Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/b9c906-1e85-4573-8f62-8257d51928a9/1/fTXAsgkTXCLMgAWnwuIixjwTbLA.mft
File: fTXAsgkTXCLMgAWnwuIixjwTbLA.mft (raw, json)
Hash identifier: qi4NG+3twmgaRgOQHeHrg6whaYnytReizyCDCW04HR0=
Subject key identifier: 5D:C6:99:4E:68:E1:C2:2B:77:BF:40:33:BF:75:50:3C:E6:FC:6E:9E
Authority key identifier: 7D:35:C0:B2:09:13:5C:22:CC:80:05:A7:C2:E2:22:C6:3C:13:6C:B0
Certificate issuer: /CN=7d35c0b209135c22cc8005a7c2e222c63c136cb0
Certificate serial: 0196775579A03B6EF5CEA0D0C76F2AA43321
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fTXAsgkTXCLMgAWnwuIixjwTbLA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/b9c906-1e85-4573-8f62-8257d51928a9/1/fTXAsgkTXCLMgAWnwuIixjwTbLA.mft
Manifest number: 150F
Signing time: Sun 27 Apr 2025 13:00:12 +0000
Manifest this update: Sun 27 Apr 2025 13:00:12 +0000
Manifest next update: Mon 28 Apr 2025 13:00:12 +0000
Files and hashes: 1: E008mlaZ-98yoVlxucj25N9tnVo.roa (hash: 7h9j4kfENIh6mVCwgI4OQBIMY0MBjmJwFr/fTNDIJFk=)
2: R2-GAax-KT1qCEjDDbUwaoUFHaY.roa (hash: DTrChNvAxi6mH07womaTROYkgqmDr0mKtOiNc7UHhPs=)
3: fTXAsgkTXCLMgAWnwuIixjwTbLA.crl (hash: 187uGn6df1o3wN/8CZhhxxweJ50ytZY6iiLWI1zoRNE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/b9c906-1e85-4573-8f62-8257d51928a9/1/fTXAsgkTXCLMgAWnwuIixjwTbLA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/b9c906-1e85-4573-8f62-8257d51928a9/1/fTXAsgkTXCLMgAWnwuIixjwTbLA.mft
rsync://rpki.ripe.net/repository/DEFAULT/fTXAsgkTXCLMgAWnwuIixjwTbLA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 07:29:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:55:79:a0:3b:6e:f5:ce:a0:d0:c7:6f:2a:a4:33:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d35c0b209135c22cc8005a7c2e222c63c136cb0
Validity
Not Before: Apr 27 13:00:12 2025 GMT
Not After : Apr 28 13:00:12 2025 GMT
Subject: CN=5dc6994e68e1c22b77bf4033bf75503ce6fc6e9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b0:89:30:71:91:f1:cb:fe:88:96:14:f7:42:
62:60:c6:d7:c5:a2:7a:7d:a6:c7:a0:d8:2b:6f:27:
a6:b0:f5:75:4c:24:f7:20:2b:ba:c6:a4:16:2e:68:
3c:99:6b:36:be:88:13:74:38:d7:cb:28:a5:2d:1a:
bf:18:93:11:0f:4d:8b:4f:d5:7c:36:bc:71:a3:e7:
f6:0c:81:5a:da:42:94:77:b2:f1:71:dc:cf:f5:64:
2f:75:72:5e:52:a0:4e:e5:2d:46:f2:97:d6:0b:a9:
d8:90:f0:26:0e:4a:8d:d3:24:ee:e5:eb:44:0d:ea:
cc:f5:37:5b:5f:c7:91:19:16:17:5a:dd:97:5d:ef:
12:8f:f5:f8:2d:e6:61:ac:f2:f2:0e:84:a9:28:db:
45:c8:56:0a:0c:44:7f:de:5a:c4:5b:60:af:27:73:
dc:3e:ce:a7:5a:fa:55:36:e8:80:38:a6:ae:3c:2e:
ac:59:e0:30:e1:fd:a9:1d:b3:78:62:2c:f0:c2:40:
0b:40:0e:90:64:a5:9f:9b:34:57:32:c2:0e:a0:18:
0a:2d:ec:17:2c:2c:29:99:13:b2:61:86:43:7f:08:
80:ad:5e:63:45:02:34:75:c2:2f:26:b8:d5:aa:be:
63:85:95:69:50:5c:7f:c1:eb:b9:02:36:58:5c:ef:
81:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:C6:99:4E:68:E1:C2:2B:77:BF:40:33:BF:75:50:3C:E6:FC:6E:9E
X509v3 Authority Key Identifier:
keyid:7D:35:C0:B2:09:13:5C:22:CC:80:05:A7:C2:E2:22:C6:3C:13:6C:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fTXAsgkTXCLMgAWnwuIixjwTbLA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b9c906-1e85-4573-8f62-8257d51928a9/1/fTXAsgkTXCLMgAWnwuIixjwTbLA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b9c906-1e85-4573-8f62-8257d51928a9/1/fTXAsgkTXCLMgAWnwuIixjwTbLA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:48:90:4a:2e:fe:98:b0:09:39:b9:a8:13:8c:a2:60:e2:db:
91:cd:cf:15:c6:f9:48:79:f8:af:22:8b:0a:9d:40:7a:3d:fa:
78:f3:db:89:83:81:77:27:d4:ba:ff:03:2a:51:f7:35:e3:ca:
b0:46:2f:9e:06:bc:af:8c:05:c2:1f:df:74:88:a4:ab:2b:4c:
05:f5:1b:0c:80:0a:98:7d:c6:3c:82:20:e2:92:4c:40:be:6d:
55:25:af:e1:2f:d2:20:0b:07:83:ec:8a:29:85:71:02:d3:e1:
ac:8b:07:4f:09:d7:ab:54:5d:0b:39:2f:70:a2:37:40:6a:0b:
d4:b7:72:c8:88:87:c4:6f:6a:5b:97:d5:bf:dd:e3:15:cd:3e:
12:55:68:0e:c3:b4:9c:05:61:ee:c1:a3:c8:9a:0d:62:2b:a4:
55:e1:e5:da:92:bd:58:1e:b6:13:68:b4:61:d6:9b:3f:11:3f:
0b:f5:66:5c:18:66:9d:c2:0e:10:40:7d:a0:30:0d:c7:8c:7f:
26:48:8d:39:6e:75:eb:ee:02:ee:6e:95:f3:44:00:d7:d7:46:
dc:25:39:ba:b4:35:52:17:5b:86:f8:e6:ec:79:06:fe:3b:ca:
bb:7a:31:2a:be:61:c2:29:35:e0:47:19:4f:4d:68:50:c6:42:
84:c1:fe:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 15:57:26 2025 by rpki-client