Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/b9c906-1e85-4573-8f62-8257d51928a9/1/fTXAsgkTXCLMgAWnwuIixjwTbLA.mft
File: fTXAsgkTXCLMgAWnwuIixjwTbLA.mft (raw, json)
Hash identifier: s5/BsUyQ0HMVw4b3Jr7qUrrwcvdTbzSl1k5ncqmm1M8=
Subject key identifier: FD:7A:3B:D3:8C:10:59:24:9C:F6:0C:B8:FE:60:40:FD:15:66:8B:B7
Authority key identifier: 7D:35:C0:B2:09:13:5C:22:CC:80:05:A7:C2:E2:22:C6:3C:13:6C:B0
Certificate issuer: /CN=7d35c0b209135c22cc8005a7c2e222c63c136cb0
Certificate serial: 01964CD97FA0B371ED771F3ABD1C38B39C78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fTXAsgkTXCLMgAWnwuIixjwTbLA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/b9c906-1e85-4573-8f62-8257d51928a9/1/fTXAsgkTXCLMgAWnwuIixjwTbLA.mft
Manifest number: 14F9
Signing time: Sat 19 Apr 2025 07:00:44 +0000
Manifest this update: Sat 19 Apr 2025 07:00:44 +0000
Manifest next update: Sun 20 Apr 2025 07:00:44 +0000
Files and hashes: 1: E008mlaZ-98yoVlxucj25N9tnVo.roa (hash: 7h9j4kfENIh6mVCwgI4OQBIMY0MBjmJwFr/fTNDIJFk=)
2: R2-GAax-KT1qCEjDDbUwaoUFHaY.roa (hash: DTrChNvAxi6mH07womaTROYkgqmDr0mKtOiNc7UHhPs=)
3: fTXAsgkTXCLMgAWnwuIixjwTbLA.crl (hash: N5c2F8CRYt8bQAajIiEn3LOPfZJZJtvxOakzCnUJV8w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/b9c906-1e85-4573-8f62-8257d51928a9/1/fTXAsgkTXCLMgAWnwuIixjwTbLA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/b9c906-1e85-4573-8f62-8257d51928a9/1/fTXAsgkTXCLMgAWnwuIixjwTbLA.mft
rsync://rpki.ripe.net/repository/DEFAULT/fTXAsgkTXCLMgAWnwuIixjwTbLA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4c:d9:7f:a0:b3:71:ed:77:1f:3a:bd:1c:38:b3:9c:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d35c0b209135c22cc8005a7c2e222c63c136cb0
Validity
Not Before: Apr 19 07:00:44 2025 GMT
Not After : Apr 20 07:00:44 2025 GMT
Subject: CN=fd7a3bd38c1059249cf60cb8fe6040fd15668bb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:38:ca:00:9c:5f:23:63:28:82:80:df:8d:2f:
e5:1b:11:47:b6:c5:14:7f:f3:7e:a1:10:bd:ef:fd:
29:ea:d0:d6:58:03:0b:c9:3b:9b:de:2f:ab:c6:d6:
7b:ba:08:a3:96:e0:af:8d:61:56:da:40:50:77:7f:
64:f8:67:20:e3:2c:b4:7c:60:00:9f:04:f5:5c:d4:
bd:39:a6:b7:89:3e:99:d6:8f:e6:a6:31:85:79:5f:
ba:20:25:9d:8a:4a:c7:10:61:ac:c8:4b:89:83:09:
9d:09:ed:9c:ca:67:23:b2:36:c1:20:5c:34:f8:f0:
75:53:8e:a9:5c:8e:d7:71:f5:ec:c5:0f:7e:33:4c:
3e:99:a3:03:a7:42:1e:9d:6e:ce:88:64:55:b6:7f:
41:c5:91:2a:6f:60:7f:6c:f0:67:ed:73:9b:a7:7a:
41:50:87:ef:e0:e4:b8:c6:8f:17:98:82:4c:5e:2b:
61:c8:7d:3a:9a:dd:25:cb:1f:78:91:62:ad:3d:2f:
72:da:91:52:57:14:bd:38:94:83:94:53:df:ea:38:
a0:09:ca:67:8f:3c:46:39:c8:d5:f3:3f:49:23:29:
e5:6f:14:5c:82:cb:92:17:82:e3:c4:0e:19:2a:f9:
91:8e:8a:e6:e1:38:05:a1:91:90:6b:8e:af:03:db:
d3:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:7A:3B:D3:8C:10:59:24:9C:F6:0C:B8:FE:60:40:FD:15:66:8B:B7
X509v3 Authority Key Identifier:
