Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/2f10ee-7531-4f22-b1a8-d323fbdbb687/1/FTCm61I5adqSyIRMDftA7YIL1sQ.mft
File: FTCm61I5adqSyIRMDftA7YIL1sQ.mft (raw, json)
Hash identifier: UBEZ5QNZv4dAVyh8HZxlXGxURnzQu90d1BBCuNyLeKE=
Subject key identifier: 09:30:E3:D9:C7:6E:DF:7A:AD:E2:DD:DD:A7:CD:F8:39:43:19:76:DC
Authority key identifier: 15:30:A6:EB:52:39:69:DA:92:C8:84:4C:0D:FB:40:ED:82:0B:D6:C4
Certificate issuer: /CN=1530a6eb523969da92c8844c0dfb40ed820bd6c4
Certificate serial: 0195903CC28228F65625088FC75E77B84C3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FTCm61I5adqSyIRMDftA7YIL1sQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/2f10ee-7531-4f22-b1a8-d323fbdbb687/1/FTCm61I5adqSyIRMDftA7YIL1sQ.mft
Manifest number: 0A94
Signing time: Thu 13 Mar 2025 16:00:55 +0000
Manifest this update: Thu 13 Mar 2025 16:00:55 +0000
Manifest next update: Fri 14 Mar 2025 16:00:55 +0000
Files and hashes: 1: FTCm61I5adqSyIRMDftA7YIL1sQ.crl (hash: AxTh5BEtJPreNm9LIhHbHLcvoHq5UM2xMkMrcn7m5lg=)
2: b6c5zm72T5u0EfOAbDE3JGGhXtw.roa (hash: OJH5Z8arKXzNL0yoYBrj6T/yS9sFayIfKvyurf8IbEI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/2f10ee-7531-4f22-b1a8-d323fbdbb687/1/FTCm61I5adqSyIRMDftA7YIL1sQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/2f10ee-7531-4f22-b1a8-d323fbdbb687/1/FTCm61I5adqSyIRMDftA7YIL1sQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/FTCm61I5adqSyIRMDftA7YIL1sQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 09:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:90:3c:c2:82:28:f6:56:25:08:8f:c7:5e:77:b8:4c:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1530a6eb523969da92c8844c0dfb40ed820bd6c4
Validity
Not Before: Mar 13 16:00:55 2025 GMT
Not After : Mar 14 16:00:55 2025 GMT
Subject: CN=0930e3d9c76edf7aade2dddda7cdf839431976dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c7:9a:8d:2d:72:e2:9f:f4:b6:bd:fe:08:53:
d1:a2:43:ff:88:f2:ee:90:03:f5:37:51:18:db:fd:
a8:bd:6a:66:13:ce:e2:d9:ec:2c:c3:f8:42:ae:01:
2c:eb:75:13:ab:51:5f:86:60:cd:9c:f3:9a:b8:b9:
86:1b:82:8b:61:58:93:fb:a0:2c:96:a7:eb:e1:3e:
64:b5:c4:4f:ca:75:f9:0e:d8:b8:af:a0:be:eb:bf:
b6:2d:64:5f:da:cc:e6:9a:8c:c8:92:64:14:f6:d3:
9c:41:d8:34:0e:c3:74:78:d9:63:2f:2f:c8:a8:ee:
3e:0b:02:d6:64:9e:5f:d8:4f:57:75:9f:92:5a:35:
7a:0b:01:2d:af:e1:57:05:91:f3:11:72:a9:72:56:
14:34:75:c3:a0:01:e1:87:d2:b2:38:20:b3:ff:38:
b4:c9:b6:2b:79:a4:e5:e2:b1:7d:0c:77:dc:85:15:
78:16:ae:d4:02:47:fe:9a:ad:8c:f8:d5:08:de:a4:
7b:2d:09:60:1d:11:41:d8:34:f1:e4:8d:b9:b8:a3:
df:3e:d9:e5:ef:7d:2b:14:d8:4c:c5:2d:43:09:f2:
a1:60:1a:27:e6:d6:23:1b:31:c3:37:e7:aa:cc:26:
06:73:83:0c:f9:7d:4d:e9:38:f8:6c:d7:58:5d:26:
cb:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:30:E3:D9:C7:6E:DF:7A:AD:E2:DD:DD:A7:CD:F8:39:43:19:76:DC
X509v3 Authority Key Identifier:
