Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/64b1e6-0a1f-40ec-9437-04a4c2c41c34/1/FT0HLM7wC_Rk1mDb0F2todoz0sg.mft
File: FT0HLM7wC_Rk1mDb0F2todoz0sg.mft (raw, json)
Hash identifier: y2Fpk+/hQ/i123LGd1/huvG8T8ewdSrouQlbyFD+Ivw=
Subject key identifier: 67:8A:51:52:64:E2:1F:12:64:6D:84:59:29:23:BC:0F:9C:9F:A1:FA
Authority key identifier: 15:3D:07:2C:CE:F0:0B:F4:64:D6:60:DB:D0:5D:AD:A1:DA:33:D2:C8
Certificate issuer: /CN=153d072ccef00bf464d660dbd05dada1da33d2c8
Certificate serial: 019927E957BD8902D0EEB0E2835F2F2F7491
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FT0HLM7wC_Rk1mDb0F2todoz0sg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/64b1e6-0a1f-40ec-9437-04a4c2c41c34/1/FT0HLM7wC_Rk1mDb0F2todoz0sg.mft
Manifest number: 089B
Signing time: Mon 08 Sep 2025 06:00:27 +0000
Manifest this update: Mon 08 Sep 2025 06:00:27 +0000
Manifest next update: Tue 09 Sep 2025 06:00:27 +0000
Files and hashes: 1: F0iKq1ijjGBYajSFmQyhreXVAQY.roa (hash: m8/L5cr+uaNLauEK1OLTPn18oa9yVQaLyP+GQwyUFcE=)
2: FT0HLM7wC_Rk1mDb0F2todoz0sg.crl (hash: drbPGfmGpjsk0b/xxOhn4OdaTrbaMzluuvw0P726cZw=)
3: _2lRv88Gb4s0UGVaP2Mgmxw3ML8.roa (hash: kqmxs4EHa2TZhRmR5+4BZAkd9MXd2Id3FkNPJK6jmmM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/64b1e6-0a1f-40ec-9437-04a4c2c41c34/1/FT0HLM7wC_Rk1mDb0F2todoz0sg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/64b1e6-0a1f-40ec-9437-04a4c2c41c34/1/FT0HLM7wC_Rk1mDb0F2todoz0sg.mft
rsync://rpki.ripe.net/repository/DEFAULT/FT0HLM7wC_Rk1mDb0F2todoz0sg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 01:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:27:e9:57:bd:89:02:d0:ee:b0:e2:83:5f:2f:2f:74:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=153d072ccef00bf464d660dbd05dada1da33d2c8
Validity
Not Before: Sep 8 06:00:27 2025 GMT
Not After : Sep 9 06:00:27 2025 GMT
Subject: CN=678a515264e21f12646d84592923bc0f9c9fa1fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:30:f6:42:ed:fe:04:fc:06:e4:66:f0:74:7a:
6e:06:1c:d5:77:b2:85:56:91:84:f4:50:2c:0e:e5:
54:95:d1:ba:1d:ca:4e:4f:6c:e0:dd:12:a5:4f:9a:
0f:ba:a5:73:a4:6d:38:23:58:53:30:77:d7:3e:91:
b4:c2:14:69:4e:63:d0:10:c2:c3:39:e2:4c:d0:d9:
cc:39:a0:76:12:22:71:0d:01:33:09:ac:45:75:5e:
87:92:3f:79:20:7f:8e:bf:3a:61:0f:02:62:2b:40:
98:08:5d:4e:e7:bb:af:fb:62:68:a5:f1:ce:8f:c8:
a1:d3:0b:cd:79:06:44:b0:d1:86:38:d6:fa:1a:a2:
90:dc:03:8c:c6:da:6e:15:15:7d:58:e8:71:52:19:
c2:4e:9d:61:b2:38:0a:36:ba:b9:26:d3:fa:96:8e:
38:20:2e:2a:f9:30:40:a1:65:fe:88:47:4b:34:a5:
bf:f0:00:d8:22:6f:58:9c:46:3d:1c:38:00:32:52:
52:05:8e:22:93:22:b6:ae:f6:ff:7a:0d:d7:10:4c:
5d:7b:72:39:15:42:51:93:18:20:49:a0:86:fb:5c:
41:80:f4:30:31:29:b2:f6:da:77:72:55:ed:b0:b8:
af:33:ba:9b:3c:cf:ce:fc:2d:d1:67:c8:0f:5c:f3:
2b:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:8A:51:52:64:E2:1F:12:64:6D:84:59:29:23:BC:0F:9C:9F:A1:FA
X509v3 Authority Key Identifier:
keyid:15:3D:07:2C:CE:F0:0B:F4:64:D6:60:DB:D0:5D:AD:A1:DA:33:D2:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FT0HLM7wC_Rk1mDb0F2todoz0sg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/64b1e6-0a1f-40ec-9437-04a4c2c41c34/1/FT0HLM7wC_Rk1mDb0F2todoz0sg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/64b1e6-0a1f-40ec-9437-04a4c2c41c34/1/FT0HLM7wC_Rk1mDb0F2todoz0sg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:fd:13:10:cf:84:a4:6a:3f:8c:24:10:20:b5:b9:b1:17:61:
e5:50:e0:d8:a1:27:39:ff:aa:67:e1:8e:17:01:48:dd:68:1d:
dd:49:52:06:26:ed:7e:e8:95:25:c9:b0:18:a2:7b:ac:85:e8:
2e:1a:34:a7:c4:ab:35:eb:d2:b4:01:eb:1c:03:39:11:cb:15:
15:32:98:6b:cd:b1:c4:e4:14:1d:04:68:df:55:a1:88:74:29:
6f:a3:b9:1e:bc:de:3f:2b:c6:d2:a7:08:39:a8:a2:b6:eb:ea:
5f:e4:06:49:84:cd:31:7a:01:ac:a3:25:75:57:71:45:d7:01:
ab:b7:ae:aa:20:46:2a:17:3d:a3:9b:1a:cd:30:4b:b1:34:f3:
25:05:39:bf:44:7a:83:61:d2:55:8b:0f:27:2a:1e:08:64:e4:
e6:99:49:0c:ae:13:27:a5:d4:a1:f1:dd:07:8a:f1:fb:01:c9:
48:d5:47:4e:bb:32:0f:0c:76:e6:ac:f5:8b:dd:a7:c3:9c:05:
46:3f:d4:71:ae:bb:7b:57:8e:52:8d:9c:36:81:6d:21:2e:f6:
a0:11:4c:98:02:99:1d:1e:c3:4c:53:1f:9e:27:ac:0f:ca:1d:
0f:b1:a6:8c:62:a9:bb:e2:f0:4a:0f:4a:09:f5:b1:2b:89:e5:
ae:49:b2:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 08:35:32 2025 by rpki-client