65:bc:8a:de:18:ec:c8:b0:17:99:ba:3a:
80:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:22:1E:F4:ED:B6:5B:5B:5B:02:2C:DA:DF:5D:CB:31:48:32:09:96
X509v3 Authority Key Identifier:
keyid:15:3B:46:70:28:39:A7:95:BA:BA:8D:8D:15:EC:DC:CA:63:7E:33:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FTtGcCg5p5W6uo2NFezcymN-M2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f56d7f-1b78-4453-81e7-ba56378a6476/1/FTtGcCg5p5W6uo2NFezcymN-M2w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f56d7f-1b78-4453-81e7-ba56378a6476/1/FTtGcCg5p5W6uo2NFezcymN-M2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:8d:57:66:2c:dc:2b:a5:9e:23:63:f7:80:85:34:9b:f5:8a:
62:c5:79:be:ac:d3:73:39:df:19:8d:7c:94:a7:9d:d6:74:3b:
09:e2:31:67:0e:b9:19:5f:b7:63:14:d6:3f:59:70:09:3c:e6:
22:32:49:73:66:d4:93:a3:65:56:d4:0e:48:71:50:90:f9:f3:
4b:77:79:62:2c:06:e8:55:0a:d8:6d:9c:7c:26:d3:3b:f5:7b:
29:c4:3d:b4:cc:c3:3b:ff:97:20:73:d9:eb:ac:17:65:53:39:
30:88:7d:4b:97:5f:8a:48:e7:b0:9b:02:b1:39:b4:e9:c1:54:
ee:fd:b7:8a:1c:41:d6:bc:e4:dc:87:c3:09:da:5d:be:10:c6:
6a:d5:2a:97:e4:b5:f4:0a:5c:e7:9a:0f:d2:7c:32:92:98:91:
e7:b9:2b:32:aa:bf:46:d1:19:23:3d:ea:17:67:07:d0:f1:3b:
6e:ad:f3:62:02:21:5f:0f:95:c9:82:49:4f:21:0a:09:15:22:
34:67:7c:77:90:62:bf:b6:d1:f5:89:ef:04:16:fe:6a:8b:3c:
b9:67:be:ff:b5:cd:83:7f:8b:71:59:10:15:43:91:4f:66:a3:
24:00:25:ce:ae:40:55:27:fd:53:25:f8:3e:a8:91:97:94:9b:
13:8c:44:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:35:10 2025 by rpki-client