Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/9c5359-3452-42f3-880b-82d9a9eb430c/1/ftUAFk8HOBNbmuwE44_CTLkOD18.mft
File: ftUAFk8HOBNbmuwE44_CTLkOD18.mft (raw, json)
Hash identifier: PJ4L6ZCm1zW8lR0uC8pHFbqtq1ySUqgbHpOZRWrjP9Q=
Subject key identifier: FF:AB:A9:4F:C3:81:4D:C1:A6:5B:9F:F2:44:5E:BC:45:11:29:2E:98
Authority key identifier: 7E:D5:00:16:4F:07:38:13:5B:9A:EC:04:E3:8F:C2:4C:B9:0E:0F:5F
Certificate issuer: /CN=7ed500164f0738135b9aec04e38fc24cb90e0f5f
Certificate serial: 0196A0F6AEF840B95B5A98CB8B7E0F3F7805
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ftUAFk8HOBNbmuwE44_CTLkOD18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/9c5359-3452-42f3-880b-82d9a9eb430c/1/ftUAFk8HOBNbmuwE44_CTLkOD18.mft
Manifest number: 1274
Signing time: Mon 05 May 2025 15:00:43 +0000
Manifest this update: Mon 05 May 2025 15:00:43 +0000
Manifest next update: Tue 06 May 2025 15:00:43 +0000
Files and hashes: 1: UpOdGPWJK0meS7Gh3_WX8w49CRw.roa (hash: Xe80koGnCIpEItaZAU3CBuIZI63oxsrazQvG2gOmx4M=)
2: YPpoO-eihLVjR6QWGuwlFSalldc.roa (hash: I2Yas9YEEPm9KZs3KYRfc07hbQQR2Q6lK14KBojWMnk=)
3: ftUAFk8HOBNbmuwE44_CTLkOD18.crl (hash: H08S6uR7cHa0qvf9q8n9mm8FoB1bJBTNMpnBV99Mvrw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/9c5359-3452-42f3-880b-82d9a9eb430c/1/ftUAFk8HOBNbmuwE44_CTLkOD18.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/9c5359-3452-42f3-880b-82d9a9eb430c/1/ftUAFk8HOBNbmuwE44_CTLkOD18.mft
rsync://rpki.ripe.net/repository/DEFAULT/ftUAFk8HOBNbmuwE44_CTLkOD18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a0:f6:ae:f8:40:b9:5b:5a:98:cb:8b:7e:0f:3f:78:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ed500164f0738135b9aec04e38fc24cb90e0f5f
Validity
Not Before: May 5 15:00:43 2025 GMT
Not After : May 6 15:00:43 2025 GMT
Subject: CN=ffaba94fc3814dc1a65b9ff2445ebc4511292e98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f8:e4:3f:87:f8:8e:5c:01:2f:c2:64:6d:da:
75:3a:8e:e8:04:bc:05:25:51:3c:d6:a3:49:e0:5b:
b4:04:85:a4:33:2c:9f:6c:46:84:59:df:15:f4:24:
44:09:dd:b6:f9:d0:c6:ad:b2:ba:95:88:38:4c:c5:
07:cd:02:de:31:e6:6b:f1:5e:87:bb:41:3f:1e:77:
fd:55:f3:c2:e5:37:d2:ea:02:d2:8a:7f:af:88:40:
e9:2a:4f:0a:2a:3d:bd:3f:cd:87:d1:9e:94:66:43:
51:b4:bd:ec:90:01:62:dd:ef:6c:57:63:fd:0a:0a:
a3:80:2e:f6:40:46:50:57:8f:5d:49:28:2c:0e:87:
c9:01:d3:04:bc:99:67:7a:60:df:17:c7:8b:e3:e3:
65:bd:f8:e5:57:05:14:7b:c2:43:5b:a3:e2:11:ef:
d9:23:9d:32:29:02:10:ac:29:47:ae:6b:3a:c8:43:
06:11:85:64:15:29:bd:20:e9:d2:0e:d3:45:c0:59:
f0:af:ab:9b:6c:f1:28:4d:a2:48:e6:10:2f:7d:29:
7a:d1:3a:13:78:f9:88:25:ea:37:df:a6:2b:30:f5:
e1:b4:7f:10:df:70:07:d7:6a:fa:15:7e:a9:44:41:
44:68:d4:49:8f:60:82:47:ba:e6:4f:3e:31:47:c7:
e9:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:AB:A9:4F:C3:81:4D:C1:A6:5B:9F:F2:44:5E:BC:45:11:29:2E:98
X509v3 Authority Key Identifier:
keyid:7E:D5:00:16:4F:07:38:13:5B:9A:EC:04:E3:8F:C2:4C:B9:0E:0F:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ftUAFk8HOBNbmuwE44_CTLkOD18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/9c5359-3452-42f3-880b-82d9a9eb430c/1/ftUAFk8HOBNbmuwE44_CTLkOD18.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/9c5359-3452-42f3-880b-82d9a9eb430c/1/ftUAFk8HOBNbmuwE44_CTLkOD18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:f3:26:cd:c4:29:40:73:41:7e:d2:1d:10:f6:12:9a:00:f4:
a9:c9:57:2c:90:66:1f:31:4b:8f:6b:e0:4e:6d:d4:d2:78:22:
10:44:53:19:d6:84:70:a0:e6:92:3c:a8:06:6c:b9:35:e5:3c:
fc:64:67:e4:97:94:39:fa:ab:f5:7c:df:5c:73:ba:32:a9:39:
f8:d7:63:6c:65:b4:bc:7b:bb:fa:dc:43:47:e5:88:c4:26:96:
6d:d8:ea:68:96:75:40:e9:fc:e9:a3:84:51:35:e7:ab:3a:15:
d9:9a:ca:90:c1:9f:85:f9:17:43:92:c1:8b:ca:d3:e6:e8:c4:
71:a5:25:e8:b7:4a:88:01:15:e4:5d:38:34:2a:ba:9a:ba:c9:
14:1d:ea:6c:1c:84:4f:43:73:51:4a:c9:0a:ce:9e:82:6f:8b:
43:99:ac:4f:c7:a6:df:e7:62:b3:71:b1:8f:e3:d1:a2:ed:e5:
a6:a1:2d:83:17:43:c3:ac:6c:4e:7c:1f:ca:a8:15:aa:05:79:
26:79:7c:5b:04:9b:1f:03:e2:be:11:86:bb:58:21:28:c4:60:
6c:4e:51:13:3e:6a:2a:e1:a4:b2:b1:78:32:59:64:64:61:d2:
a2:c8:71:ea:dd:1f:d9:e9:f3:99:15:04:35:57:9e:fe:c8:2c:
2a:59:d2:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 17:40:21 2025 by rpki-client