Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/64b1e6-0a1f-40ec-9437-04a4c2c41c34/1/FT0HLM7wC_Rk1mDb0F2todoz0sg.mft
File: FT0HLM7wC_Rk1mDb0F2todoz0sg.mft (raw, json)
Hash identifier: eTAUZVsfrX8O7urllA5R85ydDfJbrlF6SdBhL/q02n4=
Subject key identifier: 2A:3F:93:C9:C8:7F:E8:54:00:0B:7A:71:98:7C:CB:EC:15:35:83:23
Authority key identifier: 15:3D:07:2C:CE:F0:0B:F4:64:D6:60:DB:D0:5D:AD:A1:DA:33:D2:C8
Certificate issuer: /CN=153d072ccef00bf464d660dbd05dada1da33d2c8
Certificate serial: 019A4D73B2EFBFF0315B4C6A88A89506A4FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FT0HLM7wC_Rk1mDb0F2todoz0sg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/64b1e6-0a1f-40ec-9437-04a4c2c41c34/1/FT0HLM7wC_Rk1mDb0F2todoz0sg.mft
Manifest number: 0933
Signing time: Tue 04 Nov 2025 06:00:19 +0000
Manifest this update: Tue 04 Nov 2025 06:00:19 +0000
Manifest next update: Wed 05 Nov 2025 06:00:19 +0000
Files and hashes: 1: F0iKq1ijjGBYajSFmQyhreXVAQY.roa (hash: m8/L5cr+uaNLauEK1OLTPn18oa9yVQaLyP+GQwyUFcE=)
2: FT0HLM7wC_Rk1mDb0F2todoz0sg.crl (hash: 8yvHnOI35ht6zUB3g+R1UNSpAtGQ2hMoipC+JxsV1/0=)
3: _2lRv88Gb4s0UGVaP2Mgmxw3ML8.roa (hash: kqmxs4EHa2TZhRmR5+4BZAkd9MXd2Id3FkNPJK6jmmM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/64b1e6-0a1f-40ec-9437-04a4c2c41c34/1/FT0HLM7wC_Rk1mDb0F2todoz0sg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/64b1e6-0a1f-40ec-9437-04a4c2c41c34/1/FT0HLM7wC_Rk1mDb0F2todoz0sg.mft
rsync://rpki.ripe.net/repository/DEFAULT/FT0HLM7wC_Rk1mDb0F2todoz0sg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:73:b2:ef:bf:f0:31:5b:4c:6a:88:a8:95:06:a4:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=153d072ccef00bf464d660dbd05dada1da33d2c8
Validity
Not Before: Nov 4 06:00:19 2025 GMT
Not After : Nov 5 06:00:19 2025 GMT
Subject: CN=2a3f93c9c87fe854000b7a71987ccbec15358323
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:96:d6:1f:8d:9d:b7:b7:16:23:c7:cc:50:61:
98:71:cf:73:75:ad:86:60:24:3a:42:87:64:a9:c2:
81:05:ab:4d:ea:73:57:62:ae:10:e5:1a:17:11:21:
b5:c4:ce:ee:23:62:3c:08:62:06:11:b3:fb:93:21:
e4:c1:17:cf:92:e9:18:c3:c8:76:fb:21:b6:52:06:
e5:de:e5:08:6a:33:df:59:df:af:78:d5:93:e5:5d:
cb:44:8a:47:4e:18:4d:b8:8d:8a:79:a7:8a:dd:aa:
b4:9c:68:2f:97:56:07:17:46:86:f6:f2:68:94:e0:
fc:7d:9a:23:43:c0:42:21:80:41:15:8b:39:32:a2:
ab:7f:98:e3:c2:3c:14:a0:53:4d:79:68:79:34:cc:
2f:72:12:6d:c7:d5:13:5a:43:d7:e5:97:20:5a:f6:
69:34:92:2d:38:f0:0f:17:ce:ba:21:21:18:0a:85:
6b:52:5d:ef:8b:89:49:13:e7:bf:bc:5b:cf:c5:f8:
c0:c4:e6:3a:95:ad:e9:5e:05:0e:59:77:08:72:ee:
9c:16:fc:62:b0:b1:dc:3e:7f:d0:01:62:48:c9:f1:
87:f7:db:52:32:9c:49:a1:88:15:9a:a3:69:81:4b:
b7:56:cb:5d:58:cd:b2:0d:39:60:bf:f7:91:d2:d0:
b3:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:3F:93:C9:C8:7F:E8:54:00:0B:7A:71:98:7C:CB:EC:15:35:83:23
X509v3 Authority Key Identifier:
keyid:15:3D:07:2C:CE:F0:0B:F4:64:D6:60:DB:D0:5D:AD:A1:DA:33:D2:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FT0HLM7wC_Rk1mDb0F2todoz0sg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/64b1e6-0a1f-40ec-9437-04a4c2c41c34/1/FT0HLM7wC_Rk1mDb0F2todoz0sg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/64b1e6-0a1f-40ec-9437-04a4c2c41c34/1/FT0HLM7wC_Rk1mDb0F2todoz0sg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:4f:4c:5c:f9:76:14:b2:2e:83:02:66:c2:4f:2d:ce:7d:02:
c0:28:35:dc:d9:46:7c:ab:32:ca:d9:13:85:4e:c4:47:40:f7:
d4:27:38:18:8b:5b:4e:50:22:8a:1c:3d:bc:38:3a:cc:ef:61:
38:cd:cf:29:31:f2:de:49:23:76:ba:5e:85:e6:6f:11:55:02:
8c:e6:11:16:3f:7f:8a:f8:fc:1f:d7:78:a5:eb:de:50:2c:70:
6a:26:a7:d8:8c:d5:ea:85:72:29:21:fa:8d:1c:c5:a4:48:3e:
7c:59:41:46:5f:52:32:e9:52:6b:90:a6:da:c2:8a:08:fd:48:
df:da:d7:01:f5:49:c7:d3:40:00:3e:fb:8f:ea:e7:36:b5:fa:
7e:98:ba:dc:90:f6:66:f6:8f:37:ac:ed:3f:01:64:01:cf:a7:
b0:09:d7:7c:cb:12:d3:7e:8c:c1:a7:c1:67:0a:ca:1d:6d:e9:
85:5a:e7:5c:7f:d2:73:a0:49:c5:97:e1:fa:50:45:dd:6a:ff:
11:ea:0a:fc:08:ed:4a:4c:7a:d6:02:8d:8c:dc:49:eb:97:bc:
50:39:0e:6f:a5:3a:57:d1:81:f9:6c:a2:f4:59:91:a4:3c:ea:
7f:bd:44:8b:c7:8f:38:eb:64:04:f9:e2:52:7e:ea:2e:ec:34:
ad:bf:b4:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:21:24 2025 by rpki-client