Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/6a89f0-0b22-452c-a659-42a7af882e09/1/FTXSThc2fkBbeA9xEEnl940QHxY.mft
File: FTXSThc2fkBbeA9xEEnl940QHxY.mft (raw, json)
Hash identifier: uLRZ3byAkJSJz8PKJKSfLw4s8kPZKNXpbGmI3NsYSME=
Subject key identifier: 56:86:6E:6B:B7:5B:62:5F:F0:26:25:E3:43:FA:93:A8:1C:70:2D:AF
Authority key identifier: 15:35:D2:4E:17:36:7E:40:5B:78:0F:71:10:49:E5:F7:8D:10:1F:16
Certificate issuer: /CN=1535d24e17367e405b780f711049e5f78d101f16
Certificate serial: 01989E5FEE649D1763F5935155344ADB746B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FTXSThc2fkBbeA9xEEnl940QHxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/6a89f0-0b22-452c-a659-42a7af882e09/1/FTXSThc2fkBbeA9xEEnl940QHxY.mft
Manifest number: 1209
Signing time: Tue 12 Aug 2025 13:02:23 +0000
Manifest this update: Tue 12 Aug 2025 13:02:23 +0000
Manifest next update: Wed 13 Aug 2025 13:02:23 +0000
Files and hashes: 1: 5ogK5Ex4CS4B5KsMhYCUM00RFfQ.roa (hash: ZPbDvWHExMztNeKcllyDlDkCaDogTJsh9sQhQBtO6xU=)
2: FTXSThc2fkBbeA9xEEnl940QHxY.crl (hash: P/S/MO0JLn6P6HaVOEmJwFrmR8YwpugLv+Q7Et06p2s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/6a89f0-0b22-452c-a659-42a7af882e09/1/FTXSThc2fkBbeA9xEEnl940QHxY.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/6a89f0-0b22-452c-a659-42a7af882e09/1/FTXSThc2fkBbeA9xEEnl940QHxY.mft
rsync://rpki.ripe.net/repository/DEFAULT/FTXSThc2fkBbeA9xEEnl940QHxY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 13:02:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9e:5f:ee:64:9d:17:63:f5:93:51:55:34:4a:db:74:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1535d24e17367e405b780f711049e5f78d101f16
Validity
Not Before: Aug 12 13:02:23 2025 GMT
Not After : Aug 13 13:02:23 2025 GMT
Subject: CN=56866e6bb75b625ff02625e343fa93a81c702daf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:6d:46:cc:b9:16:6e:ef:57:3a:fc:ce:f7:aa:
7d:ab:39:35:93:b2:1b:9e:a2:12:fc:24:fd:ef:4c:
da:c4:c6:e6:9d:0a:f5:22:70:d7:ed:6f:56:dc:46:
60:4d:8e:c6:db:1b:75:60:88:16:a1:44:f1:22:b6:
1d:30:b4:61:94:21:6b:5b:b9:49:e5:f7:7d:60:c5:
92:cf:5f:4e:05:6f:3c:a5:03:80:40:00:29:6d:ad:
df:37:17:99:87:cc:83:b2:4b:d9:78:61:fc:0f:95:
d3:cd:28:7f:37:a8:77:40:1b:93:7d:c7:44:10:9e:
4f:6f:d2:05:e0:0a:c8:6d:6f:2d:67:cd:2f:25:d9:
8d:c0:b0:9d:51:93:85:0e:bc:61:3a:f9:02:0e:a3:
94:19:fc:41:59:69:44:e2:99:89:0f:6c:64:0b:93:
1e:08:cc:c7:d0:02:68:8b:e1:12:ce:7a:02:92:95:
b7:9b:0a:7a:3a:c5:2b:a2:2d:18:47:ac:10:18:14:
af:48:cd:ec:78:fc:8a:84:59:02:92:d7:0d:14:48:
27:7c:77:fc:09:50:4d:6d:42:46:4e:17:7a:6a:78:
e4:c1:d2:b6:84:0e:2c:22:79:45:37:d7:2e:8d:35:
12:b7:9c:01:23:b7:82:68:6d:42:55:74:95:97:20:
d4:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:86:6E:6B:B7:5B:62:5F:F0:26:25:E3:43:FA:93:A8:1C:70:2D:AF
X509v3 Authority Key Identifier:
keyid:15:35:D2:4E:17:36:7E:40:5B:78:0F:71:10:49:E5:F7:8D:10:1F:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FTXSThc2fkBbeA9xEEnl940QHxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/6a89f0-0b22-452c-a659-42a7af882e09/1/FTXSThc2fkBbeA9xEEnl940QHxY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/6a89f0-0b22-452c-a659-42a7af882e09/1/FTXSThc2fkBbeA9xEEnl940QHxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:1d:f0:f4:97:64:53:65:a4:ed:1a:19:43:2a:d1:b7:f1:22:
76:34:62:70:9a:89:5f:2d:f1:bf:82:a3:09:df:30:2b:3a:6b:
8c:56:c2:e8:42:bc:c0:f7:6b:9a:fb:da:a5:da:91:44:c6:e8:
0e:3f:19:69:ac:de:de:f9:12:ff:e5:10:e1:fa:ec:a8:7f:de:
d1:62:5a:73:4c:91:a1:87:54:de:dd:d1:a0:fd:99:0b:1b:96:
07:df:53:6e:68:0d:40:d0:2c:3b:d4:42:6d:a4:97:4b:f4:c1:
3b:8a:8f:25:c8:45:ce:56:4d:f5:b1:d4:04:cb:c0:f1:79:d3:
c6:25:a7:1a:88:ea:2d:70:2f:8b:3e:71:23:0a:5e:21:dc:52:
c6:3b:b9:59:b3:c7:6e:65:eb:70:67:a5:ae:d3:1c:2b:70:24:
57:a9:b5:f1:db:23:c8:64:ca:1f:e9:b7:eb:4c:48:68:9e:c8:
18:23:03:e8:11:04:7a:29:61:85:7f:e3:64:5a:ba:53:64:98:
01:2f:96:c2:59:00:c9:29:15:3d:62:d1:46:7d:22:4c:94:1f:
88:00:9e:e5:94:e6:17:ea:ca:de:d9:d6:64:ee:bf:62:c7:ed:
4c:62:0c:00:7e:e5:85:8c:0b:1f:2b:d6:1a:55:84:1d:31:e9:
f3:4d:96:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 12 22:39:35 2025 by rpki-client