Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/c8ae79-6d7b-4776-80b7-420492cd1afd/1/ftJMXTRPuSvPTPbh5Wn1GuQaqHw.mft
File: ftJMXTRPuSvPTPbh5Wn1GuQaqHw.mft (raw, json)
Hash identifier: kfnUSRCEPbF2aP+HU8vSjN2vT2bC43i2C6bsB/qq72Y=
Subject key identifier: 05:08:03:B3:CB:28:36:37:7A:B7:D8:29:6C:A0:70:52:D5:79:25:40
Authority key identifier: 7E:D2:4C:5D:34:4F:B9:2B:CF:4C:F6:E1:E5:69:F5:1A:E4:1A:A8:7C
Certificate issuer: /CN=7ed24c5d344fb92bcf4cf6e1e569f51ae41aa87c
Certificate serial: 019655006F3CCCE0785F68ABB41B38EA889D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ftJMXTRPuSvPTPbh5Wn1GuQaqHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/c8ae79-6d7b-4776-80b7-420492cd1afd/1/ftJMXTRPuSvPTPbh5Wn1GuQaqHw.mft
Manifest number: 14FF
Signing time: Sun 20 Apr 2025 21:00:13 +0000
Manifest this update: Sun 20 Apr 2025 21:00:13 +0000
Manifest next update: Mon 21 Apr 2025 21:00:13 +0000
Files and hashes: 1: agRUYODGUgcgQjP7ijxcZLYm3nc.roa (hash: f6YBLXl3ZPBgWVXG5y2MoTRUZ2l1iv1DIF9aPxpzV6M=)
2: ftJMXTRPuSvPTPbh5Wn1GuQaqHw.crl (hash: Vwj54KiBHOsNH3YRhM8CO81yUMxnDDrnrc0jLH6k+88=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/c8ae79-6d7b-4776-80b7-420492cd1afd/1/ftJMXTRPuSvPTPbh5Wn1GuQaqHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/c8ae79-6d7b-4776-80b7-420492cd1afd/1/ftJMXTRPuSvPTPbh5Wn1GuQaqHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ftJMXTRPuSvPTPbh5Wn1GuQaqHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 21:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:00:6f:3c:cc:e0:78:5f:68:ab:b4:1b:38:ea:88:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ed24c5d344fb92bcf4cf6e1e569f51ae41aa87c
Validity
Not Before: Apr 20 21:00:13 2025 GMT
Not After : Apr 21 21:00:13 2025 GMT
Subject: CN=050803b3cb2836377ab7d8296ca07052d5792540
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:80:fa:1e:d8:ad:62:f2:41:05:17:d5:e7:0a:
ff:a3:d8:d2:b6:5e:29:b1:53:7f:75:f2:62:82:63:
42:90:de:82:8e:83:ec:b3:f4:ff:90:92:a3:02:5e:
fe:7e:93:54:b7:5a:8f:8e:b1:91:4c:62:73:d8:65:
3b:32:4f:7f:fb:38:aa:c1:35:59:11:6e:57:86:45:
5f:d4:b5:a8:e9:d4:cc:87:33:bc:47:f8:a3:f9:9b:
1d:40:25:77:d2:4e:6d:79:15:34:7a:e0:ff:26:14:
8b:f5:ff:ae:6e:72:71:8a:6e:b9:c0:a3:fd:93:7c:
1c:53:ce:59:e3:ef:b5:cb:dd:61:0f:5c:c8:50:cd:
2f:60:d2:02:1e:17:a4:a4:d6:80:d6:a4:b0:00:19:
f4:45:1e:e8:92:e5:6a:b8:9f:d0:26:34:c7:3d:a0:
88:2b:96:e1:4f:ca:a4:7f:fd:b2:33:ab:04:0a:a0:
8a:6b:a2:33:f9:db:e3:d4:ea:18:32:41:fb:01:c8:
f2:b9:bc:02:f6:fe:7a:8f:da:e5:8b:23:41:84:b8:
a4:e1:7c:87:14:af:ee:94:9e:ea:db:56:ee:20:71:
5d:4b:b6:7b:96:4e:f5:0b:5b:ee:7e:a3:5d:f6:49:
82:11:4f:f4:35:da:96:f9:1e:d0:e8:66:05:cc:63:
65:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:08:03:B3:CB:28:36:37:7A:B7:D8:29:6C:A0:70:52:D5:79:25:40
X509v3 Authority Key Identifier:
keyid:7E:D2:4C:5D:34:4F:B9:2B:CF:4C:F6:E1:E5:69:F5:1A:E4:1A:A8:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ftJMXTRPuSvPTPbh5Wn1GuQaqHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/c8ae79-6d7b-4776-80b7-420492cd1afd/1/ftJMXTRPuSvPTPbh5Wn1GuQaqHw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/c8ae79-6d7b-4776-80b7-420492cd1afd/1/ftJMXTRPuSvPTPbh5Wn1GuQaqHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:cd:44:e1:7b:e7:05:62:95:ee:25:e6:b3:a3:c1:41:73:05:
b0:e9:69:6e:a4:25:20:d6:30:f8:f6:f3:00:40:7e:ff:fc:0e:
66:e8:fa:09:46:54:e5:23:0e:d1:fe:9d:2d:d8:18:b7:39:ef:
eb:dd:fa:e7:39:c5:e9:ca:10:1c:80:b2:31:40:2a:25:02:7d:
de:a5:ac:f6:59:58:47:8c:fb:cc:7f:e4:e3:36:59:89:67:89:
a6:c2:92:b7:4d:20:8a:5e:c4:90:d1:ea:6d:db:ea:56:e1:50:
08:ad:e0:84:98:d8:c4:2a:b4:17:bc:16:59:5f:82:ed:77:0f:
8b:a1:91:c0:93:6d:38:b2:0d:08:f2:81:bd:11:93:5f:57:11:
8d:87:45:fc:7d:2e:6b:04:af:30:2b:be:f9:90:cb:2b:d0:91:
f6:f5:75:14:e6:bd:dd:2f:a8:56:56:d6:3d:cc:24:c2:d5:fe:
c2:94:01:08:3b:60:ce:3f:85:41:98:bc:be:58:70:41:de:04:
03:0a:82:c0:6e:2a:f6:6b:c2:e9:6f:73:30:8e:2a:ca:10:96:
7e:c6:ba:b0:ee:8d:32:4b:fc:95:1e:d3:cf:52:70:58:ba:04:
96:e9:87:24:45:ea:67:2d:72:f9:c6:0c:c5:6d:81:2e:21:33:
77:bd:0f:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:42:12 2025 by rpki-client