keyid:15:30:A6:EB:52:39:69:DA:92:C8:84:4C:0D:FB:40:ED:82:0B:D6:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FTCm61I5adqSyIRMDftA7YIL1sQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/2f10ee-7531-4f22-b1a8-d323fbdbb687/1/FTCm61I5adqSyIRMDftA7YIL1sQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/2f10ee-7531-4f22-b1a8-d323fbdbb687/1/FTCm61I5adqSyIRMDftA7YIL1sQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:9a:88:58:c0:4a:07:f2:39:36:56:85:82:1a:a1:b4:1e:c1:
c1:79:59:ec:f5:6d:27:ff:fb:a0:88:7d:3a:94:e1:12:09:ad:
ba:c0:74:1c:a8:56:38:3c:7c:8b:fc:7f:cb:d2:02:e7:e8:7d:
69:56:e2:89:4b:08:40:56:a4:67:91:d1:c8:f0:0f:90:b2:4a:
ba:dc:aa:1e:53:01:11:5e:35:ac:d6:db:5a:11:d4:19:85:29:
94:80:15:e9:26:f2:d7:16:f6:65:71:8d:58:55:b9:18:26:3d:
85:2d:8c:a4:97:b7:30:a5:5b:7b:ea:88:00:bd:6a:90:58:98:
09:9d:57:f9:12:23:e7:6b:f6:e7:45:29:18:aa:02:70:33:3a:
34:fe:e0:0f:54:41:cc:46:0f:ae:ee:77:87:66:1f:08:a1:1c:
5b:00:5e:0a:8c:54:5c:b8:73:d4:6a:62:64:76:70:3f:a8:43:
53:c2:c9:41:a3:f8:e8:61:31:5c:10:9c:34:71:8f:30:92:5b:
de:77:ec:52:fa:fc:ec:c7:7d:04:e5:77:33:30:43:2f:0d:a0:
09:6c:d0:e2:2a:31:18:1b:f5:1b:0a:e7:67:b6:2c:67:f7:4b:
b0:d6:a2:37:c6:6e:5c:60:84:9f:8e:42:47:49:a5:3f:6c:f9:
61:79:63:40
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZWQPMKCKPZWJQiPx153uEw+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1MzBhNmViNTIzOTY5ZGE5MmM4ODQ0YzBkZmI0MGVkODIw
YmQ2YzQwHhcNMjUwMzEzMTYwMDU1WhcNMjUwMzE0MTYwMDU1WjAzMTEwLwYDVQQD
EygwOTMwZTNkOWM3NmVkZjdhYWRlMmRkZGRhN2NkZjgzOTQzMTk3NmRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv8eajS1y4p/0tr3+CFPRokP/iPLu
kAP1N1EY2/2ovWpmE87i2ewsw/hCrgEs63UTq1FfhmDNnPOauLmGG4KLYViT+6As
lqfr4T5ktcRPynX5Dti4r6C+67+2LWRf2szmmozIkmQU9tOcQdg0DsN0eNljLy/I
qO4+CwLWZJ5f2E9XdZ+SWjV6CwEtr+FXBZHzEXKpclYUNHXDoAHhh9KyOCCz/zi0
ybYreaTl4rF9DHfchRV4Fq7UAkf+mq2M+NUI3qR7LQlgHRFB2DTx5I25uKPfPtnl
730rFNhMxS1DCfKhYBon5tYjGzHDN+eqzCYGc4MM+X1N6Tj4bNdYXSbLIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAkw49nHbt96reLd3afN+DlDGXbcMB8GA1UdIwQY
MBaAFBUwputSOWnaksiETA37QO2CC9bEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRlRDbTYxSTVhZHFTeUlSTURmdEE3WUlMMXNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My8yZjEwZWUtNzUzMS00ZjIyLWIxYTgt
ZDMyM2ZiZGJiNjg3LzEvRlRDbTYxSTVhZHFTeUlSTURmdEE3WUlMMXNRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My8yZjEwZWUtNzUzMS00ZjIyLWIxYTgtZDMyM2ZiZGJiNjg3
LzEvRlRDbTYxSTVhZHFTeUlSTURmdEE3WUlMMXNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI5qIWMBK
B/I5NlaFghqhtB7BwXlZ7PVtJ//7oIh9OpThEgmtusB0HKhWODx8i/x/y9IC5+h9
aVbiiUsIQFakZ5HRyPAPkLJKutyqHlMBEV41rNbbWhHUGYUplIAV6Sby1xb2ZXGN
WFW5GCY9hS2MpJe3MKVbe+qIAL1qkFiYCZ1X+RIj52v250UpGKoCcDM6NP7gD1RB
zEYPru53h2YfCKEcWwBeCoxUXLhz1GpiZHZwP6hDU8LJQaP46GExXBCcNHGPMJJb
3nfsUvr87Md9BOV3MzBDLw2gCWzQ4ioxGBv1GwrnZ7YsZ/dLsNaiN8ZuXGCEn45C
R0mlP2z5YXljQA==
-----END CERTIFICATE-----
Generated at Thu Mar 13 19:36:08 2025 by rpki-client