Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/6a89f0-0b22-452c-a659-42a7af882e09/1/FTXSThc2fkBbeA9xEEnl940QHxY.mft
File: FTXSThc2fkBbeA9xEEnl940QHxY.mft (raw, json)
Hash identifier: 964/u2EJN1u2U1NZC9QPEZLE7Wj7ZZFCrY4CUWDZ5ss=
Subject key identifier: CB:68:37:4B:24:50:E7:D4:9C:41:B8:ED:31:78:EC:9F:13:F7:BD:A8
Authority key identifier: 15:35:D2:4E:17:36:7E:40:5B:78:0F:71:10:49:E5:F7:8D:10:1F:16
Certificate issuer: /CN=1535d24e17367e405b780f711049e5f78d101f16
Certificate serial: 019658DD855445FA9D8128A44A4E938599AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FTXSThc2fkBbeA9xEEnl940QHxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/6a89f0-0b22-452c-a659-42a7af882e09/1/FTXSThc2fkBbeA9xEEnl940QHxY.mft
Manifest number: 10DC
Signing time: Mon 21 Apr 2025 15:00:34 +0000
Manifest this update: Mon 21 Apr 2025 15:00:34 +0000
Manifest next update: Tue 22 Apr 2025 15:00:34 +0000
Files and hashes: 1: 5ogK5Ex4CS4B5KsMhYCUM00RFfQ.roa (hash: ZPbDvWHExMztNeKcllyDlDkCaDogTJsh9sQhQBtO6xU=)
2: FTXSThc2fkBbeA9xEEnl940QHxY.crl (hash: XHgXi1x94/2DzvO1yIR7ebsv40pngUPg5omh7T+dR9E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/6a89f0-0b22-452c-a659-42a7af882e09/1/FTXSThc2fkBbeA9xEEnl940QHxY.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/6a89f0-0b22-452c-a659-42a7af882e09/1/FTXSThc2fkBbeA9xEEnl940QHxY.mft
rsync://rpki.ripe.net/repository/DEFAULT/FTXSThc2fkBbeA9xEEnl940QHxY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:58:dd:85:54:45:fa:9d:81:28:a4:4a:4e:93:85:99:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1535d24e17367e405b780f711049e5f78d101f16
Validity
Not Before: Apr 21 15:00:34 2025 GMT
Not After : Apr 22 15:00:34 2025 GMT
Subject: CN=cb68374b2450e7d49c41b8ed3178ec9f13f7bda8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:ab:ed:a9:e5:69:bc:a3:4e:a9:10:c8:7a:66:
81:39:50:c1:20:be:49:ba:fb:e9:26:11:df:4f:e6:
0a:e9:4b:35:02:fc:92:5e:85:3f:81:9a:fc:16:f6:
a6:28:46:b2:18:a0:6a:95:df:73:b5:79:e4:0b:c5:
98:fe:3b:db:8e:4e:42:9e:a0:9a:5c:a5:d1:de:f1:
dc:dc:79:48:a1:7a:d2:24:5e:95:77:7d:be:ef:bb:
55:ba:37:92:45:76:25:c4:61:fc:80:f1:7e:2b:cf:
2b:7e:c2:0c:a6:76:70:ac:43:4d:f2:62:3a:46:cd:
77:76:d8:14:ec:8c:e1:40:d3:a1:17:5a:94:5d:2a:
b0:13:4a:36:07:b7:ff:03:6f:bd:c2:b2:20:4f:19:
46:63:a5:c0:1a:a7:89:a8:f2:60:d7:c2:d4:52:07:
4e:ef:89:37:3a:52:2a:17:62:e5:2a:05:68:77:04:
71:d0:79:5e:6f:6d:77:ba:89:b4:fc:ed:9a:97:83:
77:a2:07:05:82:69:87:b2:fd:7b:dc:80:38:62:57:
ae:d8:07:e8:da:2d:4d:71:d3:53:b0:a7:6e:2a:31:
d4:5c:ef:f8:0c:c6:ca:cf:88:d3:39:41:86:2c:59:
80:40:77:ab:1f:29:33:7c:b4:b6:bd:6d:2b:3f:5f:
0f:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:68:37:4B:24:50:E7:D4:9C:41:B8:ED:31:78:EC:9F:13:F7:BD:A8
X509v3 Authority Key Identifier:
