
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/2f10ee-7531-4f22-b1a8-d323fbdbb687/1/FTCm61I5adqSyIRMDftA7YIL1sQ.mft
File: FTCm61I5adqSyIRMDftA7YIL1sQ.mft (raw, json)
Hash identifier: EL30UfpNl0YEyDe0dTJKU1btduE/03oPQQVyF1YHL2w=
Subject key identifier: 23:66:2B:37:C0:CE:30:88:EC:9E:26:C1:3E:8D:6E:21:4D:60:66:8A
Authority key identifier: 15:30:A6:EB:52:39:69:DA:92:C8:84:4C:0D:FB:40:ED:82:0B:D6:C4
Certificate issuer: /CN=1530a6eb523969da92c8844c0dfb40ed820bd6c4
Certificate serial: 01964D7EB17972313186EF95D687D06B7035
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FTCm61I5adqSyIRMDftA7YIL1sQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/2f10ee-7531-4f22-b1a8-d323fbdbb687/1/FTCm61I5adqSyIRMDftA7YIL1sQ.mft
Manifest number: 0AF6
Signing time: Sat 19 Apr 2025 10:01:10 +0000
Manifest this update: Sat 19 Apr 2025 10:01:10 +0000
Manifest next update: Sun 20 Apr 2025 10:01:10 +0000
Files and hashes: 1: FTCm61I5adqSyIRMDftA7YIL1sQ.crl (hash: +/TjjSDJ5T6+tkjy17b+nnLU6lellndDRGMBcxTUy0o=)
2: b6c5zm72T5u0EfOAbDE3JGGhXtw.roa (hash: OJH5Z8arKXzNL0yoYBrj6T/yS9sFayIfKvyurf8IbEI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/2f10ee-7531-4f22-b1a8-d323fbdbb687/1/FTCm61I5adqSyIRMDftA7YIL1sQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/2f10ee-7531-4f22-b1a8-d323fbdbb687/1/FTCm61I5adqSyIRMDftA7YIL1sQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/FTCm61I5adqSyIRMDftA7YIL1sQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 07:26:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:7e:b1:79:72:31:31:86:ef:95:d6:87:d0:6b:70:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1530a6eb523969da92c8844c0dfb40ed820bd6c4
Validity
Not Before: Apr 19 10:01:10 2025 GMT
Not After : Apr 20 10:01:10 2025 GMT
Subject: CN=23662b37c0ce3088ec9e26c13e8d6e214d60668a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:6b:eb:6e:48:29:41:b1:99:16:bf:6d:df:5e:
58:38:97:8f:f3:ca:21:d1:86:fe:cb:ad:27:0c:5e:
00:4f:f3:c0:58:51:5c:bc:1d:09:76:df:7d:94:f7:
59:42:f2:42:40:64:8d:80:7b:55:22:ce:eb:ef:c1:
75:a3:73:ba:89:12:82:e2:f2:c2:18:15:4a:3b:b1:
99:43:ca:d1:83:21:e8:04:87:37:5f:ae:b2:c5:45:
32:b2:67:65:9b:3d:6c:d2:24:c0:9c:63:9d:db:dc:
a0:05:9d:a8:ab:09:9a:dc:c2:65:17:fd:86:bb:26:
f8:0e:fa:f0:98:d4:a8:72:f5:4f:f9:65:e8:74:ae:
e6:6f:f6:cd:9c:15:f7:27:82:11:d9:bd:84:a0:cf:
c3:f4:47:f9:83:fa:e7:1b:d8:66:81:76:51:54:02:
a0:14:11:e7:88:b7:ec:7b:61:dc:17:c4:81:b7:01:
9f:d2:a6:96:ee:95:ea:ca:64:cc:d5:04:8f:28:96:
be:e1:51:38:e7:1d:5e:1e:b4:ff:27:4b:79:4b:88:
db:95:ef:ec:a2:d0:d7:cb:ed:db:ef:06:61:0f:95:
a0:3d:75:50:ef:9c:2f:75:bd:cd:6f:ac:1d:5a:27:
3e:20:61:2e:9b:b8:17:51:7c:a1:b1:91:7a:f7:32:
09:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:66:2B:37:C0:CE:30:88:EC:9E:26:C1:3E:8D:6E:21:4D:60:66:8A
X509v3 Authority Key Identifier:
