Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/42cdab-2029-4624-9f4b-99323686216d/1/FKR4D1zQfpSL5vpLSSWnMTkG1es.mft
File: FKR4D1zQfpSL5vpLSSWnMTkG1es.mft (raw, json)
Hash identifier: 1q54/H3Qfh4FQWBp8oUj4kgYmoZV9OoiXzU1vEvbCs0=
Subject key identifier: EE:E3:CF:DD:06:C1:A6:9A:C8:F5:89:73:CA:31:A6:5C:7F:C5:BA:D5
Authority key identifier: 14:A4:78:0F:5C:D0:7E:94:8B:E6:FA:4B:49:25:A7:31:39:06:D5:EB
Certificate issuer: /CN=14a4780f5cd07e948be6fa4b4925a7313906d5eb
Certificate serial: 0197B632B6CAAD2A415BB15EC2F33A47E378
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FKR4D1zQfpSL5vpLSSWnMTkG1es.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/42cdab-2029-4624-9f4b-99323686216d/1/FKR4D1zQfpSL5vpLSSWnMTkG1es.mft
Manifest number: 1354
Signing time: Sat 28 Jun 2025 11:01:06 +0000
Manifest this update: Sat 28 Jun 2025 11:01:06 +0000
Manifest next update: Sun 29 Jun 2025 11:01:06 +0000
Files and hashes: 1: 77yJaauLzrFexoGSd8mW28O_fIU.roa (hash: ub7MVHo9mZ0L5vdaNfZlA1Alkn53dGfVV4Z9Peyi1bs=)
2: FKR4D1zQfpSL5vpLSSWnMTkG1es.crl (hash: Wb5vL4EtEowFqYpTOJWHLoONWc83fh4zmgcND5gri3Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/42cdab-2029-4624-9f4b-99323686216d/1/FKR4D1zQfpSL5vpLSSWnMTkG1es.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/42cdab-2029-4624-9f4b-99323686216d/1/FKR4D1zQfpSL5vpLSSWnMTkG1es.mft
rsync://rpki.ripe.net/repository/DEFAULT/FKR4D1zQfpSL5vpLSSWnMTkG1es.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 11:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:32:b6:ca:ad:2a:41:5b:b1:5e:c2:f3:3a:47:e3:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14a4780f5cd07e948be6fa4b4925a7313906d5eb
Validity
Not Before: Jun 28 11:01:06 2025 GMT
Not After : Jun 29 11:01:06 2025 GMT
Subject: CN=eee3cfdd06c1a69ac8f58973ca31a65c7fc5bad5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c0:3d:1d:98:9e:76:67:87:27:5c:bf:1c:ab:
25:9e:4e:f9:9d:ff:9e:f7:61:37:8b:56:5c:9f:28:
ed:23:ec:d2:13:7e:61:34:fb:33:7f:23:5f:82:bf:
67:1c:7f:8b:d1:87:4c:83:a1:37:49:c8:34:12:ee:
cf:5d:7a:eb:71:98:8f:92:19:fa:2b:94:d1:cc:91:
5a:b6:24:eb:46:d1:1d:b1:a6:a9:3f:4a:14:ce:92:
17:aa:f9:0d:65:7c:c0:18:93:55:8a:ed:bf:70:f0:
1f:67:ee:01:41:16:2c:78:41:3d:d4:4d:cb:e7:8d:
45:9d:54:95:36:15:3d:5d:f6:99:ed:69:04:19:7f:
86:d0:0e:bf:65:22:11:ae:bf:b7:a0:a2:fe:c1:9f:
d4:f8:b6:91:0c:82:a8:3b:cd:c7:28:4e:c8:74:c1:
5e:76:fa:7c:ad:88:5a:36:7d:44:8b:cf:19:65:22:
17:f6:0d:58:36:a6:a8:4d:01:dd:8a:e1:95:9f:45:
f7:33:86:d6:ea:94:f9:8f:76:43:1e:d8:04:86:ef:
e3:b9:b0:21:28:f7:7f:7b:00:8a:7d:9d:c1:6a:3d:
5d:65:35:e8:16:c1:92:dd:c1:81:33:5a:fa:8a:2d:
7d:89:a6:2f:71:29:77:7c:10:bc:11:cb:b6:3f:be:
4d:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:E3:CF:DD:06:C1:A6:9A:C8:F5:89:73:CA:31:A6:5C:7F:C5:BA:D5
X509v3 Authority Key Identifier:
keyid:14:A4:78:0F:5C:D0:7E:94:8B:E6:FA:4B:49:25:A7:31:39:06:D5:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FKR4D1zQfpSL5vpLSSWnMTkG1es.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/42cdab-2029-4624-9f4b-99323686216d/1/FKR4D1zQfpSL5vpLSSWnMTkG1es.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/42cdab-2029-4624-9f4b-99323686216d/1/FKR4D1zQfpSL5vpLSSWnMTkG1es.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:1e:17:03:eb:47:07:80:de:eb:80:4d:be:73:6f:8a:c4:52:
bc:ba:fc:5a:b3:db:3d:ca:13:37:92:a3:23:1d:56:b2:4d:d6:
90:a3:af:f8:12:c7:be:26:59:d7:63:d1:df:2b:cc:6f:9b:7d:
f7:25:bf:1a:89:80:74:73:57:35:80:ce:ee:9d:21:37:54:f1:
a3:f2:dc:a5:5b:70:7d:0c:d9:d7:8c:90:eb:64:db:90:fb:ce:
29:2e:9a:ac:4a:d5:7e:da:70:34:5c:b8:78:e1:7a:f4:42:ab:
49:f0:25:33:45:c2:da:e5:1b:5b:be:72:de:b7:02:a1:c9:92:
08:4f:20:43:22:ca:87:98:f0:c9:a7:71:c3:0c:bc:49:1b:0d:
e0:bf:c6:55:50:3b:eb:c0:36:b6:df:9d:60:20:e8:d1:4c:a7:
e8:17:06:d7:c7:33:14:57:19:fa:53:07:54:a3:ae:95:01:e3:
d1:ae:37:c9:e4:22:54:bb:7b:64:d4:95:2c:14:b3:a7:f7:10:
18:00:8d:a4:80:12:e8:31:c8:36:ed:ea:30:c5:75:46:36:ca:
f4:06:b6:11:bc:a0:e4:db:bd:f2:35:c7:3c:17:0c:54:c7:8e:
5a:19:bc:09:de:59:10:42:d2:42:06:69:c1:d8:57:7e:04:d9:
8a:b8:52:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:46:29 2025 by rpki-client