Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/b9c906-1e85-4573-8f62-8257d51928a9/1/fTXAsgkTXCLMgAWnwuIixjwTbLA.mft
File: fTXAsgkTXCLMgAWnwuIixjwTbLA.mft (raw, json)
Hash identifier: d30CO9Rw0NKR0qOYZ4lm2BbBdcwJ7aEzHjPFH+CTgDo=
Subject key identifier: F4:B6:5E:71:75:E4:34:9E:D1:28:82:C0:44:8C:6D:FA:47:46:7B:70
Authority key identifier: 7D:35:C0:B2:09:13:5C:22:CC:80:05:A7:C2:E2:22:C6:3C:13:6C:B0
Certificate issuer: /CN=7d35c0b209135c22cc8005a7c2e222c63c136cb0
Certificate serial: 01977C0B81ED07252FF6CAEEC52A545F1F1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fTXAsgkTXCLMgAWnwuIixjwTbLA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/b9c906-1e85-4573-8f62-8257d51928a9/1/fTXAsgkTXCLMgAWnwuIixjwTbLA.mft
Manifest number: 1596
Signing time: Tue 17 Jun 2025 04:00:18 +0000
Manifest this update: Tue 17 Jun 2025 04:00:18 +0000
Manifest next update: Wed 18 Jun 2025 04:00:18 +0000
Files and hashes: 1: E008mlaZ-98yoVlxucj25N9tnVo.roa (hash: 7h9j4kfENIh6mVCwgI4OQBIMY0MBjmJwFr/fTNDIJFk=)
2: R2-GAax-KT1qCEjDDbUwaoUFHaY.roa (hash: DTrChNvAxi6mH07womaTROYkgqmDr0mKtOiNc7UHhPs=)
3: fTXAsgkTXCLMgAWnwuIixjwTbLA.crl (hash: tnxGoWag9TVvLMbjfubULhwrVqbcv0yVv8jk/eJr+kU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/b9c906-1e85-4573-8f62-8257d51928a9/1/fTXAsgkTXCLMgAWnwuIixjwTbLA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/b9c906-1e85-4573-8f62-8257d51928a9/1/fTXAsgkTXCLMgAWnwuIixjwTbLA.mft
rsync://rpki.ripe.net/repository/DEFAULT/fTXAsgkTXCLMgAWnwuIixjwTbLA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 04:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7c:0b:81:ed:07:25:2f:f6:ca:ee:c5:2a:54:5f:1f:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d35c0b209135c22cc8005a7c2e222c63c136cb0
Validity
Not Before: Jun 17 04:00:18 2025 GMT
Not After : Jun 18 04:00:18 2025 GMT
Subject: CN=f4b65e7175e4349ed12882c0448c6dfa47467b70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:13:82:f4:9e:60:58:cb:d8:e1:d0:27:eb:70:
69:43:db:fa:75:55:90:62:d6:7a:08:7d:96:3f:89:
e9:8e:e5:e3:96:28:91:36:38:b1:06:87:55:92:f7:
d1:f4:0e:e5:4d:f1:9b:12:27:b8:02:69:8a:16:6c:
00:59:c9:4d:8b:da:1c:4a:85:a3:a9:91:2c:3a:14:
02:5d:98:e4:5f:db:23:58:cd:cb:77:33:2c:ec:62:
6b:e5:9f:eb:5e:cc:5f:19:e2:36:a2:1a:75:1e:6f:
10:1f:2b:20:34:69:82:60:f3:eb:35:cd:3c:b8:c0:
ac:4e:c4:2e:69:85:79:f6:1f:04:e2:cf:7a:e2:e1:
3b:47:69:65:4f:5a:9b:8a:68:d6:55:6f:8f:96:cc:
5b:28:51:7e:73:ea:8d:84:f9:af:43:e7:62:62:18:
67:7a:c6:f4:54:93:64:3d:85:34:33:28:a6:78:e3:
d0:b1:d0:cc:39:b9:8f:ed:a5:49:06:f4:85:dd:3e:
b4:f2:be:73:42:50:03:9d:54:bc:09:73:52:56:67:
cf:c5:fa:55:d3:fb:73:83:02:56:3e:f4:50:77:a4:
5b:f1:88:db:27:a9:a0:6d:4d:71:96:9d:9c:2e:8f:
48:41:88:98:ab:a4:2a:2e:71:8f:ee:88:51:b8:31:
9b:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:B6:5E:71:75:E4:34:9E:D1:28:82:C0:44:8C:6D:FA:47:46:7B:70
X509v3 Authority Key Identifier:
keyid:7D:35:C0:B2:09:13:5C:22:CC:80:05:A7:C2:E2:22:C6:3C:13:6C:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fTXAsgkTXCLMgAWnwuIixjwTbLA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b9c906-1e85-4573-8f62-8257d51928a9/1/fTXAsgkTXCLMgAWnwuIixjwTbLA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b9c906-1e85-4573-8f62-8257d51928a9/1/fTXAsgkTXCLMgAWnwuIixjwTbLA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:b1:1e:49:d3:e2:8d:c6:0d:08:1f:dd:8e:10:0f:ad:04:7c:
65:68:58:eb:8c:67:4a:07:22:09:ea:1b:9e:54:e4:04:d8:90:
89:f2:cf:03:1f:69:eb:d7:f9:82:9f:e6:f7:bc:69:ee:0f:ca:
6e:91:4f:6e:6b:7d:e1:d9:26:5b:eb:70:c6:52:87:98:a1:bb:
94:24:3e:95:e3:70:4e:fe:a3:4d:7f:77:99:ca:4e:37:16:ea:
6a:66:76:b7:80:0e:ab:e8:4a:2f:e1:82:0e:b4:6f:08:30:f7:
bf:92:a0:8e:a5:7c:2d:5f:15:5d:2e:62:7f:b8:9f:a4:19:ee:
69:f6:84:a9:32:d7:e2:ca:ed:d5:f8:ae:0f:2a:50:f8:f5:ae:
74:64:a0:67:8c:a2:bf:43:a3:4e:8c:ee:f4:f4:5f:7f:b0:76:
b9:be:64:ad:a7:33:f2:ad:0d:8d:64:86:fb:c3:30:bf:e0:d2:
25:e9:5a:33:46:39:e9:58:e1:0c:27:57:28:a4:02:4d:7f:ed:
d3:68:a4:5c:f6:3e:5a:cb:1f:31:18:60:eb:75:97:f3:c0:cc:
a1:ee:4f:00:47:bb:ee:b6:50:ac:96:c6:59:c9:1d:44:70:70:
0a:b1:74:15:61:1d:38:c1:98:9c:9e:a1:f0:19:02:ac:96:1f:
45:2c:7c:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 13:26:16 2025 by rpki-client