Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/1f63db-c963-44bc-a039-8aaa6a90ff95/1/fTBF_EkdOfUucUWxAAs7hsN97UU.mft
File: fTBF_EkdOfUucUWxAAs7hsN97UU.mft (raw, json)
Hash identifier: bMeVgJ0Uuww6MS7J5TMlBUSb4iMy60vX0rMuQ5fPuWg=
Subject key identifier: 08:63:1D:42:70:6D:E5:DB:C7:29:ED:41:6C:25:77:22:0B:01:52:3B
Authority key identifier: 7D:30:45:FC:49:1D:39:F5:2E:71:45:B1:00:0B:3B:86:C3:7D:ED:45
Certificate issuer: /CN=7d3045fc491d39f52e7145b1000b3b86c37ded45
Certificate serial: 019604C0CBD1E50595185B9AE2810FE92984
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fTBF_EkdOfUucUWxAAs7hsN97UU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/1f63db-c963-44bc-a039-8aaa6a90ff95/1/fTBF_EkdOfUucUWxAAs7hsN97UU.mft
Manifest number: 14D2
Signing time: Sat 05 Apr 2025 07:01:06 +0000
Manifest this update: Sat 05 Apr 2025 07:01:06 +0000
Manifest next update: Sun 06 Apr 2025 07:01:06 +0000
Files and hashes: 1: K4Lbu-PRsMurt2fUpQp-WCgArbs.roa (hash: 3LSqxDqKlKKQa1qqql+RiI3DEtvgTxuB2Pprc5JwA8Q=)
2: bGmJuHKC9r9iVbyoDDsXdRaZNn4.roa (hash: cFv1Kx/hvA8sFFYnUpS91+Kz1exkjjuW0Zq9NwB3OSk=)
3: fTBF_EkdOfUucUWxAAs7hsN97UU.crl (hash: DH76w/qU2fgt59iFBFEs8OkhU2se1mfC3TBC7yazLk4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/1f63db-c963-44bc-a039-8aaa6a90ff95/1/fTBF_EkdOfUucUWxAAs7hsN97UU.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/1f63db-c963-44bc-a039-8aaa6a90ff95/1/fTBF_EkdOfUucUWxAAs7hsN97UU.mft
rsync://rpki.ripe.net/repository/DEFAULT/fTBF_EkdOfUucUWxAAs7hsN97UU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 07:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:04:c0:cb:d1:e5:05:95:18:5b:9a:e2:81:0f:e9:29:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d3045fc491d39f52e7145b1000b3b86c37ded45
Validity
Not Before: Apr 5 07:01:06 2025 GMT
Not After : Apr 6 07:01:06 2025 GMT
Subject: CN=08631d42706de5dbc729ed416c2577220b01523b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:10:9f:6c:f2:b9:3d:e4:44:bc:fc:f7:be:94:
52:ff:d8:0e:f4:45:9f:cd:74:3d:a8:84:53:69:8d:
29:8e:1d:55:16:1f:66:13:2b:ab:53:b3:6b:3b:aa:
13:69:66:19:b9:db:f2:1b:ad:a0:24:bf:24:5b:91:
37:c0:8a:94:f1:1c:cd:a1:40:88:4e:d8:2a:97:97:
77:e2:7e:e1:46:46:a4:17:a4:02:7d:21:3c:1e:f2:
d3:14:ee:ad:16:51:e6:04:75:f6:a3:8a:3c:6b:0f:
16:4e:19:a2:e8:f7:ad:c6:c4:ab:9f:43:47:1f:ed:
ab:99:55:c0:81:3c:51:51:72:cd:5d:8b:5a:ee:73:
ec:0a:6c:60:cc:0f:f2:94:34:6c:b9:00:73:df:04:
82:65:50:c6:ec:39:ab:aa:1f:d9:c4:d0:bc:e4:d8:
71:6d:b5:a7:f6:14:18:e2:85:3d:c9:50:3f:fd:98:
44:0a:35:d0:98:11:56:9c:1e:bf:ec:c5:7b:97:9d:
21:f0:14:cd:d9:22:2a:87:eb:df:ff:0b:3e:70:21:
ae:1a:f7:2a:72:f7:08:fd:6b:75:64:04:5f:08:07:
29:df:29:f8:08:90:9b:3d:e9:c1:f9:a3:85:35:04:
77:bd:e7:5d:10:fe:fa:9d:e5:df:92:77:b4:0e:75:
60:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:63:1D:42:70:6D:E5:DB:C7:29:ED:41:6C:25:77:22:0B:01:52:3B
X509v3 Authority Key Identifier:
keyid:7D:30:45:FC:49:1D:39:F5:2E:71:45:B1:00:0B:3B:86:C3:7D:ED:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fTBF_EkdOfUucUWxAAs7hsN97UU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1f63db-c963-44bc-a039-8aaa6a90ff95/1/fTBF_EkdOfUucUWxAAs7hsN97UU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1f63db-c963-44bc-a039-8aaa6a90ff95/1/fTBF_EkdOfUucUWxAAs7hsN97UU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:43:75:28:26:de:5f:10:e4:3e:3d:06:99:c3:50:8f:9d:c5:
6a:be:b0:75:68:64:e8:cf:b5:4d:9d:70:bd:ad:04:82:58:01:
74:f0:47:82:a2:50:3c:f7:3b:ea:f7:ab:57:86:21:6f:a8:da:
85:35:91:13:7e:98:13:58:24:4a:0e:1a:48:b5:72:3a:25:3f:
28:60:22:8f:42:b5:39:bd:b5:6f:53:6a:a9:75:f4:86:76:fe:
6c:12:59:8f:97:9e:d2:40:8c:5e:42:30:88:46:3f:82:70:63:
2a:cc:d2:f7:4d:eb:1e:03:9b:1a:6b:9c:e7:b1:e1:6f:d3:a1:
4a:48:7b:3c:75:2a:60:71:63:f0:95:6e:a2:ae:d1:8a:84:4c:
7b:56:33:e7:58:1c:bb:d2:ce:31:86:09:da:e9:b9:16:bb:36:
aa:8d:f6:4a:21:bc:5a:43:a6:37:d6:d3:83:fe:90:99:cf:fa:
b7:1e:2b:2f:16:d0:8c:be:8d:d9:b3:17:6c:2d:3e:93:b0:65:
12:8c:8b:54:f8:73:3d:e0:bb:cf:d2:a0:af:6d:3a:f7:05:6d:
59:2d:12:1d:ea:c3:71:a0:4a:b8:db:30:97:60:f6:0b:1f:a1:
d6:0b:e0:30:9f:bc:b9:d4:98:cf:d9:80:5e:75:a2:b2:d0:6a:
59:c7:1f:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:50:45 2025 by rpki-client