Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/e71d21-a360-4579-81a0-bcca26fc8945/1/_kFOohqRFtLN-PXALQhnOvpXaJM.mft
File: _kFOohqRFtLN-PXALQhnOvpXaJM.mft (raw, json)
Hash identifier: 9Ku1J1qu3vDQaEzyi1tNCks06uSD+OBSPwlpOCB5Seg=
Subject key identifier: E6:2D:57:F5:51:B5:11:7B:D3:5B:C8:4C:78:8F:D2:84:FB:CB:F1:46
Authority key identifier: FE:41:4E:A2:1A:91:16:D2:CD:F8:F5:C0:2D:08:67:3A:FA:57:68:93
Certificate issuer: /CN=fe414ea21a9116d2cdf8f5c02d08673afa576893
Certificate serial: 01978C914F0E863C234C25CFFAC15942B74C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_kFOohqRFtLN-PXALQhnOvpXaJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/e71d21-a360-4579-81a0-bcca26fc8945/1/_kFOohqRFtLN-PXALQhnOvpXaJM.mft
Manifest number: 033A
Signing time: Fri 20 Jun 2025 09:00:22 +0000
Manifest this update: Fri 20 Jun 2025 09:00:22 +0000
Manifest next update: Sat 21 Jun 2025 09:00:22 +0000
Files and hashes: 1: 0MAgU7sTLhp2qbqkuMgBEoG1GaM.roa (hash: qBfT5pIrk1/WlfhHIXDzrsxZlkpu9JZ5SsEtvG7MW+c=)
2: _kFOohqRFtLN-PXALQhnOvpXaJM.crl (hash: OuGrX5ffTxDxJbOU5lvzCW7Kt2+Wej7k0DiHFneeP0Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/e71d21-a360-4579-81a0-bcca26fc8945/1/_kFOohqRFtLN-PXALQhnOvpXaJM.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/e71d21-a360-4579-81a0-bcca26fc8945/1/_kFOohqRFtLN-PXALQhnOvpXaJM.mft
rsync://rpki.ripe.net/repository/DEFAULT/_kFOohqRFtLN-PXALQhnOvpXaJM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Jun 2025 04:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:8c:91:4f:0e:86:3c:23:4c:25:cf:fa:c1:59:42:b7:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe414ea21a9116d2cdf8f5c02d08673afa576893
Validity
Not Before: Jun 20 09:00:22 2025 GMT
Not After : Jun 21 09:00:22 2025 GMT
Subject: CN=e62d57f551b5117bd35bc84c788fd284fbcbf146
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:c5:c5:54:77:d4:73:69:6d:55:5a:20:ff:8b:
98:dd:9f:16:a6:d4:75:3e:ef:52:4c:1d:12:81:a8:
26:c6:65:47:90:1b:f0:f9:be:43:5c:1b:ae:ae:1e:
f7:de:f6:42:7f:07:05:55:4e:a0:1d:70:96:14:5c:
f4:8e:4a:ef:28:fc:b8:71:e1:8a:2d:66:17:1d:a9:
d8:d4:9d:b0:a3:01:a8:af:c6:f9:73:09:a1:b7:b5:
b3:fa:a0:71:8f:e5:de:dc:93:90:a1:2f:29:1e:d6:
f6:a1:61:7a:42:92:12:00:c8:40:0a:7a:76:32:e3:
8e:3d:8c:ba:12:1e:d8:db:70:4e:fc:9f:4c:55:24:
80:0f:10:7d:da:ff:45:92:0a:71:cb:47:a5:7e:a1:
dd:a0:40:fc:7e:3d:44:8d:3b:28:c9:fc:b6:f6:93:
ab:be:ed:35:61:69:90:81:7a:97:e9:5b:a1:3e:02:
d2:21:4b:d2:f1:b5:1e:40:7f:8d:2f:d8:10:c4:c2:
36:81:a6:40:04:0a:5c:f3:99:de:84:27:40:ac:b6:
c5:e6:2e:83:01:50:3f:ee:50:2b:c4:c5:9c:98:7a:
11:c2:9c:5a:35:71:a4:69:26:3d:83:73:9e:52:75:
b6:28:0e:a1:ae:1d:33:20:d5:d9:75:e8:0e:d4:d3:
26:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:2D:57:F5:51:B5:11:7B:D3:5B:C8:4C:78:8F:D2:84:FB:CB:F1:46
X509v3 Authority Key Identifier:
keyid:FE:41:4E:A2:1A:91:16:D2:CD:F8:F5:C0:2D:08:67:3A:FA:57:68:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_kFOohqRFtLN-PXALQhnOvpXaJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/e71d21-a360-4579-81a0-bcca26fc8945/1/_kFOohqRFtLN-PXALQhnOvpXaJM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/e71d21-a360-4579-81a0-bcca26fc8945/1/_kFOohqRFtLN-PXALQhnOvpXaJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:a3:e4:65:10:70:85:af:fb:df:9f:b9:ae:59:ca:20:49:bf:
3c:f2:89:23:04:9f:38:a8:c5:40:75:cf:de:07:47:29:44:d1:
23:a1:6c:f4:30:d9:c5:ae:ad:55:c0:94:5d:9b:10:a6:a3:df:
99:3c:e9:02:55:a7:6e:68:f5:f9:23:86:3a:06:4a:52:d2:8a:
8c:60:7b:f9:70:3f:2a:16:dc:31:de:9b:75:a2:fb:4f:29:99:
47:40:5f:6b:a0:64:0e:1a:9a:80:6d:55:26:76:a4:84:ef:5c:
71:89:79:5f:32:a0:e6:9d:e8:0f:3d:cf:44:d1:b5:4e:24:6a:
cf:70:36:56:64:65:86:68:83:1e:da:71:ea:f2:34:d6:68:ca:
03:d0:fe:e4:ed:66:8b:63:8d:0e:ec:4a:d1:0c:06:42:e1:59:
32:2a:a2:5d:c8:8a:df:84:e6:88:e4:7d:36:55:72:fa:1e:5c:
10:ab:e5:9d:ae:ca:7b:08:f0:e2:4b:48:51:7f:28:47:6c:21:
2d:db:1f:f1:18:fa:e1:96:10:d0:11:a0:6a:ce:ac:62:c8:1c:
98:08:1f:35:d7:42:38:19:82:79:d7:bc:41:45:5f:f9:85:51:
65:84:19:ff:37:07:10:bd:c5:5a:4e:35:1f:6e:05:43:96:94:
58:27:a3:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 13:52:16 2025 by rpki-client