Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/21443f-e68f-49e6-abc9-6083393cf46e/1/flNU4TNHCPGAASuyN6lfn6x6Tlw.mft
File: flNU4TNHCPGAASuyN6lfn6x6Tlw.mft (raw, json)
Hash identifier: uLPwWRNP6h1vInPJZvGC3kgMx/yuzF3jRaG36lSqTMY=
Subject key identifier: C9:7D:0F:FF:4E:5E:96:46:92:AA:5F:0C:81:89:09:06:D5:05:FD:41
Authority key identifier: 7E:53:54:E1:33:47:08:F1:80:01:2B:B2:37:A9:5F:9F:AC:7A:4E:5C
Certificate issuer: /CN=7e5354e1334708f180012bb237a95f9fac7a4e5c
Certificate serial: 01964CD9B08046BB3A202361F299C95C203A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/flNU4TNHCPGAASuyN6lfn6x6Tlw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/21443f-e68f-49e6-abc9-6083393cf46e/1/flNU4TNHCPGAASuyN6lfn6x6Tlw.mft
Manifest number: 0802
Signing time: Sat 19 Apr 2025 07:00:56 +0000
Manifest this update: Sat 19 Apr 2025 07:00:56 +0000
Manifest next update: Sun 20 Apr 2025 07:00:56 +0000
Files and hashes: 1: 7NZ3oQkMOQoPZU36C6qwxb2VoVE.roa (hash: 47N6P40TbSFw4GF5u3qAezQZQpvVncE6hSSscr+AiT4=)
2: flNU4TNHCPGAASuyN6lfn6x6Tlw.crl (hash: IwbY3DoNhZXF0vGYujd0gQJ9swWHRCW3RR4bUNBaYYs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/21443f-e68f-49e6-abc9-6083393cf46e/1/flNU4TNHCPGAASuyN6lfn6x6Tlw.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/21443f-e68f-49e6-abc9-6083393cf46e/1/flNU4TNHCPGAASuyN6lfn6x6Tlw.mft
rsync://rpki.ripe.net/repository/DEFAULT/flNU4TNHCPGAASuyN6lfn6x6Tlw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4c:d9:b0:80:46:bb:3a:20:23:61:f2:99:c9:5c:20:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e5354e1334708f180012bb237a95f9fac7a4e5c
Validity
Not Before: Apr 19 07:00:56 2025 GMT
Not After : Apr 20 07:00:56 2025 GMT
Subject: CN=c97d0fff4e5e964692aa5f0c81890906d505fd41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:08:e6:8d:3d:19:ba:54:14:c1:9e:b2:09:72:
6e:f0:0c:2e:f1:e9:f4:71:ee:55:e5:9d:24:7c:b9:
44:92:27:0e:c0:05:b6:5a:eb:ab:85:3a:68:6a:05:
8e:69:31:2b:4d:25:45:ab:b0:97:3e:a6:e0:bf:92:
a5:5a:58:da:87:f0:6a:26:51:a5:cb:b7:c4:99:79:
95:25:43:14:05:75:2d:2c:14:80:82:e7:dc:a5:a2:
ab:90:57:af:fa:f1:45:3f:17:28:f3:07:b2:c4:61:
7d:5e:81:bb:20:af:1c:46:b4:da:d5:70:7a:c2:42:
a6:44:83:7c:aa:79:be:e6:cb:d2:f5:38:ea:75:f9:
dd:bb:8d:d5:78:a9:87:cd:d8:a7:74:8f:06:ed:63:
53:8a:ed:4f:c3:16:35:2a:42:25:b4:2f:75:09:10:
5a:38:5f:55:ac:7d:38:ad:6a:3a:c7:22:89:d9:79:
ff:a5:0e:09:e0:cd:74:8e:00:aa:01:cb:a2:26:35:
98:12:23:fa:81:8d:eb:55:da:e4:75:38:e1:4c:99:
85:92:c5:0e:57:ed:f4:f0:68:82:0e:c4:a6:70:22:
c0:f3:66:50:fb:23:9e:03:65:98:a2:84:a7:c0:b2:
db:dd:45:ad:3f:62:78:1e:e7:65:e2:7e:a5:e1:0c:
38:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:7D:0F:FF:4E:5E:96:46:92:AA:5F:0C:81:89:09:06:D5:05:FD:41
X509v3 Authority Key Identifier:
