Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/565191-d981-41e5-961c-9fe55b171683/1/FTPNLR9tzx7sl-hpQ8TlOwyI6q4.mft
File: FTPNLR9tzx7sl-hpQ8TlOwyI6q4.mft (raw, json)
Hash identifier: OYF8L1gMM+dsMQ5yKbmGgrEE3sCGB4iD8PBDllflrLk=
Subject key identifier: 0D:0F:39:F2:AF:B6:D7:BF:87:4B:A8:12:BF:27:9A:52:89:20:B6:A7
Authority key identifier: 15:33:CD:2D:1F:6D:CF:1E:EC:97:E8:69:43:C4:E5:3B:0C:88:EA:AE
Certificate issuer: /CN=1533cd2d1f6dcf1eec97e86943c4e53b0c88eaae
Certificate serial: 019A51512047A3EFD60CF60499AF76C88673
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FTPNLR9tzx7sl-hpQ8TlOwyI6q4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/565191-d981-41e5-961c-9fe55b171683/1/FTPNLR9tzx7sl-hpQ8TlOwyI6q4.mft
Manifest number: 170B
Signing time: Wed 05 Nov 2025 00:01:02 +0000
Manifest this update: Wed 05 Nov 2025 00:01:02 +0000
Manifest next update: Thu 06 Nov 2025 00:01:02 +0000
Files and hashes: 1: FTPNLR9tzx7sl-hpQ8TlOwyI6q4.crl (hash: Sqbr2tRk9AASuLIZPEW9ZGiXPyCh8V2/H22+0F0MJwE=)
2: bVPZcxyyuoSw5oO9YToFQkVC9HE.roa (hash: PMh8VdKlUCXwqFCEJ+zfZN1ZK1DFnhbrgEIJ3TSYDdE=)
3: ucnP1VSEw1kHHuA3QA5_zId7uwM.roa (hash: YmzOGwmaq6ynMsOM2MUQrdoh74IojEKpTpvJHQjtfdM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/565191-d981-41e5-961c-9fe55b171683/1/FTPNLR9tzx7sl-hpQ8TlOwyI6q4.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/565191-d981-41e5-961c-9fe55b171683/1/FTPNLR9tzx7sl-hpQ8TlOwyI6q4.mft
rsync://rpki.ripe.net/repository/DEFAULT/FTPNLR9tzx7sl-hpQ8TlOwyI6q4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 00:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:51:20:47:a3:ef:d6:0c:f6:04:99:af:76:c8:86:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1533cd2d1f6dcf1eec97e86943c4e53b0c88eaae
Validity
Not Before: Nov 5 00:01:02 2025 GMT
Not After : Nov 6 00:01:02 2025 GMT
Subject: CN=0d0f39f2afb6d7bf874ba812bf279a528920b6a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:19:4a:13:fe:c8:3f:06:49:e6:5f:85:60:a8:
29:60:38:3d:d0:a0:ab:ab:1e:d1:e6:cc:65:8a:fa:
49:86:65:7d:73:31:b6:93:e4:78:c4:2f:30:e0:88:
70:39:11:f9:d0:30:1f:f4:c3:5b:c5:a6:f4:a5:08:
e8:a2:07:34:89:1e:13:fc:49:ae:bf:78:d0:86:5e:
ab:ea:48:c4:5c:a6:34:90:3b:ec:33:ba:6f:1e:be:
8a:c9:73:38:73:b8:2a:8b:f3:af:a1:89:59:22:fd:
7c:99:44:6d:3f:2a:67:17:9d:42:ee:31:be:58:1b:
d9:59:58:20:e0:71:81:6a:ea:27:9c:a2:d5:5a:20:
a0:5e:7f:b2:6b:ee:59:a1:01:5c:a1:02:46:bb:1d:
9a:e5:3e:1d:f1:b6:45:d6:90:0c:a4:7c:62:0f:e4:
ef:d4:5f:84:58:09:91:6f:64:0f:6b:23:45:1c:4e:
d2:a0:43:1f:50:c8:2c:d8:56:44:59:ba:6c:6d:51:
82:05:9f:43:a7:6f:fc:b7:f1:16:f0:03:7d:ff:8e:
1e:39:e8:bc:99:c8:7b:6e:37:a0:94:f8:fb:b9:18:
c8:b2:43:f9:a8:4b:0f:e1:18:f7:7b:c8:01:2f:41:
f3:cb:9e:0b:09:ea:57:34:91:b9:fb:4d:d7:d9:d1:
0f:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:0F:39:F2:AF:B6:D7:BF:87:4B:A8:12:BF:27:9A:52:89:20:B6:A7
X509v3 Authority Key Identifier:
keyid:15:33:CD:2D:1F:6D:CF:1E:EC:97:E8:69:43:C4:E5:3B:0C:88:EA:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FTPNLR9tzx7sl-hpQ8TlOwyI6q4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/565191-d981-41e5-961c-9fe55b171683/1/FTPNLR9tzx7sl-hpQ8TlOwyI6q4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/565191-d981-41e5-961c-9fe55b171683/1/FTPNLR9tzx7sl-hpQ8TlOwyI6q4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:0a:99:21:0d:6f:5c:2d:60:e2:39:c8:d1:61:3c:17:e9:30:
ae:7a:bb:50:0a:98:8a:05:f8:33:cc:e0:2b:7a:55:2c:c2:44:
c1:ac:6c:b4:fb:15:1d:6c:f2:15:6f:d7:e5:f6:74:42:0c:97:
55:07:30:f2:d2:49:fc:1a:e2:e0:4a:e3:bb:e4:6c:14:dc:2f:
26:0e:ab:54:7a:1d:48:9f:aa:8c:b2:69:90:d7:ac:8e:d3:aa:
07:02:7a:39:6f:e5:7c:de:1d:7d:8b:51:70:c2:29:e3:b8:c6:
46:05:13:5a:0a:2b:ad:bf:cf:75:6c:79:9b:74:7f:d9:6b:0f:
cc:24:43:ce:a5:81:af:39:61:6f:a5:d0:00:e3:89:16:41:69:
96:b2:c0:cd:4c:cb:8b:29:08:b7:5f:a7:dd:75:ee:51:19:16:
c3:76:de:b7:ae:5e:be:d2:c6:e8:a6:9e:28:32:ee:e1:8a:e2:
2c:00:ef:72:8c:81:b6:5e:f4:4f:7e:3d:5d:1b:43:ab:4b:85:
60:79:6a:ee:52:f5:96:91:a3:b6:87:c8:52:3c:05:77:fb:db:
93:ca:53:a6:7e:a4:b7:bb:08:97:0a:bf:9f:ff:51:b4:ff:c3:
bc:72:77:88:29:71:e9:ea:cb:7b:64:1e:8c:26:5e:ec:de:c7:
aa:37:ba:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:28:46 2025 by rpki-client