Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/3a20d8-e902-41f5-befa-ab5f39fb8d36/1/ftCMDM2oAs8gznq97qICFOBeR68.mft
File: ftCMDM2oAs8gznq97qICFOBeR68.mft (raw, json)
Hash identifier: WCY9pQ2bjqxZUH2MxoyXJoWM7aETnr3E0mU5jHYDlv8=
Subject key identifier: B3:C4:CB:F0:5B:9D:E9:12:43:8F:9C:A1:1D:6B:59:8B:70:16:02:71
Authority key identifier: 7E:D0:8C:0C:CD:A8:02:CF:20:CE:7A:BD:EE:A2:02:14:E0:5E:47:AF
Certificate issuer: /CN=7ed08c0ccda802cf20ce7abdeea20214e05e47af
Certificate serial: 0197477A0037C334E96EDF727D28B0B9E0FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ftCMDM2oAs8gznq97qICFOBeR68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/3a20d8-e902-41f5-befa-ab5f39fb8d36/1/ftCMDM2oAs8gznq97qICFOBeR68.mft
Manifest number: 157C
Signing time: Fri 06 Jun 2025 23:01:07 +0000
Manifest this update: Fri 06 Jun 2025 23:01:07 +0000
Manifest next update: Sat 07 Jun 2025 23:01:07 +0000
Files and hashes: 1: P79ilXjNNqLG_ABRYWZBAk8XzIM.roa (hash: z414yhHihxRqPfk1ej5lxFnTCRyHE+z/dZVS4h4vn3A=)
2: ftCMDM2oAs8gznq97qICFOBeR68.crl (hash: tkZahk1LCFmbxWPpD5dFN101H4/143f7v9OIJrtEaJk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/3a20d8-e902-41f5-befa-ab5f39fb8d36/1/ftCMDM2oAs8gznq97qICFOBeR68.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/3a20d8-e902-41f5-befa-ab5f39fb8d36/1/ftCMDM2oAs8gznq97qICFOBeR68.mft
rsync://rpki.ripe.net/repository/DEFAULT/ftCMDM2oAs8gznq97qICFOBeR68.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 23:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:7a:00:37:c3:34:e9:6e:df:72:7d:28:b0:b9:e0:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ed08c0ccda802cf20ce7abdeea20214e05e47af
Validity
Not Before: Jun 6 23:01:07 2025 GMT
Not After : Jun 7 23:01:07 2025 GMT
Subject: CN=b3c4cbf05b9de912438f9ca11d6b598b70160271
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:91:fc:43:98:be:e5:81:55:3d:79:4d:cf:f9:
61:05:0f:5e:41:a5:64:f2:db:08:03:5f:8f:03:fc:
74:27:d3:8a:90:dd:80:0f:d2:df:ef:b6:fe:37:03:
e1:8d:d3:90:ec:ea:2a:9c:6e:45:75:ea:fc:ce:ef:
76:52:ed:3e:72:24:8b:40:33:7c:6e:d5:44:f9:bd:
24:4e:1c:ab:b6:eb:65:0f:01:26:f5:e0:b6:9a:c3:
4d:76:df:f5:49:bf:11:29:62:c2:d2:49:a3:fa:79:
b8:85:d8:3a:cd:4f:63:ab:16:92:77:1c:91:ec:06:
a0:0c:fc:11:83:99:a1:b7:c2:58:f3:c5:19:83:26:
3d:06:3a:50:db:1d:66:7d:30:8e:00:d8:ea:2a:90:
53:7f:63:91:36:4c:b2:78:ef:4e:8a:3b:26:07:e8:
db:0a:23:ee:7f:8d:41:b4:20:0c:f5:1e:87:ec:4c:
ee:bf:18:64:ef:bb:cd:fd:7f:74:e4:a2:c5:1d:c5:
59:8c:f5:30:1a:b2:00:78:c7:fc:90:54:e4:4a:ae:
7c:06:aa:c3:2c:16:ab:1b:b7:58:d9:e2:06:47:6b:
96:87:72:19:44:c9:30:8b:3c:4d:5b:2c:b6:26:84:
ad:21:d0:4e:ad:d7:7a:a8:fc:d7:f2:b4:30:d2:c2:
d3:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:C4:CB:F0:5B:9D:E9:12:43:8F:9C:A1:1D:6B:59:8B:70:16:02:71
X509v3 Authority Key Identifier:
keyid:7E:D0:8C:0C:CD:A8:02:CF:20:CE:7A:BD:EE:A2:02:14:E0:5E:47:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ftCMDM2oAs8gznq97qICFOBeR68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/3a20d8-e902-41f5-befa-ab5f39fb8d36/1/ftCMDM2oAs8gznq97qICFOBeR68.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/3a20d8-e902-41f5-befa-ab5f39fb8d36/1/ftCMDM2oAs8gznq97qICFOBeR68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:de:19:15:64:af:c9:50:2b:52:8d:bf:da:e8:f9:0f:22:ee:
63:14:60:27:a8:49:e3:9c:9b:bd:b8:13:65:fe:c2:2b:3a:45:
e1:3c:c6:97:fe:72:6a:74:ba:bd:51:ec:a4:d9:d4:63:4e:be:
0b:2f:0e:51:ba:4a:e6:21:8d:1f:be:07:e2:40:a0:a7:49:e5:
0d:f9:b9:66:db:49:98:a2:7a:8b:d0:9e:c3:19:ab:8c:21:e8:
61:47:49:18:d3:63:10:d7:d5:60:d2:0b:01:a5:3f:4b:ae:06:
f2:b1:63:b1:70:ac:f9:56:8b:14:10:07:56:5d:fa:5b:26:b2:
11:4f:a2:f3:75:00:9d:ed:a7:7c:a4:e1:eb:76:8c:83:2b:09:
69:8a:77:6c:71:3d:5e:e7:5d:13:77:2f:71:98:62:0f:e0:84:
d0:cd:4b:89:82:04:8a:ee:00:48:31:eb:94:14:56:1f:3e:83:
2e:96:13:5c:87:87:46:97:5b:34:e1:67:5c:63:0d:9f:41:5a:
97:13:a5:85:c7:91:72:ad:31:2a:0a:2d:43:69:b2:60:d6:b7:
9a:17:cb:31:8a:fe:de:a8:0c:94:08:f2:af:12:32:98:b3:d6:
a9:40:33:9d:a6:fc:4f:77:78:90:bf:3b:43:76:cc:fb:90:58:
54:04:d1:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 08:55:57 2025 by rpki-client