Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/60b62b-8e2c-443e-a162-b4c2dca593b3/1/_FNNTENDzYmRiWnVbaGFZ0sWY1U.mft
File: _FNNTENDzYmRiWnVbaGFZ0sWY1U.mft (raw, json)
Hash identifier: jrK2469pvdWs5X0aH2Mewtk7KwKz/EfPyc+bXM+xlsQ=
Subject key identifier: 24:FD:7C:3B:A9:CA:ED:87:33:E9:6B:27:13:05:42:34:B6:59:CA:D8
Authority key identifier: FC:53:4D:4C:43:43:CD:89:91:89:69:D5:6D:A1:85:67:4B:16:63:55
Certificate issuer: /CN=fc534d4c4343cd89918969d56da185674b166355
Certificate serial: 01969FACEE983A63C8CCB9E42C555190303B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_FNNTENDzYmRiWnVbaGFZ0sWY1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/60b62b-8e2c-443e-a162-b4c2dca593b3/1/_FNNTENDzYmRiWnVbaGFZ0sWY1U.mft
Manifest number: 0F20
Signing time: Mon 05 May 2025 09:00:32 +0000
Manifest this update: Mon 05 May 2025 09:00:32 +0000
Manifest next update: Tue 06 May 2025 09:00:32 +0000
Files and hashes: 1: _FNNTENDzYmRiWnVbaGFZ0sWY1U.crl (hash: TLuti4QEIPpsVryKRKE+Tsx78uy82B6klzkCoygId+4=)
2: bjwBa29o8sLtvq0lB3wmXidRAXM.roa (hash: voja3TwiIQ0KziGC7wSgsvdSwQWHXLdVHcxuiguvZGU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/60b62b-8e2c-443e-a162-b4c2dca593b3/1/_FNNTENDzYmRiWnVbaGFZ0sWY1U.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/60b62b-8e2c-443e-a162-b4c2dca593b3/1/_FNNTENDzYmRiWnVbaGFZ0sWY1U.mft
rsync://rpki.ripe.net/repository/DEFAULT/_FNNTENDzYmRiWnVbaGFZ0sWY1U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 09:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:ac:ee:98:3a:63:c8:cc:b9:e4:2c:55:51:90:30:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc534d4c4343cd89918969d56da185674b166355
Validity
Not Before: May 5 09:00:32 2025 GMT
Not After : May 6 09:00:32 2025 GMT
Subject: CN=24fd7c3ba9caed8733e96b2713054234b659cad8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:4c:cc:00:a1:dc:42:fa:0a:d3:42:b6:4f:df:
f9:24:75:d8:c2:f3:00:c3:50:7a:32:4e:43:48:63:
db:70:9e:fd:45:ce:78:4b:26:36:87:f5:56:a7:7c:
ee:12:07:29:d8:95:33:ca:6d:b8:37:71:2a:14:36:
5c:a2:cf:3a:6a:a4:43:79:b4:72:37:96:dd:d1:1c:
21:d2:88:c8:c5:a3:c1:03:3d:17:f2:73:aa:ed:84:
41:e5:49:7a:20:39:f4:93:b3:dc:7c:9f:92:bf:03:
0a:80:ef:b8:e9:82:a0:c0:28:90:a3:c7:84:ce:25:
74:96:4d:9a:88:54:af:f5:d7:3a:20:7e:ee:0b:ed:
c8:7e:cb:7c:63:a6:c4:25:3c:31:bd:61:9f:8d:48:
25:51:8d:24:81:c7:12:fa:05:16:f9:3c:ff:60:8c:
83:bf:c5:77:c4:8b:e9:1f:07:88:1d:fd:2c:4a:7a:
e4:1e:43:cd:06:16:27:aa:35:98:c1:f8:9b:42:76:
7f:d7:6a:ba:09:b2:b5:60:a4:cb:87:ce:33:03:fc:
c4:3d:bd:d9:a5:9f:0d:a5:93:fb:e5:12:17:3b:03:
c3:d4:69:46:85:f5:3c:a6:b8:e7:3f:54:c8:82:3f:
4b:e2:da:8f:87:e1:61:c3:c6:fe:3b:b6:0b:57:36:
28:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:FD:7C:3B:A9:CA:ED:87:33:E9:6B:27:13:05:42:34:B6:59:CA:D8
X509v3 Authority Key Identifier:
keyid:FC:53:4D:4C:43:43:CD:89:91:89:69:D5:6D:A1:85:67:4B:16:63:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_FNNTENDzYmRiWnVbaGFZ0sWY1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/60b62b-8e2c-443e-a162-b4c2dca593b3/1/_FNNTENDzYmRiWnVbaGFZ0sWY1U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/60b62b-8e2c-443e-a162-b4c2dca593b3/1/_FNNTENDzYmRiWnVbaGFZ0sWY1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:f1:17:cb:52:69:8f:6a:d3:df:56:e2:8d:5e:0f:e4:09:a2:
2a:c0:cc:7b:34:87:81:d6:ee:3a:06:37:28:d6:17:a2:a4:ed:
ae:c6:f5:e8:bb:28:74:d9:4b:c8:61:ee:92:84:dd:72:0e:3a:
95:92:1e:c1:dd:95:5c:64:b4:11:33:04:41:0a:5e:7e:99:72:
1c:a6:fa:b6:90:3d:eb:6d:59:51:d1:98:cc:56:c7:93:9a:d8:
72:bc:47:59:22:e0:28:c5:a9:bb:7e:ba:5a:f6:6a:95:d9:ae:
ab:ef:0e:e8:a7:ae:6a:ee:11:17:50:8f:a7:d5:bb:f1:35:28:
1d:73:e8:6d:e3:c7:a7:9c:b5:d5:83:34:67:2b:64:d9:7a:55:
e6:64:38:96:b8:9c:09:df:c0:9c:7f:84:71:84:05:d0:03:a7:
d2:4e:5a:33:e2:fa:3a:04:bf:2f:24:56:24:ed:3e:bc:a1:3f:
13:57:07:3b:62:2d:4d:2e:c8:a1:bd:85:af:4a:e9:9d:bf:6d:
80:a6:68:33:5b:60:04:96:c1:9c:f1:9c:8a:bd:89:b3:b8:ce:
86:a4:8e:9a:f0:32:bf:22:22:b3:9a:2c:a2:18:0a:d3:d2:20:
23:41:79:7a:1f:b7:45:59:fb:1a:20:12:dd:06:91:30:ee:a9:
17:2f:2a:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 16:29:24 2025 by rpki-client