Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/ff5133-ca11-42db-b03d-544855cc4f57/1/FlnrYEAZPfBoE1CQXmOdDljV-d8.mft
File: FlnrYEAZPfBoE1CQXmOdDljV-d8.mft (raw, json)
Hash identifier: jmdWrjShHZXfXH8IuJBgH3WxOzR9gbKPejtw7Ha4loE=
Subject key identifier: 89:CE:DE:AD:ED:80:66:E2:5F:82:2A:43:C2:DC:12:C4:C0:CB:D1:2F
Authority key identifier: 16:59:EB:60:40:19:3D:F0:68:13:50:90:5E:63:9D:0E:58:D5:F9:DF
Certificate issuer: /CN=1659eb6040193df0681350905e639d0e58d5f9df
Certificate serial: 019742C174916565A6D65A71B50891B64531
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FlnrYEAZPfBoE1CQXmOdDljV-d8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/ff5133-ca11-42db-b03d-544855cc4f57/1/FlnrYEAZPfBoE1CQXmOdDljV-d8.mft
Manifest number: 13E2
Signing time: Fri 06 Jun 2025 01:01:03 +0000
Manifest this update: Fri 06 Jun 2025 01:01:03 +0000
Manifest next update: Sat 07 Jun 2025 01:01:03 +0000
Files and hashes: 1: 8-v-Z7Xa6lfqMbl7evIHp25t1sA.roa (hash: BWcCx1HwRpdJveviEQtt8WgW8hrEfngJob3ia7RrZwQ=)
2: FlnrYEAZPfBoE1CQXmOdDljV-d8.crl (hash: 4Gj43VVQKDcx2zEz/kD77XhzsCS1+LaQ6DQcBpHSTg4=)
3: cFc0gNIOK5WxBeuSF5eiQkXoOKE.roa (hash: GkH9aMuKOzi/6cYcKbTikX2OvYkhD9zkPc0LnUJCl1A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/ff5133-ca11-42db-b03d-544855cc4f57/1/FlnrYEAZPfBoE1CQXmOdDljV-d8.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/ff5133-ca11-42db-b03d-544855cc4f57/1/FlnrYEAZPfBoE1CQXmOdDljV-d8.mft
rsync://rpki.ripe.net/repository/DEFAULT/FlnrYEAZPfBoE1CQXmOdDljV-d8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 01:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:42:c1:74:91:65:65:a6:d6:5a:71:b5:08:91:b6:45:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1659eb6040193df0681350905e639d0e58d5f9df
Validity
Not Before: Jun 6 01:01:03 2025 GMT
Not After : Jun 7 01:01:03 2025 GMT
Subject: CN=89cedeaded8066e25f822a43c2dc12c4c0cbd12f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:66:be:2a:e3:53:b4:25:3c:9e:e5:63:fb:64:
1c:0c:ce:16:34:de:0e:0e:ed:b8:15:2f:d6:94:d0:
5d:22:cb:1a:fb:06:69:d6:7d:98:ee:62:a1:ee:e1:
ce:3d:30:38:6f:0b:ad:34:94:f3:6f:83:df:4c:7f:
6c:7a:34:a7:5a:cd:6d:2c:00:67:71:08:e3:93:61:
7b:7e:a8:1e:45:fc:ac:52:24:55:9f:78:75:fc:e3:
71:4d:fa:97:96:7a:6b:0c:2e:5a:eb:2d:e7:e3:08:
c6:11:f7:55:fb:29:02:5a:ab:26:73:69:69:2e:da:
0c:fb:f8:4a:8c:d4:f1:1d:4e:4a:8c:ba:3a:fd:1c:
23:f6:08:2e:56:b2:25:80:e5:24:34:ec:3b:8c:67:
fe:20:8e:ca:42:09:18:10:29:84:e4:01:21:9d:52:
d0:01:f1:c8:6d:df:ab:d7:f4:3e:db:fc:5f:38:27:
c2:c9:44:86:f5:1c:3c:8b:24:4f:ea:68:bb:59:b7:
c0:d0:37:4f:4c:be:b5:29:04:86:a5:22:47:d0:d8:
d4:f2:95:f0:28:99:a0:78:3b:53:ed:48:2d:52:c1:
5a:ee:f4:06:27:ab:b8:23:cf:0a:87:64:4e:f5:07:
6a:f5:de:00:75:7d:63:d2:12:7f:94:7c:f1:8b:e5:
21:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:CE:DE:AD:ED:80:66:E2:5F:82:2A:43:C2:DC:12:C4:C0:CB:D1:2F
X509v3 Authority Key Identifier:
keyid:16:59:EB:60:40:19:3D:F0:68:13:50:90:5E:63:9D:0E:58:D5:F9:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FlnrYEAZPfBoE1CQXmOdDljV-d8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/ff5133-ca11-42db-b03d-544855cc4f57/1/FlnrYEAZPfBoE1CQXmOdDljV-d8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/ff5133-ca11-42db-b03d-544855cc4f57/1/FlnrYEAZPfBoE1CQXmOdDljV-d8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:80:87:57:27:47:ae:22:8c:9c:94:72:3d:71:01:69:6e:29:
d3:2b:52:d7:57:90:f2:b4:ee:d4:98:1f:5b:cc:0c:c8:c6:f2:
c6:74:b9:32:61:9c:f6:6d:32:b9:1d:41:8f:7f:ce:22:ec:5a:
08:55:05:01:d5:76:54:5d:c1:3c:6a:ae:52:3e:b1:11:b8:5e:
0e:5a:7b:e1:a8:4d:78:4c:8b:3f:41:a5:0f:41:f3:c3:7a:a9:
ee:f1:d2:39:6d:81:71:e9:bd:94:6d:c7:fb:a4:8b:33:bc:64:
d9:8b:89:64:0c:eb:84:03:c5:8d:bf:41:4e:01:63:bd:8f:f8:
10:3e:b7:25:7c:80:b7:07:c8:df:04:c8:51:c5:60:68:3c:b6:
0e:6e:e8:ee:c2:ee:45:b6:96:c1:fd:5c:fd:55:35:55:19:d9:
b5:96:5d:07:4a:1f:fe:b7:ac:a6:f3:b5:2e:8e:77:8e:fb:b3:
69:a3:d1:1f:97:25:2e:2e:10:59:2b:0a:e1:8d:e8:f2:71:a3:
2b:d3:43:1c:1c:66:9e:bd:0e:80:cc:ea:f3:30:e3:00:25:cd:
b1:d9:52:72:0d:19:6b:c9:7d:e9:2d:b1:fe:a0:f1:ec:70:6b:
b4:86:e1:c2:a9:1b:a0:9f:b7:1c:e6:d9:56:b3:67:09:b7:13:
cb:ef:c3:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 11:33:28 2025 by rpki-client