Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/3a20d8-e902-41f5-befa-ab5f39fb8d36/1/ftCMDM2oAs8gznq97qICFOBeR68.mft
File: ftCMDM2oAs8gznq97qICFOBeR68.mft (raw, json)
Hash identifier: iD8VewI05GsuBjm3BqmVuW+6irk0HUttLmH6cwu6tH8=
Subject key identifier: 0A:48:7C:D5:C4:95:7D:2A:F8:D3:C7:C4:3C:5F:9D:3B:1F:E1:C8:20
Authority key identifier: 7E:D0:8C:0C:CD:A8:02:CF:20:CE:7A:BD:EE:A2:02:14:E0:5E:47:AF
Certificate issuer: /CN=7ed08c0ccda802cf20ce7abdeea20214e05e47af
Certificate serial: 01969F766202EEED94B3B4A333954412AF54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ftCMDM2oAs8gznq97qICFOBeR68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/3a20d8-e902-41f5-befa-ab5f39fb8d36/1/ftCMDM2oAs8gznq97qICFOBeR68.mft
Manifest number: 1525
Signing time: Mon 05 May 2025 08:00:57 +0000
Manifest this update: Mon 05 May 2025 08:00:57 +0000
Manifest next update: Tue 06 May 2025 08:00:57 +0000
Files and hashes: 1: P79ilXjNNqLG_ABRYWZBAk8XzIM.roa (hash: z414yhHihxRqPfk1ej5lxFnTCRyHE+z/dZVS4h4vn3A=)
2: ftCMDM2oAs8gznq97qICFOBeR68.crl (hash: G/YUmFHeI0P50DolTaVqSrNyp9pwYbF6JdkOtmY3s40=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/3a20d8-e902-41f5-befa-ab5f39fb8d36/1/ftCMDM2oAs8gznq97qICFOBeR68.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/3a20d8-e902-41f5-befa-ab5f39fb8d36/1/ftCMDM2oAs8gznq97qICFOBeR68.mft
rsync://rpki.ripe.net/repository/DEFAULT/ftCMDM2oAs8gznq97qICFOBeR68.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 08:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:76:62:02:ee:ed:94:b3:b4:a3:33:95:44:12:af:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ed08c0ccda802cf20ce7abdeea20214e05e47af
Validity
Not Before: May 5 08:00:57 2025 GMT
Not After : May 6 08:00:57 2025 GMT
Subject: CN=0a487cd5c4957d2af8d3c7c43c5f9d3b1fe1c820
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:18:d3:f2:14:19:25:c1:6a:86:b5:28:bb:2f:
f4:b1:e2:9a:f0:86:e1:9b:d8:95:ab:2f:32:02:5f:
56:08:08:a4:a0:07:3f:50:d0:2a:95:23:df:12:a7:
73:6a:e9:c4:b4:96:d9:49:69:3f:7b:b2:9c:b4:e4:
1c:0a:5b:66:23:b4:aa:15:46:59:84:7a:27:02:bd:
1c:e1:62:f9:06:c8:27:c0:b6:4f:f8:eb:97:3a:91:
45:fb:13:b2:b6:1c:8a:7a:be:0b:ac:24:cd:fe:d2:
c2:39:99:03:d4:33:37:5d:16:88:0a:34:e9:01:ea:
bb:ae:52:d5:ed:d7:3e:f8:ed:00:58:9d:f0:6a:ca:
13:a7:50:bf:7c:e7:5f:77:8b:37:03:75:14:11:8b:
32:28:e8:e4:dc:b1:3e:8c:db:00:d2:59:ae:01:a7:
92:eb:ba:52:55:40:1a:17:a4:93:fe:a2:f2:73:1b:
d7:d7:7f:7b:ab:43:53:ff:6b:f9:6b:47:e7:98:26:
91:2d:ea:21:09:40:8b:14:1a:95:9a:6a:de:61:bc:
60:8e:06:12:e7:f2:4f:d3:71:2c:89:5e:01:f4:1b:
e6:3b:db:6d:de:6b:a8:23:e7:4f:70:70:a6:55:ee:
f2:40:a2:ee:84:d2:fb:fb:9f:f7:c8:43:77:05:47:
ea:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:48:7C:D5:C4:95:7D:2A:F8:D3:C7:C4:3C:5F:9D:3B:1F:E1:C8:20
X509v3 Authority Key Identifier:
keyid:7E:D0:8C:0C:CD:A8:02:CF:20:CE:7A:BD:EE:A2:02:14:E0:5E:47:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ftCMDM2oAs8gznq97qICFOBeR68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/3a20d8-e902-41f5-befa-ab5f39fb8d36/1/ftCMDM2oAs8gznq97qICFOBeR68.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/3a20d8-e902-41f5-befa-ab5f39fb8d36/1/ftCMDM2oAs8gznq97qICFOBeR68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:c1:20:40:e5:f3:b6:de:95:ee:b5:02:79:dd:72:cc:8f:f5:
d8:f5:d1:7d:4b:3e:73:37:22:2c:92:c8:71:65:fc:11:f5:d5:
28:87:ea:95:52:4d:e7:96:16:4b:94:d7:b9:d1:be:88:bf:d9:
dc:d0:19:0e:e7:17:ec:43:38:c9:b6:79:81:c4:de:20:03:e9:
40:89:2e:c9:b5:3d:cc:55:5d:b3:0f:fa:69:51:a5:c6:23:bf:
6f:e7:ad:4b:9a:2c:c7:6f:60:f2:d7:db:c6:69:c5:08:ea:a4:
0c:96:91:0a:63:04:7a:4a:0d:0c:0a:16:50:de:13:89:6c:a9:
6c:f7:64:51:73:58:db:aa:ee:68:ca:ad:72:6a:aa:b8:5f:97:
71:a6:49:19:af:3b:62:32:06:51:f5:a1:89:07:34:02:de:a2:
25:5a:ab:f5:0b:57:b7:db:1e:df:51:1b:5d:c2:41:12:fd:ee:
60:cf:45:18:0d:d4:07:01:e3:56:f1:18:93:15:5b:11:51:7a:
8f:b9:96:68:88:8d:a4:f5:49:ca:8d:5f:80:74:92:a1:ed:95:
7a:fa:d7:72:39:c4:72:fb:7a:21:3f:46:30:a4:6f:b2:70:e8:
15:c9:2c:5a:7f:eb:8b:56:c1:73:16:fd:05:9f:d3:e6:2e:ca:
da:a7:e3:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 13:28:51 2025 by rpki-client