Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/6a89f0-0b22-452c-a659-42a7af882e09/1/FTXSThc2fkBbeA9xEEnl940QHxY.mft
File: FTXSThc2fkBbeA9xEEnl940QHxY.mft (raw, json)
Hash identifier: qACUbOiBe0QCCq+YZ2+7O6gEZO8Dq3ZeMHMU3vkEoWs=
Subject key identifier: 9F:15:8D:DF:75:33:F6:DE:CE:E6:34:A4:D0:74:B6:00:09:F9:CA:EB
Authority key identifier: 15:35:D2:4E:17:36:7E:40:5B:78:0F:71:10:49:E5:F7:8D:10:1F:16
Certificate issuer: /CN=1535d24e17367e405b780f711049e5f78d101f16
Certificate serial: 019A4EF5361D35345127E30F27EA964A98BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FTXSThc2fkBbeA9xEEnl940QHxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/6a89f0-0b22-452c-a659-42a7af882e09/1/FTXSThc2fkBbeA9xEEnl940QHxY.mft
Manifest number: 12E9
Signing time: Tue 04 Nov 2025 13:01:24 +0000
Manifest this update: Tue 04 Nov 2025 13:01:24 +0000
Manifest next update: Wed 05 Nov 2025 13:01:24 +0000
Files and hashes: 1: 5ogK5Ex4CS4B5KsMhYCUM00RFfQ.roa (hash: ZPbDvWHExMztNeKcllyDlDkCaDogTJsh9sQhQBtO6xU=)
2: FTXSThc2fkBbeA9xEEnl940QHxY.crl (hash: HGmtTGqpC5wBDN4gXSg9ejmuD3T8Bd4d6K4uXX5NqS8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/6a89f0-0b22-452c-a659-42a7af882e09/1/FTXSThc2fkBbeA9xEEnl940QHxY.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/6a89f0-0b22-452c-a659-42a7af882e09/1/FTXSThc2fkBbeA9xEEnl940QHxY.mft
rsync://rpki.ripe.net/repository/DEFAULT/FTXSThc2fkBbeA9xEEnl940QHxY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:36:1d:35:34:51:27:e3:0f:27:ea:96:4a:98:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1535d24e17367e405b780f711049e5f78d101f16
Validity
Not Before: Nov 4 13:01:24 2025 GMT
Not After : Nov 5 13:01:24 2025 GMT
Subject: CN=9f158ddf7533f6decee634a4d074b60009f9caeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:47:b6:64:f4:d1:3d:94:98:22:c7:68:22:d8:
94:e1:fd:27:18:39:c8:c8:67:54:8f:6a:b4:da:01:
e3:30:c8:67:fa:41:d8:d9:37:0f:eb:33:4d:6d:07:
d2:24:e0:4b:ad:4b:44:31:bf:65:52:29:4f:60:d4:
69:e3:d9:03:db:e9:c6:71:f6:e1:d5:a0:26:39:88:
05:b8:7f:95:97:1c:59:ae:4f:2d:cf:d5:d2:d5:46:
cb:99:8d:29:97:8c:7a:2e:6e:cd:67:ad:24:f6:47:
e1:4f:54:b0:99:63:c8:0b:48:93:25:16:cd:2f:1e:
0e:32:cd:f4:e6:5a:d3:ce:19:8f:a9:39:89:5e:87:
5f:b5:50:73:70:13:7f:50:d3:13:de:60:ba:a6:26:
8d:6a:f2:fa:a6:e9:88:93:45:0e:3d:25:51:5b:62:
98:ac:32:6e:2a:9f:81:0e:8c:47:24:85:e6:4f:5d:
3f:7b:cd:59:1f:f5:ee:0e:8b:b0:51:51:19:82:e5:
19:e0:b8:13:bc:69:15:f7:9f:b5:01:3a:98:c1:fa:
2c:3c:35:74:4a:de:0f:57:8b:fa:aa:a5:9b:af:dc:
66:8b:e3:3b:31:22:15:64:c9:d8:3f:ba:34:59:7d:
00:f7:1b:e5:a6:30:8d:4e:32:19:44:a3:1b:fe:dc:
3e:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:15:8D:DF:75:33:F6:DE:CE:E6:34:A4:D0:74:B6:00:09:F9:CA:EB
X509v3 Authority Key Identifier:
keyid:15:35:D2:4E:17:36:7E:40:5B:78:0F:71:10:49:E5:F7:8D:10:1F:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FTXSThc2fkBbeA9xEEnl940QHxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/6a89f0-0b22-452c-a659-42a7af882e09/1/FTXSThc2fkBbeA9xEEnl940QHxY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/6a89f0-0b22-452c-a659-42a7af882e09/1/FTXSThc2fkBbeA9xEEnl940QHxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:ac:30:bf:33:2b:4d:ea:6f:34:90:43:51:04:79:9e:f2:ee:
86:8f:ba:da:f5:db:bf:90:72:2a:57:ce:09:9e:c7:4a:59:02:
5b:fc:42:bc:39:65:ed:81:c5:0a:ee:22:98:4d:0f:0d:64:33:
2f:04:33:86:c8:2e:0f:cc:9e:60:8b:40:5b:bd:43:e4:5a:d1:
5e:39:e7:02:74:83:f4:3f:b3:09:98:a2:5f:4d:49:a9:1f:91:
dc:91:7b:c2:d6:b1:77:97:48:4e:e4:2e:bf:92:3c:86:d4:59:
6a:ac:8d:eb:6b:16:ec:14:c4:a6:46:b7:13:c8:e0:08:32:cb:
38:b8:3b:7d:c9:c1:1a:15:1d:3a:89:1d:16:ca:61:4c:27:b5:
d8:b1:e5:83:63:c2:1b:68:e8:f5:cf:10:6e:8e:3c:e5:64:6f:
66:ae:1b:9c:e5:db:54:37:04:d8:f0:b6:17:08:1c:e9:03:af:
51:45:31:ad:27:37:18:9b:10:51:72:2d:60:b7:59:ed:03:33:
48:2c:17:29:33:0b:fe:1e:fa:b4:57:89:6c:44:f5:99:f1:20:
6e:4a:b3:64:e6:de:51:90:b3:85:e5:b2:7e:84:1d:2a:67:92:
13:39:3c:81:d1:98:a9:f3:3b:98:45:8a:7c:5e:a2:1a:2c:ee:
2e:bc:94:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:46:55 2025 by rpki-client