Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/8d991e-3ece-4a11-b463-751cf3a5e1e1/1/FKawhisrMDswLDwjSaWsjQ-QawY.mft
File: FKawhisrMDswLDwjSaWsjQ-QawY.mft (raw, json)
Hash identifier: sQ2qe2Efi+my1dMekeVxNxVZIWF7SHEJxA20MiHpqj8=
Subject key identifier: 13:7E:07:6D:9B:67:FD:79:23:DB:F5:BB:40:30:28:05:51:59:AA:77
Authority key identifier: 14:A6:B0:86:2B:2B:30:3B:30:2C:3C:23:49:A5:AC:8D:0F:90:6B:06
Certificate issuer: /CN=14a6b0862b2b303b302c3c2349a5ac8d0f906b06
Certificate serial: 01974D7BCD41E10356699BF25BDA51819559
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FKawhisrMDswLDwjSaWsjQ-QawY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/8d991e-3ece-4a11-b463-751cf3a5e1e1/1/FKawhisrMDswLDwjSaWsjQ-QawY.mft
Manifest number: 157F
Signing time: Sun 08 Jun 2025 03:00:48 +0000
Manifest this update: Sun 08 Jun 2025 03:00:48 +0000
Manifest next update: Mon 09 Jun 2025 03:00:48 +0000
Files and hashes: 1: 7nWZ-fXLkbaN6kk-WpeVPSb_Shk.roa (hash: +Nsf5cvVzwGmy0NBURwNVgZwqRNM1or+ZItAdRGNc3s=)
2: FKawhisrMDswLDwjSaWsjQ-QawY.crl (hash: atPP+fPI/ZNe3Cu/oAH15z4MU+Xlaen+TJwwnjIpXG4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/8d991e-3ece-4a11-b463-751cf3a5e1e1/1/FKawhisrMDswLDwjSaWsjQ-QawY.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/8d991e-3ece-4a11-b463-751cf3a5e1e1/1/FKawhisrMDswLDwjSaWsjQ-QawY.mft
rsync://rpki.ripe.net/repository/DEFAULT/FKawhisrMDswLDwjSaWsjQ-QawY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:7b:cd:41:e1:03:56:69:9b:f2:5b:da:51:81:95:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14a6b0862b2b303b302c3c2349a5ac8d0f906b06
Validity
Not Before: Jun 8 03:00:48 2025 GMT
Not After : Jun 9 03:00:48 2025 GMT
Subject: CN=137e076d9b67fd7923dbf5bb403028055159aa77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:67:1b:74:e0:bb:53:e2:d4:6f:ed:3a:78:62:
23:a8:f3:e4:df:1e:db:85:ef:94:c2:61:8b:a2:b2:
aa:31:d9:77:ce:fb:80:05:76:7f:83:78:65:d8:e2:
91:b3:bf:92:ed:68:59:81:be:b8:28:d4:39:ba:0a:
47:97:33:fe:84:8e:5b:53:ba:c8:92:55:ca:04:e4:
b3:57:26:af:0e:b9:9c:59:7a:b2:d6:b0:ec:3b:cb:
39:84:73:4b:4a:3e:31:63:3a:32:99:3a:17:47:8e:
bd:1e:88:3a:a4:bd:6b:a0:2c:f3:27:da:44:a2:99:
10:ca:88:7d:f9:2f:bd:19:4c:5b:27:b4:79:71:02:
a5:11:97:07:7d:e1:84:9a:fa:fd:8e:49:a3:9b:35:
50:33:86:ff:64:2c:df:3e:5e:be:87:2d:01:52:97:
03:84:13:56:41:17:c1:3d:3c:c9:0b:fb:0c:42:84:
91:d9:c5:63:c6:74:81:10:35:01:14:50:2a:2b:c0:
69:78:68:cc:0a:87:86:7a:c9:0b:c3:38:c2:a7:d5:
7d:a4:89:ee:4a:7d:10:2e:77:ca:e9:86:b5:64:7b:
5f:57:5a:82:ca:d2:76:ad:ad:3f:e7:44:0b:b2:f4:
cc:67:81:ee:eb:9a:f2:64:be:b1:3c:75:b2:e2:53:
cf:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:7E:07:6D:9B:67:FD:79:23:DB:F5:BB:40:30:28:05:51:59:AA:77
X509v3 Authority Key Identifier:
keyid:14:A6:B0:86:2B:2B:30:3B:30:2C:3C:23:49:A5:AC:8D:0F:90:6B:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FKawhisrMDswLDwjSaWsjQ-QawY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/8d991e-3ece-4a11-b463-751cf3a5e1e1/1/FKawhisrMDswLDwjSaWsjQ-QawY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/8d991e-3ece-4a11-b463-751cf3a5e1e1/1/FKawhisrMDswLDwjSaWsjQ-QawY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:b4:67:35:0c:e1:1e:07:af:8e:c2:05:53:1b:ff:55:52:d2:
60:98:31:33:47:f6:da:1a:0a:47:f9:b7:0c:88:32:b2:13:35:
7a:21:a7:4e:dc:70:a5:38:6c:8f:ec:9c:27:18:33:b6:90:c6:
14:22:2b:ef:30:55:a0:07:5d:df:a1:31:58:f5:7f:44:ab:66:
39:03:3e:dd:42:4b:5e:3e:fe:47:49:f3:ee:74:91:b0:27:23:
ee:c7:8f:ff:af:b7:5d:40:2d:ee:48:5a:ba:6f:43:14:24:ed:
82:ef:f3:96:78:78:30:29:fb:7e:f5:cd:a1:81:39:b9:af:05:
8c:b4:1c:6a:7b:21:95:b7:3a:4d:14:67:1b:0b:80:dc:bf:49:
e7:d2:12:d3:a5:c7:66:2f:97:5e:99:86:ec:da:85:53:d4:95:
c0:cc:b6:6e:a6:f2:cc:f8:de:15:62:0f:2f:3f:6d:60:55:94:
9d:5f:59:16:44:59:d0:5c:83:b5:af:9d:fb:cc:e1:12:81:b8:
0a:62:d7:ed:64:4f:8a:44:b4:e1:29:7d:40:c4:2a:f6:93:59:
df:8d:ce:49:85:8b:35:c5:53:ec:35:b0:b6:0e:20:93:d9:a9:
21:cd:72:a4:f7:9a:f6:3a:96:2b:eb:9b:0b:7f:f5:c4:1b:90:
3e:43:d0:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 09:51:29 2025 by rpki-client