Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/3a20d8-e902-41f5-befa-ab5f39fb8d36/1/ftCMDM2oAs8gznq97qICFOBeR68.mft
File: ftCMDM2oAs8gznq97qICFOBeR68.mft (raw, json)
Hash identifier: EgDzBSNW++9xTcy+I2VGI3nxo763GHzd2ILp+T2DsCo=
Subject key identifier: A6:7D:1D:E4:70:79:F4:4B:A5:A3:E4:6D:A5:7D:31:80:E9:2B:82:6B
Authority key identifier: 7E:D0:8C:0C:CD:A8:02:CF:20:CE:7A:BD:EE:A2:02:14:E0:5E:47:AF
Certificate issuer: /CN=7ed08c0ccda802cf20ce7abdeea20214e05e47af
Certificate serial: 019872CFFC99ECA5CF9150285F40A5B7D3B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ftCMDM2oAs8gznq97qICFOBeR68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/3a20d8-e902-41f5-befa-ab5f39fb8d36/1/ftCMDM2oAs8gznq97qICFOBeR68.mft
Manifest number: 1617
Signing time: Mon 04 Aug 2025 02:01:29 +0000
Manifest this update: Mon 04 Aug 2025 02:01:29 +0000
Manifest next update: Tue 05 Aug 2025 02:01:29 +0000
Files and hashes: 1: P79ilXjNNqLG_ABRYWZBAk8XzIM.roa (hash: z414yhHihxRqPfk1ej5lxFnTCRyHE+z/dZVS4h4vn3A=)
2: ftCMDM2oAs8gznq97qICFOBeR68.crl (hash: rmhKuvCbQoFGrd6L403kiMoTE0YFBdI4yGdv78BKWjQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/3a20d8-e902-41f5-befa-ab5f39fb8d36/1/ftCMDM2oAs8gznq97qICFOBeR68.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/3a20d8-e902-41f5-befa-ab5f39fb8d36/1/ftCMDM2oAs8gznq97qICFOBeR68.mft
rsync://rpki.ripe.net/repository/DEFAULT/ftCMDM2oAs8gznq97qICFOBeR68.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 02:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:cf:fc:99:ec:a5:cf:91:50:28:5f:40:a5:b7:d3:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ed08c0ccda802cf20ce7abdeea20214e05e47af
Validity
Not Before: Aug 4 02:01:29 2025 GMT
Not After : Aug 5 02:01:29 2025 GMT
Subject: CN=a67d1de47079f44ba5a3e46da57d3180e92b826b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:3f:25:a1:20:9c:f5:8a:17:3b:40:72:4f:7f:
b2:70:22:5a:6c:c2:7c:9b:cf:6e:b2:8a:89:85:da:
57:20:83:06:dd:f1:ce:e5:f4:61:02:b1:93:58:72:
11:74:a3:9e:ac:8d:02:f0:10:d4:94:25:d2:e8:b1:
1e:8a:d3:5c:a6:49:4b:5f:c9:0d:3a:56:c2:74:fa:
d8:66:cf:19:91:dc:0c:d3:67:06:d5:f4:fd:4a:2f:
e8:17:9c:9e:aa:47:65:20:14:9d:0e:36:c3:4f:f7:
9b:d0:df:c5:36:4e:67:52:a2:7a:d6:eb:cb:bb:f9:
23:5c:8c:e2:68:fb:be:56:ce:90:ad:27:9b:fe:6a:
4c:48:6d:22:4a:4a:e3:a2:a4:e8:27:36:c8:a4:73:
91:79:64:bc:23:8c:dc:59:ab:dc:17:6f:0d:27:c9:
5c:68:46:54:ff:3d:0c:93:ee:2a:a5:b4:c8:1f:2f:
5b:95:16:75:34:b4:b6:55:12:fb:01:0c:f8:04:77:
2d:a5:40:b2:ef:e2:11:cd:0e:3e:12:49:69:af:d1:
dc:1d:80:da:1a:ab:a4:6f:30:0b:f0:2c:cb:09:8b:
7a:a2:b6:2a:91:b1:98:cd:fd:81:2e:f3:41:65:4f:
25:13:44:52:1a:ce:45:57:65:02:cc:41:b5:41:ad:
35:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:7D:1D:E4:70:79:F4:4B:A5:A3:E4:6D:A5:7D:31:80:E9:2B:82:6B
X509v3 Authority Key Identifier:
keyid:7E:D0:8C:0C:CD:A8:02:CF:20:CE:7A:BD:EE:A2:02:14:E0:5E:47:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ftCMDM2oAs8gznq97qICFOBeR68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/3a20d8-e902-41f5-befa-ab5f39fb8d36/1/ftCMDM2oAs8gznq97qICFOBeR68.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/3a20d8-e902-41f5-befa-ab5f39fb8d36/1/ftCMDM2oAs8gznq97qICFOBeR68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:d0:aa:e8:6a:4a:37:13:28:fa:1a:1e:cd:30:7c:85:25:2b:
8d:b8:79:6a:99:b9:a0:de:6f:e7:5b:24:80:f7:88:ab:79:ce:
d5:ed:3a:b1:10:97:fb:3b:96:c3:13:bd:3c:64:5d:1d:8e:69:
7f:66:59:67:14:d8:de:0f:d0:df:83:1b:aa:ee:cf:72:ff:c8:
01:17:f7:ce:b1:da:dc:d0:76:60:81:27:fa:69:5e:a0:56:86:
2d:ac:29:6f:9c:99:8a:dc:03:fc:1f:ea:da:d3:28:9a:75:63:
ab:9b:e4:9f:01:06:46:9f:37:f9:a4:ef:49:20:99:52:1e:c3:
bb:e8:1b:1f:27:bf:ba:36:ab:b8:c2:6d:7d:63:83:26:11:f9:
5d:c7:b0:5e:63:dc:56:8c:99:02:d6:82:a5:da:f7:b2:7a:a2:
bc:88:80:a6:60:48:7b:f2:13:c4:98:06:ba:c9:49:4e:fb:77:
fb:ee:f0:49:04:92:07:17:3b:6e:a6:c8:15:bc:d1:af:2d:dc:
68:76:5c:77:6d:07:50:95:85:11:40:39:f5:64:37:3b:81:47:
50:cc:f0:f6:6d:cc:83:b3:13:13:92:a0:b0:80:e2:01:b1:e1:
68:f6:02:42:04:67:f2:ac:bf:b6:2c:9e:49:58:f1:6a:e5:c4:
d7:cc:20:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 10:58:59 2025 by rpki-client