Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/3a20d8-e902-41f5-befa-ab5f39fb8d36/1/ftCMDM2oAs8gznq97qICFOBeR68.mft
File: ftCMDM2oAs8gznq97qICFOBeR68.mft (raw, json)
Hash identifier: TvwjCJxO5yjX9VFuKu6QtA/Gr+5DNci0qugGZVQMf0U=
Subject key identifier: ED:FA:22:CE:51:9F:1E:51:2F:18:C6:93:E3:4C:33:A0:A6:A1:38:98
Authority key identifier: 7E:D0:8C:0C:CD:A8:02:CF:20:CE:7A:BD:EE:A2:02:14:E0:5E:47:AF
Certificate issuer: /CN=7ed08c0ccda802cf20ce7abdeea20214e05e47af
Certificate serial: 019A4DE1D80FD8B24AD3406412ACA7D78DA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ftCMDM2oAs8gznq97qICFOBeR68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/3a20d8-e902-41f5-befa-ab5f39fb8d36/1/ftCMDM2oAs8gznq97qICFOBeR68.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 08:00:37 +0000
Manifest this update: Tue 04 Nov 2025 08:00:37 +0000
Manifest next update: Wed 05 Nov 2025 08:00:37 +0000
Files and hashes: 1: P79ilXjNNqLG_ABRYWZBAk8XzIM.roa (hash: z414yhHihxRqPfk1ej5lxFnTCRyHE+z/dZVS4h4vn3A=)
2: ftCMDM2oAs8gznq97qICFOBeR68.crl (hash: p9Cp9fa7tHg2SGhe4mwjDSfbnLnw6besmVMmAdLaczo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/3a20d8-e902-41f5-befa-ab5f39fb8d36/1/ftCMDM2oAs8gznq97qICFOBeR68.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/3a20d8-e902-41f5-befa-ab5f39fb8d36/1/ftCMDM2oAs8gznq97qICFOBeR68.mft
rsync://rpki.ripe.net/repository/DEFAULT/ftCMDM2oAs8gznq97qICFOBeR68.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:d8:0f:d8:b2:4a:d3:40:64:12:ac:a7:d7:8d:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ed08c0ccda802cf20ce7abdeea20214e05e47af
Validity
Not Before: Nov 4 08:00:37 2025 GMT
Not After : Nov 5 08:00:37 2025 GMT
Subject: CN=edfa22ce519f1e512f18c693e34c33a0a6a13898
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:54:25:89:a3:ae:73:4b:0f:83:ee:39:84:5e:
5f:c0:34:7f:ad:38:fe:1d:b5:bd:af:ec:d2:51:c3:
49:ae:50:71:92:0a:bf:6a:66:ce:7d:0e:14:18:5d:
56:e9:e6:6b:70:44:29:84:f8:44:24:25:ec:ac:93:
d9:bc:fc:8b:e5:c8:d9:69:20:ca:90:a1:6b:05:c3:
fc:66:71:7d:1e:df:e8:1b:c7:00:9f:eb:7e:de:89:
e5:fa:d5:fe:a4:dd:3b:6f:9e:d3:50:78:fa:cf:b6:
6b:76:97:5f:12:b4:4e:56:15:4a:d5:23:0f:26:58:
f5:1f:08:70:02:3f:ca:38:30:75:25:7b:78:92:1d:
8e:26:a4:00:91:93:89:9d:ed:78:1d:18:cb:74:65:
32:ef:c4:a3:95:5c:00:e7:8e:45:c6:38:e9:b4:af:
e2:b9:24:cd:85:ce:ef:09:b3:5a:27:8c:6a:f7:a9:
ab:15:29:88:e7:37:3a:73:41:1f:05:a3:4b:0c:4b:
75:2c:0d:d2:39:59:24:e5:49:06:b8:0a:0b:02:de:
88:89:32:e8:8e:9e:da:52:95:7b:61:db:35:19:11:
45:1f:92:93:15:06:8d:2d:0c:ed:25:e9:2b:b7:9c:
a7:ab:e6:6c:82:64:c0:01:b4:ef:44:3a:fe:e6:b6:
2e:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:FA:22:CE:51:9F:1E:51:2F:18:C6:93:E3:4C:33:A0:A6:A1:38:98
X509v3 Authority Key Identifier:
keyid:7E:D0:8C:0C:CD:A8:02:CF:20:CE:7A:BD:EE:A2:02:14:E0:5E:47:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ftCMDM2oAs8gznq97qICFOBeR68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/3a20d8-e902-41f5-befa-ab5f39fb8d36/1/ftCMDM2oAs8gznq97qICFOBeR68.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/3a20d8-e902-41f5-befa-ab5f39fb8d36/1/ftCMDM2oAs8gznq97qICFOBeR68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:6d:33:66:92:83:3f:11:a6:aa:9b:ae:77:8a:b8:89:fe:cb:
b3:2b:2c:fa:1e:6d:db:04:67:12:43:97:47:50:1a:43:fc:9c:
1c:df:fb:1f:65:a4:d9:b9:4e:bf:6c:19:1a:f4:e1:5c:c7:ba:
50:2d:1f:71:27:63:af:d3:81:c4:61:66:cc:d7:5a:be:0c:00:
2e:2a:02:d3:3a:1c:9e:3d:fa:f4:62:85:0c:6e:98:6f:09:ed:
bd:b4:b8:35:5a:68:5b:4b:6c:4e:2d:e3:51:9d:a7:c1:eb:9b:
e8:90:6d:17:01:6d:ef:bc:26:3d:bb:32:98:43:17:38:18:8c:
ce:d9:da:19:5c:fa:91:89:71:74:6e:64:31:d0:0d:ab:ad:37:
91:52:85:b5:a6:9b:d0:0d:62:65:fb:f1:68:92:ec:cf:23:d8:
ce:be:7b:70:e1:9e:78:e7:20:0b:29:ac:da:5a:86:55:38:ad:
41:e5:b0:ed:3f:48:3d:36:69:39:cd:01:5a:16:de:2a:a2:13:
dc:96:c9:ee:79:0b:9d:78:4f:73:9a:0d:b5:c7:24:36:26:e2:
11:f8:58:fb:72:ae:31:79:8f:1b:2a:16:9d:84:c6:a1:a0:8f:
00:80:e0:b6:9e:90:2e:4d:01:4a:6f:e4:b6:04:25:b1:2b:36:
bb:77:64:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:04:58 2025 by rpki-client