Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/b9c906-1e85-4573-8f62-8257d51928a9/1/fTXAsgkTXCLMgAWnwuIixjwTbLA.mft
File: fTXAsgkTXCLMgAWnwuIixjwTbLA.mft (raw, json)
Hash identifier: mobrasdTRGi0s522lAdqMxdJRipBwMY+SCL/zlnBYeY=
Subject key identifier: 8D:93:33:98:40:A5:9C:B4:16:28:5E:24:9C:92:71:A2:A3:57:5E:64
Authority key identifier: 7D:35:C0:B2:09:13:5C:22:CC:80:05:A7:C2:E2:22:C6:3C:13:6C:B0
Certificate issuer: /CN=7d35c0b209135c22cc8005a7c2e222c63c136cb0
Certificate serial: 0196B710CC88A9973A65CF543877A6D62F4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fTXAsgkTXCLMgAWnwuIixjwTbLA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/b9c906-1e85-4573-8f62-8257d51928a9/1/fTXAsgkTXCLMgAWnwuIixjwTbLA.mft
Manifest number: 1530
Signing time: Fri 09 May 2025 22:00:53 +0000
Manifest this update: Fri 09 May 2025 22:00:53 +0000
Manifest next update: Sat 10 May 2025 22:00:53 +0000
Files and hashes: 1: E008mlaZ-98yoVlxucj25N9tnVo.roa (hash: 7h9j4kfENIh6mVCwgI4OQBIMY0MBjmJwFr/fTNDIJFk=)
2: R2-GAax-KT1qCEjDDbUwaoUFHaY.roa (hash: DTrChNvAxi6mH07womaTROYkgqmDr0mKtOiNc7UHhPs=)
3: fTXAsgkTXCLMgAWnwuIixjwTbLA.crl (hash: zSZGm2VnZfvlRGUlAL1O5L9oetG/ZBhGlparHTF5wYc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/b9c906-1e85-4573-8f62-8257d51928a9/1/fTXAsgkTXCLMgAWnwuIixjwTbLA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/b9c906-1e85-4573-8f62-8257d51928a9/1/fTXAsgkTXCLMgAWnwuIixjwTbLA.mft
rsync://rpki.ripe.net/repository/DEFAULT/fTXAsgkTXCLMgAWnwuIixjwTbLA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 22:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b7:10:cc:88:a9:97:3a:65:cf:54:38:77:a6:d6:2f:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d35c0b209135c22cc8005a7c2e222c63c136cb0
Validity
Not Before: May 9 22:00:53 2025 GMT
Not After : May 10 22:00:53 2025 GMT
Subject: CN=8d93339840a59cb416285e249c9271a2a3575e64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:e3:36:c7:d4:f6:6b:89:66:02:34:67:ab:e7:
9c:48:14:41:22:f3:da:de:7b:54:a0:a9:77:cc:83:
4e:47:5b:51:a4:10:3a:96:50:a6:f1:38:9e:3f:6d:
d0:07:64:e3:25:2d:19:5f:93:2c:cf:15:a1:8a:36:
92:ab:3a:74:d7:a8:4c:76:f7:c2:30:fd:22:a6:23:
12:3a:2c:68:62:25:56:7f:b1:17:9d:ee:10:df:ce:
75:ef:2d:53:c5:5f:75:48:34:1a:13:ce:c1:b3:33:
ae:f2:27:fb:69:80:59:d5:0b:98:33:a4:ee:61:b2:
37:8f:16:f0:c2:b0:b6:1a:84:ab:4d:eb:ad:a9:b6:
5f:3e:01:01:3d:9f:2d:f2:a0:e3:e9:8d:ab:29:60:
16:8f:f2:b2:80:4c:bd:d8:b0:78:94:db:8a:32:df:
ac:39:4f:57:a1:09:f7:5d:d5:57:68:de:34:c5:d7:
33:22:8e:37:34:aa:aa:64:da:e5:cd:d1:4e:fe:10:
67:bc:ae:0b:3d:74:4e:0d:cf:e6:0c:36:29:db:63:
0a:66:c7:dc:01:49:04:24:d5:85:ca:f6:f9:f4:12:
e1:5b:82:1a:8d:b8:06:b6:08:0d:78:2a:38:24:6d:
dd:33:77:62:a3:e3:b1:84:26:c6:f3:d4:c1:e2:43:
f7:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:93:33:98:40:A5:9C:B4:16:28:5E:24:9C:92:71:A2:A3:57:5E:64
X509v3 Authority Key Identifier:
keyid:7D:35:C0:B2:09:13:5C:22:CC:80:05:A7:C2:E2:22:C6:3C:13:6C:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fTXAsgkTXCLMgAWnwuIixjwTbLA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b9c906-1e85-4573-8f62-8257d51928a9/1/fTXAsgkTXCLMgAWnwuIixjwTbLA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b9c906-1e85-4573-8f62-8257d51928a9/1/fTXAsgkTXCLMgAWnwuIixjwTbLA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:77:b9:0b:f8:cc:3b:db:cc:39:f4:45:85:40:95:02:5b:85:
b7:2e:14:b9:1d:06:7b:38:ba:e1:71:c0:95:7d:d0:b7:77:47:
d9:bb:13:c0:de:ea:92:3d:98:7a:fe:6f:99:bf:03:ff:4d:b1:
c0:87:03:22:a9:29:65:85:e1:c7:ae:ca:3e:54:40:1a:5f:7d:
02:33:05:fc:e3:53:00:10:e4:dc:7b:9e:33:01:dd:a0:8c:e6:
f2:16:09:7c:06:2e:31:10:2f:8f:26:ab:67:2d:f5:5d:fa:d1:
e2:fd:cf:16:d3:41:1f:ea:94:ee:61:8f:e2:29:ae:d2:31:ec:
06:b9:9e:92:3f:73:86:b5:37:b0:3b:e5:61:7e:08:3d:1e:22:
64:03:c4:3d:44:17:eb:bc:96:18:a0:7c:53:13:5b:98:8a:e7:
75:1d:2d:86:a4:d8:af:28:c8:5b:10:15:39:45:02:c9:44:a0:
33:d4:c5:56:a0:f0:47:82:f2:f8:94:e3:6a:bf:8d:c8:88:35:
d3:ed:25:68:8f:27:68:75:2f:96:10:0d:fc:97:51:08:c6:17:
77:7b:36:7a:41:40:57:e7:e1:29:95:0c:0d:4f:1e:71:a1:a4:
5f:0f:ce:1d:11:0d:5f:6e:93:a6:a8:99:23:94:14:8c:33:3f:
09:ab:ef:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 07:27:17 2025 by rpki-client