Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/1f63db-c963-44bc-a039-8aaa6a90ff95/1/fTBF_EkdOfUucUWxAAs7hsN97UU.mft
File: fTBF_EkdOfUucUWxAAs7hsN97UU.mft (raw, json)
Hash identifier: O8wa3AClO6AVgQVNgXfd79llvA8nx1HCSWYHY8Yu9vg=
Subject key identifier: FF:D1:A7:AE:FE:18:54:D2:95:56:EE:B8:57:5A:81:1C:B3:44:7A:96
Authority key identifier: 7D:30:45:FC:49:1D:39:F5:2E:71:45:B1:00:0B:3B:86:C3:7D:ED:45
Certificate issuer: /CN=7d3045fc491d39f52e7145b1000b3b86c37ded45
Certificate serial: 01969F3F81890406D48CB39FCF63A378B408
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fTBF_EkdOfUucUWxAAs7hsN97UU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/1f63db-c963-44bc-a039-8aaa6a90ff95/1/fTBF_EkdOfUucUWxAAs7hsN97UU.mft
Manifest number: 1522
Signing time: Mon 05 May 2025 07:01:01 +0000
Manifest this update: Mon 05 May 2025 07:01:01 +0000
Manifest next update: Tue 06 May 2025 07:01:01 +0000
Files and hashes: 1: K4Lbu-PRsMurt2fUpQp-WCgArbs.roa (hash: 3LSqxDqKlKKQa1qqql+RiI3DEtvgTxuB2Pprc5JwA8Q=)
2: bGmJuHKC9r9iVbyoDDsXdRaZNn4.roa (hash: cFv1Kx/hvA8sFFYnUpS91+Kz1exkjjuW0Zq9NwB3OSk=)
3: fTBF_EkdOfUucUWxAAs7hsN97UU.crl (hash: 9itsv4lQcMD2vXTJYJkAyJ+HMsQd5wiV7uWsR5hG0F8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/1f63db-c963-44bc-a039-8aaa6a90ff95/1/fTBF_EkdOfUucUWxAAs7hsN97UU.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/1f63db-c963-44bc-a039-8aaa6a90ff95/1/fTBF_EkdOfUucUWxAAs7hsN97UU.mft
rsync://rpki.ripe.net/repository/DEFAULT/fTBF_EkdOfUucUWxAAs7hsN97UU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:3f:81:89:04:06:d4:8c:b3:9f:cf:63:a3:78:b4:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d3045fc491d39f52e7145b1000b3b86c37ded45
Validity
Not Before: May 5 07:01:01 2025 GMT
Not After : May 6 07:01:01 2025 GMT
Subject: CN=ffd1a7aefe1854d29556eeb8575a811cb3447a96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:93:42:68:62:57:64:6b:fc:b7:fb:81:c1:ba:
f4:4e:a8:fb:68:82:39:64:42:db:f6:e5:6a:a0:7d:
7d:77:dd:c4:b9:ad:1e:3e:3f:23:51:e2:9b:0f:fe:
b9:d3:59:ce:dc:61:2b:95:bf:d5:b5:b7:4a:ab:ed:
98:e5:86:b3:94:7c:7f:58:d8:ca:ac:31:b9:8c:60:
ae:07:0c:c8:a9:6a:89:63:3d:44:59:6f:b9:4e:50:
12:dc:17:38:c1:fc:6f:4d:b0:de:f8:c7:17:53:a3:
af:50:2f:90:0d:a8:f9:49:06:41:4b:e9:b4:2f:ba:
e6:fa:48:58:d0:9e:20:50:a9:fc:ac:96:97:1d:86:
f1:d4:f3:13:f0:8b:57:f5:1b:1b:fb:5e:87:82:6e:
56:4f:39:70:f9:b4:0e:ec:22:1b:32:05:b0:e4:43:
7f:ae:af:88:a5:23:0f:f5:67:3b:a5:8d:03:d0:40:
7d:aa:d1:60:d9:5c:9b:18:d9:e5:85:2b:f9:3e:59:
53:88:fd:cd:68:bd:04:8f:be:c7:ac:d5:ff:5a:14:
2c:15:15:ec:1b:68:c9:7b:31:d0:00:56:a4:ae:05:
3f:cd:05:09:83:b6:18:19:23:c8:9a:1d:3e:7a:b6:
b5:b9:a6:a1:46:67:c9:f9:c2:4b:33:8f:6b:6d:8f:
1a:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:D1:A7:AE:FE:18:54:D2:95:56:EE:B8:57:5A:81:1C:B3:44:7A:96
X509v3 Authority Key Identifier:
