Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/b9c906-1e85-4573-8f62-8257d51928a9/1/fTXAsgkTXCLMgAWnwuIixjwTbLA.mft
File: fTXAsgkTXCLMgAWnwuIixjwTbLA.mft (raw, json)
Hash identifier: Ecbu5bSFeU+xez+ps4zhxd/5YWki0HS4aLUZGNgGEiQ=
Subject key identifier: 32:C7:60:06:3C:44:BF:00:9D:42:93:36:CB:5F:ED:9E:22:98:7D:17
Authority key identifier: 7D:35:C0:B2:09:13:5C:22:CC:80:05:A7:C2:E2:22:C6:3C:13:6C:B0
Certificate issuer: /CN=7d35c0b209135c22cc8005a7c2e222c63c136cb0
Certificate serial: 01987CE521EE737D41A589EB58D009AE9395
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fTXAsgkTXCLMgAWnwuIixjwTbLA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/b9c906-1e85-4573-8f62-8257d51928a9/1/fTXAsgkTXCLMgAWnwuIixjwTbLA.mft
Manifest number: 161B
Signing time: Wed 06 Aug 2025 01:00:47 +0000
Manifest this update: Wed 06 Aug 2025 01:00:47 +0000
Manifest next update: Thu 07 Aug 2025 01:00:47 +0000
Files and hashes: 1: E008mlaZ-98yoVlxucj25N9tnVo.roa (hash: 7h9j4kfENIh6mVCwgI4OQBIMY0MBjmJwFr/fTNDIJFk=)
2: R2-GAax-KT1qCEjDDbUwaoUFHaY.roa (hash: DTrChNvAxi6mH07womaTROYkgqmDr0mKtOiNc7UHhPs=)
3: fTXAsgkTXCLMgAWnwuIixjwTbLA.crl (hash: Zpxdn0By06Kms2SznfYg/153maxxEY/b8w6ZPtRvEVk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/b9c906-1e85-4573-8f62-8257d51928a9/1/fTXAsgkTXCLMgAWnwuIixjwTbLA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/b9c906-1e85-4573-8f62-8257d51928a9/1/fTXAsgkTXCLMgAWnwuIixjwTbLA.mft
rsync://rpki.ripe.net/repository/DEFAULT/fTXAsgkTXCLMgAWnwuIixjwTbLA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:e5:21:ee:73:7d:41:a5:89:eb:58:d0:09:ae:93:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d35c0b209135c22cc8005a7c2e222c63c136cb0
Validity
Not Before: Aug 6 01:00:47 2025 GMT
Not After : Aug 7 01:00:47 2025 GMT
Subject: CN=32c760063c44bf009d429336cb5fed9e22987d17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:9b:8b:7c:0c:0b:8a:52:2b:35:8a:ec:9e:b5:
ec:29:66:05:67:a8:95:6f:bb:c1:61:b8:dd:db:61:
75:1e:13:bc:ad:02:00:5d:2f:7a:fb:f4:42:2c:fc:
92:1e:5a:10:7c:fa:96:fc:4e:99:d6:f6:d3:72:33:
ae:c7:b8:48:70:3d:f9:2d:68:24:4c:16:30:11:bf:
0e:2a:eb:ac:da:32:3f:1c:6a:5e:c4:ae:18:b3:81:
20:b8:99:73:1b:7b:04:81:f9:95:fd:d2:81:05:92:
b7:78:a8:73:dd:d5:6d:58:a2:4a:30:60:0b:a1:72:
03:1c:d0:43:ed:83:45:27:f6:a1:c9:cd:9d:e0:6a:
7f:fb:1e:83:94:e6:99:2b:6d:7e:43:68:a3:6f:9a:
74:88:6f:ac:a8:91:e5:23:5a:03:7c:8c:2c:03:e9:
77:53:26:95:79:39:2c:93:f5:a3:4c:3c:89:38:bc:
38:d4:ef:cf:17:2a:aa:fd:bc:01:48:bd:cf:ae:25:
85:55:11:6a:b0:ac:01:93:0e:4c:b9:59:0a:02:0e:
02:de:5e:a7:24:74:00:d3:eb:92:aa:39:79:b7:27:
60:0e:1c:37:3a:42:0c:90:f1:ba:0b:95:78:38:5f:
67:2b:70:1f:97:83:4b:47:d7:2f:3c:4c:4e:ab:da:
7b:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:C7:60:06:3C:44:BF:00:9D:42:93:36:CB:5F:ED:9E:22:98:7D:17
X509v3 Authority Key Identifier:
keyid:7D:35:C0:B2:09:13:5C:22:CC:80:05:A7:C2:E2:22:C6:3C:13:6C:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fTXAsgkTXCLMgAWnwuIixjwTbLA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b9c906-1e85-4573-8f62-8257d51928a9/1/fTXAsgkTXCLMgAWnwuIixjwTbLA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b9c906-1e85-4573-8f62-8257d51928a9/1/fTXAsgkTXCLMgAWnwuIixjwTbLA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:4e:77:c4:7e:44:bd:51:10:75:18:0f:8a:07:d1:02:38:f4:
14:aa:f6:5a:6e:9d:81:db:ae:13:69:ed:d0:7e:67:41:aa:35:
b5:5f:1a:41:87:fd:84:c5:d1:39:25:29:6b:8f:22:ca:8b:a5:
99:cc:b5:b3:b7:b3:88:1c:2f:74:b8:d7:9c:97:14:34:75:42:
be:f0:5f:cb:de:60:f4:5b:c4:12:33:97:d9:09:9c:b5:48:c0:
8d:bc:eb:21:1d:af:fd:23:a4:aa:12:c6:dd:f4:b0:4a:0d:36:
7b:f7:2b:13:90:66:de:a0:09:b9:ec:5b:06:b5:0b:3b:59:bf:
4e:1b:f1:df:f4:d2:fe:7c:86:b4:69:cc:81:b8:3b:1f:e6:f5:
79:2f:b6:75:fc:19:f3:6b:bd:14:39:66:01:83:6d:73:cb:3c:
15:68:52:a8:f7:03:f6:15:25:de:ab:a1:23:5e:14:32:bc:8f:
1a:43:2b:e5:7d:42:76:54:c3:16:59:c1:34:be:d0:a4:a5:e4:
80:25:26:c0:36:1f:5a:29:a1:36:fe:45:10:a1:fa:af:72:8d:
f4:36:2a:94:59:88:25:71:8d:58:78:3c:8a:ec:08:e6:ee:33:
60:17:f6:a5:01:3c:31:5f:8f:d7:58:5f:7a:55:e2:12:07:0e:
3e:0d:c5:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:54:39 2025 by rpki-client