Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/8d991e-3ece-4a11-b463-751cf3a5e1e1/1/FKawhisrMDswLDwjSaWsjQ-QawY.mft
File: FKawhisrMDswLDwjSaWsjQ-QawY.mft (raw, json)
Hash identifier: ZHZwqVuMoFmMnjsqe7QDiZojB7VBiGe7Kgr7/2g2eAE=
Subject key identifier: 88:BC:88:8C:76:62:6D:FB:59:4F:5A:A1:F0:AB:6B:32:10:F9:67:04
Authority key identifier: 14:A6:B0:86:2B:2B:30:3B:30:2C:3C:23:49:A5:AC:8D:0F:90:6B:06
Certificate issuer: /CN=14a6b0862b2b303b302c3c2349a5ac8d0f906b06
Certificate serial: 019658387A64E494D74BE4E6FC402CC2FD8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FKawhisrMDswLDwjSaWsjQ-QawY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/8d991e-3ece-4a11-b463-751cf3a5e1e1/1/FKawhisrMDswLDwjSaWsjQ-QawY.mft
Manifest number: 1500
Signing time: Mon 21 Apr 2025 12:00:18 +0000
Manifest this update: Mon 21 Apr 2025 12:00:18 +0000
Manifest next update: Tue 22 Apr 2025 12:00:18 +0000
Files and hashes: 1: 7nWZ-fXLkbaN6kk-WpeVPSb_Shk.roa (hash: +Nsf5cvVzwGmy0NBURwNVgZwqRNM1or+ZItAdRGNc3s=)
2: FKawhisrMDswLDwjSaWsjQ-QawY.crl (hash: ipuUVsFLyQ2F2sK0ZhVITJTbNJ6dKRi2MUHTpaQRIC4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/8d991e-3ece-4a11-b463-751cf3a5e1e1/1/FKawhisrMDswLDwjSaWsjQ-QawY.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/8d991e-3ece-4a11-b463-751cf3a5e1e1/1/FKawhisrMDswLDwjSaWsjQ-QawY.mft
rsync://rpki.ripe.net/repository/DEFAULT/FKawhisrMDswLDwjSaWsjQ-QawY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:58:38:7a:64:e4:94:d7:4b:e4:e6:fc:40:2c:c2:fd:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14a6b0862b2b303b302c3c2349a5ac8d0f906b06
Validity
Not Before: Apr 21 12:00:18 2025 GMT
Not After : Apr 22 12:00:18 2025 GMT
Subject: CN=88bc888c76626dfb594f5aa1f0ab6b3210f96704
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:74:f3:de:4c:63:f7:87:ff:38:13:71:9c:44:
f1:89:df:78:f2:14:8b:c4:13:aa:a8:e7:42:32:f5:
d7:f2:ef:d9:a7:95:50:e1:24:bf:d8:e6:b4:42:9e:
bf:de:5b:b3:ea:d6:6c:f4:86:b5:27:6b:e8:db:f7:
f4:a6:be:a8:12:fd:d4:92:1a:e8:d9:44:9f:5d:77:
eb:60:19:b7:b3:09:71:52:4b:0b:3c:0b:ec:c4:5d:
08:54:c1:25:43:3c:d7:ad:e3:9f:22:dc:f4:91:34:
57:a2:2f:c0:69:12:25:78:e9:68:67:d2:c3:08:54:
05:7c:e6:46:be:7f:43:7a:63:32:ad:d0:f4:b4:07:
99:dc:64:b7:c8:e3:0a:c8:08:5e:39:48:53:5d:2e:
d7:69:78:09:a8:07:18:47:81:6b:77:32:c9:cd:f2:
3e:c7:a6:0b:62:36:82:85:05:b6:d2:84:d8:2a:e6:
3c:50:7d:17:93:d9:e5:5a:1a:75:b8:4d:5e:b2:8e:
3a:72:17:58:fa:8b:b5:44:a0:7f:80:a2:6e:4a:3c:
57:45:1e:7b:69:1d:cf:e7:89:13:3c:77:3e:53:3f:
81:83:ce:c7:51:84:0c:47:b6:0c:ce:84:0b:52:ed:
38:96:ce:33:d0:3d:7f:79:c5:c7:2a:26:be:c1:dc:
82:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:BC:88:8C:76:62:6D:FB:59:4F:5A:A1:F0:AB:6B:32:10:F9:67:04
X509v3 Authority Key Identifier:
keyid:14:A6:B0:86:2B:2B:30:3B:30:2C:3C:23:49:A5:AC:8D:0F:90:6B:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FKawhisrMDswLDwjSaWsjQ-QawY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/8d991e-3ece-4a11-b463-751cf3a5e1e1/1/FKawhisrMDswLDwjSaWsjQ-QawY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/8d991e-3ece-4a11-b463-751cf3a5e1e1/1/FKawhisrMDswLDwjSaWsjQ-QawY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:ed:d6:7e:0a:2b:bb:54:44:67:e5:9a:56:6b:2f:08:67:e7:
b8:92:5a:21:b2:6c:1a:77:98:d0:1b:a6:30:3b:2e:00:25:84:
5a:ba:ea:d9:86:a8:13:87:f6:e8:38:a9:a9:c0:c2:b2:2e:a1:
62:7b:0e:1f:ca:a5:7d:2d:3c:4a:92:5c:64:2f:f2:ae:f0:56:
cc:72:1b:06:5c:59:2b:58:ef:16:4d:a4:11:b6:57:85:7a:2d:
23:14:16:9b:1b:c3:ef:bb:d6:6f:03:bf:c4:5b:66:27:e1:aa:
5b:92:46:24:77:6a:96:c4:2c:29:89:a5:87:c8:78:89:81:82:
69:ac:7c:00:6b:c8:b4:2a:de:40:24:64:63:8e:6a:16:1f:24:
3b:2e:3e:2e:91:16:c9:bc:41:ef:75:34:d7:3d:22:70:94:f6:
22:3a:7f:43:91:19:23:e4:09:83:71:bd:98:ea:f9:1b:88:d1:
62:8a:6c:d5:9f:e3:88:bb:89:e6:0f:f8:52:40:98:c6:81:8e:
16:39:ca:df:13:81:64:68:e1:bd:67:d3:ee:85:64:9d:71:f1:
2b:ca:af:68:9d:ed:3f:55:b9:33:a5:0f:2a:af:4f:28:10:0b:
45:a8:02:81:db:50:aa:f2:df:b1:af:a8:9f:66:10:56:81:ec:
a5:57:72:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:07:13 2025 by rpki-client