keyid:7D:35:C0:B2:09:13:5C:22:CC:80:05:A7:C2:E2:22:C6:3C:13:6C:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fTXAsgkTXCLMgAWnwuIixjwTbLA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b9c906-1e85-4573-8f62-8257d51928a9/1/fTXAsgkTXCLMgAWnwuIixjwTbLA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b9c906-1e85-4573-8f62-8257d51928a9/1/fTXAsgkTXCLMgAWnwuIixjwTbLA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:ae:6b:57:69:41:71:0b:92:93:96:dc:bd:b8:a8:b5:2e:49:
ff:cd:8b:92:92:f8:86:4d:d1:42:86:1e:50:91:7b:30:9f:9f:
5d:b3:d2:27:43:ba:89:0d:1b:ed:6d:ff:0b:60:b6:02:1e:07:
6e:30:81:fa:d8:ef:83:07:e2:7d:d5:14:42:a8:c1:2c:45:3c:
72:0c:11:c2:a6:fc:3b:b5:bb:43:c5:f6:32:6e:1b:d0:b7:01:
93:64:24:99:78:f4:21:62:bb:7d:c5:f3:34:03:68:7f:c4:a9:
e9:ef:47:75:00:26:fe:de:f9:7f:83:cb:25:80:12:96:dd:9c:
43:4b:16:b8:f7:4f:b0:1d:18:92:c0:2b:a8:a2:06:e4:02:07:
cf:f9:14:79:4c:47:8b:c2:44:4c:4f:fc:18:dc:29:25:38:ad:
d8:a6:c4:fc:c2:4c:ef:d7:ee:21:84:2e:d2:72:95:6e:d3:11:
24:14:78:7a:ca:66:30:90:19:e0:bd:97:2c:f0:a4:98:fe:be:
74:c4:83:ca:d2:3d:46:88:7c:03:d2:14:91:72:52:de:70:f5:
5c:bc:07:a7:3c:4a:23:34:e4:b6:c7:f2:96:2e:77:82:e2:d9:
3c:17:c6:55:c6:63:8c:a7:6f:4e:b9:6c:84:96:04:a8:c3:8a:
45:ce:fd:a5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZM2X+gs3Htdx86vRw4s5x4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkMzVjMGIyMDkxMzVjMjJjYzgwMDVhN2MyZTIyMmM2M2Mx
MzZjYjAwHhcNMjUwNDE5MDcwMDQ0WhcNMjUwNDIwMDcwMDQ0WjAzMTEwLwYDVQQD
EyhmZDdhM2JkMzhjMTA1OTI0OWNmNjBjYjhmZTYwNDBmZDE1NjY4YmI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoTjKAJxfI2MogoDfjS/lGxFHtsUU
f/N+oRC97/0p6tDWWAMLyTub3i+rxtZ7ugijluCvjWFW2kBQd39k+Gcg4yy0fGAA
nwT1XNS9Oaa3iT6Z1o/mpjGFeV+6ICWdikrHEGGsyEuJgwmdCe2cymcjsjbBIFw0
+PB1U46pXI7XcfXsxQ9+M0w+maMDp0IenW7OiGRVtn9BxZEqb2B/bPBn7XObp3pB
UIfv4OS4xo8XmIJMXithyH06mt0lyx94kWKtPS9y2pFSVxS9OJSDlFPf6jigCcpn
jzxGOcjV8z9JIynlbxRcgsuSF4LjxA4ZKvmRjorm4TgFoZGQa46vA9vTuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP16O9OMEFkknPYMuP5gQP0VZou3MB8GA1UdIwQY
MBaAFH01wLIJE1wizIAFp8LiIsY8E2ywMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlRYQXNna1RYQ0xNZ0FXbnd1SWl4andUYkxBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9iOWM5MDYtMWU4NS00NTczLThmNjIt
ODI1N2Q1MTkyOGE5LzEvZlRYQXNna1RYQ0xNZ0FXbnd1SWl4andUYkxBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy9iOWM5MDYtMWU4NS00NTczLThmNjItODI1N2Q1MTkyOGE5
LzEvZlRYQXNna1RYQ0xNZ0FXbnd1SWl4andUYkxBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKq5rV2lB
cQuSk5bcvbiotS5J/82LkpL4hk3RQoYeUJF7MJ+fXbPSJ0O6iQ0b7W3/C2C2Ah4H
bjCB+tjvgwfifdUUQqjBLEU8cgwRwqb8O7W7Q8X2Mm4b0LcBk2QkmXj0IWK7fcXz
NANof8Sp6e9HdQAm/t75f4PLJYASlt2cQ0sWuPdPsB0YksArqKIG5AIHz/kUeUxH
i8JETE/8GNwpJTit2KbE/MJM79fuIYQu0nKVbtMRJBR4espmMJAZ4L2XLPCkmP6+
dMSDytI9Roh8A9IUkXJS3nD1XLwHpzxKIzTktsfyli53guLZPBfGVcZjjKdvTrls
hJYEqMOKRc79pQ==
-----END CERTIFICATE-----
Generated at Sat Apr 19 12:33:13 2025 by rpki-client