Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/6a89f0-0b22-452c-a659-42a7af882e09/1/FTXSThc2fkBbeA9xEEnl940QHxY.mft
File: FTXSThc2fkBbeA9xEEnl940QHxY.mft (raw, json)
Hash identifier: JaNYJKKefVnA8kU1FSKfC1LN5i8zWVHUHA9swc0XqG4=
Subject key identifier: 74:77:2A:90:DE:9D:82:6D:C6:FA:52:DC:37:F9:FC:BB:F9:66:F8:DC
Authority key identifier: 15:35:D2:4E:17:36:7E:40:5B:78:0F:71:10:49:E5:F7:8D:10:1F:16
Certificate issuer: /CN=1535d24e17367e405b780f711049e5f78d101f16
Certificate serial: 0196ADD695645325F07FF0771256D836809C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FTXSThc2fkBbeA9xEEnl940QHxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/6a89f0-0b22-452c-a659-42a7af882e09/1/FTXSThc2fkBbeA9xEEnl940QHxY.mft
Manifest number: 1108
Signing time: Thu 08 May 2025 03:00:43 +0000
Manifest this update: Thu 08 May 2025 03:00:43 +0000
Manifest next update: Fri 09 May 2025 03:00:43 +0000
Files and hashes: 1: 5ogK5Ex4CS4B5KsMhYCUM00RFfQ.roa (hash: ZPbDvWHExMztNeKcllyDlDkCaDogTJsh9sQhQBtO6xU=)
2: FTXSThc2fkBbeA9xEEnl940QHxY.crl (hash: 56bWsp5JVPAsJVdEWqcABYK5cTpd8BCOypAJHp8jqbs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/6a89f0-0b22-452c-a659-42a7af882e09/1/FTXSThc2fkBbeA9xEEnl940QHxY.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/6a89f0-0b22-452c-a659-42a7af882e09/1/FTXSThc2fkBbeA9xEEnl940QHxY.mft
rsync://rpki.ripe.net/repository/DEFAULT/FTXSThc2fkBbeA9xEEnl940QHxY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 03:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ad:d6:95:64:53:25:f0:7f:f0:77:12:56:d8:36:80:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1535d24e17367e405b780f711049e5f78d101f16
Validity
Not Before: May 8 03:00:43 2025 GMT
Not After : May 9 03:00:43 2025 GMT
Subject: CN=74772a90de9d826dc6fa52dc37f9fcbbf966f8dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:90:07:ef:4d:76:70:52:56:6b:d4:0b:40:b5:
64:61:5a:4b:06:d1:f8:90:7f:d7:32:a7:f4:e5:41:
7d:6e:25:da:d2:96:55:c8:5e:47:61:74:b3:4d:b7:
ad:cf:3f:34:78:75:c4:55:70:39:83:60:1f:8d:f3:
0b:d5:c5:42:b7:83:5e:5d:2e:bd:a0:6e:d4:70:8a:
11:e6:b9:90:3b:f2:10:f1:66:e6:ab:df:2c:40:5e:
df:8d:73:c8:68:b5:a6:f8:d4:b3:5f:97:4c:23:0e:
dc:78:85:4f:c9:66:79:49:a0:ce:ef:4e:4d:9b:a1:
13:6e:21:ca:24:4b:aa:cf:bd:fa:3f:6f:70:50:50:
98:b3:ab:d7:e7:ee:d2:ba:98:aa:bc:87:c2:73:4e:
04:ba:d5:b0:90:b4:fe:01:20:03:c5:39:df:2c:e8:
48:be:6a:13:b1:c6:87:1d:d9:55:a2:71:af:f8:d5:
6a:57:6c:f2:85:80:bb:c8:65:9c:7b:90:e7:6d:3b:
a3:cb:95:b3:d9:30:df:b6:b0:54:7b:00:5b:5a:f2:
f1:fd:06:8c:27:d1:c8:e5:36:83:7d:87:32:59:ec:
a1:5e:4f:ea:58:9c:be:b0:42:51:2c:8c:16:5b:5a:
7b:67:da:c3:60:3a:c7:2f:b6:a9:fc:b4:ad:15:fb:
44:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:77:2A:90:DE:9D:82:6D:C6:FA:52:DC:37:F9:FC:BB:F9:66:F8:DC
X509v3 Authority Key Identifier:
keyid:15:35:D2:4E:17:36:7E:40:5B:78:0F:71:10:49:E5:F7:8D:10:1F:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FTXSThc2fkBbeA9xEEnl940QHxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/6a89f0-0b22-452c-a659-42a7af882e09/1/FTXSThc2fkBbeA9xEEnl940QHxY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/6a89f0-0b22-452c-a659-42a7af882e09/1/FTXSThc2fkBbeA9xEEnl940QHxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:7a:0c:d2:4b:8b:d7:fe:59:8c:3e:83:c3:cf:d4:c7:5f:a3:
27:1f:49:ff:8a:fc:20:2c:0d:3d:71:7d:02:14:d3:00:44:60:
23:99:78:ce:26:65:7d:03:88:79:97:13:cc:fc:c9:3c:47:69:
39:6f:66:65:5e:fe:68:40:a6:2c:75:bd:47:3c:02:75:08:68:
74:31:ef:04:51:65:ec:bd:45:b8:40:a7:9d:96:35:fa:3f:67:
16:ab:ac:d9:87:ae:04:85:4a:d4:5c:ee:43:9a:1b:e2:e3:ca:
82:c0:7e:ad:69:9c:77:0b:d3:3f:e3:2c:4c:eb:b7:91:7a:d1:
e0:d9:ed:89:37:50:41:c0:a3:0a:81:3c:37:64:28:77:18:55:
5c:75:00:25:42:92:b3:aa:87:f7:4e:8f:8c:50:81:30:85:3e:
68:a0:0f:80:44:94:49:a5:c1:4d:cf:cb:88:95:7f:88:8e:3a:
61:90:40:bf:4b:ff:57:90:d4:de:9e:02:cf:69:4e:a6:00:7c:
45:5c:c1:6c:31:f0:dd:b3:dc:0e:e9:9a:22:a9:2f:d0:98:9b:
45:27:30:32:69:64:20:d1:86:72:3a:8e:af:0c:03:04:40:c2:
c7:32:aa:05:a5:40:ad:d8:5c:e4:29:fe:f6:0c:f5:bc:7a:0a:
50:a7:e2:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 11:10:53 2025 by rpki-client