Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/e24544-9533-4d86-a279-6fbfcec4f505/1/Ftmm_lJPhujQhO3I1kpg361S3xM.mft
File: Ftmm_lJPhujQhO3I1kpg361S3xM.mft (raw, json)
Hash identifier: c8O6XULgA++nLGaFu3Lv9zXoJaUMkPzd7KsOxf099ok=
Subject key identifier: 58:A3:B3:BE:A8:2C:83:FD:C7:A0:13:63:0C:6B:A0:B1:E5:9D:D0:1E
Authority key identifier: 16:D9:A6:FE:52:4F:86:E8:D0:84:ED:C8:D6:4A:60:DF:AD:52:DF:13
Certificate issuer: /CN=16d9a6fe524f86e8d084edc8d64a60dfad52df13
Certificate serial: 0195903DF70F225812153EF9443862D7EF88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ftmm_lJPhujQhO3I1kpg361S3xM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/e24544-9533-4d86-a279-6fbfcec4f505/1/Ftmm_lJPhujQhO3I1kpg361S3xM.mft
Manifest number: 040D
Signing time: Thu 13 Mar 2025 16:02:14 +0000
Manifest this update: Thu 13 Mar 2025 16:02:14 +0000
Manifest next update: Fri 14 Mar 2025 16:02:14 +0000
Files and hashes: 1: Ftmm_lJPhujQhO3I1kpg361S3xM.crl (hash: VLeMEf6Hz6sv5tJ657o3yqIrxEnsSNCcGYQGpZH4TdE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/e24544-9533-4d86-a279-6fbfcec4f505/1/Ftmm_lJPhujQhO3I1kpg361S3xM.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/e24544-9533-4d86-a279-6fbfcec4f505/1/Ftmm_lJPhujQhO3I1kpg361S3xM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ftmm_lJPhujQhO3I1kpg361S3xM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 09:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:90:3d:f7:0f:22:58:12:15:3e:f9:44:38:62:d7:ef:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16d9a6fe524f86e8d084edc8d64a60dfad52df13
Validity
Not Before: Mar 13 16:02:14 2025 GMT
Not After : Mar 14 16:02:14 2025 GMT
Subject: CN=58a3b3bea82c83fdc7a013630c6ba0b1e59dd01e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:44:82:c9:36:20:2e:d2:39:c6:9e:23:80:60:
61:0c:68:05:f6:76:08:3d:59:9b:25:c5:c8:cc:bb:
e7:41:c4:9e:7a:91:7a:d4:59:3f:5c:b4:cd:11:48:
31:b2:31:95:45:53:b0:49:86:23:09:ba:e3:2d:ed:
61:f5:91:9f:85:39:5f:1d:fb:06:37:d7:ed:98:eb:
19:a5:2d:b5:be:5b:f7:d6:16:8b:1b:fc:e3:56:c6:
6a:03:cb:5a:92:1d:b6:9b:bd:0f:dd:ea:3b:d1:9f:
a0:32:7b:36:9d:a3:e6:ee:e5:56:31:67:0d:e2:32:
9d:65:42:49:2e:b3:94:16:dc:4a:95:cd:aa:56:d2:
b2:3f:7e:42:3d:0f:dc:66:3c:ab:8b:2f:79:fc:fb:
24:b2:fb:a1:33:3d:c0:75:75:d6:8d:b7:67:a7:38:
41:2b:f0:86:cb:f1:cb:22:79:87:ee:9d:d6:88:04:
70:25:62:42:34:bd:e3:c3:57:7a:1b:5f:aa:11:42:
c0:fa:e2:ce:00:34:4d:18:be:c7:96:96:8a:ff:17:
c4:ff:dc:86:5c:c0:c6:45:18:c9:85:c9:01:28:63:
e2:f2:f0:0b:a9:02:b4:7d:5e:02:92:00:db:76:25:
f8:5f:5a:cd:79:5e:c2:d7:bf:92:fc:93:dc:cf:22:
37:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:A3:B3:BE:A8:2C:83:FD:C7:A0:13:63:0C:6B:A0:B1:E5:9D:D0:1E
X509v3 Authority Key Identifier:
keyid:16:D9:A6:FE:52:4F:86:E8:D0:84:ED:C8:D6:4A:60:DF:AD:52:DF:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ftmm_lJPhujQhO3I1kpg361S3xM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/e24544-9533-4d86-a279-6fbfcec4f505/1/Ftmm_lJPhujQhO3I1kpg361S3xM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/e24544-9533-4d86-a279-6fbfcec4f505/1/Ftmm_lJPhujQhO3I1kpg361S3xM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e4:c5:25:73:3d:25:6d:b3:61:5c:31:c9:25:e6:9d:1b:b0:ae:
91:85:7e:05:b0:e9:eb:71:dc:80:f8:f6:ba:a0:20:02:6e:43:
35:31:84:fa:fd:85:f9:79:2c:1e:e6:f2:40:e9:08:67:90:f0:
4e:2d:e5:0f:48:6c:0e:29:71:c3:0b:8d:27:39:92:0c:28:de:
c7:e4:4a:ab:bc:4a:02:65:b9:fc:0b:b0:a2:5f:0e:5f:84:72:
51:89:85:2c:91:75:55:de:19:10:94:13:6d:42:83:4b:60:ba:
01:f1:03:ab:cd:ec:f4:ba:49:66:73:b3:1f:7b:44:97:1d:ac:
ca:0e:69:d1:78:70:1b:98:3b:31:8e:e5:22:ad:7a:fb:86:a5:
65:20:3b:38:c2:be:ea:9f:b7:4f:8b:ac:b5:2b:bc:aa:8d:28:
b5:bc:00:06:0f:e2:e8:62:8d:3f:a2:0f:93:9c:9b:78:7d:eb:
af:b5:83:0e:a8:18:fd:64:b6:58:95:4e:98:c1:09:b0:fb:ff:
34:cb:45:2c:01:f8:e8:0b:9c:3f:bc:d5:d5:ae:d6:b1:d3:0d:
6b:a7:78:ce:fc:60:8a:27:82:76:41:e7:f9:9c:64:34:68:83:
5e:29:54:3f:9a:e6:0b:37:4a:49:05:fa:ca:0f:dd:3e:2c:4f:
39:ed:f6:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:50:45 2025 by rpki-client