keyid:15:35:D2:4E:17:36:7E:40:5B:78:0F:71:10:49:E5:F7:8D:10:1F:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FTXSThc2fkBbeA9xEEnl940QHxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/6a89f0-0b22-452c-a659-42a7af882e09/1/FTXSThc2fkBbeA9xEEnl940QHxY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/6a89f0-0b22-452c-a659-42a7af882e09/1/FTXSThc2fkBbeA9xEEnl940QHxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:c6:07:cc:c7:b5:f1:cc:3c:de:36:ac:d2:89:3b:a3:83:44:
f3:fd:65:85:6a:72:2a:d6:8b:9c:6f:6b:e6:2f:65:53:02:c9:
f4:9a:cc:19:04:78:c0:ba:d7:5a:b2:ca:2d:b1:98:73:78:24:
57:e6:42:8a:6d:9e:71:18:73:1a:5a:a3:ff:16:67:61:d4:9e:
76:8e:b4:ff:6a:9d:16:d4:97:ad:5a:33:15:4d:55:c0:a1:7d:
89:40:b3:3e:eb:ed:28:6e:bd:54:2d:b1:92:cc:07:57:bf:60:
6e:d0:d4:e3:3c:99:6b:bb:4b:4a:89:6f:3e:b0:37:cd:12:b3:
60:f7:25:79:05:35:b6:28:6f:10:ed:3f:ca:f4:8d:e5:57:34:
d1:10:42:d5:5c:a2:c5:b1:11:8f:7e:7d:00:cf:c7:fc:46:82:
78:ec:67:52:85:7f:c7:09:2a:d1:35:32:6c:91:98:bf:72:d2:
1b:8f:87:54:da:6f:52:7c:6b:70:ba:5e:04:6a:46:7d:db:0e:
6e:68:dd:3f:84:33:ac:62:21:92:42:f3:49:e2:9d:ca:82:1a:
56:2c:44:2d:b9:d3:ca:a4:6a:8b:1b:76:bd:d9:2e:cd:b9:1c:
b4:ad:2b:36:6f:b6:a4:ad:6a:23:4c:7e:67:79:44:c7:2a:48:
84:38:6f:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZY3YVURfqdgSikSk6ThZmvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1MzVkMjRlMTczNjdlNDA1Yjc4MGY3MTEwNDllNWY3OGQx
MDFmMTYwHhcNMjUwNDIxMTUwMDM0WhcNMjUwNDIyMTUwMDM0WjAzMTEwLwYDVQQD
EyhjYjY4Mzc0YjI0NTBlN2Q0OWM0MWI4ZWQzMTc4ZWM5ZjEzZjdiZGE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhavtqeVpvKNOqRDIemaBOVDBIL5J
uvvpJhHfT+YK6Us1AvySXoU/gZr8FvamKEayGKBqld9ztXnkC8WY/jvbjk5CnqCa
XKXR3vHc3HlIoXrSJF6Vd32+77tVujeSRXYlxGH8gPF+K88rfsIMpnZwrENN8mI6
Rs13dtgU7IzhQNOhF1qUXSqwE0o2B7f/A2+9wrIgTxlGY6XAGqeJqPJg18LUUgdO
74k3OlIqF2LlKgVodwRx0Hleb213uom0/O2al4N3ogcFgmmHsv173IA4Yleu2Afo
2i1NcdNTsKduKjHUXO/4DMbKz4jTOUGGLFmAQHerHykzfLS2vW0rP18P2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMtoN0skUOfUnEG47TF47J8T972oMB8GA1UdIwQY
MBaAFBU10k4XNn5AW3gPcRBJ5feNEB8WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRlRYU1RoYzJma0JiZUE5eEVFbmw5NDBRSHhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS82YTg5ZjAtMGIyMi00NTJjLWE2NTkt
NDJhN2FmODgyZTA5LzEvRlRYU1RoYzJma0JiZUE5eEVFbmw5NDBRSHhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS82YTg5ZjAtMGIyMi00NTJjLWE2NTktNDJhN2FmODgyZTA5
LzEvRlRYU1RoYzJma0JiZUE5eEVFbmw5NDBRSHhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhcYHzMe1
8cw83jas0ok7o4NE8/1lhWpyKtaLnG9r5i9lUwLJ9JrMGQR4wLrXWrLKLbGYc3gk
V+ZCim2ecRhzGlqj/xZnYdSedo60/2qdFtSXrVozFU1VwKF9iUCzPuvtKG69VC2x
kswHV79gbtDU4zyZa7tLSolvPrA3zRKzYPcleQU1tihvEO0/yvSN5Vc00RBC1Vyi
xbERj359AM/H/EaCeOxnUoV/xwkq0TUybJGYv3LSG4+HVNpvUnxrcLpeBGpGfdsO
bmjdP4QzrGIhkkLzSeKdyoIaVixELbnTyqRqixt2vdkuzbkctK0rNm+2pK1qI0x+
Z3lExypIhDhv2A==
-----END CERTIFICATE-----
Generated at Mon Apr 21 19:11:45 2025 by rpki-client