Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/42cdab-2029-4624-9f4b-99323686216d/1/FKR4D1zQfpSL5vpLSSWnMTkG1es.mft
File: FKR4D1zQfpSL5vpLSSWnMTkG1es.mft (raw, json)
Hash identifier: nwFxhv+QKKQtxCbR1e9YKODgTC09WXt+pAE4SjRmQvk=
Subject key identifier: EE:11:DF:25:47:E4:09:58:1E:81:43:EB:04:FB:2C:AE:FD:4B:A6:AE
Authority key identifier: 14:A4:78:0F:5C:D0:7E:94:8B:E6:FA:4B:49:25:A7:31:39:06:D5:EB
Certificate issuer: /CN=14a4780f5cd07e948be6fa4b4925a7313906d5eb
Certificate serial: 01977A5461C9CE4ED74811172714A9B2E8EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FKR4D1zQfpSL5vpLSSWnMTkG1es.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/42cdab-2029-4624-9f4b-99323686216d/1/FKR4D1zQfpSL5vpLSSWnMTkG1es.mft
Manifest number: 1335
Signing time: Mon 16 Jun 2025 20:00:39 +0000
Manifest this update: Mon 16 Jun 2025 20:00:39 +0000
Manifest next update: Tue 17 Jun 2025 20:00:39 +0000
Files and hashes: 1: 77yJaauLzrFexoGSd8mW28O_fIU.roa (hash: ub7MVHo9mZ0L5vdaNfZlA1Alkn53dGfVV4Z9Peyi1bs=)
2: FKR4D1zQfpSL5vpLSSWnMTkG1es.crl (hash: petGgiwgmIg2weS1mR8+8tynxPctxltO0K1zSpJN+fE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/42cdab-2029-4624-9f4b-99323686216d/1/FKR4D1zQfpSL5vpLSSWnMTkG1es.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/42cdab-2029-4624-9f4b-99323686216d/1/FKR4D1zQfpSL5vpLSSWnMTkG1es.mft
rsync://rpki.ripe.net/repository/DEFAULT/FKR4D1zQfpSL5vpLSSWnMTkG1es.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 20:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7a:54:61:c9:ce:4e:d7:48:11:17:27:14:a9:b2:e8:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14a4780f5cd07e948be6fa4b4925a7313906d5eb
Validity
Not Before: Jun 16 20:00:39 2025 GMT
Not After : Jun 17 20:00:39 2025 GMT
Subject: CN=ee11df2547e409581e8143eb04fb2caefd4ba6ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:dc:1e:ef:b7:7e:d2:a8:29:ce:df:b7:e9:60:
1b:4b:cd:a1:e8:c2:0f:2e:e6:a0:4f:88:3e:fc:ae:
75:49:c8:cb:6b:19:ae:e6:dc:be:c8:bb:67:f4:bd:
e5:a4:fd:c4:6d:8a:b4:53:ac:f4:e7:6e:58:a6:cc:
bf:b7:d4:a2:72:6e:a0:0c:ba:42:53:38:1e:04:6e:
2b:0b:7a:09:d6:3a:c3:53:ca:b4:bd:cf:8f:4c:94:
a3:d8:69:32:29:52:59:5a:61:3e:a4:0a:b2:94:82:
74:1b:b6:34:f6:d4:f8:6f:cf:1a:8b:94:d1:63:90:
96:d4:f9:21:31:2e:a3:f7:d5:c3:d7:31:35:07:31:
33:49:d6:1f:71:49:42:a5:da:14:2e:d7:93:e4:e4:
bf:4e:d5:6b:46:6b:5a:c2:cf:d9:ad:6b:4f:35:81:
8e:ea:53:50:16:fb:a9:a0:45:21:6b:bf:3e:91:37:
16:c3:42:bb:9c:02:af:5e:aa:57:5f:d9:73:ee:ba:
7e:bf:b9:52:bd:2e:63:2d:50:68:3c:d1:ae:5b:a4:
58:bc:5d:b0:bf:83:58:19:5b:e8:5d:aa:f2:5f:0d:
1c:e4:dd:da:6e:75:f1:8f:23:e6:2d:6f:9d:a9:17:
13:c7:2c:db:be:1a:96:6f:5d:27:99:43:40:f9:05:
0d:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:11:DF:25:47:E4:09:58:1E:81:43:EB:04:FB:2C:AE:FD:4B:A6:AE
X509v3 Authority Key Identifier:
keyid:14:A4:78:0F:5C:D0:7E:94:8B:E6:FA:4B:49:25:A7:31:39:06:D5:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FKR4D1zQfpSL5vpLSSWnMTkG1es.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/42cdab-2029-4624-9f4b-99323686216d/1/FKR4D1zQfpSL5vpLSSWnMTkG1es.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/42cdab-2029-4624-9f4b-99323686216d/1/FKR4D1zQfpSL5vpLSSWnMTkG1es.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:3b:7c:64:0e:d9:67:54:da:d8:74:9f:49:ed:63:eb:a6:70:
75:83:1f:7f:39:d0:26:9a:76:50:6c:ae:f3:fe:5f:82:dc:d7:
5d:34:15:cb:6a:30:84:1f:31:35:ae:38:15:31:e7:6b:ac:f6:
86:2d:7a:31:fc:99:56:7e:b5:02:ae:c7:3b:4b:c9:34:50:ad:
2b:cc:60:c4:e7:a7:81:95:bd:f6:03:b2:3c:cb:6d:da:27:24:
c2:10:8d:eb:57:17:a1:ba:57:d8:72:10:a2:56:45:3b:79:49:
0c:60:8f:f7:53:00:73:b3:23:d7:c1:b0:cf:a1:7c:4a:8d:ea:
93:be:b5:3d:7a:12:24:a3:f3:59:9c:ea:d7:6f:98:2c:d4:d3:
8f:f1:69:90:e7:5e:d7:a6:b8:0b:1b:0a:cc:8a:73:75:b9:a3:
b3:44:be:8f:16:52:18:68:8b:0e:b4:0f:b1:73:8a:04:c8:42:
06:63:c6:ec:91:e1:fa:a5:fa:4f:db:71:cc:e9:83:c0:8c:d6:
ca:47:76:73:f7:d9:d2:e2:12:0c:4e:0b:48:a5:3b:30:f1:90:
92:fc:e4:92:e4:20:46:74:a7:67:1a:ad:f8:99:59:fe:a2:50:
5f:48:35:f1:65:f5:dd:36:fb:d1:e1:65:8b:60:71:c7:d3:da:
43:0f:30:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 07:07:11 2025 by rpki-client