Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/db2692-4b71-43cb-a389-96f040bbba0d/1/FWKPn9qri4VJS8M4gJGhIrC7pcg.mft
File: FWKPn9qri4VJS8M4gJGhIrC7pcg.mft (raw, json)
Hash identifier: txZnVCWtfhvzJSSADldOm+OC9ckwd/+Uvajax6WbJdw=
Subject key identifier: 03:6A:EC:73:1A:41:32:48:7D:2E:95:0A:13:E4:2A:1F:AA:24:FD:F7
Authority key identifier: 15:62:8F:9F:DA:AB:8B:85:49:4B:C3:38:80:91:A1:22:B0:BB:A5:C8
Certificate issuer: /CN=15628f9fdaab8b85494bc3388091a122b0bba5c8
Certificate serial: 0196556E711565075EF441356C6FD5D32E0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FWKPn9qri4VJS8M4gJGhIrC7pcg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/db2692-4b71-43cb-a389-96f040bbba0d/1/FWKPn9qri4VJS8M4gJGhIrC7pcg.mft
Manifest number: 14FD
Signing time: Sun 20 Apr 2025 23:00:23 +0000
Manifest this update: Sun 20 Apr 2025 23:00:23 +0000
Manifest next update: Mon 21 Apr 2025 23:00:23 +0000
Files and hashes: 1: 7ckiXqFCsl9Ii0LOr5UmFiqADBU.roa (hash: 9bGwX0kwTRRgIdjNNDlgMuEQgvhNB3ZWI22IbqLrXvk=)
2: FWKPn9qri4VJS8M4gJGhIrC7pcg.crl (hash: fnzN/wMEJeuM9M15xLu+uMJ+tJVmxB/89Ms+hjO1TD0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/db2692-4b71-43cb-a389-96f040bbba0d/1/FWKPn9qri4VJS8M4gJGhIrC7pcg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/db2692-4b71-43cb-a389-96f040bbba0d/1/FWKPn9qri4VJS8M4gJGhIrC7pcg.mft
rsync://rpki.ripe.net/repository/DEFAULT/FWKPn9qri4VJS8M4gJGhIrC7pcg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 23:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:6e:71:15:65:07:5e:f4:41:35:6c:6f:d5:d3:2e:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15628f9fdaab8b85494bc3388091a122b0bba5c8
Validity
Not Before: Apr 20 23:00:23 2025 GMT
Not After : Apr 21 23:00:23 2025 GMT
Subject: CN=036aec731a4132487d2e950a13e42a1faa24fdf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:32:ae:b3:c9:10:ae:6e:02:90:bc:9e:fc:3d:
16:f5:1a:80:d2:93:d8:70:e5:cc:24:c0:03:8a:9c:
9d:24:9a:f8:70:fa:07:30:53:4d:70:4b:65:8c:ed:
00:18:fd:02:48:d5:a0:ba:46:43:c7:d9:a3:d0:e7:
84:bb:7a:42:f9:28:1d:95:0c:5a:44:59:83:10:62:
29:c3:70:c9:31:3f:3f:cd:ca:6b:84:ec:b4:62:da:
9e:2e:38:45:4f:32:62:86:fa:ca:d3:79:48:27:ba:
10:cb:0b:5f:98:fb:ca:12:c2:da:4e:54:11:ba:51:
cb:56:ec:ae:59:1d:3b:d5:65:b4:02:d2:17:48:1c:
01:42:97:1f:56:4c:c3:91:81:cf:ff:f0:df:1e:a4:
0f:54:23:39:e9:36:6f:62:11:47:dc:45:bd:04:f4:
89:ba:e8:98:58:a0:e2:58:26:7c:83:16:00:93:8e:
f8:85:78:71:6f:42:b1:27:22:b0:68:40:bc:5e:41:
76:0f:4d:9f:6b:89:c3:c9:22:68:88:03:47:bd:da:
11:11:72:9e:82:ba:21:7d:a2:c9:3c:8b:52:c0:79:
f2:e8:db:8d:9c:be:e1:9f:90:ff:aa:40:68:b6:1f:
0f:27:44:0a:76:bc:7d:0d:51:34:c2:4e:6f:47:b4:
0f:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:6A:EC:73:1A:41:32:48:7D:2E:95:0A:13:E4:2A:1F:AA:24:FD:F7
X509v3 Authority Key Identifier:
keyid:15:62:8F:9F:DA:AB:8B:85:49:4B:C3:38:80:91:A1:22:B0:BB:A5:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FWKPn9qri4VJS8M4gJGhIrC7pcg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/db2692-4b71-43cb-a389-96f040bbba0d/1/FWKPn9qri4VJS8M4gJGhIrC7pcg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/db2692-4b71-43cb-a389-96f040bbba0d/1/FWKPn9qri4VJS8M4gJGhIrC7pcg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:9b:72:28:37:87:66:13:07:db:4f:11:f3:0e:65:7b:00:d2:
04:49:29:b6:be:7f:53:04:fd:63:7b:bf:17:3f:57:23:d4:76:
3f:5b:d1:37:5a:3b:1e:95:db:e8:df:e2:b9:86:52:9c:0f:98:
fc:97:35:32:1a:43:73:c5:2b:b3:01:03:8a:52:df:13:4f:0b:
99:fc:7d:27:50:6d:fe:c3:ce:18:14:8a:a8:c6:6f:8c:4a:29:
2d:97:c6:7b:c4:75:60:63:16:c1:c6:f6:ea:32:f9:7c:67:83:
39:4f:aa:13:be:48:fc:d2:14:41:3e:d9:23:72:30:6f:7a:7a:
d5:8e:2c:b4:07:86:d4:f0:42:fe:9d:b7:ec:93:70:5d:29:47:
ff:72:c8:2f:11:01:a2:5a:85:87:24:28:2b:bc:54:ce:ae:68:
1f:e6:f7:99:81:83:a8:a9:8d:07:fa:96:ca:4e:15:93:55:0d:
17:b9:9e:b2:5a:55:2f:a0:f2:ef:e6:e2:b3:f9:42:d9:d5:d7:
b7:59:36:da:47:2d:88:1f:96:a5:57:7b:78:d7:ca:85:0f:79:
31:6e:b1:df:c7:6a:f3:b8:7d:41:08:3b:e1:fe:d8:5a:ea:f7:
a7:e6:5b:51:ae:d1:b2:37:fc:70:6b:25:7e:58:8a:7c:3f:5c:
cd:61:62:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:03:51 2025 by rpki-client