keyid:15:30:A6:EB:52:39:69:DA:92:C8:84:4C:0D:FB:40:ED:82:0B:D6:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FTCm61I5adqSyIRMDftA7YIL1sQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/2f10ee-7531-4f22-b1a8-d323fbdbb687/1/FTCm61I5adqSyIRMDftA7YIL1sQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/2f10ee-7531-4f22-b1a8-d323fbdbb687/1/FTCm61I5adqSyIRMDftA7YIL1sQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:d7:55:98:59:0c:23:36:79:a9:b8:a3:47:68:5b:d4:9c:3b:
2c:41:11:f5:ac:32:f7:b3:a5:9e:3c:16:27:5e:9f:2d:26:3d:
b0:7a:5f:8a:f4:67:3a:20:e6:c5:1e:ec:ac:c5:6f:89:c0:9d:
5c:e6:3f:77:e0:14:fe:2a:65:a4:57:5a:d2:02:7c:82:f1:d3:
b0:b9:ba:76:4d:8c:2b:28:e7:c5:31:30:7b:f8:10:10:3e:41:
28:10:75:f9:af:39:f6:6a:a2:04:36:31:5a:ed:9d:71:94:c4:
eb:10:eb:fb:6d:8e:b8:de:30:1c:e8:69:ee:81:51:8a:65:40:
64:6a:3a:58:20:bd:a3:44:a2:e9:0f:39:b6:c0:2b:d5:51:30:
27:cd:32:b3:1d:ba:9b:11:43:2b:c2:0b:f4:5e:1a:d2:c7:3d:
a5:e2:72:cf:3d:78:e6:74:cb:9b:27:74:d3:2d:db:68:47:e8:
cf:7b:d6:2f:19:68:06:ab:06:0c:0c:8a:b6:93:bd:95:66:0d:
da:7e:ab:51:c6:40:d4:b4:dc:36:a7:28:e1:0f:f7:3c:36:22:
80:6b:11:87:43:53:22:d7:03:7c:a4:28:e1:51:d7:81:33:ba:
42:19:de:b3:29:86:b2:4f:39:d6:f0:16:a1:45:ab:e0:76:39:
f2:20:a9:c1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZNfrF5cjExhu+V1ofQa3A1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1MzBhNmViNTIzOTY5ZGE5MmM4ODQ0YzBkZmI0MGVkODIw
YmQ2YzQwHhcNMjUwNDE5MTAwMTEwWhcNMjUwNDIwMTAwMTEwWjAzMTEwLwYDVQQD
EygyMzY2MmIzN2MwY2UzMDg4ZWM5ZTI2YzEzZThkNmUyMTRkNjA2NjhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6WvrbkgpQbGZFr9t315YOJeP88oh
0Yb+y60nDF4AT/PAWFFcvB0Jdt99lPdZQvJCQGSNgHtVIs7r78F1o3O6iRKC4vLC
GBVKO7GZQ8rRgyHoBIc3X66yxUUysmdlmz1s0iTAnGOd29ygBZ2oqwma3MJlF/2G
uyb4DvrwmNSocvVP+WXodK7mb/bNnBX3J4IR2b2EoM/D9Ef5g/rnG9hmgXZRVAKg
FBHniLfse2HcF8SBtwGf0qaW7pXqymTM1QSPKJa+4VE45x1eHrT/J0t5S4jble/s
otDXy+3b7wZhD5WgPXVQ75wvdb3Nb6wdWic+IGEum7gXUXyhsZF69zIJvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCNmKzfAzjCI7J4mwT6NbiFNYGaKMB8GA1UdIwQY
MBaAFBUwputSOWnaksiETA37QO2CC9bEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRlRDbTYxSTVhZHFTeUlSTURmdEE3WUlMMXNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My8yZjEwZWUtNzUzMS00ZjIyLWIxYTgt
ZDMyM2ZiZGJiNjg3LzEvRlRDbTYxSTVhZHFTeUlSTURmdEE3WUlMMXNRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My8yZjEwZWUtNzUzMS00ZjIyLWIxYTgtZDMyM2ZiZGJiNjg3
LzEvRlRDbTYxSTVhZHFTeUlSTURmdEE3WUlMMXNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH9dVmFkM
IzZ5qbijR2hb1Jw7LEER9awy97OlnjwWJ16fLSY9sHpfivRnOiDmxR7srMVvicCd
XOY/d+AU/iplpFda0gJ8gvHTsLm6dk2MKyjnxTEwe/gQED5BKBB1+a859mqiBDYx
Wu2dcZTE6xDr+22OuN4wHOhp7oFRimVAZGo6WCC9o0Si6Q85tsAr1VEwJ80ysx26
mxFDK8IL9F4a0sc9peJyzz145nTLmyd00y3baEfoz3vWLxloBqsGDAyKtpO9lWYN
2n6rUcZA1LTcNqco4Q/3PDYigGsRh0NTItcDfKQo4VHXgTO6QhnesymGsk851vAW
oUWr4HY58iCpwQ==
-----END CERTIFICATE-----
Generated at Sat Apr 19 15:19:39 2025 by rpki-client