Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/d2e14e-f900-4ab0-93fd-fdebf125b48e/1/FkTmxQy2kt-2QPb4jiKKLZsGxnk.mft
File: FkTmxQy2kt-2QPb4jiKKLZsGxnk.mft (raw, json)
Hash identifier: hQexaF5+HO11+4CQMHr0RrL41j2hLNSZwI8/puxQn6w=
Subject key identifier: 86:EC:F8:94:9D:C3:C5:5A:17:03:87:03:D4:7B:EB:DD:5E:58:9E:9A
Authority key identifier: 16:44:E6:C5:0C:B6:92:DF:B6:40:F6:F8:8E:22:8A:2D:9B:06:C6:79
Certificate issuer: /CN=1644e6c50cb692dfb640f6f88e228a2d9b06c679
Certificate serial: 019682EC06B1B973A63CAC1A0FF28601BB88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FkTmxQy2kt-2QPb4jiKKLZsGxnk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/d2e14e-f900-4ab0-93fd-fdebf125b48e/1/FkTmxQy2kt-2QPb4jiKKLZsGxnk.mft
Manifest number: 1516
Signing time: Tue 29 Apr 2025 19:00:28 +0000
Manifest this update: Tue 29 Apr 2025 19:00:28 +0000
Manifest next update: Wed 30 Apr 2025 19:00:28 +0000
Files and hashes: 1: FkTmxQy2kt-2QPb4jiKKLZsGxnk.crl (hash: VcVTLVRvY+AZRle5pBETl0Z4q0FjAa86SYsjyhOOeVY=)
2: rXJZFmG2fExX2PgdhmMI1znr1Ys.roa (hash: jLirKW8uoxxjWyg59lIt3L6simlxOfJjoRXDdsPT8aQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/d2e14e-f900-4ab0-93fd-fdebf125b48e/1/FkTmxQy2kt-2QPb4jiKKLZsGxnk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/d2e14e-f900-4ab0-93fd-fdebf125b48e/1/FkTmxQy2kt-2QPb4jiKKLZsGxnk.mft
rsync://rpki.ripe.net/repository/DEFAULT/FkTmxQy2kt-2QPb4jiKKLZsGxnk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 19:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:82:ec:06:b1:b9:73:a6:3c:ac:1a:0f:f2:86:01:bb:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1644e6c50cb692dfb640f6f88e228a2d9b06c679
Validity
Not Before: Apr 29 19:00:28 2025 GMT
Not After : Apr 30 19:00:28 2025 GMT
Subject: CN=86ecf8949dc3c55a17038703d47bebdd5e589e9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:4b:a1:8a:1a:5c:09:92:b4:1d:b3:81:7f:0b:
c8:7b:f4:ef:41:11:7e:33:93:f8:5a:4b:89:39:65:
e2:6b:ca:be:cd:f2:42:6e:b0:bb:75:d1:6f:5b:05:
37:d7:df:a5:99:67:b9:94:27:47:86:7f:a2:62:b1:
f7:11:aa:51:c0:5a:15:4a:ba:dc:d3:de:89:df:98:
3b:e2:03:4f:7c:bd:55:6f:3c:8b:17:7b:00:8b:b3:
3c:d4:f7:c4:00:5a:ad:8a:ca:f1:d9:a5:43:1b:4a:
a7:b4:13:a5:67:99:50:41:e4:82:18:58:9f:76:28:
26:4b:34:09:56:2c:68:82:98:75:38:23:6b:ee:7a:
7d:2d:8d:89:d9:e5:0a:09:76:8e:e8:1e:21:5d:63:
c1:66:ee:8c:77:ea:4a:33:c4:28:70:5a:1f:a2:3f:
e8:bf:3e:70:7b:90:ba:ce:a2:55:88:e9:b2:06:f2:
8a:4f:79:46:52:51:8d:2d:0f:60:bf:9a:fc:9a:e5:
a2:07:91:0d:b2:df:6d:c3:1f:ad:5c:ce:ad:3c:49:
73:a4:ed:4b:14:2f:77:a3:1c:dc:c1:85:a3:7c:41:
e4:59:59:57:8b:74:d7:5f:f1:3c:fa:ca:fc:97:ea:
b4:08:0d:47:42:f9:26:79:07:58:42:67:0a:84:fb:
5c:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:EC:F8:94:9D:C3:C5:5A:17:03:87:03:D4:7B:EB:DD:5E:58:9E:9A
X509v3 Authority Key Identifier:
keyid:16:44:E6:C5:0C:B6:92:DF:B6:40:F6:F8:8E:22:8A:2D:9B:06:C6:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FkTmxQy2kt-2QPb4jiKKLZsGxnk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/d2e14e-f900-4ab0-93fd-fdebf125b48e/1/FkTmxQy2kt-2QPb4jiKKLZsGxnk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/d2e14e-f900-4ab0-93fd-fdebf125b48e/1/FkTmxQy2kt-2QPb4jiKKLZsGxnk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:1f:e2:fb:3f:7e:9f:d5:a2:bf:a6:8e:4f:9f:7b:10:bb:62:
13:18:56:09:e5:a4:97:b2:19:2c:b4:07:5d:4a:64:4e:0f:c5:
28:71:d0:d0:a6:87:66:8e:64:48:7c:12:87:7b:ef:96:e7:ce:
64:69:ac:3d:12:c1:54:f0:3d:3e:01:72:bc:78:9f:0a:a9:80:
a6:20:16:2a:2c:e4:5b:59:3b:80:19:fc:64:88:c3:de:cf:c7:
f5:02:8d:5f:b8:ac:ec:41:48:d0:17:d9:c5:8d:65:76:40:a2:
dd:9c:d0:d4:d1:b9:73:b7:ed:07:33:4c:62:57:5f:94:c5:89:
02:d5:e5:92:1f:d8:31:ef:fc:4b:55:c0:f0:75:74:d5:b9:1b:
21:d8:18:da:93:01:a3:74:2b:00:bc:30:1b:68:a4:56:64:17:
1c:21:33:b4:b6:9e:87:ca:2f:a1:48:ec:61:04:04:d1:6d:f1:
bb:8e:06:0b:36:f2:23:9e:8f:5a:a4:fd:75:9e:e0:56:87:4f:
b6:7d:c6:74:9c:71:6b:bf:d1:40:31:cf:56:67:8a:8a:dd:b7:
ea:9f:fd:0c:72:d3:73:22:f7:a9:57:f0:d4:16:5d:9b:18:36:
81:7a:e3:0d:36:99:97:a2:74:89:94:c8:02:e1:fc:a8:55:fc:
47:ef:ba:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 04:55:34 2025 by rpki-client