Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/e71d21-a360-4579-81a0-bcca26fc8945/1/_kFOohqRFtLN-PXALQhnOvpXaJM.mft
File: _kFOohqRFtLN-PXALQhnOvpXaJM.mft (raw, json)
Hash identifier: zlh+eW4odDY4RId1LKUG62E3EfYi7TpC0mIdepBCjeY=
Subject key identifier: 14:20:2D:84:2B:7D:A9:F5:54:EA:DD:20:CF:D4:10:F6:A5:D2:0B:5B
Authority key identifier: FE:41:4E:A2:1A:91:16:D2:CD:F8:F5:C0:2D:08:67:3A:FA:57:68:93
Certificate issuer: /CN=fe414ea21a9116d2cdf8f5c02d08673afa576893
Certificate serial: 01976026A317B71EEE96B3F6F53718D1E42B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_kFOohqRFtLN-PXALQhnOvpXaJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/e71d21-a360-4579-81a0-bcca26fc8945/1/_kFOohqRFtLN-PXALQhnOvpXaJM.mft
Manifest number: 0323
Signing time: Wed 11 Jun 2025 18:00:34 +0000
Manifest this update: Wed 11 Jun 2025 18:00:34 +0000
Manifest next update: Thu 12 Jun 2025 18:00:34 +0000
Files and hashes: 1: 0MAgU7sTLhp2qbqkuMgBEoG1GaM.roa (hash: qBfT5pIrk1/WlfhHIXDzrsxZlkpu9JZ5SsEtvG7MW+c=)
2: _kFOohqRFtLN-PXALQhnOvpXaJM.crl (hash: pDwTEvIhmU24yaZE8VWOBbOJcTkN/hyyQBM0qIGZCLY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/e71d21-a360-4579-81a0-bcca26fc8945/1/_kFOohqRFtLN-PXALQhnOvpXaJM.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/e71d21-a360-4579-81a0-bcca26fc8945/1/_kFOohqRFtLN-PXALQhnOvpXaJM.mft
rsync://rpki.ripe.net/repository/DEFAULT/_kFOohqRFtLN-PXALQhnOvpXaJM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 15:40:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:60:26:a3:17:b7:1e:ee:96:b3:f6:f5:37:18:d1:e4:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe414ea21a9116d2cdf8f5c02d08673afa576893
Validity
Not Before: Jun 11 18:00:34 2025 GMT
Not After : Jun 12 18:00:34 2025 GMT
Subject: CN=14202d842b7da9f554eadd20cfd410f6a5d20b5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:aa:b5:83:b1:48:c4:98:6d:1c:24:0c:c4:a5:
ac:3a:d1:21:ac:7b:15:f0:4c:f8:9b:a9:a8:b7:d3:
5b:51:43:89:99:38:87:d7:77:2c:22:b0:04:c8:6e:
d7:e9:8f:81:1b:69:7a:5f:7d:59:1d:a9:f2:1e:48:
9b:d4:bd:09:19:7a:cf:2b:b5:d8:85:89:62:eb:8c:
7d:a3:1b:d1:7f:59:82:16:17:8c:24:2c:46:3b:38:
f4:7b:2e:47:4a:16:7f:81:de:20:f1:6f:77:d6:67:
83:66:65:10:ad:1f:6f:37:e5:04:1f:62:35:59:a8:
00:df:7f:b3:d5:d4:75:95:6f:5e:44:c9:2a:fe:ef:
5b:69:9e:74:e4:9f:83:9f:dd:0b:c1:3c:8d:52:5c:
d8:ff:5b:7b:1f:0a:6c:a9:69:43:c2:1a:41:9e:d1:
0c:1b:da:50:c0:a4:a4:b0:a0:df:f7:25:57:c5:90:
3c:7e:20:86:87:c6:60:01:07:0b:ea:e1:ef:56:8f:
7d:ce:0c:ff:b5:53:49:77:a4:1d:85:c1:34:7b:0b:
74:39:64:23:25:e7:75:48:fe:c4:84:76:03:45:bd:
b4:29:69:54:9e:73:77:91:56:f7:a2:f4:74:28:f7:
aa:36:7b:0b:42:3c:0c:60:4a:77:6e:21:1f:66:87:
30:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:20:2D:84:2B:7D:A9:F5:54:EA:DD:20:CF:D4:10:F6:A5:D2:0B:5B
X509v3 Authority Key Identifier:
keyid:FE:41:4E:A2:1A:91:16:D2:CD:F8:F5:C0:2D:08:67:3A:FA:57:68:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_kFOohqRFtLN-PXALQhnOvpXaJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/e71d21-a360-4579-81a0-bcca26fc8945/1/_kFOohqRFtLN-PXALQhnOvpXaJM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/e71d21-a360-4579-81a0-bcca26fc8945/1/_kFOohqRFtLN-PXALQhnOvpXaJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:13:7d:3b:e1:01:f0:24:a7:f2:4a:85:d1:de:75:5c:01:95:
ef:4c:7c:06:0d:f9:7b:77:f2:95:4f:e5:17:60:ac:0b:68:cc:
b6:74:53:12:cc:4f:6f:ad:db:36:29:d0:72:72:dd:26:33:47:
0c:83:2f:01:9c:25:7d:37:b7:76:c5:1d:35:36:b6:40:28:b0:
98:cf:53:50:f5:16:b9:ec:80:a2:4d:0e:1c:f5:34:e6:d9:c4:
1c:de:3a:5d:7d:b1:f7:9d:5d:f0:f5:29:4c:38:1e:fa:e5:03:
47:93:18:b7:33:95:e3:ae:43:2e:11:a0:4f:3f:eb:a1:6a:4b:
d7:cb:3f:6e:c5:3d:73:00:8b:83:8a:b6:35:df:58:d4:95:fe:
08:5d:ab:11:f5:fd:72:4e:f5:0d:02:50:ae:ac:7a:a7:45:7d:
aa:56:e9:fd:31:9f:a0:66:0e:41:ad:0c:bd:74:49:08:a8:a4:
39:42:a5:f0:04:85:b1:e7:49:b3:52:cf:97:ef:4c:fc:d6:ff:
23:eb:3c:09:64:53:e4:a5:7e:9e:33:9f:af:25:bb:ab:a8:78:
1c:c9:1e:de:ac:a5:27:d8:ff:6c:f6:5b:0c:94:ca:6c:ac:79:
63:3d:93:9e:6e:cb:6c:af:c4:24:57:24:cb:d9:61:e2:0c:6d:
7a:17:90:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 22:36:00 2025 by rpki-client