Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/565191-d981-41e5-961c-9fe55b171683/1/FTPNLR9tzx7sl-hpQ8TlOwyI6q4.mft
File: FTPNLR9tzx7sl-hpQ8TlOwyI6q4.mft (raw, json)
Hash identifier: xprtBHCP/xi5jA0K9SfSWsWO0gpiGUJJ2bc12KZsj7o=
Subject key identifier: 12:33:B4:ED:8F:80:FF:AC:89:CE:7F:0C:F2:BF:3D:7C:91:07:F4:E8
Authority key identifier: 15:33:CD:2D:1F:6D:CF:1E:EC:97:E8:69:43:C4:E5:3B:0C:88:EA:AE
Certificate issuer: /CN=1533cd2d1f6dcf1eec97e86943c4e53b0c88eaae
Certificate serial: 019A4F62FF7150441B886997DD105A3E6146
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FTPNLR9tzx7sl-hpQ8TlOwyI6q4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/565191-d981-41e5-961c-9fe55b171683/1/FTPNLR9tzx7sl-hpQ8TlOwyI6q4.mft
Manifest number: 170A
Signing time: Tue 04 Nov 2025 15:01:19 +0000
Manifest this update: Tue 04 Nov 2025 15:01:19 +0000
Manifest next update: Wed 05 Nov 2025 15:01:19 +0000
Files and hashes: 1: FTPNLR9tzx7sl-hpQ8TlOwyI6q4.crl (hash: XA1ofoFvLbUbl05Cm+wodRHOqwt1Onmy+kiq2w23lyI=)
2: bVPZcxyyuoSw5oO9YToFQkVC9HE.roa (hash: PMh8VdKlUCXwqFCEJ+zfZN1ZK1DFnhbrgEIJ3TSYDdE=)
3: ucnP1VSEw1kHHuA3QA5_zId7uwM.roa (hash: YmzOGwmaq6ynMsOM2MUQrdoh74IojEKpTpvJHQjtfdM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/565191-d981-41e5-961c-9fe55b171683/1/FTPNLR9tzx7sl-hpQ8TlOwyI6q4.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/565191-d981-41e5-961c-9fe55b171683/1/FTPNLR9tzx7sl-hpQ8TlOwyI6q4.mft
rsync://rpki.ripe.net/repository/DEFAULT/FTPNLR9tzx7sl-hpQ8TlOwyI6q4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:ff:71:50:44:1b:88:69:97:dd:10:5a:3e:61:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1533cd2d1f6dcf1eec97e86943c4e53b0c88eaae
Validity
Not Before: Nov 4 15:01:19 2025 GMT
Not After : Nov 5 15:01:19 2025 GMT
Subject: CN=1233b4ed8f80ffac89ce7f0cf2bf3d7c9107f4e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:3e:e0:c4:bf:c3:d7:9d:5b:c4:a6:e3:55:77:
15:a0:a7:ba:c9:49:de:fc:a5:93:4d:5c:5e:8e:39:
cb:a7:0b:81:56:a7:6c:c8:82:03:94:2d:3b:c0:75:
46:d1:88:47:04:ff:e0:9a:ed:8f:2a:07:cf:8b:0b:
9d:d1:d5:7a:8f:8f:c9:b6:09:5f:87:ae:c1:4b:a8:
ab:a5:a8:24:67:64:12:52:da:6d:31:11:9c:61:81:
59:62:4d:e1:3e:b7:79:ae:c1:ea:7a:a4:b3:8c:1a:
e8:75:52:11:a4:37:5a:2e:c5:98:99:c8:5a:67:da:
b5:d0:0b:df:e8:e4:ae:de:51:70:13:71:c0:6d:0f:
a2:af:c7:95:fb:f2:04:c6:48:75:49:cb:68:7f:42:
39:25:c4:a9:ad:38:78:f2:9f:a3:b9:64:0a:ff:86:
1f:0b:d1:76:02:37:83:b6:67:3a:ba:1e:c6:b1:5f:
a3:12:93:b8:d4:30:84:ec:c9:c6:fd:af:8c:4c:8c:
38:91:be:0e:d8:c1:ca:20:6b:f2:99:fe:2d:63:38:
61:95:d3:92:f1:7c:b3:1f:c1:1a:a6:b8:79:54:fc:
d1:cb:a7:f7:fc:6b:df:5c:20:94:be:e9:de:6b:ac:
ee:80:33:48:89:a9:36:3a:22:78:e3:7f:7f:98:eb:
4a:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:33:B4:ED:8F:80:FF:AC:89:CE:7F:0C:F2:BF:3D:7C:91:07:F4:E8
X509v3 Authority Key Identifier:
keyid:15:33:CD:2D:1F:6D:CF:1E:EC:97:E8:69:43:C4:E5:3B:0C:88:EA:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FTPNLR9tzx7sl-hpQ8TlOwyI6q4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/565191-d981-41e5-961c-9fe55b171683/1/FTPNLR9tzx7sl-hpQ8TlOwyI6q4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/565191-d981-41e5-961c-9fe55b171683/1/FTPNLR9tzx7sl-hpQ8TlOwyI6q4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:16:f3:4b:d6:03:1c:cb:7c:53:2d:f9:9e:09:9e:14:a1:1f:
4c:c7:01:78:ed:27:c3:67:a7:19:03:9c:1b:84:15:e9:aa:51:
a3:b5:05:32:26:2c:dc:27:f2:09:1d:e2:75:35:26:9b:e8:ff:
c3:4b:f8:0f:c0:5a:da:e0:13:86:f1:74:cd:f1:9f:73:8b:ba:
d8:62:3e:c0:61:13:af:dc:0e:90:4f:81:78:78:7f:cc:82:41:
3e:3e:b9:ec:9f:39:84:92:de:13:0f:eb:18:84:91:17:6d:a9:
7e:6e:47:98:13:6b:9f:cf:ec:4e:cf:cc:13:d1:d3:63:bc:3c:
76:c3:05:9f:e2:98:8d:58:5a:4f:b6:b3:63:05:9c:76:35:d7:
09:8b:f6:cd:5b:c3:cc:4c:6e:3e:44:26:1e:5d:41:d3:77:35:
5d:37:c3:08:36:78:70:39:56:13:b5:1e:a6:9a:27:7f:d0:4f:
9b:2e:35:42:99:7a:17:a7:70:12:f6:0a:18:0e:71:c1:95:d0:
52:92:03:9a:1a:50:e2:2f:87:9a:c4:45:eb:bb:6b:ad:a8:37:
97:f3:3e:5a:9e:e4:06:8b:1f:1b:3e:40:5e:06:12:44:5a:be:
fc:19:9e:4e:a5:3a:ee:44:61:aa:5c:ed:6c:b2:fa:19:96:ff:
fd:ed:08:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:35:11 2025 by rpki-client