Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/14c1ca-1874-47ac-a18e-3a144c70e0b0/1/FTSDi7MXuBhmmfCkSF222doZCNI.mft
File: FTSDi7MXuBhmmfCkSF222doZCNI.mft (raw, json)
Hash identifier: +VMi537hw7CPUb5Y0ajrqHMVSIFuizf3Dp9zw3GDU64=
Subject key identifier: 3F:A6:3B:A7:65:BE:37:B0:EA:B6:66:B9:08:23:89:3A:FD:95:F7:0E
Authority key identifier: 15:34:83:8B:B3:17:B8:18:66:99:F0:A4:48:5D:B6:D9:DA:19:08:D2
Certificate issuer: /CN=1534838bb317b8186699f0a4485db6d9da1908d2
Certificate serial: 019A4E4FB837426DA0DC80C8517C418F78D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FTSDi7MXuBhmmfCkSF222doZCNI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/14c1ca-1874-47ac-a18e-3a144c70e0b0/1/FTSDi7MXuBhmmfCkSF222doZCNI.mft
Manifest number: 1711
Signing time: Tue 04 Nov 2025 10:00:38 +0000
Manifest this update: Tue 04 Nov 2025 10:00:38 +0000
Manifest next update: Wed 05 Nov 2025 10:00:38 +0000
Files and hashes: 1: CbWOEpiwCrppRA8DVC4XzZMGIMo.roa (hash: PCw7t89Xuux83a7nB0OMpGHDzsoTVJA+nWtRPUVTD0g=)
2: FTSDi7MXuBhmmfCkSF222doZCNI.crl (hash: ZduHZrDlHlWLxAtaMDs0lZpZKx1QiyDieb/T1BZGfxg=)
3: G7aptrRzlRJ8DBRVo4J_IAindWA.roa (hash: /KruVTSwaUIasJgr9QHP+KNfyw0nqXuPE6AH63Tq7a4=)
4: b6hTkKbNOfIbaG8yD7-BS_Yj6KI.roa (hash: vo3HwfgLG2dbcNhI9BKjmqquo/hk8biJHEghUjke/Vw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/14c1ca-1874-47ac-a18e-3a144c70e0b0/1/FTSDi7MXuBhmmfCkSF222doZCNI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/14c1ca-1874-47ac-a18e-3a144c70e0b0/1/FTSDi7MXuBhmmfCkSF222doZCNI.mft
rsync://rpki.ripe.net/repository/DEFAULT/FTSDi7MXuBhmmfCkSF222doZCNI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:b8:37:42:6d:a0:dc:80:c8:51:7c:41:8f:78:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1534838bb317b8186699f0a4485db6d9da1908d2
Validity
Not Before: Nov 4 10:00:38 2025 GMT
Not After : Nov 5 10:00:38 2025 GMT
Subject: CN=3fa63ba765be37b0eab666b90823893afd95f70e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:4f:27:b6:c5:97:a8:c3:d9:6a:21:ef:ea:00:
7c:4f:57:ab:8e:7b:2a:9d:58:f4:8e:8d:95:49:69:
fc:56:38:7c:dd:45:a6:c9:d4:43:ae:e8:bd:70:ea:
7b:3f:3c:d3:14:06:52:f3:0a:a0:0a:a2:b2:4b:64:
97:1e:44:b7:e2:d3:1e:99:85:dd:bc:6d:bf:13:a6:
8b:67:52:70:aa:41:41:6c:40:55:58:5e:fc:ce:32:
01:c8:b5:44:e0:ce:52:3d:82:70:2f:89:09:1d:43:
b5:83:b1:51:49:88:84:88:5d:3d:b1:a4:49:1c:e2:
e1:8a:e6:5c:7c:00:c1:95:a4:6b:ea:00:8b:af:07:
64:c2:fd:ff:30:bf:22:4d:06:c1:56:3b:c2:c4:82:
4b:a4:73:81:71:ae:82:4a:c5:2f:78:7f:a9:59:6d:
67:90:44:1d:52:17:e2:dc:08:61:80:23:6b:13:5a:
e0:15:dc:f3:5c:14:f9:fc:a0:1c:c5:7c:6c:18:a6:
52:b7:a8:22:da:29:4e:74:68:a9:03:e5:fe:ea:8d:
6f:b9:30:62:45:37:dd:1e:50:bd:b7:93:fc:82:f2:
30:f1:4b:43:25:cc:d0:c0:64:4a:86:8a:fb:92:47:
71:76:4b:ed:15:a7:e2:d9:ec:4e:de:da:e0:bc:7c:
90:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:A6:3B:A7:65:BE:37:B0:EA:B6:66:B9:08:23:89:3A:FD:95:F7:0E
X509v3 Authority Key Identifier:
keyid:15:34:83:8B:B3:17:B8:18:66:99:F0:A4:48:5D:B6:D9:DA:19:08:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FTSDi7MXuBhmmfCkSF222doZCNI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/14c1ca-1874-47ac-a18e-3a144c70e0b0/1/FTSDi7MXuBhmmfCkSF222doZCNI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/14c1ca-1874-47ac-a18e-3a144c70e0b0/1/FTSDi7MXuBhmmfCkSF222doZCNI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:3e:cf:71:15:54:b0:0f:21:5d:11:7f:da:1e:c8:bf:5f:1e:
aa:e0:ae:c5:43:2a:6d:7b:18:6e:9f:0e:6c:b5:43:97:9d:24:
d3:a4:3f:99:d2:96:a0:a0:95:43:15:c9:62:0f:29:1b:06:82:
31:5e:5a:eb:e5:fe:74:38:88:0f:47:a5:68:ec:ac:67:16:e5:
4c:a9:96:5b:a6:38:2f:9f:19:6e:8d:63:45:7a:36:2d:8c:5c:
bc:a6:6a:84:0a:cb:ad:29:69:e1:06:7a:96:28:39:4a:a9:27:
0b:46:fa:54:31:c7:ca:72:1d:2a:f2:94:a1:b3:d6:73:3d:6d:
6a:f4:17:54:d7:61:4e:21:ee:1c:36:78:28:93:f4:88:cf:b2:
aa:93:b3:af:92:08:2b:48:a7:4f:b5:bb:87:ef:f7:c2:71:5d:
fd:ec:e0:b4:62:59:19:bf:f4:b8:27:2f:8a:27:4d:96:d7:e0:
0c:7d:94:8a:4f:f0:5e:ae:a2:cb:a5:ef:c1:c4:28:09:9e:1c:
c9:26:f3:3d:3f:24:94:6c:ef:cd:a8:73:5e:00:3f:f5:b0:9f:
aa:dc:ea:c1:4c:34:2d:9c:ae:09:d8:5a:b6:00:d2:6c:cb:66:
f5:f4:38:18:38:55:65:9e:cf:95:c2:02:5a:27:3f:50:a5:f2:
41:3f:c9:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:40:35 2025 by rpki-client