Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/d2e14e-f900-4ab0-93fd-fdebf125b48e/1/FkTmxQy2kt-2QPb4jiKKLZsGxnk.mft
File: FkTmxQy2kt-2QPb4jiKKLZsGxnk.mft (raw, json)
Hash identifier: R7Agpt6zXd27HB6Fm0A7JFj37z+VtSn9sEZgfEC3wLk=
Subject key identifier: 64:7C:9F:82:EF:C0:F7:A6:62:83:CC:1E:B8:31:D9:4A:04:9D:EF:A1
Authority key identifier: 16:44:E6:C5:0C:B6:92:DF:B6:40:F6:F8:8E:22:8A:2D:9B:06:C6:79
Certificate issuer: /CN=1644e6c50cb692dfb640f6f88e228a2d9b06c679
Certificate serial: 0196470DFD83882B47FD6DFE390D9B2BCB3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FkTmxQy2kt-2QPb4jiKKLZsGxnk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/d2e14e-f900-4ab0-93fd-fdebf125b48e/1/FkTmxQy2kt-2QPb4jiKKLZsGxnk.mft
Manifest number: 14F7
Signing time: Fri 18 Apr 2025 04:00:21 +0000
Manifest this update: Fri 18 Apr 2025 04:00:21 +0000
Manifest next update: Sat 19 Apr 2025 04:00:21 +0000
Files and hashes: 1: FkTmxQy2kt-2QPb4jiKKLZsGxnk.crl (hash: pfJtvSqlITy/6TTuwrSKIrV4cXEB6AaO4sd9qRlz+Io=)
2: rXJZFmG2fExX2PgdhmMI1znr1Ys.roa (hash: jLirKW8uoxxjWyg59lIt3L6simlxOfJjoRXDdsPT8aQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/d2e14e-f900-4ab0-93fd-fdebf125b48e/1/FkTmxQy2kt-2QPb4jiKKLZsGxnk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/d2e14e-f900-4ab0-93fd-fdebf125b48e/1/FkTmxQy2kt-2QPb4jiKKLZsGxnk.mft
rsync://rpki.ripe.net/repository/DEFAULT/FkTmxQy2kt-2QPb4jiKKLZsGxnk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:47:0d:fd:83:88:2b:47:fd:6d:fe:39:0d:9b:2b:cb:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1644e6c50cb692dfb640f6f88e228a2d9b06c679
Validity
Not Before: Apr 18 04:00:21 2025 GMT
Not After : Apr 19 04:00:21 2025 GMT
Subject: CN=647c9f82efc0f7a66283cc1eb831d94a049defa1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:03:20:08:93:5e:2a:8c:d5:a1:57:26:af:fd:
de:79:37:fd:88:0c:10:f8:9b:b0:f9:49:d8:46:dc:
79:8f:ea:d6:a6:1a:76:4b:77:16:db:61:6e:4b:f5:
22:c4:b0:ec:90:8b:49:b7:19:1a:ea:a1:0b:9b:b9:
e7:e8:d5:da:8f:c4:9d:0e:71:a1:4d:c9:dc:02:89:
1d:1d:65:8a:06:ff:9a:d6:23:9f:88:9d:ee:f9:51:
91:74:56:1e:e5:97:1c:4a:d2:d9:24:37:43:f0:a3:
81:da:7e:3c:65:0f:96:71:e5:55:50:e3:ef:cf:33:
b5:e6:62:c7:2f:c2:44:12:c3:55:3e:15:43:c8:95:
d3:b9:a4:e5:96:93:6f:bf:5e:05:83:44:14:5d:3b:
8b:87:d3:af:6d:44:46:66:1c:de:99:7b:2f:da:18:
b9:a9:03:5d:9a:58:f4:3a:7d:ec:4f:24:af:92:6c:
6d:06:bc:43:c0:76:69:54:d1:9f:e4:eb:40:eb:5b:
81:c0:00:f7:03:94:30:87:11:f0:0c:d2:af:65:38:
4a:3c:e2:ca:70:6a:78:29:6c:e7:55:f8:a0:9b:66:
0c:27:24:82:35:ca:31:94:0a:1a:57:09:f7:af:2a:
ce:25:81:44:0d:1f:e5:4a:86:cb:14:5c:50:eb:30:
7e:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:7C:9F:82:EF:C0:F7:A6:62:83:CC:1E:B8:31:D9:4A:04:9D:EF:A1
X509v3 Authority Key Identifier:
keyid:16:44:E6:C5:0C:B6:92:DF:B6:40:F6:F8:8E:22:8A:2D:9B:06:C6:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FkTmxQy2kt-2QPb4jiKKLZsGxnk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/d2e14e-f900-4ab0-93fd-fdebf125b48e/1/FkTmxQy2kt-2QPb4jiKKLZsGxnk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/d2e14e-f900-4ab0-93fd-fdebf125b48e/1/FkTmxQy2kt-2QPb4jiKKLZsGxnk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:43:f9:fc:1b:80:85:21:65:51:e8:6f:4d:3f:44:ba:68:53:
e8:70:42:1e:29:f5:45:42:76:47:e2:b3:cb:5c:77:b0:46:89:
dd:5b:35:19:e8:ac:c2:ac:13:f3:c8:7f:1a:e6:dc:e7:44:5c:
97:59:4c:57:8a:84:03:93:b0:f4:98:37:23:61:b7:e4:36:ce:
44:d7:4e:0f:63:6b:09:5a:05:1c:c2:f0:8d:53:3c:f0:76:57:
76:ec:92:a6:33:a7:e8:b0:71:93:ae:aa:e4:ab:f7:4d:7e:52:
63:ee:8d:29:7f:45:82:8d:2f:fe:9e:a3:39:30:32:99:a7:20:
6e:f9:0b:d0:1a:49:34:00:0f:c8:ee:d2:62:a0:22:e8:35:ab:
fd:fc:ca:ac:69:18:6e:c3:96:fe:a1:43:16:b2:85:34:7b:4e:
1b:64:e5:57:55:4e:54:ed:76:bd:16:c0:0e:be:8e:56:2b:9d:
51:aa:fc:7a:f3:32:0b:84:3a:03:c6:ab:29:e9:67:b9:6b:7d:
ef:b7:e7:2f:c1:78:4c:5d:98:10:3b:79:c0:85:9d:a6:6c:56:
e2:aa:76:8d:91:05:30:13:83:d8:2a:d6:24:e7:91:8b:31:d4:
cc:ec:07:05:de:33:59:83:b0:d9:94:be:02:26:f9:eb:a1:64:
0a:ab:94:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 06:56:55 2025 by rpki-client