Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/1f63db-c963-44bc-a039-8aaa6a90ff95/1/fTBF_EkdOfUucUWxAAs7hsN97UU.mft
File: fTBF_EkdOfUucUWxAAs7hsN97UU.mft (raw, json)
Hash identifier: ekbnRyslaCm3LYpRJpwSolwPKxxxNj5QDJpH9WY/cAo=
Subject key identifier: 0B:CB:A9:6C:B6:12:40:1A:B8:F8:A2:C9:A7:48:E0:B1:71:0A:E9:25
Authority key identifier: 7D:30:45:FC:49:1D:39:F5:2E:71:45:B1:00:0B:3B:86:C3:7D:ED:45
Certificate issuer: /CN=7d3045fc491d39f52e7145b1000b3b86c37ded45
Certificate serial: 019672D3FB5FE070C12D9D8271160658B086
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fTBF_EkdOfUucUWxAAs7hsN97UU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/1f63db-c963-44bc-a039-8aaa6a90ff95/1/fTBF_EkdOfUucUWxAAs7hsN97UU.mft
Manifest number: 150B
Signing time: Sat 26 Apr 2025 16:00:17 +0000
Manifest this update: Sat 26 Apr 2025 16:00:17 +0000
Manifest next update: Sun 27 Apr 2025 16:00:17 +0000
Files and hashes: 1: K4Lbu-PRsMurt2fUpQp-WCgArbs.roa (hash: 3LSqxDqKlKKQa1qqql+RiI3DEtvgTxuB2Pprc5JwA8Q=)
2: bGmJuHKC9r9iVbyoDDsXdRaZNn4.roa (hash: cFv1Kx/hvA8sFFYnUpS91+Kz1exkjjuW0Zq9NwB3OSk=)
3: fTBF_EkdOfUucUWxAAs7hsN97UU.crl (hash: CeIqkOKvgjExk50vm0v2dfvSLGl8EbqkfNAn642YP7s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/1f63db-c963-44bc-a039-8aaa6a90ff95/1/fTBF_EkdOfUucUWxAAs7hsN97UU.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/1f63db-c963-44bc-a039-8aaa6a90ff95/1/fTBF_EkdOfUucUWxAAs7hsN97UU.mft
rsync://rpki.ripe.net/repository/DEFAULT/fTBF_EkdOfUucUWxAAs7hsN97UU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:72:d3:fb:5f:e0:70:c1:2d:9d:82:71:16:06:58:b0:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d3045fc491d39f52e7145b1000b3b86c37ded45
Validity
Not Before: Apr 26 16:00:17 2025 GMT
Not After : Apr 27 16:00:17 2025 GMT
Subject: CN=0bcba96cb612401ab8f8a2c9a748e0b1710ae925
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:5a:19:0c:88:3a:35:57:9f:38:7d:be:cc:9b:
28:6d:19:65:ce:98:22:51:d2:b5:e8:0c:63:ef:6e:
2b:ab:79:43:fe:bf:f0:be:a9:de:26:50:d8:31:a5:
b8:0a:3f:27:84:f4:cf:dc:9c:93:d5:7d:43:78:b2:
5c:87:be:f6:ba:af:cc:2d:5d:75:9c:46:70:1b:bb:
e4:6a:33:be:3b:0e:4a:e2:5c:e0:22:56:d7:cd:83:
4b:5e:ad:a5:d3:09:19:f4:82:07:e4:1e:be:87:3e:
6b:52:9c:3c:08:7c:ec:55:bb:30:d5:63:e3:1f:d3:
41:ff:71:cb:68:4f:52:2c:22:f3:f7:d5:34:e2:0a:
31:3c:49:b7:d8:cd:aa:dd:fe:9c:e8:3e:6a:60:15:
63:64:ed:74:08:e9:f8:21:be:89:aa:38:aa:a1:b3:
a0:a4:72:5e:bb:b0:b2:d3:cb:dc:ad:f4:8f:11:7f:
ed:1a:6a:08:be:f0:cb:21:9d:dd:e7:6e:9d:13:1e:
fc:ff:97:35:7e:5b:82:5b:a3:08:58:58:58:05:a2:
c6:35:fd:0a:f3:56:d3:97:67:38:be:07:8b:32:3e:
cc:c9:04:a8:f0:34:1a:9f:c2:3c:d0:a3:29:a0:2c:
4f:6b:9d:dc:1d:0c:da:0a:d3:24:38:d1:fc:bc:ee:
72:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:CB:A9:6C:B6:12:40:1A:B8:F8:A2:C9:A7:48:E0:B1:71:0A:E9:25
X509v3 Authority Key Identifier:
keyid:7D:30:45:FC:49:1D:39:F5:2E:71:45:B1:00:0B:3B:86:C3:7D:ED:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fTBF_EkdOfUucUWxAAs7hsN97UU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1f63db-c963-44bc-a039-8aaa6a90ff95/1/fTBF_EkdOfUucUWxAAs7hsN97UU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1f63db-c963-44bc-a039-8aaa6a90ff95/1/fTBF_EkdOfUucUWxAAs7hsN97UU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:df:08:fa:d9:7a:42:58:32:13:08:b6:b1:2a:bf:9f:88:72:
0c:32:f8:22:42:cf:44:ce:31:f1:c9:1f:05:c3:e0:5d:4a:24:
4b:d9:2f:36:a4:f4:64:cb:65:39:c9:40:95:9f:44:cb:ec:a9:
25:f0:c6:48:7a:6b:1f:88:8d:72:b0:da:7a:d2:4d:09:c2:0a:
97:3e:e3:15:02:c1:fa:82:28:7e:6a:20:d1:45:15:51:d1:70:
8e:dd:a9:4d:0b:66:0d:cb:73:d2:3b:4d:3d:ef:a7:16:3c:ce:
b3:d2:c4:79:67:21:93:f9:d1:9a:47:01:a7:86:19:3f:4f:95:
a0:53:a3:0d:66:69:fc:fc:1d:23:6a:31:6b:7d:29:d6:73:14:
57:18:90:31:a6:e0:5a:f5:8f:77:5d:7b:4d:eb:33:fb:b1:47:
ce:4a:c9:4f:8d:33:9a:0e:66:f8:5f:d0:c8:71:4d:1d:17:e1:
39:c6:5e:6b:89:ef:c4:b2:8a:c3:b0:e5:71:b7:97:7e:b2:8f:
48:e9:22:18:1d:07:2f:d3:a4:42:65:47:f9:6f:79:cc:71:1e:
59:b1:c6:0b:4d:81:34:83:c2:88:dc:af:96:bf:27:1b:ce:05:
ef:91:51:63:da:75:71:62:2b:5b:a3:01:c2:85:55:72:d0:92:
b0:ea:57:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:02:52 2025 by rpki-client