Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/136156-0753-4072-92b0-1407c08db582/1/Ftls9BCaSoXRhjv1SqT6PoHgwOY.mft
File: Ftls9BCaSoXRhjv1SqT6PoHgwOY.mft (raw, json)
Hash identifier: T446mQ+YyR7kSXXL4kySLuFm23CEVcAb5hJkFSMLBtA=
Subject key identifier: 36:45:E3:8C:AB:66:72:EB:52:D8:97:58:0E:27:59:42:12:73:97:6A
Authority key identifier: 16:D9:6C:F4:10:9A:4A:85:D1:86:3B:F5:4A:A4:FA:3E:81:E0:C0:E6
Certificate issuer: /CN=16d96cf4109a4a85d1863bf54aa4fa3e81e0c0e6
Certificate serial: 01976BF43F74C3E45C1EB30014669858C6C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ftls9BCaSoXRhjv1SqT6PoHgwOY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/136156-0753-4072-92b0-1407c08db582/1/Ftls9BCaSoXRhjv1SqT6PoHgwOY.mft
Manifest number: 1590
Signing time: Sat 14 Jun 2025 01:00:58 +0000
Manifest this update: Sat 14 Jun 2025 01:00:58 +0000
Manifest next update: Sun 15 Jun 2025 01:00:58 +0000
Files and hashes: 1: 1-bqNZN34Z6tA08rjf9Ue9gz9z4M.roa (hash: ZBK1wDofmlTI3jgUly3vW6cc/crra2evnmHTHJR0jqI=)
2: Ftls9BCaSoXRhjv1SqT6PoHgwOY.crl (hash: 4jwL03+9FrQcAinbPfP6/sASKpPxKNKPTVrHB/xZUsA=)
3: TVDjYzkETmBCT7v1_fe4s6H8gEU.roa (hash: zxaM+TU0HD4P7dxOW2gfkICzMAb8AYSlKoeUfD1Wv0k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/136156-0753-4072-92b0-1407c08db582/1/Ftls9BCaSoXRhjv1SqT6PoHgwOY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/136156-0753-4072-92b0-1407c08db582/1/Ftls9BCaSoXRhjv1SqT6PoHgwOY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ftls9BCaSoXRhjv1SqT6PoHgwOY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:f4:3f:74:c3:e4:5c:1e:b3:00:14:66:98:58:c6:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16d96cf4109a4a85d1863bf54aa4fa3e81e0c0e6
Validity
Not Before: Jun 14 01:00:58 2025 GMT
Not After : Jun 15 01:00:58 2025 GMT
Subject: CN=3645e38cab6672eb52d897580e2759421273976a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:24:98:32:dc:cb:ab:28:0f:10:a0:87:3a:87:
5e:80:ff:5c:5a:86:a6:75:41:0f:a5:01:cc:36:01:
5c:47:3d:4e:0f:e2:dd:b9:51:b7:f7:b8:bf:26:33:
9f:40:d2:d8:a2:fe:1f:22:f5:99:ce:bc:98:5a:16:
41:03:6a:fb:5a:49:3d:74:62:f3:93:92:52:81:a4:
9c:d3:d1:eb:25:99:d2:03:9c:fa:27:d9:8b:4f:9e:
fd:f9:08:6c:42:02:08:b5:13:fb:7c:e1:0d:b0:59:
2a:8c:fb:21:7f:78:cc:17:79:f6:48:15:a4:fa:ae:
c3:31:3f:25:c1:26:36:c4:29:71:53:d8:dc:49:5f:
a8:02:47:70:32:13:02:96:84:de:9b:be:60:26:e7:
9d:cb:4f:b9:11:da:bd:94:3b:21:06:52:bc:ce:8f:
06:4d:d2:bf:bf:8f:16:60:e5:79:3d:b8:74:c8:d1:
f1:51:90:de:8d:29:18:f9:7f:56:fc:98:86:fb:2a:
de:72:19:0e:22:14:0d:fc:58:52:66:31:da:18:92:
ff:01:c0:42:b1:c7:bf:3c:82:ba:87:66:66:21:97:
0a:8b:04:43:ec:83:90:89:25:87:5a:84:0b:31:34:
fe:23:06:f1:d8:fd:27:aa:79:e4:bc:dd:08:5d:a0:
6b:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:45:E3:8C:AB:66:72:EB:52:D8:97:58:0E:27:59:42:12:73:97:6A
X509v3 Authority Key Identifier:
keyid:16:D9:6C:F4:10:9A:4A:85:D1:86:3B:F5:4A:A4:FA:3E:81:E0:C0:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ftls9BCaSoXRhjv1SqT6PoHgwOY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/136156-0753-4072-92b0-1407c08db582/1/Ftls9BCaSoXRhjv1SqT6PoHgwOY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/136156-0753-4072-92b0-1407c08db582/1/Ftls9BCaSoXRhjv1SqT6PoHgwOY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:ec:ce:c1:ba:29:48:c1:c1:33:d6:8c:08:4a:e0:ed:a5:68:
31:f0:93:bb:ea:6a:17:36:b7:cd:3c:27:ef:71:c2:1a:a6:0c:
4b:6b:23:ba:a0:f4:55:7d:ed:23:e7:98:cd:a6:57:fa:5c:e3:
ad:af:6b:31:a2:bc:ca:e4:b7:c6:0e:5d:bc:c5:bf:86:b1:52:
d3:00:e2:9f:68:88:2e:d2:c5:d0:e7:65:07:7b:88:f8:c3:12:
7f:eb:59:b8:00:8a:07:0f:83:26:07:a1:e6:ee:14:81:e2:c8:
eb:4f:eb:7c:53:de:54:b9:5a:c3:24:a0:21:92:71:61:b9:41:
08:34:36:41:0a:cd:67:40:36:3b:6d:04:46:c6:4b:18:87:a3:
0d:12:d8:9f:fa:37:6b:f5:4d:e5:08:ce:83:7f:9b:6b:64:a6:
58:df:53:7a:af:a6:bf:b9:52:b9:5e:0a:02:6b:ab:4e:d4:ae:
83:9a:a8:92:46:a1:74:9f:34:b4:63:43:fe:30:dd:b6:ad:ff:
bf:ce:70:db:e0:a0:6d:d0:98:dd:e6:d7:b8:5b:75:78:42:05:
b3:0e:7f:84:b1:47:48:05:68:04:fd:17:5d:ce:b7:34:53:5a:
79:20:6c:8b:d2:fc:3e:8e:ac:d5:be:e3:e1:13:d3:c6:d4:a4:
4c:af:dc:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:17:50 2025 by rpki-client