Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/3a20d8-e902-41f5-befa-ab5f39fb8d36/1/ftCMDM2oAs8gznq97qICFOBeR68.mft
File: ftCMDM2oAs8gznq97qICFOBeR68.mft (raw, json)
Hash identifier: +Lpwltlf9YSMHZT8S1D0O/9KmcEivpy3eZ46jk3OG/E=
Subject key identifier: 5B:A8:40:E2:D6:64:16:98:2D:2E:28:2E:32:FF:76:5F:60:5C:87:2D
Authority key identifier: 7E:D0:8C:0C:CD:A8:02:CF:20:CE:7A:BD:EE:A2:02:14:E0:5E:47:AF
Certificate issuer: /CN=7ed08c0ccda802cf20ce7abdeea20214e05e47af
Certificate serial: 01976E19709A05C90FC131C2933A48B40013
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ftCMDM2oAs8gznq97qICFOBeR68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/3a20d8-e902-41f5-befa-ab5f39fb8d36/1/ftCMDM2oAs8gznq97qICFOBeR68.mft
Manifest number: 1590
Signing time: Sat 14 Jun 2025 11:00:50 +0000
Manifest this update: Sat 14 Jun 2025 11:00:50 +0000
Manifest next update: Sun 15 Jun 2025 11:00:50 +0000
Files and hashes: 1: P79ilXjNNqLG_ABRYWZBAk8XzIM.roa (hash: z414yhHihxRqPfk1ej5lxFnTCRyHE+z/dZVS4h4vn3A=)
2: ftCMDM2oAs8gznq97qICFOBeR68.crl (hash: 9/FNeevCCm7AIvOjlOweVwVulEZvyIT6lI/BDYQnF84=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/3a20d8-e902-41f5-befa-ab5f39fb8d36/1/ftCMDM2oAs8gznq97qICFOBeR68.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/3a20d8-e902-41f5-befa-ab5f39fb8d36/1/ftCMDM2oAs8gznq97qICFOBeR68.mft
rsync://rpki.ripe.net/repository/DEFAULT/ftCMDM2oAs8gznq97qICFOBeR68.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 11:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:19:70:9a:05:c9:0f:c1:31:c2:93:3a:48:b4:00:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ed08c0ccda802cf20ce7abdeea20214e05e47af
Validity
Not Before: Jun 14 11:00:50 2025 GMT
Not After : Jun 15 11:00:50 2025 GMT
Subject: CN=5ba840e2d66416982d2e282e32ff765f605c872d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:c5:6b:df:51:a4:be:ad:58:29:9c:f4:24:2e:
55:a5:d8:14:5e:10:ac:b9:58:d1:5a:f7:03:fa:9a:
fc:2f:f7:4a:74:b9:4c:00:21:f1:38:be:b0:0a:5a:
d6:f6:91:84:93:5d:00:f6:31:93:f1:78:bf:cf:b3:
68:42:07:5d:1d:e9:f2:28:6a:6f:43:26:d9:3c:59:
28:72:9e:ba:05:f4:4b:f2:1f:98:71:e3:62:e7:b2:
07:f8:18:f6:17:f0:9d:7c:da:ac:7b:f6:e9:14:7c:
a5:cf:e2:84:11:58:22:62:92:ec:92:3b:01:a3:ca:
6d:c0:a7:ea:f2:89:6f:73:9a:af:6a:03:4d:05:f8:
5b:8e:fa:5c:12:5d:da:9c:8a:ae:c1:e2:65:87:39:
b7:aa:68:36:38:ae:c9:b6:d7:1a:b7:07:6d:a8:fb:
de:04:92:fa:39:b0:d0:6d:0b:ea:75:7a:80:66:2d:
71:3d:c3:dd:c9:cd:09:02:b3:05:c7:61:6c:3c:90:
30:20:99:44:c9:35:a2:f3:20:af:00:35:df:84:3e:
c9:d6:95:9e:d1:30:6c:42:28:40:47:3a:8b:c9:06:
90:b3:98:03:5a:8e:76:f6:b1:25:c4:2f:77:34:cc:
ac:aa:3a:5d:7b:a2:f0:1f:95:0e:f7:29:37:a4:05:
27:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:A8:40:E2:D6:64:16:98:2D:2E:28:2E:32:FF:76:5F:60:5C:87:2D
X509v3 Authority Key Identifier:
keyid:7E:D0:8C:0C:CD:A8:02:CF:20:CE:7A:BD:EE:A2:02:14:E0:5E:47:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ftCMDM2oAs8gznq97qICFOBeR68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/3a20d8-e902-41f5-befa-ab5f39fb8d36/1/ftCMDM2oAs8gznq97qICFOBeR68.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/3a20d8-e902-41f5-befa-ab5f39fb8d36/1/ftCMDM2oAs8gznq97qICFOBeR68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:24:67:49:9c:a5:15:ff:07:49:31:d2:78:83:13:ce:4a:b9:
59:39:6d:49:47:f8:73:ab:11:97:a0:ef:6a:bb:9d:a2:56:88:
94:a1:d5:35:fa:ec:3b:b6:03:c1:e7:92:6d:81:8e:de:eb:f1:
01:ac:47:fb:f4:98:4d:d4:d7:68:61:46:d7:2e:a6:fb:2e:f9:
4b:ef:fb:9d:c2:33:4e:00:27:56:91:45:9d:08:aa:27:f0:9a:
13:c9:48:25:0a:b7:b5:91:5e:3c:6a:19:61:f1:0d:e0:ab:ca:
2f:21:c1:dd:23:2d:7c:4c:a5:71:3e:9f:21:58:53:53:f7:e6:
d9:7b:57:1d:15:6b:f2:3c:f7:21:ce:0e:9a:e6:87:e2:42:bb:
24:b2:21:f8:b3:5f:c9:63:d4:a1:5f:1c:e4:b6:8d:de:b1:8d:
43:5f:e4:d0:db:bd:76:2a:de:6a:46:27:9d:a9:7e:8e:c0:f6:
2d:5d:22:ed:87:87:87:26:c0:52:e5:d9:21:e1:17:15:9e:8a:
e1:25:b1:38:fb:70:5a:8f:f3:72:7d:16:6d:15:eb:70:aa:5e:
44:e8:e3:28:ac:5d:24:f6:32:44:dd:15:df:15:da:10:aa:bd:
83:0a:5a:ac:5d:61:c3:c1:37:b5:66:96:3a:06:1e:d5:fb:82:
23:b4:fd:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 21:18:37 2025 by rpki-client