Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/0ff633-eb4a-4e18-ad56-0d018dbcc7cb/1/FTyehIfJi0U_l08gMX7OPXD01d0.mft
File: FTyehIfJi0U_l08gMX7OPXD01d0.mft (raw, json)
Hash identifier: xDgoBPTQXViDrV5OmGKGwp15ZkS9kNcvD1GvZTYoqyc=
Subject key identifier: 28:6A:45:68:76:1E:69:68:2F:F9:42:E3:5E:42:70:70:93:5E:AB:40
Authority key identifier: 15:3C:9E:84:87:C9:8B:45:3F:97:4F:20:31:7E:CE:3D:70:F4:D5:DD
Certificate issuer: /CN=153c9e8487c98b453f974f20317ece3d70f4d5dd
Certificate serial: 019653B71BED65D3622BBBDEF7B761C60272
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FTyehIfJi0U_l08gMX7OPXD01d0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/0ff633-eb4a-4e18-ad56-0d018dbcc7cb/1/FTyehIfJi0U_l08gMX7OPXD01d0.mft
Manifest number: 0A38
Signing time: Sun 20 Apr 2025 15:00:31 +0000
Manifest this update: Sun 20 Apr 2025 15:00:31 +0000
Manifest next update: Mon 21 Apr 2025 15:00:31 +0000
Files and hashes: 1: FAFOi_MWA5Fo0z_m3gqA-yNR33M.roa (hash: icR2KPf1nufIDLG/nPNr5vKSnrpkA3b1gplItzO6jeQ=)
2: FTyehIfJi0U_l08gMX7OPXD01d0.crl (hash: 9eycYbSVsbpmmUePBNX0WUTCw7lj49SDsHQVcO56+tE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/0ff633-eb4a-4e18-ad56-0d018dbcc7cb/1/FTyehIfJi0U_l08gMX7OPXD01d0.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/0ff633-eb4a-4e18-ad56-0d018dbcc7cb/1/FTyehIfJi0U_l08gMX7OPXD01d0.mft
rsync://rpki.ripe.net/repository/DEFAULT/FTyehIfJi0U_l08gMX7OPXD01d0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 15:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:b7:1b:ed:65:d3:62:2b:bb:de:f7:b7:61:c6:02:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=153c9e8487c98b453f974f20317ece3d70f4d5dd
Validity
Not Before: Apr 20 15:00:31 2025 GMT
Not After : Apr 21 15:00:31 2025 GMT
Subject: CN=286a4568761e69682ff942e35e427070935eab40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ec:6b:c9:e0:48:a9:cd:53:80:b6:02:71:78:
9c:89:0c:9e:3b:7b:a4:8c:dd:f6:08:c2:47:e0:3a:
4b:52:79:31:5d:46:9c:70:a1:e1:29:e6:be:02:0d:
aa:f2:8f:d9:84:d9:53:3c:c1:9c:a8:50:ec:4a:bc:
af:5d:c4:f5:27:ec:65:fa:51:20:44:e2:79:2a:b6:
86:98:c0:9e:e6:64:28:ed:09:d1:d1:51:b0:18:67:
28:ff:03:83:77:64:5e:dc:0d:bc:8e:49:a3:f9:41:
e5:54:e5:5a:51:40:5e:2d:10:83:33:11:a8:a4:5f:
9d:5e:c3:16:bd:1b:ec:50:ca:53:55:86:2a:b5:39:
d0:f8:6c:60:74:6f:57:db:b3:59:09:d2:83:c2:f5:
7b:ed:5b:8d:fc:e6:d4:a2:b4:c4:a1:bc:0b:b3:a9:
4e:e8:b9:ed:8e:72:9e:71:9c:1c:72:f8:dd:d5:7c:
3e:66:d3:17:4d:e1:b3:78:31:ce:27:d5:5f:99:3f:
e4:09:9b:fd:85:6c:58:e1:71:17:3c:da:34:9d:f6:
d5:e0:8c:32:bf:4c:69:60:c7:13:27:3a:f5:03:24:
c8:4c:d5:28:1a:c8:1e:e9:a8:f6:5f:3a:32:12:0f:
cd:14:71:71:f5:8f:93:b2:d6:f5:1c:40:de:2a:6f:
c1:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:6A:45:68:76:1E:69:68:2F:F9:42:E3:5E:42:70:70:93:5E:AB:40
X509v3 Authority Key Identifier:
keyid:15:3C:9E:84:87:C9:8B:45:3F:97:4F:20:31:7E:CE:3D:70:F4:D5:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FTyehIfJi0U_l08gMX7OPXD01d0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0ff633-eb4a-4e18-ad56-0d018dbcc7cb/1/FTyehIfJi0U_l08gMX7OPXD01d0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0ff633-eb4a-4e18-ad56-0d018dbcc7cb/1/FTyehIfJi0U_l08gMX7OPXD01d0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:30:ce:37:90:32:6a:ba:c3:8f:e2:65:6b:f1:2f:5e:83:05:
8f:76:ca:7a:0a:b8:47:0a:7a:3d:8b:2f:92:92:75:48:d7:23:
05:a3:9a:93:4d:eb:c1:41:1e:78:18:4e:18:05:83:9e:43:81:
98:27:7b:6e:c5:78:2f:2a:0d:ce:3b:4d:cb:43:24:5b:d6:28:
c6:54:f9:e3:d1:2f:8d:0b:fc:70:fa:29:84:74:30:c7:8d:b5:
2d:6b:c7:43:13:fe:a1:e2:d9:e6:36:d0:14:c6:c4:73:0f:20:
c0:55:8c:6f:0b:55:cb:bc:05:ba:af:1e:48:43:af:a7:42:7a:
1c:f0:18:d4:b4:54:ee:fb:a1:68:f6:0d:2b:b0:93:d4:d6:d7:
81:e8:ae:78:55:e8:ee:56:5e:5f:7b:f3:6c:52:a4:7c:da:f3:
65:e8:d7:d2:df:73:8c:ba:c6:c0:1f:61:07:66:ed:99:d0:82:
d2:ec:f5:8d:30:56:83:ab:16:67:16:0e:0f:37:32:13:bf:53:
b9:44:38:dd:bc:20:45:02:48:6f:77:1c:a1:87:ac:57:2b:53:
ad:4c:9b:85:85:09:82:45:5e:24:ef:59:4f:4f:2a:98:3d:26:
ad:92:95:4a:ec:bd:da:02:eb:e0:a9:83:81:55:62:f2:cb:68:
66:c0:02:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:18:51 2025 by rpki-client