Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/b9c906-1e85-4573-8f62-8257d51928a9/1/fTXAsgkTXCLMgAWnwuIixjwTbLA.mft
File: fTXAsgkTXCLMgAWnwuIixjwTbLA.mft (raw, json)
Hash identifier: hOYBmk9vOVVb6AuHlxfigRjDl7PW9tWoJfUPKMJhoqg=
Subject key identifier: E1:4B:57:AD:8B:08:95:2A:AC:66:AB:99:1E:01:C5:49:66:1F:A9:92
Authority key identifier: 7D:35:C0:B2:09:13:5C:22:CC:80:05:A7:C2:E2:22:C6:3C:13:6C:B0
Certificate issuer: /CN=7d35c0b209135c22cc8005a7c2e222c63c136cb0
Certificate serial: 019A4E4FCF0110696FB2A78B3AA8BA2BF3AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fTXAsgkTXCLMgAWnwuIixjwTbLA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/b9c906-1e85-4573-8f62-8257d51928a9/1/fTXAsgkTXCLMgAWnwuIixjwTbLA.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 10:00:44 +0000
Manifest this update: Tue 04 Nov 2025 10:00:44 +0000
Manifest next update: Wed 05 Nov 2025 10:00:44 +0000
Files and hashes: 1: E008mlaZ-98yoVlxucj25N9tnVo.roa (hash: 7h9j4kfENIh6mVCwgI4OQBIMY0MBjmJwFr/fTNDIJFk=)
2: R2-GAax-KT1qCEjDDbUwaoUFHaY.roa (hash: DTrChNvAxi6mH07womaTROYkgqmDr0mKtOiNc7UHhPs=)
3: fTXAsgkTXCLMgAWnwuIixjwTbLA.crl (hash: gO2eYp5xahEWRMxRF17Ui3Ke4nmRPd+APQmjfcxc1GA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/b9c906-1e85-4573-8f62-8257d51928a9/1/fTXAsgkTXCLMgAWnwuIixjwTbLA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/b9c906-1e85-4573-8f62-8257d51928a9/1/fTXAsgkTXCLMgAWnwuIixjwTbLA.mft
rsync://rpki.ripe.net/repository/DEFAULT/fTXAsgkTXCLMgAWnwuIixjwTbLA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:cf:01:10:69:6f:b2:a7:8b:3a:a8:ba:2b:f3:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d35c0b209135c22cc8005a7c2e222c63c136cb0
Validity
Not Before: Nov 4 10:00:44 2025 GMT
Not After : Nov 5 10:00:44 2025 GMT
Subject: CN=e14b57ad8b08952aac66ab991e01c549661fa992
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:00:dd:94:06:02:55:cd:65:80:2f:35:fc:64:
7e:a6:0f:e8:6c:09:25:82:b9:53:f3:6c:2e:ef:c2:
fa:81:e6:71:ab:1a:56:54:22:99:8f:55:07:d7:d1:
38:6d:20:42:6a:08:97:2d:05:68:fb:a2:39:54:99:
ea:2a:11:91:1a:de:93:42:46:38:36:8d:94:55:13:
b5:1d:71:32:66:ba:56:7c:08:4c:d6:5b:97:79:f8:
f2:e3:02:69:5c:12:49:8e:8b:de:af:77:39:b0:c5:
9b:c3:2d:83:90:df:33:6f:40:46:60:8a:1f:81:ff:
2b:67:e9:e8:47:d3:fc:f5:8a:92:e6:ed:78:b7:46:
e9:e2:b7:c7:1e:11:04:a1:43:41:d6:f1:cf:ac:31:
73:5a:84:5a:68:c9:f0:4d:25:cb:44:c5:d8:07:9d:
ae:98:fe:d3:07:c9:04:8d:e8:6d:c8:ca:a4:aa:34:
e3:25:98:4d:67:1f:4f:e1:77:71:17:97:bd:ac:5c:
9c:da:77:12:ed:ac:88:e2:71:ef:fe:ca:2f:e0:0c:
c8:08:8a:e6:be:5c:c0:ba:31:23:c7:da:f9:99:f3:
39:8e:43:c2:23:c6:78:74:ad:43:99:b5:6c:ec:bb:
a2:81:32:ab:76:33:28:e8:69:56:58:93:e3:5a:c5:
b3:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:4B:57:AD:8B:08:95:2A:AC:66:AB:99:1E:01:C5:49:66:1F:A9:92
X509v3 Authority Key Identifier:
keyid:7D:35:C0:B2:09:13:5C:22:CC:80:05:A7:C2:E2:22:C6:3C:13:6C:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fTXAsgkTXCLMgAWnwuIixjwTbLA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b9c906-1e85-4573-8f62-8257d51928a9/1/fTXAsgkTXCLMgAWnwuIixjwTbLA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b9c906-1e85-4573-8f62-8257d51928a9/1/fTXAsgkTXCLMgAWnwuIixjwTbLA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:4b:cc:b1:99:4d:62:c3:13:6f:22:16:42:d1:e9:54:84:72:
b0:0c:10:f6:cf:df:0c:75:a5:b6:a1:85:27:76:05:27:ff:a1:
79:bb:74:e3:cb:7e:1f:14:0a:3a:29:e1:a9:1b:55:2c:f4:f0:
07:03:0f:2a:3a:70:1e:c1:32:44:8e:be:6c:cf:16:28:e4:e6:
7e:0f:6c:3f:f2:1f:54:1e:0c:94:04:ef:db:73:7a:6e:f2:f4:
a6:e4:54:50:d5:e4:e2:41:47:2f:a0:b3:c6:6e:04:9d:02:62:
24:1f:f7:61:20:7c:e4:ee:58:88:87:24:03:4d:c7:df:3c:c4:
4a:4b:d2:05:02:ac:37:6a:df:8c:b4:35:6a:0e:29:ac:ef:b4:
c3:53:ea:eb:c3:79:02:43:43:e5:fa:81:d2:83:6f:25:f1:ea:
4b:49:c1:b6:c6:0c:d4:1d:37:97:e5:61:e1:73:02:92:e9:5a:
45:03:da:74:73:a4:9e:a5:a4:ae:c5:7c:11:26:f7:0a:19:3f:
bf:a1:79:60:ec:b5:eb:69:89:cb:da:e2:71:78:b4:40:95:91:
93:68:56:ee:21:f6:f4:ca:d1:cb:24:91:de:1e:02:0c:29:7c:
26:f8:eb:9a:51:5f:db:4a:de:d1:b5:2d:17:f7:c6:0f:dc:e8:
04:4d:0a:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:56:31 2025 by rpki-client