Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/5ca752-14cf-4454-9041-e2bd03ffd58d/1/FTD76iUBSVl304gVrTwnCCbwY6A.mft
File: FTD76iUBSVl304gVrTwnCCbwY6A.mft (raw, json)
Hash identifier: /XAZJ+rA1bCz6MnsgdXRfnrHDyB7qN1z3nWqfsOdE1I=
Subject key identifier: C7:B1:89:FE:65:F3:24:98:35:8D:66:69:85:71:1E:8C:86:50:BE:73
Authority key identifier: 15:30:FB:EA:25:01:49:59:77:D3:88:15:AD:3C:27:08:26:F0:63:A0
Certificate issuer: /CN=1530fbea2501495977d38815ad3c270826f063a0
Certificate serial: 019659EFE0A6889D637DB0C801CB6166F81C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FTD76iUBSVl304gVrTwnCCbwY6A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/5ca752-14cf-4454-9041-e2bd03ffd58d/1/FTD76iUBSVl304gVrTwnCCbwY6A.mft
Manifest number: 1501
Signing time: Mon 21 Apr 2025 20:00:14 +0000
Manifest this update: Mon 21 Apr 2025 20:00:14 +0000
Manifest next update: Tue 22 Apr 2025 20:00:14 +0000
Files and hashes: 1: FTD76iUBSVl304gVrTwnCCbwY6A.crl (hash: MTBZ9gDWDAtLI7zoB43bOAmUwqYOWW0rcgk2scQX8Vk=)
2: rADueZxFQHJbIbrjKeYeAXGGBpc.roa (hash: qtSN6Vm03JzTJBZ5ewdm444W/Qon6bt3NPDuYq9sI8U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/5ca752-14cf-4454-9041-e2bd03ffd58d/1/FTD76iUBSVl304gVrTwnCCbwY6A.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/5ca752-14cf-4454-9041-e2bd03ffd58d/1/FTD76iUBSVl304gVrTwnCCbwY6A.mft
rsync://rpki.ripe.net/repository/DEFAULT/FTD76iUBSVl304gVrTwnCCbwY6A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:ef:e0:a6:88:9d:63:7d:b0:c8:01:cb:61:66:f8:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1530fbea2501495977d38815ad3c270826f063a0
Validity
Not Before: Apr 21 20:00:14 2025 GMT
Not After : Apr 22 20:00:14 2025 GMT
Subject: CN=c7b189fe65f32498358d666985711e8c8650be73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:45:2a:e4:af:b1:d8:60:dc:da:73:e9:58:42:
38:1e:84:2c:eb:91:15:4c:26:a4:34:6c:3a:3a:4e:
90:e3:41:57:78:4d:fa:9d:62:03:7f:9d:b7:e6:69:
13:37:43:fc:91:26:1a:77:a8:a0:49:cd:5e:3d:cf:
b4:86:b5:c5:81:b6:eb:63:57:d8:eb:9e:27:33:84:
e4:9a:c6:2d:a2:e6:20:4a:76:6c:e5:5d:99:7f:31:
60:ac:31:13:58:4d:d3:9d:f9:b5:0a:e6:4f:a0:15:
01:3a:27:1d:bd:61:70:61:80:2f:91:f4:cf:83:bb:
c0:68:3e:30:6a:91:f5:e4:ce:7e:dc:48:b9:01:f7:
38:41:fb:6c:77:e6:cc:b6:5d:c6:5c:c5:57:40:e5:
2c:04:24:35:bd:19:26:7c:6f:74:d6:7d:42:50:02:
3e:1b:37:bd:e6:a8:74:f0:78:13:5d:08:63:ab:cc:
c7:bd:34:7d:2d:16:ce:fb:24:ec:a5:1a:a9:62:c9:
66:d7:cc:a1:e6:a2:cf:d6:99:05:cb:9d:8c:39:af:
86:71:bc:94:ce:b2:85:e8:58:ac:88:35:f0:38:64:
6c:94:4c:04:e6:58:29:54:7d:bb:c7:18:c5:4e:0f:
ca:50:98:2d:33:40:d9:73:1c:2a:ac:2e:df:72:74:
7f:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:B1:89:FE:65:F3:24:98:35:8D:66:69:85:71:1E:8C:86:50:BE:73
X509v3 Authority Key Identifier:
keyid:15:30:FB:EA:25:01:49:59:77:D3:88:15:AD:3C:27:08:26:F0:63:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FTD76iUBSVl304gVrTwnCCbwY6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/5ca752-14cf-4454-9041-e2bd03ffd58d/1/FTD76iUBSVl304gVrTwnCCbwY6A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/5ca752-14cf-4454-9041-e2bd03ffd58d/1/FTD76iUBSVl304gVrTwnCCbwY6A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:6e:ea:fb:49:37:9f:e0:3f:32:33:1e:c6:dd:c1:a2:96:47:
0e:b7:a3:bd:2e:e3:02:4d:74:c7:01:e9:3f:e6:e4:4c:a2:11:
ee:b6:07:80:2f:57:2d:72:8f:b9:e6:e8:ee:e3:45:8a:23:6b:
1d:79:4c:02:2c:c2:99:0b:d8:d6:18:c8:15:b2:d5:0c:c3:07:
9b:43:5d:f5:46:66:ae:7a:7c:ea:61:03:a5:c1:74:e3:c0:27:
f9:8f:e0:31:93:3d:0b:5e:74:58:b0:9e:15:57:a7:86:11:ea:
19:3e:1c:26:66:91:a7:1f:0c:5b:4b:50:79:25:98:0c:54:9d:
21:96:0c:2c:43:f6:1a:dd:13:9b:ee:8d:a6:f5:a7:5d:44:f6:
05:99:4b:47:98:c2:14:51:7c:79:56:56:0c:56:46:71:f2:16:
c8:7e:5a:8e:c6:73:72:2f:b5:67:30:1a:95:d6:fa:11:25:a7:
9b:c0:6b:ee:ac:bb:ec:89:61:73:65:04:85:37:40:dc:e0:28:
f0:89:61:1f:c5:d5:15:7f:bc:6f:52:69:19:31:76:86:ff:2b:
13:77:c9:79:26:6e:f7:a1:de:45:90:db:45:06:12:02:be:78:
76:93:7e:05:6e:8f:e0:e3:b6:9a:a1:9a:53:27:cb:d6:f0:c8:
5c:04:fc:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 05:11:03 2025 by rpki-client