Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/b05e08-0762-4dc7-a4b0-5805d3f3dbb2/1/FT8kGD1slRhZGTSebpJTNzZDe5Q.mft
File: FT8kGD1slRhZGTSebpJTNzZDe5Q.mft (raw, json)
Hash identifier: 7Uk1Mng9t+M0Q1dYxMFhh0Q0BnbDye1gWilQkiuxABQ=
Subject key identifier: 22:9B:C7:8E:D5:B9:FE:3A:B6:A2:C1:F2:24:F8:56:70:06:34:C8:ED
Authority key identifier: 15:3F:24:18:3D:6C:95:18:59:19:34:9E:6E:92:53:37:36:43:7B:94
Certificate issuer: /CN=153f24183d6c95185919349e6e92533736437b94
Certificate serial: 019A7149B3CBD84590CBA68C7339926F10C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FT8kGD1slRhZGTSebpJTNzZDe5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/b05e08-0762-4dc7-a4b0-5805d3f3dbb2/1/FT8kGD1slRhZGTSebpJTNzZDe5Q.mft
Manifest number: 0819
Signing time: Tue 11 Nov 2025 05:00:46 +0000
Manifest this update: Tue 11 Nov 2025 05:00:46 +0000
Manifest next update: Wed 12 Nov 2025 05:00:46 +0000
Files and hashes: 1: 02srA_dodlsqHDgp--vASVvWX9E.roa (hash: lJ1KGWWna7XFX1YELq/QOjPK38+hDLl/0ZeJxdIW2VA=)
2: FT8kGD1slRhZGTSebpJTNzZDe5Q.crl (hash: I9wkKzppbGm5cHqP1A0e9CYOYuyPTBMrHcEH2Cwb80k=)
3: MBq9_d6LT2vyQzQfNudTMEVPC5w.roa (hash: md4P7geg1tPk/NRWigzWi02Y2+T+SaZ3+I/C1pIam5U=)
4: w6nyjw8CCPdGWE2r0om0qvXFyXo.roa (hash: 1O15ZgeKf2Rbzxb6TQY0MNC2RDhbgVcfZUfdxbDgya4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/b05e08-0762-4dc7-a4b0-5805d3f3dbb2/1/FT8kGD1slRhZGTSebpJTNzZDe5Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/b05e08-0762-4dc7-a4b0-5805d3f3dbb2/1/FT8kGD1slRhZGTSebpJTNzZDe5Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/FT8kGD1slRhZGTSebpJTNzZDe5Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:b3:cb:d8:45:90:cb:a6:8c:73:39:92:6f:10:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=153f24183d6c95185919349e6e92533736437b94
Validity
Not Before: Nov 11 05:00:46 2025 GMT
Not After : Nov 12 05:00:46 2025 GMT
Subject: CN=229bc78ed5b9fe3ab6a2c1f224f856700634c8ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:31:ea:b8:78:68:e7:b1:c3:8c:03:39:db:1b:
80:54:4b:f3:6b:24:3f:a4:11:61:cb:35:c5:c3:dc:
56:37:4b:91:c0:35:da:00:f8:b3:ea:1b:a9:fc:41:
04:2a:b4:fc:f7:bb:df:cb:c9:3a:88:25:25:86:2b:
bc:b8:5e:25:9d:14:31:c5:e2:1f:19:63:1a:c5:f6:
c7:87:02:e9:5b:2e:d3:5a:82:6b:13:6d:a4:4f:41:
fa:ae:56:0e:40:b3:64:ff:0b:a8:d2:6f:45:b8:02:
65:22:2f:82:56:1d:5d:f3:dc:87:c0:d6:1d:00:2d:
6a:14:86:b3:24:7d:41:17:68:dc:10:30:b0:70:7d:
c6:ee:97:0c:d3:b0:31:03:a7:68:21:9c:3b:51:f8:
93:88:61:8d:5e:4b:31:75:e9:3b:e8:20:63:1e:6e:
0c:b3:ed:61:81:5b:c6:ca:99:e9:2a:0e:95:27:e5:
d4:09:0c:b2:0c:fa:9c:af:4d:3e:73:5e:82:ce:a6:
e1:c4:94:1d:b6:98:e2:6c:62:2b:49:1a:5d:d2:5c:
70:1e:a6:e4:ba:23:fd:d8:ce:8d:ba:de:ea:03:c5:
5d:a9:a9:9e:99:cb:d1:5a:c9:92:3a:ba:6e:bc:64:
c5:57:99:16:87:3c:1c:6b:a8:f3:80:ce:70:59:53:
c8:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:9B:C7:8E:D5:B9:FE:3A:B6:A2:C1:F2:24:F8:56:70:06:34:C8:ED
X509v3 Authority Key Identifier:
keyid:15:3F:24:18:3D:6C:95:18:59:19:34:9E:6E:92:53:37:36:43:7B:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FT8kGD1slRhZGTSebpJTNzZDe5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b05e08-0762-4dc7-a4b0-5805d3f3dbb2/1/FT8kGD1slRhZGTSebpJTNzZDe5Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b05e08-0762-4dc7-a4b0-5805d3f3dbb2/1/FT8kGD1slRhZGTSebpJTNzZDe5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:94:5e:b5:a6:6d:ea:d0:c4:0b:9f:a0:5d:1b:41:50:39:c3:
c3:c0:d2:67:2d:f9:24:ec:05:21:a1:6b:ff:61:46:e7:f1:23:
4d:b2:bd:1a:49:2c:0d:90:40:23:b3:ee:a6:e4:d4:f8:21:69:
7c:33:36:17:9c:3e:da:47:e7:63:3c:d4:10:e0:25:3c:ba:94:
79:5a:88:df:c4:14:be:63:04:38:1e:9e:19:57:31:f7:b7:40:
e8:d9:37:a4:ee:9c:ee:48:6d:ab:b6:32:e9:4c:3e:3f:86:73:
b2:c7:f8:e2:cf:ce:d4:80:69:2f:fb:b6:5b:a8:bb:99:71:0b:
cc:81:89:9b:a6:a7:e2:74:58:31:de:d5:75:1a:96:10:7c:61:
6c:78:ea:67:34:28:d2:6f:d3:49:d5:21:ee:c9:d9:e7:64:16:
b1:33:41:40:24:15:95:71:b7:5c:af:79:da:f7:b9:a1:50:05:
f2:81:c3:ac:1d:30:d8:8a:dd:96:a2:5e:c2:e8:2c:36:69:42:
2c:2c:7e:09:3e:7c:73:5c:bb:22:fc:a4:f1:a5:66:9a:b6:9f:
aa:ff:cd:b7:cd:9c:11:10:a0:ae:94:e8:0a:2f:31:14:89:a5:
9f:18:64:1b:a5:86:d2:5c:8c:ef:8a:e3:0d:c6:e5:52:b3:01:
dd:6e:4e:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:38:14 2025 by rpki-client