keyid:7D:30:45:FC:49:1D:39:F5:2E:71:45:B1:00:0B:3B:86:C3:7D:ED:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fTBF_EkdOfUucUWxAAs7hsN97UU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1f63db-c963-44bc-a039-8aaa6a90ff95/1/fTBF_EkdOfUucUWxAAs7hsN97UU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1f63db-c963-44bc-a039-8aaa6a90ff95/1/fTBF_EkdOfUucUWxAAs7hsN97UU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:84:08:9e:7c:df:40:54:a9:28:98:72:a4:ce:a5:b7:99:c7:
5f:3c:46:7d:de:b8:8d:43:a7:1b:28:ab:d3:6f:f7:99:d3:65:
0d:c1:62:48:0b:73:b6:35:07:0c:3c:72:77:c1:dc:24:b8:e3:
b4:3a:ad:9c:95:fc:77:f7:24:ab:3e:57:a4:c8:b9:f4:d6:10:
18:13:f1:41:d1:e8:88:8d:79:ab:39:ec:9c:de:2a:49:e3:58:
41:e7:d4:3f:58:6d:be:49:b7:01:dc:14:d3:7d:4f:d2:0a:af:
cb:ff:8a:43:ad:4f:7b:7d:ed:f4:85:35:21:57:10:6a:cd:70:
0f:0d:3e:f2:60:ca:c0:26:91:24:60:97:62:2d:10:04:73:b0:
de:3c:51:87:b6:7f:16:35:84:b6:04:5d:4f:f3:31:39:80:08:
97:ca:5a:44:af:1e:88:94:6f:47:67:a0:2c:da:10:21:07:09:
3e:69:ad:19:49:40:22:e8:2e:dc:f3:78:2c:1f:39:69:10:a4:
08:f2:de:d7:2b:60:a2:8e:ac:fe:be:c3:f4:6b:e4:2f:dd:a5:
c4:38:6d:c6:ed:7a:d5:0f:21:6b:fd:f1:7f:44:dd:37:71:5f:
c1:8e:63:a3:ae:23:8d:42:e8:8d:20:c8:ca:13:c2:d8:32:e9:
5e:42:71:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZafP4GJBAbUjLOfz2OjeLQIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkMzA0NWZjNDkxZDM5ZjUyZTcxNDViMTAwMGIzYjg2YzM3
ZGVkNDUwHhcNMjUwNTA1MDcwMTAxWhcNMjUwNTA2MDcwMTAxWjAzMTEwLwYDVQQD
EyhmZmQxYTdhZWZlMTg1NGQyOTU1NmVlYjg1NzVhODExY2IzNDQ3YTk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA85NCaGJXZGv8t/uBwbr0Tqj7aII5
ZELb9uVqoH19d93Eua0ePj8jUeKbD/6501nO3GErlb/VtbdKq+2Y5YazlHx/WNjK
rDG5jGCuBwzIqWqJYz1EWW+5TlAS3Bc4wfxvTbDe+McXU6OvUC+QDaj5SQZBS+m0
L7rm+khY0J4gUKn8rJaXHYbx1PMT8ItX9Rsb+16Hgm5WTzlw+bQO7CIbMgWw5EN/
rq+IpSMP9Wc7pY0D0EB9qtFg2VybGNnlhSv5PllTiP3NaL0Ej77HrNX/WhQsFRXs
G2jJezHQAFakrgU/zQUJg7YYGSPImh0+era1uaahRmfJ+cJLM49rbY8anwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP/Rp67+GFTSlVbuuFdagRyzRHqWMB8GA1UdIwQY
MBaAFH0wRfxJHTn1LnFFsQALO4bDfe1FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlRCRl9Fa2RPZlV1Y1VXeEFBczdoc045N1VVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni8xZjYzZGItYzk2My00NGJjLWEwMzkt
OGFhYTZhOTBmZjk1LzEvZlRCRl9Fa2RPZlV1Y1VXeEFBczdoc045N1VVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni8xZjYzZGItYzk2My00NGJjLWEwMzktOGFhYTZhOTBmZjk1
LzEvZlRCRl9Fa2RPZlV1Y1VXeEFBczdoc045N1VVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABoQInnzf
QFSpKJhypM6lt5nHXzxGfd64jUOnGyir02/3mdNlDcFiSAtztjUHDDxyd8HcJLjj
tDqtnJX8d/ckqz5XpMi59NYQGBPxQdHoiI15qznsnN4qSeNYQefUP1htvkm3AdwU
031P0gqvy/+KQ61Pe33t9IU1IVcQas1wDw0+8mDKwCaRJGCXYi0QBHOw3jxRh7Z/
FjWEtgRdT/MxOYAIl8paRK8eiJRvR2egLNoQIQcJPmmtGUlAIugu3PN4LB85aRCk
CPLe1ytgoo6s/r7D9GvkL92lxDhtxu161Q8ha/3xf0TdN3FfwY5jo64jjULojSDI
yhPC2DLpXkJxZQ==
-----END CERTIFICATE-----
Generated at Mon May 5 10:46:01 2025 by rpki-client