Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/e71d21-a360-4579-81a0-bcca26fc8945/1/_kFOohqRFtLN-PXALQhnOvpXaJM.mft
File: _kFOohqRFtLN-PXALQhnOvpXaJM.mft (raw, json)
Hash identifier: 0bmvNR61q1WW+5ct2XUwkEcaBf9zVOjpU/Szep7A1MM=
Subject key identifier: 48:01:68:21:1B:00:3A:9E:F1:27:A9:42:86:BD:AB:A3:88:C2:3D:BF
Authority key identifier: FE:41:4E:A2:1A:91:16:D2:CD:F8:F5:C0:2D:08:67:3A:FA:57:68:93
Certificate issuer: /CN=fe414ea21a9116d2cdf8f5c02d08673afa576893
Certificate serial: 01963E789F378F84E9195897A3CBA9C0BFAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_kFOohqRFtLN-PXALQhnOvpXaJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/e71d21-a360-4579-81a0-bcca26fc8945/1/_kFOohqRFtLN-PXALQhnOvpXaJM.mft
Manifest number: 028D
Signing time: Wed 16 Apr 2025 12:00:14 +0000
Manifest this update: Wed 16 Apr 2025 12:00:14 +0000
Manifest next update: Thu 17 Apr 2025 12:00:14 +0000
Files and hashes: 1: 0MAgU7sTLhp2qbqkuMgBEoG1GaM.roa (hash: qBfT5pIrk1/WlfhHIXDzrsxZlkpu9JZ5SsEtvG7MW+c=)
2: _kFOohqRFtLN-PXALQhnOvpXaJM.crl (hash: 5qlqv2u6+cq4bwO1/2j4W5ZfCv9C6GHtBkw1eLbfho8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/e71d21-a360-4579-81a0-bcca26fc8945/1/_kFOohqRFtLN-PXALQhnOvpXaJM.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/e71d21-a360-4579-81a0-bcca26fc8945/1/_kFOohqRFtLN-PXALQhnOvpXaJM.mft
rsync://rpki.ripe.net/repository/DEFAULT/_kFOohqRFtLN-PXALQhnOvpXaJM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 12:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3e:78:9f:37:8f:84:e9:19:58:97:a3:cb:a9:c0:bf:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe414ea21a9116d2cdf8f5c02d08673afa576893
Validity
Not Before: Apr 16 12:00:14 2025 GMT
Not After : Apr 17 12:00:14 2025 GMT
Subject: CN=480168211b003a9ef127a94286bdaba388c23dbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:36:ea:81:b1:c7:5c:a2:cd:b0:80:f4:97:aa:
17:c7:a5:62:4d:c4:9c:e5:cf:dd:f3:dc:cb:55:aa:
1b:79:80:26:74:db:dc:4c:9b:e8:21:d8:d7:3d:12:
de:ef:3c:42:a2:eb:a8:6f:09:70:03:b5:1e:8f:3d:
93:62:47:92:57:ee:2c:81:04:b4:f3:32:5c:0c:23:
91:42:24:d5:19:f1:8f:3b:d0:c9:7a:df:26:51:34:
0f:9c:0a:1d:aa:d3:3b:4f:d9:57:e1:83:cf:9e:3f:
76:f3:5b:56:07:06:aa:49:1e:f9:ca:b9:97:73:c7:
76:c1:75:f9:21:35:5d:1e:c4:d6:93:4d:ab:52:fb:
5f:06:f6:e6:27:e4:5b:fd:05:19:97:19:9d:d4:a4:
ab:de:e5:67:f9:4c:e6:e8:13:d2:a7:e5:3a:88:0f:
c7:ff:b1:d6:59:05:a0:6e:70:6c:3e:f0:26:76:2d:
1a:21:54:7c:26:71:82:86:ae:d6:e6:96:ff:86:30:
1f:f5:06:7b:b9:4a:c4:9c:0b:a6:47:06:0b:78:4b:
eb:d4:d3:31:51:73:90:e0:42:36:b5:2f:c4:56:02:
8a:3c:fe:16:2b:3a:1f:3b:29:dc:c9:cb:b4:36:14:
17:06:ba:f9:ec:4f:d1:12:51:49:dc:14:03:a6:2f:
87:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:01:68:21:1B:00:3A:9E:F1:27:A9:42:86:BD:AB:A3:88:C2:3D:BF
X509v3 Authority Key Identifier:
keyid:FE:41:4E:A2:1A:91:16:D2:CD:F8:F5:C0:2D:08:67:3A:FA:57:68:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_kFOohqRFtLN-PXALQhnOvpXaJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/e71d21-a360-4579-81a0-bcca26fc8945/1/_kFOohqRFtLN-PXALQhnOvpXaJM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/e71d21-a360-4579-81a0-bcca26fc8945/1/_kFOohqRFtLN-PXALQhnOvpXaJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:e3:94:58:2e:02:7c:54:73:e2:e3:b9:5e:a5:1b:2e:44:6f:
05:1f:2d:c7:e5:f9:f9:3b:67:63:33:c2:31:50:8c:8e:75:1e:
3f:f6:e7:21:34:8c:40:32:01:55:24:1c:f0:69:ad:60:b0:7c:
fa:b1:d8:9c:09:e0:1b:72:7a:60:bb:1b:10:d6:1e:9b:d6:d0:
ac:e5:b2:ec:35:da:9a:31:2e:21:c5:5d:45:bb:ff:af:0c:23:
a7:b3:38:ac:67:40:e0:54:67:e2:28:4a:e3:fd:e0:19:a9:e4:
56:70:4c:dd:1d:99:9e:0d:9c:37:ef:44:f4:80:f2:f1:9e:17:
54:5a:46:65:70:4f:b3:35:96:08:2a:05:d9:37:38:64:19:7f:
0f:ec:98:03:fa:a8:74:18:83:6e:14:7b:ac:2a:b7:49:c9:42:
b7:50:14:73:cc:1d:84:e9:08:6a:d1:ee:28:5e:5f:11:e5:5b:
c4:2d:1e:4a:4e:ca:db:be:40:ff:0e:bd:cf:18:16:cc:68:ee:
b8:37:4f:ba:ee:ab:da:0b:d3:5e:17:df:e0:79:0a:6b:dc:33:
37:c0:b8:a7:38:8d:79:73:6b:44:ad:09:eb:82:bd:bf:ee:01:
c5:60:a9:a0:1c:6f:bc:2f:aa:60:43:e7:ef:41:e4:77:7e:82:
47:e2:eb:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 15:51:48 2025 by rpki-client