Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/e71d21-a360-4579-81a0-bcca26fc8945/1/_kFOohqRFtLN-PXALQhnOvpXaJM.mft
File: _kFOohqRFtLN-PXALQhnOvpXaJM.mft (raw, json)
Hash identifier: L8fXlktppi2eNNjfyND9dWjBrbd3aLnaknhXc3zq1x8=
Subject key identifier: C3:F4:B1:06:E3:58:C0:B4:01:D5:56:A2:7D:C0:B8:33:B5:BE:11:9D
Authority key identifier: FE:41:4E:A2:1A:91:16:D2:CD:F8:F5:C0:2D:08:67:3A:FA:57:68:93
Certificate issuer: /CN=fe414ea21a9116d2cdf8f5c02d08673afa576893
Certificate serial: 01968BB86D38A646632BF96E487A49F05F63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_kFOohqRFtLN-PXALQhnOvpXaJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/e71d21-a360-4579-81a0-bcca26fc8945/1/_kFOohqRFtLN-PXALQhnOvpXaJM.mft
Manifest number: 02B5
Signing time: Thu 01 May 2025 12:00:41 +0000
Manifest this update: Thu 01 May 2025 12:00:41 +0000
Manifest next update: Fri 02 May 2025 12:00:41 +0000
Files and hashes: 1: 0MAgU7sTLhp2qbqkuMgBEoG1GaM.roa (hash: qBfT5pIrk1/WlfhHIXDzrsxZlkpu9JZ5SsEtvG7MW+c=)
2: _kFOohqRFtLN-PXALQhnOvpXaJM.crl (hash: T/JZKaHWeqaaaRxaZMY95fU5MDlLjpYhHp095475/Bw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/e71d21-a360-4579-81a0-bcca26fc8945/1/_kFOohqRFtLN-PXALQhnOvpXaJM.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/e71d21-a360-4579-81a0-bcca26fc8945/1/_kFOohqRFtLN-PXALQhnOvpXaJM.mft
rsync://rpki.ripe.net/repository/DEFAULT/_kFOohqRFtLN-PXALQhnOvpXaJM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8b:b8:6d:38:a6:46:63:2b:f9:6e:48:7a:49:f0:5f:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe414ea21a9116d2cdf8f5c02d08673afa576893
Validity
Not Before: May 1 12:00:41 2025 GMT
Not After : May 2 12:00:41 2025 GMT
Subject: CN=c3f4b106e358c0b401d556a27dc0b833b5be119d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:bb:9d:d2:92:56:fb:a6:b3:d8:4b:03:9a:89:
54:21:7d:92:e0:44:b8:01:3b:4a:8e:ca:5f:29:30:
96:a4:30:c7:bb:78:71:3b:46:61:67:f0:df:03:28:
b3:e8:76:57:c2:4b:2d:9a:c3:e3:c0:88:02:b6:42:
8a:41:a7:25:5e:19:9c:5a:a7:d4:ae:a2:85:2b:fd:
fe:f7:b5:f8:1b:e8:27:ae:c4:a2:0d:41:2d:80:83:
60:97:ca:86:96:7e:51:e8:75:83:c6:5c:f4:11:b3:
45:7d:af:12:99:10:4c:77:3d:83:9f:00:72:ca:cc:
94:2f:91:c4:89:d8:63:9f:19:a3:4b:84:62:97:d5:
28:b9:f5:1f:65:d2:37:06:87:5e:19:ac:47:51:2a:
d2:f0:42:da:6e:ab:36:6a:cb:5d:cf:4e:b8:72:a4:
5d:9e:f8:4c:8c:7b:7c:9a:5e:ba:52:d4:18:d2:0b:
d4:d1:3f:b6:6c:78:d5:18:bc:f0:a7:6f:d2:26:38:
58:b7:5e:e8:22:2e:24:0b:e4:cc:38:59:48:26:86:
5f:58:75:1e:de:93:59:1b:01:9f:b9:13:cf:cb:37:
bf:08:56:16:51:b1:58:f7:11:36:8a:ab:50:20:85:
e5:22:ed:19:8f:61:0b:8c:ea:38:c1:02:a1:d5:3f:
e3:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:F4:B1:06:E3:58:C0:B4:01:D5:56:A2:7D:C0:B8:33:B5:BE:11:9D
X509v3 Authority Key Identifier:
keyid:FE:41:4E:A2:1A:91:16:D2:CD:F8:F5:C0:2D:08:67:3A:FA:57:68:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_kFOohqRFtLN-PXALQhnOvpXaJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/e71d21-a360-4579-81a0-bcca26fc8945/1/_kFOohqRFtLN-PXALQhnOvpXaJM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/e71d21-a360-4579-81a0-bcca26fc8945/1/_kFOohqRFtLN-PXALQhnOvpXaJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:1d:7c:d5:4f:3c:41:a7:6a:1e:7b:65:43:ce:d0:62:ea:23:
75:54:fa:34:7c:9d:8c:15:a6:53:c3:b5:4c:d8:37:48:af:fa:
63:4f:bf:7e:ef:3f:73:b6:83:96:95:e7:e6:4c:58:9b:1e:9f:
df:cf:49:27:b9:57:e9:b3:fb:3a:3a:c8:a7:26:a8:6d:60:de:
a9:ea:f6:c7:91:e1:c0:2d:89:3d:99:6d:cf:20:cb:58:04:07:
17:97:69:b3:e0:63:da:93:6c:a9:2e:0d:2a:c6:2b:1f:94:4b:
75:08:50:7e:60:d4:8c:6f:db:aa:fa:03:f3:8b:b0:0d:10:78:
65:b3:4d:70:ff:fe:36:69:29:d8:ff:51:e6:cd:54:73:98:c6:
c4:12:26:fc:38:00:85:97:fc:47:80:04:a7:fe:41:ed:bf:38:
ce:46:c4:79:c3:14:17:03:d7:d8:ca:fd:80:31:79:09:18:e4:
65:f6:96:00:62:05:60:b0:5f:0d:f7:93:7e:3b:8e:84:47:2f:
c9:dc:ac:73:3f:b2:ec:f7:b4:87:95:b8:a4:f6:ec:9c:55:9f:
9b:bf:e1:bd:7b:89:70:ba:7e:ca:4b:f2:5f:71:84:e2:61:e0:
9f:89:db:5e:97:93:e3:a5:6f:dd:8c:0c:0c:73:07:ed:ea:d7:
f2:a5:bd:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 15:01:38 2025 by rpki-client