Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/8d991e-3ece-4a11-b463-751cf3a5e1e1/1/FKawhisrMDswLDwjSaWsjQ-QawY.mft
File: FKawhisrMDswLDwjSaWsjQ-QawY.mft (raw, json)
Hash identifier: LNoX+bUrzFHqDRnhRnPb9mOziLHOtBovJOYBvI2FPec=
Subject key identifier: 13:E7:A9:F9:3D:0A:74:20:D4:99:37:C0:53:C7:2D:B7:D0:1E:75:8C
Authority key identifier: 14:A6:B0:86:2B:2B:30:3B:30:2C:3C:23:49:A5:AC:8D:0F:90:6B:06
Certificate issuer: /CN=14a6b0862b2b303b302c3c2349a5ac8d0f906b06
Certificate serial: 01969BCFFE6AA0F2A7E222F8C292DCE81C02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FKawhisrMDswLDwjSaWsjQ-QawY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/8d991e-3ece-4a11-b463-751cf3a5e1e1/1/FKawhisrMDswLDwjSaWsjQ-QawY.mft
Manifest number: 1523
Signing time: Sun 04 May 2025 15:00:21 +0000
Manifest this update: Sun 04 May 2025 15:00:21 +0000
Manifest next update: Mon 05 May 2025 15:00:21 +0000
Files and hashes: 1: 7nWZ-fXLkbaN6kk-WpeVPSb_Shk.roa (hash: +Nsf5cvVzwGmy0NBURwNVgZwqRNM1or+ZItAdRGNc3s=)
2: FKawhisrMDswLDwjSaWsjQ-QawY.crl (hash: xwKTM/zxg3KRuRTlJg0USPzlSmpIXiisiGpSwylOVUA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/8d991e-3ece-4a11-b463-751cf3a5e1e1/1/FKawhisrMDswLDwjSaWsjQ-QawY.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/8d991e-3ece-4a11-b463-751cf3a5e1e1/1/FKawhisrMDswLDwjSaWsjQ-QawY.mft
rsync://rpki.ripe.net/repository/DEFAULT/FKawhisrMDswLDwjSaWsjQ-QawY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 13:58:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9b:cf:fe:6a:a0:f2:a7:e2:22:f8:c2:92:dc:e8:1c:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14a6b0862b2b303b302c3c2349a5ac8d0f906b06
Validity
Not Before: May 4 15:00:21 2025 GMT
Not After : May 5 15:00:21 2025 GMT
Subject: CN=13e7a9f93d0a7420d49937c053c72db7d01e758c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:d9:ae:3a:41:b0:9a:68:fe:bd:16:84:e3:56:
78:17:ea:50:c7:ba:16:0c:d5:88:bc:34:a7:c7:d4:
bb:7b:6f:42:2c:14:84:a6:ec:f4:3a:7e:be:25:71:
96:50:ce:01:ac:87:19:6c:39:5c:18:62:1f:e8:87:
04:8b:52:ab:e4:ba:b3:c8:6f:b0:78:e5:40:4c:9c:
9f:a5:d6:9d:a6:9f:6f:2f:19:45:e7:07:87:64:35:
74:0c:9f:98:0b:50:3b:5e:3b:35:e8:d1:52:09:77:
96:2e:c1:da:58:a6:41:2e:0d:6d:f4:a4:a1:f5:15:
4f:20:3f:91:02:eb:77:7c:b1:10:70:39:ec:a7:52:
71:f4:cb:23:50:be:5d:0a:06:43:57:1d:aa:21:4b:
02:89:b4:93:a1:c2:c8:5c:c9:46:d9:3c:eb:8b:51:
5e:96:14:8f:65:82:2a:9e:1a:26:48:da:f8:e5:36:
d5:cf:75:a6:d4:15:b7:44:48:76:e8:70:a7:c8:da:
0a:ea:93:a2:9e:50:27:2a:f3:23:3f:41:8a:76:88:
74:8d:2c:24:8c:21:8f:fe:f1:ed:9b:af:42:4a:c9:
c3:60:ae:61:44:65:c4:ec:0d:51:9c:4b:73:10:51:
ad:8c:8c:37:67:a2:ea:16:6e:58:a8:8a:e7:c0:49:
49:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:E7:A9:F9:3D:0A:74:20:D4:99:37:C0:53:C7:2D:B7:D0:1E:75:8C
X509v3 Authority Key Identifier:
keyid:14:A6:B0:86:2B:2B:30:3B:30:2C:3C:23:49:A5:AC:8D:0F:90:6B:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FKawhisrMDswLDwjSaWsjQ-QawY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/8d991e-3ece-4a11-b463-751cf3a5e1e1/1/FKawhisrMDswLDwjSaWsjQ-QawY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/8d991e-3ece-4a11-b463-751cf3a5e1e1/1/FKawhisrMDswLDwjSaWsjQ-QawY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:26:18:4e:ed:45:bb:a2:1d:6a:62:af:f4:24:36:53:11:0a:
55:a2:6a:4e:0d:c8:7b:c2:e9:8a:49:92:b0:4b:f3:1a:34:18:
fb:68:dc:82:41:d5:78:05:a3:43:ff:36:f4:ce:45:16:56:78:
e2:2c:7b:7e:ea:67:c6:d3:6b:a7:a9:ab:58:af:85:48:45:6c:
ea:e1:6c:03:da:42:21:3e:3d:67:97:29:52:94:c0:bb:ab:ad:
97:a9:8b:39:5f:96:ef:0e:f3:3d:19:9a:19:33:cb:62:c6:23:
54:76:f0:73:6e:9b:85:36:93:b1:7c:34:3f:49:59:4b:dd:69:
9e:7a:e7:18:6a:d1:49:95:04:a4:5d:63:d6:01:d4:0d:85:3a:
b0:58:00:e8:a4:b3:5b:b1:2b:a4:1d:fe:02:70:79:a0:10:0b:
3d:1f:cd:7d:5d:55:3f:4f:ab:da:1f:29:d0:28:db:41:11:d3:
2f:3b:8e:10:45:35:60:20:3d:d7:fb:00:cc:aa:61:2b:35:11:
4b:7c:fd:f5:7b:a2:d2:4a:82:4a:e3:b6:a2:6c:f7:b8:17:1a:
2b:c6:90:40:f4:7a:5e:46:70:7d:ab:5b:e3:09:23:78:40:0d:
b7:bc:bb:2b:ad:3f:7f:da:77:9d:70:0c:b5:2d:87:62:ab:6b:
4e:e5:c5:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 18:40:31 2025 by rpki-client