Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/64b1e6-0a1f-40ec-9437-04a4c2c41c34/1/FT0HLM7wC_Rk1mDb0F2todoz0sg.mft
File: FT0HLM7wC_Rk1mDb0F2todoz0sg.mft (raw, json)
Hash identifier: BfqOCIXg5cw9bK8ImkmX2gs6gp1/Kmtn1yHTX3KQkQE=
Subject key identifier: 1F:22:95:88:39:69:67:5B:89:11:A3:C7:DA:CD:CD:4B:25:5A:46:49
Authority key identifier: 15:3D:07:2C:CE:F0:0B:F4:64:D6:60:DB:D0:5D:AD:A1:DA:33:D2:C8
Certificate issuer: /CN=153d072ccef00bf464d660dbd05dada1da33d2c8
Certificate serial: 019A7225B6495BEC1198CAECF4821B8F9880
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FT0HLM7wC_Rk1mDb0F2todoz0sg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/64b1e6-0a1f-40ec-9437-04a4c2c41c34/1/FT0HLM7wC_Rk1mDb0F2todoz0sg.mft
Manifest number: 0946
Signing time: Tue 11 Nov 2025 09:01:05 +0000
Manifest this update: Tue 11 Nov 2025 09:01:05 +0000
Manifest next update: Wed 12 Nov 2025 09:01:05 +0000
Files and hashes: 1: F0iKq1ijjGBYajSFmQyhreXVAQY.roa (hash: m8/L5cr+uaNLauEK1OLTPn18oa9yVQaLyP+GQwyUFcE=)
2: FT0HLM7wC_Rk1mDb0F2todoz0sg.crl (hash: E9yLYac42WeWTGh9TfJ8dsmucHDRl0UraJ7l5bL8p+w=)
3: _2lRv88Gb4s0UGVaP2Mgmxw3ML8.roa (hash: kqmxs4EHa2TZhRmR5+4BZAkd9MXd2Id3FkNPJK6jmmM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/64b1e6-0a1f-40ec-9437-04a4c2c41c34/1/FT0HLM7wC_Rk1mDb0F2todoz0sg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/64b1e6-0a1f-40ec-9437-04a4c2c41c34/1/FT0HLM7wC_Rk1mDb0F2todoz0sg.mft
rsync://rpki.ripe.net/repository/DEFAULT/FT0HLM7wC_Rk1mDb0F2todoz0sg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:b6:49:5b:ec:11:98:ca:ec:f4:82:1b:8f:98:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=153d072ccef00bf464d660dbd05dada1da33d2c8
Validity
Not Before: Nov 11 09:01:05 2025 GMT
Not After : Nov 12 09:01:05 2025 GMT
Subject: CN=1f2295883969675b8911a3c7dacdcd4b255a4649
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:99:74:26:07:89:eb:42:bd:8f:1b:78:b2:6f:
c8:77:88:60:6d:c2:a4:2c:b2:71:48:66:a9:92:db:
fe:f0:90:05:63:32:90:65:4f:57:cb:32:f3:8f:07:
26:72:57:19:64:55:a0:7f:ca:d5:df:db:d5:fb:1d:
de:74:c5:29:06:2e:60:98:a1:39:71:38:42:7c:de:
84:fd:cc:7f:6e:be:32:32:db:2f:00:9e:b4:76:98:
e3:35:48:45:d5:d4:1c:2c:bb:1a:fc:28:9e:7b:84:
fa:09:c7:d2:96:eb:c4:ae:7b:f0:d0:0b:cf:46:5e:
ec:e5:8e:31:67:4a:da:33:d6:97:36:ba:f9:b4:5a:
41:1f:26:5c:ca:7f:3d:8b:c7:ce:ab:51:ee:f5:f4:
2b:ed:61:17:23:f7:4c:0c:60:79:f1:a5:34:42:a4:
65:68:1c:0e:12:2b:78:72:2c:f7:d3:0e:5e:d1:cf:
b1:3f:07:5f:a1:26:a9:a5:9e:47:ac:3c:e9:ae:31:
72:a8:9a:17:9d:e9:8c:0f:8f:48:16:94:e9:c4:c0:
25:38:c5:e4:43:f9:0a:61:a8:34:e3:f2:2a:34:dd:
ec:f2:28:82:7c:6b:3f:c9:9b:b2:46:84:71:86:e1:
a3:14:a2:71:23:17:d3:53:0e:14:91:fa:67:a9:8c:
9e:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:22:95:88:39:69:67:5B:89:11:A3:C7:DA:CD:CD:4B:25:5A:46:49
X509v3 Authority Key Identifier:
keyid:15:3D:07:2C:CE:F0:0B:F4:64:D6:60:DB:D0:5D:AD:A1:DA:33:D2:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FT0HLM7wC_Rk1mDb0F2todoz0sg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/64b1e6-0a1f-40ec-9437-04a4c2c41c34/1/FT0HLM7wC_Rk1mDb0F2todoz0sg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/64b1e6-0a1f-40ec-9437-04a4c2c41c34/1/FT0HLM7wC_Rk1mDb0F2todoz0sg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:e3:39:83:ba:9d:24:7d:16:6e:77:e7:0c:42:98:a1:1d:c5:
97:56:6c:eb:07:c6:ed:aa:bd:38:b7:46:4d:8a:c6:6a:b0:6b:
b8:b5:69:0f:c9:43:e0:d6:20:e2:f5:ed:b7:6b:d5:7e:72:f9:
60:17:e1:e4:2a:76:be:98:c9:30:79:50:fb:ed:e3:13:98:7c:
c5:46:af:be:95:03:e0:dc:3b:2f:8a:95:f1:9c:0b:d3:c8:25:
77:93:6b:67:e7:e6:c8:01:f1:5a:f5:da:0b:a3:4e:4c:c9:65:
e2:cc:bf:ed:68:b9:29:c3:48:73:5c:63:3f:72:e6:c2:4e:76:
83:97:12:da:9b:e1:c7:50:2e:4d:e3:02:fd:75:0a:9d:c3:64:
3d:9d:f1:61:7f:d8:27:4d:b0:6f:a3:22:9a:67:98:f8:f7:9e:
f0:d8:ba:1d:f2:52:a6:3a:8d:de:2a:e1:c0:c2:ee:93:3d:1f:
a9:41:24:48:12:7c:68:96:2d:a4:58:59:35:65:b4:8d:34:7e:
28:72:1a:2a:ec:c5:d2:af:fd:47:88:94:9a:31:d6:ce:d9:20:
4b:41:8f:a6:5f:5a:6d:85:21:7b:a7:a1:c0:2d:35:a1:53:b2:
a8:f4:37:74:67:17:df:d2:fa:94:aa:ca:06:f3:c3:ef:e3:f2:
07:b0:fd:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:37:00 2025 by rpki-client