Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/6a89f0-0b22-452c-a659-42a7af882e09/1/FTXSThc2fkBbeA9xEEnl940QHxY.mft
File: FTXSThc2fkBbeA9xEEnl940QHxY.mft (raw, json)
Hash identifier: xL7tVK3ltJAqEgQ6PH6oC5L0oj/sLRpbKUV8MZBfMjQ=
Subject key identifier: 73:B8:7E:3E:E1:22:D1:43:A5:AC:D2:67:B6:17:2A:E2:2E:80:1C:DE
Authority key identifier: 15:35:D2:4E:17:36:7E:40:5B:78:0F:71:10:49:E5:F7:8D:10:1F:16
Certificate issuer: /CN=1535d24e17367e405b780f711049e5f78d101f16
Certificate serial: 019692CD4948B20C2A1304F714947FF2DD4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FTXSThc2fkBbeA9xEEnl940QHxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/6a89f0-0b22-452c-a659-42a7af882e09/1/FTXSThc2fkBbeA9xEEnl940QHxY.mft
Manifest number: 10FA
Signing time: Fri 02 May 2025 21:00:49 +0000
Manifest this update: Fri 02 May 2025 21:00:49 +0000
Manifest next update: Sat 03 May 2025 21:00:49 +0000
Files and hashes: 1: 5ogK5Ex4CS4B5KsMhYCUM00RFfQ.roa (hash: ZPbDvWHExMztNeKcllyDlDkCaDogTJsh9sQhQBtO6xU=)
2: FTXSThc2fkBbeA9xEEnl940QHxY.crl (hash: ko4W2AkEESQ4f53sVYRVMXcEYe73D+cU7pweKbB9b4Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/6a89f0-0b22-452c-a659-42a7af882e09/1/FTXSThc2fkBbeA9xEEnl940QHxY.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/6a89f0-0b22-452c-a659-42a7af882e09/1/FTXSThc2fkBbeA9xEEnl940QHxY.mft
rsync://rpki.ripe.net/repository/DEFAULT/FTXSThc2fkBbeA9xEEnl940QHxY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 14:24:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:92:cd:49:48:b2:0c:2a:13:04:f7:14:94:7f:f2:dd:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1535d24e17367e405b780f711049e5f78d101f16
Validity
Not Before: May 2 21:00:49 2025 GMT
Not After : May 3 21:00:49 2025 GMT
Subject: CN=73b87e3ee122d143a5acd267b6172ae22e801cde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:9b:f4:b9:cb:fd:e7:87:34:fe:3c:79:70:d8:
c3:25:7b:09:70:64:11:fb:4a:b7:5c:44:50:be:80:
93:b8:68:a7:24:7b:96:37:17:7c:ee:d1:6d:7c:bd:
66:cc:d3:50:37:ac:b5:ec:e4:80:41:67:cd:49:28:
7b:b3:de:5e:49:21:ab:c6:7f:2e:4e:53:5d:c0:00:
8d:0f:9a:04:57:a8:35:fb:19:b8:a6:17:02:f9:a6:
c9:ae:80:ca:7b:2c:af:26:b1:b2:22:ce:7e:cd:53:
51:6c:52:65:67:2e:9b:c6:ad:8b:47:4f:9f:73:7c:
e0:d6:08:e8:c3:5e:3a:d4:ab:18:aa:4b:fa:db:80:
75:d2:de:20:14:06:f1:e2:b0:e2:0b:43:ed:46:34:
22:20:e9:67:a6:9c:ca:d7:86:1a:3f:4d:5f:a1:77:
e1:b6:65:09:15:bb:bb:76:d6:9d:b9:97:53:8b:8d:
22:67:88:de:2d:ad:67:f2:77:b1:9e:37:32:36:10:
42:bb:9c:ca:93:87:9e:55:86:1c:92:bc:0b:b0:3d:
14:65:ef:ae:12:8c:42:f9:69:6f:ca:f8:8a:bc:9d:
9d:1f:b8:d4:fd:b0:e6:5b:ee:7c:d9:1e:b8:2d:c4:
fa:7f:44:ee:05:d2:cc:1b:f4:ce:b6:9b:69:aa:04:
85:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:B8:7E:3E:E1:22:D1:43:A5:AC:D2:67:B6:17:2A:E2:2E:80:1C:DE
X509v3 Authority Key Identifier:
keyid:15:35:D2:4E:17:36:7E:40:5B:78:0F:71:10:49:E5:F7:8D:10:1F:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FTXSThc2fkBbeA9xEEnl940QHxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/6a89f0-0b22-452c-a659-42a7af882e09/1/FTXSThc2fkBbeA9xEEnl940QHxY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/6a89f0-0b22-452c-a659-42a7af882e09/1/FTXSThc2fkBbeA9xEEnl940QHxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:07:83:a9:b3:23:41:c2:a5:55:df:9f:48:90:d9:31:b7:af:
fc:e1:8e:93:0a:67:7c:04:c7:ea:99:e2:ea:6c:52:4b:1a:52:
12:dc:82:1a:52:bc:45:1d:3f:4a:4e:7a:e6:fc:41:49:06:db:
b7:99:34:cc:8b:08:db:f4:d6:19:e3:e6:34:9f:65:da:80:df:
f4:f3:f2:2b:00:1a:b5:21:e4:99:52:be:e4:2e:97:8a:fa:ed:
70:2c:8b:11:01:58:48:70:60:bc:b9:6d:a4:91:bb:d6:58:e9:
5c:d8:27:91:2f:59:78:e4:dc:1a:90:c9:66:67:22:5d:04:0d:
3a:1b:2e:ca:36:a7:47:ac:95:63:60:f2:d5:98:ff:2d:f7:b4:
88:9b:c7:26:8e:fb:53:eb:b6:eb:6b:ec:6f:95:94:e2:85:dd:
1d:3d:d7:0e:af:83:66:9d:66:e0:57:f9:c4:5e:61:b2:24:23:
3a:85:64:4c:50:a2:48:e8:e0:91:b3:e8:2a:6e:ad:f6:b4:ae:
70:54:9d:96:a1:ce:c6:af:9c:4e:c9:7e:09:5b:51:69:9b:cd:
1c:03:38:13:5d:41:9a:19:85:ff:60:1c:64:21:2f:a0:3a:ef:
f0:1b:cb:41:bb:c0:08:49:74:b4:c2:5b:d9:1a:c4:f0:3b:40:
a3:d4:39:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 23:23:18 2025 by rpki-client