Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/1f8a09-4365-4bba-8e35-5ee274eb7eab/1/FCaOTC4CUzDfJv1ATK4PavJszCM.mft
File: FCaOTC4CUzDfJv1ATK4PavJszCM.mft (raw, json)
Hash identifier: ORSZvbpiE/FDmowTKsXV0abpmKsdbwF3AsTsasCEPto=
Subject key identifier: C5:11:9F:93:1F:DD:5D:E1:3B:11:17:49:88:30:F8:6C:B4:B8:AE:F9
Authority key identifier: 14:26:8E:4C:2E:02:53:30:DF:26:FD:40:4C:AE:0F:6A:F2:6C:CC:23
Certificate issuer: /CN=14268e4c2e025330df26fd404cae0f6af26ccc23
Certificate serial: 0196C34BC58AA414CEFFF7B6574AA0C11878
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FCaOTC4CUzDfJv1ATK4PavJszCM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/1f8a09-4365-4bba-8e35-5ee274eb7eab/1/FCaOTC4CUzDfJv1ATK4PavJszCM.mft
Manifest number: 0D76
Signing time: Mon 12 May 2025 07:00:44 +0000
Manifest this update: Mon 12 May 2025 07:00:44 +0000
Manifest next update: Tue 13 May 2025 07:00:44 +0000
Files and hashes: 1: FCaOTC4CUzDfJv1ATK4PavJszCM.crl (hash: ItSVUCQhzfWa1rWVPPzwwSYhM/rAElsCs+d0/MYpHjg=)
2: u0DOKBtKEXfOYPXrhlfb2Ryk4Zc.roa (hash: VOn09+bdFNjvpl/Gu+Ha0G2LvOgVJGvmVcF7NTjr9S0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/1f8a09-4365-4bba-8e35-5ee274eb7eab/1/FCaOTC4CUzDfJv1ATK4PavJszCM.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/1f8a09-4365-4bba-8e35-5ee274eb7eab/1/FCaOTC4CUzDfJv1ATK4PavJszCM.mft
rsync://rpki.ripe.net/repository/DEFAULT/FCaOTC4CUzDfJv1ATK4PavJszCM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:4b:c5:8a:a4:14:ce:ff:f7:b6:57:4a:a0:c1:18:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14268e4c2e025330df26fd404cae0f6af26ccc23
Validity
Not Before: May 12 07:00:44 2025 GMT
Not After : May 13 07:00:44 2025 GMT
Subject: CN=c5119f931fdd5de13b1117498830f86cb4b8aef9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:89:03:68:ba:e4:a7:e4:72:46:0a:ed:42:b2:
7f:9e:68:26:45:cd:3b:02:70:55:99:14:d1:4c:8f:
0d:90:db:ef:3e:09:92:04:07:ec:15:b2:cf:8c:f9:
1a:19:60:dc:3f:cd:d4:e1:be:cf:cc:21:da:30:24:
3a:a1:51:70:b4:38:bf:42:e7:ea:70:ae:eb:ad:32:
32:6f:65:cb:3b:f9:79:bf:33:ee:0b:1b:14:2e:b1:
14:ef:01:a9:5d:d4:ff:e3:0c:39:24:cf:5e:4e:e6:
d9:c8:c2:9b:da:0c:0c:3a:2d:cb:e6:37:9c:5b:e6:
d4:8c:68:1a:8f:93:3a:c8:34:5f:a5:5a:fe:33:86:
62:de:8e:4f:d4:6f:bc:97:7b:d2:72:90:1a:cf:c4:
ac:0f:c3:08:7e:f6:35:e8:ee:4c:9c:c6:eb:34:a4:
ba:4d:79:a6:68:62:6b:80:87:77:6c:3e:98:30:2a:
0c:e5:6e:75:1e:e2:4b:f8:55:4c:21:44:b8:99:70:
5d:95:61:3b:66:de:e0:48:15:b2:60:25:fe:fe:3b:
01:72:f7:23:ef:6a:0f:d1:91:95:45:0b:22:5e:67:
c9:42:57:20:e6:c4:22:ec:12:96:7a:53:b0:ab:83:
f9:1f:5f:aa:0d:31:54:ba:16:d1:a0:3c:73:7a:df:
9f:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:11:9F:93:1F:DD:5D:E1:3B:11:17:49:88:30:F8:6C:B4:B8:AE:F9
X509v3 Authority Key Identifier:
keyid:14:26:8E:4C:2E:02:53:30:DF:26:FD:40:4C:AE:0F:6A:F2:6C:CC:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FCaOTC4CUzDfJv1ATK4PavJszCM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/1f8a09-4365-4bba-8e35-5ee274eb7eab/1/FCaOTC4CUzDfJv1ATK4PavJszCM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/1f8a09-4365-4bba-8e35-5ee274eb7eab/1/FCaOTC4CUzDfJv1ATK4PavJszCM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:87:c1:47:48:af:86:cd:3b:93:57:0f:d2:59:3a:54:85:20:
70:41:70:23:62:76:ea:91:07:7e:7d:7f:ea:a3:73:ce:1a:ba:
5f:de:31:78:b9:b2:d9:e2:a4:71:de:40:ad:f9:05:e0:63:ca:
58:3e:c6:f5:4e:08:2d:d8:a5:57:fe:87:8c:9e:7e:b3:ef:18:
d7:66:cd:7d:8f:68:9f:d1:cd:ee:0b:45:0f:b4:ab:93:d6:13:
9d:6b:a0:6b:7d:57:86:d1:39:b7:81:20:1d:ac:d3:eb:fe:6c:
b7:4b:b3:c3:e3:c7:8f:9d:98:75:51:09:48:88:10:69:30:06:
74:9d:a0:6d:23:7c:fb:8a:05:19:f3:aa:28:96:e5:f2:c7:77:
84:eb:f2:53:da:96:7a:78:0f:a2:47:9d:05:3a:f3:41:da:07:
57:39:2f:e5:6e:27:5b:1b:90:cf:b9:7e:a3:a8:2b:04:ed:59:
85:e2:e3:fc:5d:de:fe:98:11:48:79:23:c5:c4:df:c7:ad:f6:
16:6b:a9:aa:8d:b5:2b:fa:93:47:b5:46:0e:ae:47:7a:28:79:
2b:c9:e3:6c:10:87:b8:33:a7:cc:8f:d3:e1:4d:dd:a6:f3:6e:
5b:a6:f1:db:d4:2f:bf:8a:6c:33:4d:60:b5:4b:06:cc:3f:9e:
9a:12:4c:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 10:50:57 2025 by rpki-client