Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/42cdab-2029-4624-9f4b-99323686216d/1/FKR4D1zQfpSL5vpLSSWnMTkG1es.mft
File: FKR4D1zQfpSL5vpLSSWnMTkG1es.mft (raw, json)
Hash identifier: H/wYtrM/5EXyLNU7ALn9wuhADsFHjk3GI/SiddK9JI4=
Subject key identifier: A4:01:DA:3F:A1:DC:30:26:3A:46:07:70:FE:31:14:D6:1C:9A:78:66
Authority key identifier: 14:A4:78:0F:5C:D0:7E:94:8B:E6:FA:4B:49:25:A7:31:39:06:D5:EB
Certificate issuer: /CN=14a4780f5cd07e948be6fa4b4925a7313906d5eb
Certificate serial: 019656B8086AD21913FAA0AF015355F61BA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FKR4D1zQfpSL5vpLSSWnMTkG1es.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/42cdab-2029-4624-9f4b-99323686216d/1/FKR4D1zQfpSL5vpLSSWnMTkG1es.mft
Manifest number: 129E
Signing time: Mon 21 Apr 2025 05:00:23 +0000
Manifest this update: Mon 21 Apr 2025 05:00:23 +0000
Manifest next update: Tue 22 Apr 2025 05:00:23 +0000
Files and hashes: 1: 77yJaauLzrFexoGSd8mW28O_fIU.roa (hash: ub7MVHo9mZ0L5vdaNfZlA1Alkn53dGfVV4Z9Peyi1bs=)
2: FKR4D1zQfpSL5vpLSSWnMTkG1es.crl (hash: Pj+CzhQ0mAXUjwNL6p058ioM9WJ1/Z/eyX0MlQq92x4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/42cdab-2029-4624-9f4b-99323686216d/1/FKR4D1zQfpSL5vpLSSWnMTkG1es.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/42cdab-2029-4624-9f4b-99323686216d/1/FKR4D1zQfpSL5vpLSSWnMTkG1es.mft
rsync://rpki.ripe.net/repository/DEFAULT/FKR4D1zQfpSL5vpLSSWnMTkG1es.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:b8:08:6a:d2:19:13:fa:a0:af:01:53:55:f6:1b:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14a4780f5cd07e948be6fa4b4925a7313906d5eb
Validity
Not Before: Apr 21 05:00:23 2025 GMT
Not After : Apr 22 05:00:23 2025 GMT
Subject: CN=a401da3fa1dc30263a460770fe3114d61c9a7866
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ba:0c:0e:0f:46:73:96:5d:58:72:75:23:4f:
e7:11:f3:6a:1c:72:b8:51:68:05:f9:5c:79:55:01:
80:02:96:b6:67:cf:fc:95:64:44:82:66:dc:44:3c:
77:60:07:03:48:44:2e:b4:d5:1e:6d:9b:43:59:bd:
2c:54:b6:a7:f2:9e:75:ae:6d:91:d2:b1:f3:60:7b:
e0:dc:12:a7:9c:36:d7:14:ff:49:12:23:3b:e9:d3:
9c:1b:eb:b6:f5:eb:8c:80:13:6e:19:83:7e:e6:f9:
4e:5c:b8:da:c8:44:e7:c9:ad:a8:14:4a:47:5d:b3:
cb:fd:81:41:43:d6:0c:8a:74:b0:35:70:04:2b:c4:
52:f0:e1:f1:0b:ad:43:9e:ae:8f:30:4f:82:ae:b1:
f6:86:c2:6c:4f:06:51:ce:70:ea:a4:a9:f9:01:34:
2c:04:be:cb:ef:9a:83:0e:e0:68:bb:af:b0:f2:f8:
ce:5d:8f:ec:36:c8:fb:60:5b:d4:f2:e3:c0:87:25:
9f:34:a7:36:ef:f8:65:a7:98:fa:4b:65:74:01:38:
5c:89:61:74:ca:ae:50:56:6a:98:f2:f4:99:1a:af:
79:75:ee:de:fe:4e:30:83:a8:56:9c:e3:9d:23:61:
b0:c8:a0:80:af:a3:d8:65:97:72:f6:8e:26:57:ef:
b2:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:01:DA:3F:A1:DC:30:26:3A:46:07:70:FE:31:14:D6:1C:9A:78:66
X509v3 Authority Key Identifier:
keyid:14:A4:78:0F:5C:D0:7E:94:8B:E6:FA:4B:49:25:A7:31:39:06:D5:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FKR4D1zQfpSL5vpLSSWnMTkG1es.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/42cdab-2029-4624-9f4b-99323686216d/1/FKR4D1zQfpSL5vpLSSWnMTkG1es.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/42cdab-2029-4624-9f4b-99323686216d/1/FKR4D1zQfpSL5vpLSSWnMTkG1es.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:19:18:c5:d5:d0:0d:26:e1:e2:c1:e9:a0:d2:bd:f3:7e:5b:
44:fe:93:08:6a:12:3f:18:c4:51:ae:9e:f6:41:6b:86:20:d0:
e9:75:70:ef:0f:e8:f6:b9:e3:03:e3:1e:eb:16:13:23:a8:e7:
0b:53:39:7e:f4:94:07:e8:25:38:cc:fe:e6:86:0b:3f:d2:29:
eb:90:98:77:ea:ac:1d:6f:83:63:e6:22:4e:b1:28:49:bf:7d:
44:6f:36:8e:5a:96:19:19:82:ca:e6:29:ae:bc:71:d2:d9:1e:
18:16:af:b9:21:49:c9:d7:22:ee:27:97:5c:9d:95:a4:db:a3:
26:44:3a:02:fb:0d:80:7e:ae:65:fe:e3:38:65:82:2a:71:0f:
23:a5:5d:70:aa:67:31:f7:ff:21:9b:30:49:ba:f0:c9:25:32:
01:5d:d0:26:6b:2f:8a:f5:56:30:84:76:f0:06:f0:76:42:cf:
de:de:98:d5:45:42:56:e3:b7:49:ef:23:2f:94:65:01:d8:05:
59:32:31:52:7c:fc:8a:30:05:8a:54:43:06:1d:e8:79:15:5d:
2d:aa:84:7c:1b:b7:17:19:13:96:02:ae:fd:92:66:64:ae:66:
ae:55:84:55:ba:7f:f0:d0:13:e3:b7:4f:b1:67:9f:6d:e4:23:
10:e7:2a:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:07:32 2025 by rpki-client