Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/e71d21-a360-4579-81a0-bcca26fc8945/1/_kFOohqRFtLN-PXALQhnOvpXaJM.mft
File: _kFOohqRFtLN-PXALQhnOvpXaJM.mft (raw, json)
Hash identifier: lpLql94bD/Z3dCdBNeLpb5ktcgMth1H9GMgH0QeUgQo=
Subject key identifier: 13:82:41:BE:2A:AA:E8:56:E5:C2:03:41:00:DD:6E:B6:9A:15:3D:7F
Authority key identifier: FE:41:4E:A2:1A:91:16:D2:CD:F8:F5:C0:2D:08:67:3A:FA:57:68:93
Certificate issuer: /CN=fe414ea21a9116d2cdf8f5c02d08673afa576893
Certificate serial: 01976DAB5F0A48B8178DC94A8AA3EE95D165
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_kFOohqRFtLN-PXALQhnOvpXaJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/e71d21-a360-4579-81a0-bcca26fc8945/1/_kFOohqRFtLN-PXALQhnOvpXaJM.mft
Manifest number: 032A
Signing time: Sat 14 Jun 2025 09:00:36 +0000
Manifest this update: Sat 14 Jun 2025 09:00:36 +0000
Manifest next update: Sun 15 Jun 2025 09:00:36 +0000
Files and hashes: 1: 0MAgU7sTLhp2qbqkuMgBEoG1GaM.roa (hash: qBfT5pIrk1/WlfhHIXDzrsxZlkpu9JZ5SsEtvG7MW+c=)
2: _kFOohqRFtLN-PXALQhnOvpXaJM.crl (hash: SMNIsiKY+QBmxV6zOZ2yCLBr8+z4o9S60zHP7vt5EmQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/e71d21-a360-4579-81a0-bcca26fc8945/1/_kFOohqRFtLN-PXALQhnOvpXaJM.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/e71d21-a360-4579-81a0-bcca26fc8945/1/_kFOohqRFtLN-PXALQhnOvpXaJM.mft
rsync://rpki.ripe.net/repository/DEFAULT/_kFOohqRFtLN-PXALQhnOvpXaJM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:ab:5f:0a:48:b8:17:8d:c9:4a:8a:a3:ee:95:d1:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe414ea21a9116d2cdf8f5c02d08673afa576893
Validity
Not Before: Jun 14 09:00:36 2025 GMT
Not After : Jun 15 09:00:36 2025 GMT
Subject: CN=138241be2aaae856e5c2034100dd6eb69a153d7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e6:5c:1f:9b:3c:6c:fb:1d:72:4e:8b:5d:6f:
1c:89:50:63:e8:a2:c5:60:78:b8:1a:f9:86:39:06:
14:e0:e1:65:27:ae:e1:05:13:ba:26:6d:f1:ae:52:
9e:69:f9:33:d1:7d:3a:4b:9c:fb:6f:84:5f:c3:f3:
49:e4:fa:16:a6:ef:48:27:da:7f:38:77:0b:dd:85:
c7:87:49:3d:e0:e5:a7:e8:75:a5:61:b6:87:62:1b:
12:73:29:c7:b9:fa:69:c1:19:23:b7:19:e2:94:32:
08:0e:53:da:f1:20:cc:27:12:29:ba:98:af:36:25:
ea:50:78:93:0d:d6:df:56:ec:78:c2:54:5a:24:05:
58:bc:5c:eb:98:7d:31:23:e6:2f:2e:af:78:37:2f:
7d:79:e6:04:e6:ef:ce:36:bd:6e:0e:31:62:43:7b:
85:37:7a:76:30:1a:1c:d5:0e:65:ad:0c:87:65:60:
60:f6:af:5c:40:49:08:67:94:07:81:7f:50:5d:8f:
97:75:d0:bd:1c:73:fd:3d:41:68:dd:d5:e0:3f:ea:
d3:42:85:06:88:d2:1f:1d:ff:8e:61:2b:f0:05:32:
41:de:bc:80:1c:df:c0:5c:25:88:0d:e5:e4:37:03:
9f:56:dc:52:fe:a0:5f:7c:4a:8f:2e:13:ff:63:f1:
53:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:82:41:BE:2A:AA:E8:56:E5:C2:03:41:00:DD:6E:B6:9A:15:3D:7F
X509v3 Authority Key Identifier:
keyid:FE:41:4E:A2:1A:91:16:D2:CD:F8:F5:C0:2D:08:67:3A:FA:57:68:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_kFOohqRFtLN-PXALQhnOvpXaJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/e71d21-a360-4579-81a0-bcca26fc8945/1/_kFOohqRFtLN-PXALQhnOvpXaJM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/e71d21-a360-4579-81a0-bcca26fc8945/1/_kFOohqRFtLN-PXALQhnOvpXaJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:d1:81:ca:1d:9a:2d:70:b4:93:54:69:e1:2a:1c:61:6d:f3:
82:ce:22:30:95:ef:41:cb:15:63:e1:0f:70:15:f1:b6:3a:cd:
65:05:ad:55:b5:97:06:b7:15:a2:b5:66:b4:f9:c3:b6:6d:12:
a6:e3:31:ee:76:11:38:98:32:31:82:5c:c2:3f:05:3b:50:63:
14:3f:9a:9c:e9:09:72:42:b2:ed:c7:8b:88:45:90:d8:a7:37:
1d:f4:33:08:71:fa:99:76:aa:2a:43:7d:72:73:23:03:78:8a:
e0:d6:60:0c:ea:bf:d1:cc:b7:64:f6:3a:7f:59:3b:ce:f7:89:
52:5a:64:0a:29:8d:dd:02:9d:d2:17:15:70:f7:23:f3:b0:42:
82:cb:33:6b:e3:9a:41:5c:0b:6f:d3:23:2c:27:b3:27:36:99:
da:e4:a3:3d:5e:bf:66:95:61:c5:d8:73:02:96:b5:e3:b2:2e:
5d:5b:38:98:3b:14:11:73:7e:93:89:5a:cf:03:15:1e:71:4d:
f9:2a:f4:56:96:f4:56:42:41:28:ae:e2:e8:93:1e:00:74:8e:
48:d7:ef:85:df:51:56:20:23:1d:a5:16:d7:e3:26:f7:df:d0:
c5:d9:58:1f:a5:32:68:b0:7f:af:42:1d:79:05:c4:5a:e1:83:
c9:09:ba:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 13:03:48 2025 by rpki-client