Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/136156-0753-4072-92b0-1407c08db582/1/Ftls9BCaSoXRhjv1SqT6PoHgwOY.mft
File: Ftls9BCaSoXRhjv1SqT6PoHgwOY.mft (raw, json)
Hash identifier: RrWjt1vWql7LKUla3QDbUcb+D9Fs/Dwm09HogG6TXww=
Subject key identifier: C1:0A:18:8D:7B:C4:F7:69:BE:80:E8:C5:3D:D1:A1:DB:7C:91:3B:11
Authority key identifier: 16:D9:6C:F4:10:9A:4A:85:D1:86:3B:F5:4A:A4:FA:3E:81:E0:C0:E6
Certificate issuer: /CN=16d96cf4109a4a85d1863bf54aa4fa3e81e0c0e6
Certificate serial: 019653EE8CF769FF28EFCF2BF97393324710
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ftls9BCaSoXRhjv1SqT6PoHgwOY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/136156-0753-4072-92b0-1407c08db582/1/Ftls9BCaSoXRhjv1SqT6PoHgwOY.mft
Manifest number: 14FF
Signing time: Sun 20 Apr 2025 16:01:04 +0000
Manifest this update: Sun 20 Apr 2025 16:01:04 +0000
Manifest next update: Mon 21 Apr 2025 16:01:04 +0000
Files and hashes: 1: 1-bqNZN34Z6tA08rjf9Ue9gz9z4M.roa (hash: ZBK1wDofmlTI3jgUly3vW6cc/crra2evnmHTHJR0jqI=)
2: Ftls9BCaSoXRhjv1SqT6PoHgwOY.crl (hash: L5PZZ8ZMPnWU+Ick6Db+itPe+eSMUdxvmVKNB9HCJqE=)
3: TVDjYzkETmBCT7v1_fe4s6H8gEU.roa (hash: zxaM+TU0HD4P7dxOW2gfkICzMAb8AYSlKoeUfD1Wv0k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/136156-0753-4072-92b0-1407c08db582/1/Ftls9BCaSoXRhjv1SqT6PoHgwOY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/136156-0753-4072-92b0-1407c08db582/1/Ftls9BCaSoXRhjv1SqT6PoHgwOY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ftls9BCaSoXRhjv1SqT6PoHgwOY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:ee:8c:f7:69:ff:28:ef:cf:2b:f9:73:93:32:47:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16d96cf4109a4a85d1863bf54aa4fa3e81e0c0e6
Validity
Not Before: Apr 20 16:01:04 2025 GMT
Not After : Apr 21 16:01:04 2025 GMT
Subject: CN=c10a188d7bc4f769be80e8c53dd1a1db7c913b11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:17:b6:37:32:75:a5:54:db:86:a5:1f:ee:9f:
80:dd:ce:9c:13:7f:94:47:2f:25:15:52:9c:d4:77:
39:64:d1:95:b1:f9:a5:82:af:40:d0:1b:ef:a7:d6:
76:95:5f:ba:ac:73:8c:fa:5f:a8:92:ff:cc:18:e7:
04:f4:a8:39:c7:8b:96:7f:5d:13:f9:af:e6:b6:26:
8f:08:7c:f9:d7:9f:6a:17:ea:54:05:1b:14:d7:3a:
56:85:f0:6e:8f:41:38:03:a8:c9:00:09:37:6a:82:
b8:97:8b:c5:24:12:d1:f8:57:a9:15:ad:b6:78:5e:
86:4d:13:3d:e0:5d:ca:68:77:f8:b7:1e:6c:6c:80:
fa:0f:ea:8a:61:4f:30:e5:89:e3:77:9a:5d:71:a7:
30:5f:fc:a1:7c:a8:7c:7d:d2:63:33:f8:21:e3:aa:
45:75:94:15:0b:a9:34:7e:48:14:82:a0:9e:ef:d8:
b2:3e:0d:ed:5a:90:af:c8:5f:cd:46:37:c8:6a:b4:
06:69:9b:82:52:93:f5:45:65:c6:a4:8b:87:30:d3:
20:44:48:b9:c4:9b:81:5f:46:fc:cd:91:2f:31:c1:
07:30:5f:b5:ad:bf:6e:a3:5b:86:ec:1c:c8:36:80:
07:b1:2e:39:fc:0b:dc:03:5e:9f:2a:2e:c8:ce:a0:
5d:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:0A:18:8D:7B:C4:F7:69:BE:80:E8:C5:3D:D1:A1:DB:7C:91:3B:11
X509v3 Authority Key Identifier:
keyid:16:D9:6C:F4:10:9A:4A:85:D1:86:3B:F5:4A:A4:FA:3E:81:E0:C0:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ftls9BCaSoXRhjv1SqT6PoHgwOY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/136156-0753-4072-92b0-1407c08db582/1/Ftls9BCaSoXRhjv1SqT6PoHgwOY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/136156-0753-4072-92b0-1407c08db582/1/Ftls9BCaSoXRhjv1SqT6PoHgwOY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:71:e2:00:84:f8:4b:3b:f2:73:07:a1:c1:5b:b7:71:6c:75:
71:fc:7b:d0:ea:93:2e:39:df:15:4f:d4:fb:cb:74:9c:0f:ac:
14:59:f9:f7:d3:2e:2c:65:16:5b:65:17:dd:c8:14:b2:fe:44:
95:00:0f:05:f2:70:54:a6:8d:7c:6d:e6:df:43:e2:b1:99:e1:
d3:61:75:ce:c3:37:a2:2e:08:8c:fb:d3:b1:93:5d:9f:18:72:
f8:96:2b:e1:20:43:3b:fd:bc:5f:6c:d8:05:f6:c5:c0:b9:38:
da:64:85:bf:ef:f6:f0:27:90:84:82:c8:dc:09:98:96:21:88:
3c:0a:4e:7e:78:33:70:0e:df:2a:ef:55:6b:42:e9:48:ea:b3:
9c:bd:57:2e:1a:6b:69:63:07:af:27:5c:8a:34:b4:bb:1c:6d:
86:3c:c7:65:18:27:e9:29:a7:ff:99:1e:41:c4:19:b5:30:a5:
de:f4:67:c1:29:22:ea:da:91:31:05:fe:4a:81:e9:56:c1:a7:
ae:8e:20:f8:c6:5e:2b:55:f1:71:db:a9:8b:3b:90:d1:5b:a0:
e6:e5:43:2e:5c:b4:c7:9d:2b:92:66:59:54:fa:15:ad:0f:c4:
06:52:d0:7e:5e:40:5f:5b:27:f8:b8:c8:b1:94:a3:d8:26:ec:
b6:16:ab:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 20:42:47 2025 by rpki-client