Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/42cdab-2029-4624-9f4b-99323686216d/1/FKR4D1zQfpSL5vpLSSWnMTkG1es.mft
File: FKR4D1zQfpSL5vpLSSWnMTkG1es.mft (raw, json)
Hash identifier: UWi2ZGlx5eKBTR1nihBo4ShevSukqz7rxi30oKBkNXY=
Subject key identifier: 49:86:E4:00:98:76:FD:86:F2:6C:FC:37:A4:D7:BB:69:CC:E2:38:DA
Authority key identifier: 14:A4:78:0F:5C:D0:7E:94:8B:E6:FA:4B:49:25:A7:31:39:06:D5:EB
Certificate issuer: /CN=14a4780f5cd07e948be6fa4b4925a7313906d5eb
Certificate serial: 0196C2DD8D641885D286C0EFD3F6AE520BD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FKR4D1zQfpSL5vpLSSWnMTkG1es.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/42cdab-2029-4624-9f4b-99323686216d/1/FKR4D1zQfpSL5vpLSSWnMTkG1es.mft
Manifest number: 12D6
Signing time: Mon 12 May 2025 05:00:21 +0000
Manifest this update: Mon 12 May 2025 05:00:21 +0000
Manifest next update: Tue 13 May 2025 05:00:21 +0000
Files and hashes: 1: 77yJaauLzrFexoGSd8mW28O_fIU.roa (hash: ub7MVHo9mZ0L5vdaNfZlA1Alkn53dGfVV4Z9Peyi1bs=)
2: FKR4D1zQfpSL5vpLSSWnMTkG1es.crl (hash: yjra/Ik46L1xns69aV/vzbJ0XAGMgXFmq50qBOlKHbk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/42cdab-2029-4624-9f4b-99323686216d/1/FKR4D1zQfpSL5vpLSSWnMTkG1es.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/42cdab-2029-4624-9f4b-99323686216d/1/FKR4D1zQfpSL5vpLSSWnMTkG1es.mft
rsync://rpki.ripe.net/repository/DEFAULT/FKR4D1zQfpSL5vpLSSWnMTkG1es.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:dd:8d:64:18:85:d2:86:c0:ef:d3:f6:ae:52:0b:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14a4780f5cd07e948be6fa4b4925a7313906d5eb
Validity
Not Before: May 12 05:00:21 2025 GMT
Not After : May 13 05:00:21 2025 GMT
Subject: CN=4986e4009876fd86f26cfc37a4d7bb69cce238da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:60:c8:44:ab:61:a1:f9:de:9c:15:8c:c1:6c:
2a:d4:29:d7:06:66:f3:e0:bc:25:54:3e:76:f3:6a:
33:bf:39:c9:d7:52:4f:73:4e:17:dd:2d:51:da:91:
57:9a:67:86:ee:ea:16:14:f8:47:dd:09:4a:d6:47:
51:ee:b1:95:76:72:0d:65:b7:b0:d6:05:9d:46:15:
af:2c:8b:c4:7f:16:88:f1:3b:8c:41:24:ae:be:e9:
0e:42:1f:1e:45:32:77:89:e2:cf:c0:f4:4d:6e:58:
e6:f6:cc:e1:28:a5:18:da:07:c3:66:25:77:60:0b:
ef:26:69:d8:f4:88:be:27:53:ea:dd:58:6e:5d:2a:
15:0a:72:da:ef:a3:f5:c9:0a:76:54:7a:36:8b:48:
19:61:4e:34:91:cc:0b:02:dd:39:a2:6b:44:44:5f:
c6:2e:c3:11:5d:9b:57:aa:66:85:89:97:80:17:31:
dc:12:71:b2:2e:f4:b1:f3:f2:a9:e2:98:01:ed:e3:
ca:88:19:56:e3:d7:1b:9e:c4:c5:d0:00:d7:cc:c0:
bc:95:0a:76:d6:cc:ea:c0:f0:b4:29:44:02:a5:d5:
74:d8:43:df:00:47:eb:8f:1c:f0:7a:9d:5e:e9:e7:
e6:de:cc:95:0f:35:61:05:a0:e9:8e:4f:38:ed:43:
2e:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:86:E4:00:98:76:FD:86:F2:6C:FC:37:A4:D7:BB:69:CC:E2:38:DA
X509v3 Authority Key Identifier:
keyid:14:A4:78:0F:5C:D0:7E:94:8B:E6:FA:4B:49:25:A7:31:39:06:D5:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FKR4D1zQfpSL5vpLSSWnMTkG1es.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/42cdab-2029-4624-9f4b-99323686216d/1/FKR4D1zQfpSL5vpLSSWnMTkG1es.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/42cdab-2029-4624-9f4b-99323686216d/1/FKR4D1zQfpSL5vpLSSWnMTkG1es.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:7e:32:66:26:93:b7:bd:e5:f6:91:11:22:9e:a6:2c:9f:53:
44:6e:a4:d1:a4:a2:ea:a2:75:b6:a9:50:88:82:40:3e:69:b9:
bb:38:4f:ba:79:fa:23:c1:5a:1c:b6:a9:4d:13:0a:92:fb:b0:
3e:58:42:f3:84:47:5f:bc:4b:ce:c2:e6:40:37:eb:0b:f8:8e:
d5:1d:e1:08:4d:92:10:1a:57:47:b1:50:f1:37:c8:1c:03:de:
e2:bf:7f:07:da:10:1d:b7:51:17:66:6a:f5:11:6b:a5:bb:00:
f1:ee:a3:81:b2:09:bc:a4:8d:43:dd:2f:a9:95:7f:6f:73:2b:
6a:d1:f5:4b:d5:f5:81:2d:94:05:33:8d:ec:91:90:28:aa:27:
2a:dd:ce:67:75:1b:7e:14:ce:dc:2c:16:4a:64:3f:73:0c:7b:
90:49:fd:18:38:90:35:0d:ef:4d:69:8f:c8:2d:8e:01:f4:6b:
a5:96:c7:f3:bb:8f:9b:ae:ab:c2:97:c1:b3:45:d7:ad:bf:fd:
73:f1:7e:b2:90:b6:10:de:48:ef:6d:54:34:7e:73:30:d6:73:
7c:98:e0:cd:c4:c2:be:db:52:32:73:ed:6e:a9:f6:e9:06:94:
d4:e0:5d:34:b0:02:34:ea:f7:a0:60:ad:9c:27:0a:b9:af:27:
c3:90:64:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 08:18:34 2025 by rpki-client