Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/565191-d981-41e5-961c-9fe55b171683/1/FTPNLR9tzx7sl-hpQ8TlOwyI6q4.mft
File: FTPNLR9tzx7sl-hpQ8TlOwyI6q4.mft (raw, json)
Hash identifier: mMgnUZgD9NIlHXIMAf6aHCsC8xNYySxkvPIgObH7cFA=
Subject key identifier: 43:BA:BC:5E:57:01:F4:74:2C:E5:8C:E8:77:F4:21:34:40:B1:3A:26
Authority key identifier: 15:33:CD:2D:1F:6D:CF:1E:EC:97:E8:69:43:C4:E5:3B:0C:88:EA:AE
Certificate issuer: /CN=1533cd2d1f6dcf1eec97e86943c4e53b0c88eaae
Certificate serial: 0196CD6171B7E0B8FD8A6C9F97A6EBE97E4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FTPNLR9tzx7sl-hpQ8TlOwyI6q4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/565191-d981-41e5-961c-9fe55b171683/1/FTPNLR9tzx7sl-hpQ8TlOwyI6q4.mft
Manifest number: 1539
Signing time: Wed 14 May 2025 06:00:37 +0000
Manifest this update: Wed 14 May 2025 06:00:37 +0000
Manifest next update: Thu 15 May 2025 06:00:37 +0000
Files and hashes: 1: FTPNLR9tzx7sl-hpQ8TlOwyI6q4.crl (hash: 0ekIhitVuArzghDD5LvUD1iXE2G2b2v1XZARtDf7sOw=)
2: bVPZcxyyuoSw5oO9YToFQkVC9HE.roa (hash: PMh8VdKlUCXwqFCEJ+zfZN1ZK1DFnhbrgEIJ3TSYDdE=)
3: ucnP1VSEw1kHHuA3QA5_zId7uwM.roa (hash: YmzOGwmaq6ynMsOM2MUQrdoh74IojEKpTpvJHQjtfdM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/565191-d981-41e5-961c-9fe55b171683/1/FTPNLR9tzx7sl-hpQ8TlOwyI6q4.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/565191-d981-41e5-961c-9fe55b171683/1/FTPNLR9tzx7sl-hpQ8TlOwyI6q4.mft
rsync://rpki.ripe.net/repository/DEFAULT/FTPNLR9tzx7sl-hpQ8TlOwyI6q4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cd:61:71:b7:e0:b8:fd:8a:6c:9f:97:a6:eb:e9:7e:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1533cd2d1f6dcf1eec97e86943c4e53b0c88eaae
Validity
Not Before: May 14 06:00:37 2025 GMT
Not After : May 15 06:00:37 2025 GMT
Subject: CN=43babc5e5701f4742ce58ce877f4213440b13a26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:6a:4b:a3:c5:60:3b:97:f3:00:f3:9e:96:1e:
74:50:1f:3a:e0:af:9b:03:f2:5e:dd:66:69:d8:e9:
77:c5:7d:eb:7b:f8:9d:80:47:67:a8:af:f5:10:9d:
4c:de:01:1a:ad:f8:3f:82:ab:1f:a2:96:2f:16:f0:
dc:c5:68:77:e0:f1:3b:c0:2d:44:4d:29:8e:73:79:
a1:3f:22:69:6d:b6:c4:8d:0d:ac:68:35:42:b2:2f:
01:fe:70:80:27:d8:66:ab:bd:0b:91:e4:86:84:ee:
ad:b6:51:a8:43:02:1b:2f:55:7f:19:01:52:93:17:
33:ee:34:29:3c:a7:8e:14:8c:d2:19:05:18:91:9a:
29:9b:f1:c1:4f:c2:7b:ce:d3:77:dc:46:79:69:af:
64:b4:75:48:a6:c3:13:86:b8:3e:25:ec:37:d0:e6:
d6:07:f0:6f:03:14:dd:ae:c4:45:c5:48:5b:03:4b:
d1:ae:e8:c7:cf:93:41:7a:e0:00:1c:ec:4c:e9:ea:
e4:5e:22:f6:0f:f2:a0:1b:b6:0d:33:fc:e5:5c:76:
c9:46:da:1d:81:28:80:c8:4c:f2:a7:13:8a:b7:85:
27:87:b2:01:55:b1:74:c1:db:1c:a7:e2:3b:c5:8f:
b8:90:51:b2:45:dc:7b:ef:66:b7:72:07:ab:c0:ce:
08:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:BA:BC:5E:57:01:F4:74:2C:E5:8C:E8:77:F4:21:34:40:B1:3A:26
X509v3 Authority Key Identifier:
keyid:15:33:CD:2D:1F:6D:CF:1E:EC:97:E8:69:43:C4:E5:3B:0C:88:EA:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FTPNLR9tzx7sl-hpQ8TlOwyI6q4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/565191-d981-41e5-961c-9fe55b171683/1/FTPNLR9tzx7sl-hpQ8TlOwyI6q4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/565191-d981-41e5-961c-9fe55b171683/1/FTPNLR9tzx7sl-hpQ8TlOwyI6q4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:c0:b0:0a:53:7f:8f:e4:22:07:54:62:9f:6a:a5:4a:14:29:
e7:83:f6:49:cb:74:8a:ba:40:69:b7:2a:1b:8e:43:2a:86:0f:
24:da:e0:22:37:de:90:1c:15:45:8c:8e:17:0d:10:12:90:c6:
9c:94:da:8a:50:d5:b4:7a:2a:3c:a2:d6:9e:c9:b3:c3:bb:7c:
8e:45:2e:92:79:f3:45:da:0c:f1:f3:f0:b0:b7:4d:c8:fe:1e:
8d:86:cd:26:1b:16:d6:8d:3c:51:83:86:25:e5:c2:84:61:ed:
33:bc:ef:6e:b8:c9:31:91:39:66:a8:89:2e:e5:a2:fb:ac:3e:
3b:b5:1f:26:fb:06:54:01:e9:71:2d:58:cb:b6:c3:af:c5:cc:
1b:31:df:2a:ed:c6:7f:88:dc:ba:33:75:dd:0f:db:d0:1c:3b:
5f:d6:96:7b:91:0d:59:83:5c:62:da:01:11:34:a9:a3:f9:39:
57:67:f3:e0:7f:55:1c:60:c5:4f:e2:82:3c:17:e4:76:0a:b7:
a2:6d:8a:e3:6a:e7:a2:8a:53:af:ed:a4:60:c6:02:64:d0:df:
99:d5:53:0c:b5:20:60:11:bf:8b:fa:22:c0:57:76:dd:7f:84:
01:a8:d3:e7:ea:43:26:c6:ea:21:26:ad:12:a8:8f:9a:75:7b:
af:db:79:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 09:24:58 2025 by rpki-client