Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/136156-0753-4072-92b0-1407c08db582/1/Ftls9BCaSoXRhjv1SqT6PoHgwOY.mft
File: Ftls9BCaSoXRhjv1SqT6PoHgwOY.mft (raw, json)
Hash identifier: 4C2lnJBgckACMFoV8KyB1R/9zGmB5hjHWfEMcUIRU5Q=
Subject key identifier: D1:DD:CA:C3:24:3C:85:5C:D2:CC:FA:3A:AC:61:3F:A7:67:2B:3D:22
Authority key identifier: 16:D9:6C:F4:10:9A:4A:85:D1:86:3B:F5:4A:A4:FA:3E:81:E0:C0:E6
Certificate issuer: /CN=16d96cf4109a4a85d1863bf54aa4fa3e81e0c0e6
Certificate serial: 019A4DAABC9B246DE60CD9953BD7FA309438
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ftls9BCaSoXRhjv1SqT6PoHgwOY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/136156-0753-4072-92b0-1407c08db582/1/Ftls9BCaSoXRhjv1SqT6PoHgwOY.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 07:00:26 +0000
Manifest this update: Tue 04 Nov 2025 07:00:26 +0000
Manifest next update: Wed 05 Nov 2025 07:00:26 +0000
Files and hashes: 1: 1-bqNZN34Z6tA08rjf9Ue9gz9z4M.roa (hash: ZBK1wDofmlTI3jgUly3vW6cc/crra2evnmHTHJR0jqI=)
2: Ftls9BCaSoXRhjv1SqT6PoHgwOY.crl (hash: kttp0i8LW9mWYRnrkUbzFHiPrZCfX1WHRJHMucOwBAo=)
3: TVDjYzkETmBCT7v1_fe4s6H8gEU.roa (hash: zxaM+TU0HD4P7dxOW2gfkICzMAb8AYSlKoeUfD1Wv0k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/136156-0753-4072-92b0-1407c08db582/1/Ftls9BCaSoXRhjv1SqT6PoHgwOY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/136156-0753-4072-92b0-1407c08db582/1/Ftls9BCaSoXRhjv1SqT6PoHgwOY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ftls9BCaSoXRhjv1SqT6PoHgwOY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:aa:bc:9b:24:6d:e6:0c:d9:95:3b:d7:fa:30:94:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16d96cf4109a4a85d1863bf54aa4fa3e81e0c0e6
Validity
Not Before: Nov 4 07:00:26 2025 GMT
Not After : Nov 5 07:00:26 2025 GMT
Subject: CN=d1ddcac3243c855cd2ccfa3aac613fa7672b3d22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:0b:12:b5:fc:cb:ab:42:4d:1a:a8:17:26:e1:
de:c5:46:c4:8b:71:d8:22:75:30:98:b5:9f:18:7c:
b5:e7:55:db:6f:4a:e6:a0:8b:0f:5d:da:36:dc:db:
2b:52:00:d4:57:8f:93:9c:7d:66:af:71:f2:2d:89:
a7:f5:3a:e5:62:e1:29:31:6a:88:24:9b:75:f2:4e:
6e:ec:f0:ca:58:71:4f:ca:65:eb:5c:cb:f2:e3:fd:
a7:26:78:ae:ab:34:7f:db:be:91:00:15:44:6a:23:
14:66:44:d1:a0:19:43:58:58:87:21:60:eb:49:46:
a4:f0:35:61:0c:32:a8:3f:b7:56:c4:70:87:a8:f9:
ac:94:07:db:10:2b:1e:50:e3:17:52:b7:ce:ed:c4:
a5:94:4e:72:74:bc:63:a3:47:9c:9b:63:0a:3b:af:
dd:9c:dc:6c:b1:0b:b4:63:44:d7:e1:c1:60:ed:6b:
12:55:25:42:a5:75:09:01:d9:13:8b:fa:e8:f1:d3:
ed:9e:85:1c:85:c7:28:ee:7c:aa:dd:9a:9a:d7:51:
14:fa:fe:35:73:04:74:9b:15:35:8f:8a:03:c9:4b:
e3:be:52:e5:29:8d:b1:01:15:ee:c5:4a:3c:bf:a3:
71:98:67:4e:82:28:0e:b8:4e:28:f6:b5:90:08:a8:
16:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:DD:CA:C3:24:3C:85:5C:D2:CC:FA:3A:AC:61:3F:A7:67:2B:3D:22
X509v3 Authority Key Identifier:
keyid:16:D9:6C:F4:10:9A:4A:85:D1:86:3B:F5:4A:A4:FA:3E:81:E0:C0:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ftls9BCaSoXRhjv1SqT6PoHgwOY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/136156-0753-4072-92b0-1407c08db582/1/Ftls9BCaSoXRhjv1SqT6PoHgwOY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/136156-0753-4072-92b0-1407c08db582/1/Ftls9BCaSoXRhjv1SqT6PoHgwOY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:20:b1:8e:01:fe:a0:30:f1:06:07:e1:e8:1c:dc:50:8b:91:
c9:f2:41:92:94:e1:54:40:58:5f:27:19:56:d2:b2:42:25:33:
52:8b:5e:d1:ac:ec:9f:87:d5:e3:e5:3a:57:ae:cf:90:35:99:
31:b2:ac:04:d0:7a:39:e7:85:2c:78:7d:7f:b2:83:27:76:5a:
6c:07:03:dd:bd:94:08:1b:e3:ac:41:db:21:a9:2d:65:72:df:
b8:36:d6:23:23:80:39:d2:bc:f0:a5:6c:9a:f1:32:ef:53:1d:
51:3c:3b:0d:fd:8d:dc:74:17:4c:41:ee:8f:80:b0:26:e5:ca:
c1:f0:54:81:55:bb:02:ce:3d:b6:bc:db:0a:2e:c3:56:a8:2d:
71:c8:38:f4:2c:c9:36:2e:bb:a2:0b:f4:24:dd:97:b7:77:58:
ce:af:7a:e7:37:50:f9:d4:cc:c2:27:7e:ee:80:be:89:6b:ad:
a0:8c:48:6e:79:c4:7a:74:cb:c5:96:fa:26:e5:bd:49:01:d6:
3a:aa:8a:c7:da:05:ed:97:fc:a3:18:81:2c:fd:b2:ac:29:18:
45:d4:d8:6e:d1:54:9c:a1:03:9f:0c:e8:81:71:f8:02:41:78:
a2:db:c4:1c:33:94:ba:eb:c0:39:04:58:f9:c1:a9:d9:3b:0b:
ea:78:ac:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:01:00 2025 by rpki-client