keyid:7E:53:54:E1:33:47:08:F1:80:01:2B:B2:37:A9:5F:9F:AC:7A:4E:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/flNU4TNHCPGAASuyN6lfn6x6Tlw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/21443f-e68f-49e6-abc9-6083393cf46e/1/flNU4TNHCPGAASuyN6lfn6x6Tlw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/21443f-e68f-49e6-abc9-6083393cf46e/1/flNU4TNHCPGAASuyN6lfn6x6Tlw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:f0:26:4b:e1:9a:34:9b:42:f4:f4:7b:8d:ad:cf:cb:5a:07:
82:c8:e5:71:f1:a5:4a:9d:74:cf:2c:62:68:3f:f5:ca:66:92:
5f:72:79:e4:48:c8:8d:e3:8b:46:28:fb:9a:4d:4d:51:a9:6e:
96:61:e2:6f:6f:c4:44:e8:2d:ef:ce:c9:b3:4c:6e:80:a6:1a:
be:67:46:7c:26:10:48:e9:b0:ae:8e:3b:2b:50:4f:50:89:99:
3a:df:72:36:89:ee:73:0b:c8:06:cb:c4:87:3a:4e:c4:72:77:
f1:61:49:8b:e4:ef:a7:2f:dc:49:48:d5:fb:b8:4f:c6:3a:ca:
09:ea:76:1b:9f:a6:bd:f3:c4:55:c2:2f:47:76:4d:42:be:88:
99:91:56:2f:e1:25:d0:4e:fb:a7:c0:fd:30:26:6b:93:69:19:
fa:99:51:5c:f3:3a:fb:49:73:6f:a2:4b:7a:9a:7f:53:16:f4:
e7:36:e8:52:23:58:dc:10:b5:3e:ef:6b:0b:27:4e:c3:72:5b:
d9:15:ec:b9:4d:98:34:d4:83:ec:e8:76:d7:f0:ea:02:b4:3e:
08:ea:cc:8e:0d:72:2d:4a:24:4c:84:a7:19:a8:b3:2e:1f:8d:
32:76:56:d8:94:3e:fc:78:f2:00:71:ed:74:28:57:37:f4:3d:
5f:78:ab:40
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZM2bCARrs6ICNh8pnJXCA6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlNTM1NGUxMzM0NzA4ZjE4MDAxMmJiMjM3YTk1ZjlmYWM3
YTRlNWMwHhcNMjUwNDE5MDcwMDU2WhcNMjUwNDIwMDcwMDU2WjAzMTEwLwYDVQQD
EyhjOTdkMGZmZjRlNWU5NjQ2OTJhYTVmMGM4MTg5MDkwNmQ1MDVmZDQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvwjmjT0ZulQUwZ6yCXJu8Awu8en0
ce5V5Z0kfLlEkicOwAW2WuurhTpoagWOaTErTSVFq7CXPqbgv5KlWljah/BqJlGl
y7fEmXmVJUMUBXUtLBSAgufcpaKrkFev+vFFPxco8weyxGF9XoG7IK8cRrTa1XB6
wkKmRIN8qnm+5svS9Tjqdfndu43VeKmHzdindI8G7WNTiu1PwxY1KkIltC91CRBa
OF9VrH04rWo6xyKJ2Xn/pQ4J4M10jgCqAcuiJjWYEiP6gY3rVdrkdTjhTJmFksUO
V+308GiCDsSmcCLA82ZQ+yOeA2WYooSnwLLb3UWtP2J4Hudl4n6l4Qw4KQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMl9D/9OXpZGkqpfDIGJCQbVBf1BMB8GA1UdIwQY
MBaAFH5TVOEzRwjxgAErsjepX5+sek5cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmxOVTRUTkhDUEdBQVN1eU42bGZuNng2VGx3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi8yMTQ0M2YtZTY4Zi00OWU2LWFiYzkt
NjA4MzM5M2NmNDZlLzEvZmxOVTRUTkhDUEdBQVN1eU42bGZuNng2VGx3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi8yMTQ0M2YtZTY4Zi00OWU2LWFiYzktNjA4MzM5M2NmNDZl
LzEvZmxOVTRUTkhDUEdBQVN1eU42bGZuNng2VGx3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGPAmS+Ga
NJtC9PR7ja3Py1oHgsjlcfGlSp10zyxiaD/1ymaSX3J55EjIjeOLRij7mk1NUalu
lmHib2/EROgt787Js0xugKYavmdGfCYQSOmwro47K1BPUImZOt9yNonucwvIBsvE
hzpOxHJ38WFJi+Tvpy/cSUjV+7hPxjrKCep2G5+mvfPEVcIvR3ZNQr6ImZFWL+El
0E77p8D9MCZrk2kZ+plRXPM6+0lzb6JLepp/Uxb05zboUiNY3BC1Pu9rCydOw3Jb
2RXsuU2YNNSD7Oh21/DqArQ+COrMjg1yLUokTISnGaizLh+NMnZW2JQ+/HjyAHHt
dChXN/Q9X3irQA==
-----END CERTIFICATE-----
Generated at Sat Apr 19 12:44:00 2025 by rpki-client