Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/21443f-e68f-49e6-abc9-6083393cf46e/1/flNU4TNHCPGAASuyN6lfn6x6Tlw.mft
File: flNU4TNHCPGAASuyN6lfn6x6Tlw.mft (raw, json)
Hash identifier: Od7rhKzC/NqcNj9Tt92AjZTBy8IE5Q456cEDXtfaDUw=
Subject key identifier: BF:30:E0:7E:3F:8B:72:0B:EF:36:25:2D:6B:9E:B8:46:A5:68:85:83
Authority key identifier: 7E:53:54:E1:33:47:08:F1:80:01:2B:B2:37:A9:5F:9F:AC:7A:4E:5C
Certificate issuer: /CN=7e5354e1334708f180012bb237a95f9fac7a4e5c
Certificate serial: 0197556BCEBE55681082EE0BEAFCF4AC7155
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/flNU4TNHCPGAASuyN6lfn6x6Tlw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/21443f-e68f-49e6-abc9-6083393cf46e/1/flNU4TNHCPGAASuyN6lfn6x6Tlw.mft
Manifest number: 088B
Signing time: Mon 09 Jun 2025 16:00:17 +0000
Manifest this update: Mon 09 Jun 2025 16:00:17 +0000
Manifest next update: Tue 10 Jun 2025 16:00:17 +0000
Files and hashes: 1: 7NZ3oQkMOQoPZU36C6qwxb2VoVE.roa (hash: 47N6P40TbSFw4GF5u3qAezQZQpvVncE6hSSscr+AiT4=)
2: flNU4TNHCPGAASuyN6lfn6x6Tlw.crl (hash: aOjY2bdEAR9zY4EGG9zYuLqKdt3/5NShLlPAmHhLUKM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/21443f-e68f-49e6-abc9-6083393cf46e/1/flNU4TNHCPGAASuyN6lfn6x6Tlw.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/21443f-e68f-49e6-abc9-6083393cf46e/1/flNU4TNHCPGAASuyN6lfn6x6Tlw.mft
rsync://rpki.ripe.net/repository/DEFAULT/flNU4TNHCPGAASuyN6lfn6x6Tlw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 11:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:55:6b:ce:be:55:68:10:82:ee:0b:ea:fc:f4:ac:71:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e5354e1334708f180012bb237a95f9fac7a4e5c
Validity
Not Before: Jun 9 16:00:17 2025 GMT
Not After : Jun 10 16:00:17 2025 GMT
Subject: CN=bf30e07e3f8b720bef36252d6b9eb846a5688583
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:72:53:de:20:30:25:1c:0b:33:fd:57:57:08:
bc:71:5d:06:a2:63:1f:a8:6f:8f:11:95:05:61:9b:
b0:56:88:d2:21:2b:f2:64:98:22:da:bd:74:14:0c:
b7:a1:48:8d:9d:29:59:6a:e7:0d:1d:ce:f7:ad:ef:
c3:c5:56:1e:e7:9c:53:15:2a:f5:30:94:8b:3c:70:
db:9f:02:e2:1a:b3:dc:18:28:eb:55:81:93:68:b5:
df:f3:f3:87:2c:2d:27:b0:da:70:2b:d2:fc:73:0d:
4d:03:71:41:a3:d9:82:8a:1e:88:2e:c9:d6:8e:f7:
9c:90:2f:29:20:93:94:0a:d8:35:bf:51:10:c6:3c:
ac:76:df:21:16:bf:4e:8d:7a:48:5b:46:5a:9a:64:
0e:78:8d:b2:7f:9d:6b:dc:e8:b2:11:b8:66:ce:40:
2e:f3:68:eb:08:ab:08:42:d1:ee:9f:cc:6c:73:d6:
5c:e7:e6:77:3d:de:3c:da:9d:b9:8a:e2:4b:62:dd:
87:dd:64:85:da:7b:56:f8:2d:2f:fc:91:d4:bf:e7:
0f:ce:d4:30:38:f0:04:e4:c3:ff:5a:7a:6b:9c:ff:
53:fa:e7:05:1c:00:46:19:75:88:2b:28:07:bd:9f:
8c:c6:7b:9b:24:51:a6:94:46:32:ad:45:70:a2:92:
7f:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:30:E0:7E:3F:8B:72:0B:EF:36:25:2D:6B:9E:B8:46:A5:68:85:83
X509v3 Authority Key Identifier:
keyid:7E:53:54:E1:33:47:08:F1:80:01:2B:B2:37:A9:5F:9F:AC:7A:4E:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/flNU4TNHCPGAASuyN6lfn6x6Tlw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/21443f-e68f-49e6-abc9-6083393cf46e/1/flNU4TNHCPGAASuyN6lfn6x6Tlw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/21443f-e68f-49e6-abc9-6083393cf46e/1/flNU4TNHCPGAASuyN6lfn6x6Tlw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:99:87:f1:74:09:e3:e7:63:17:61:12:71:e9:28:f6:a5:94:
c1:69:87:e5:e0:f0:89:18:58:04:d4:22:f1:22:0d:e6:9b:24:
b4:66:bc:69:30:6f:d3:47:91:91:56:37:75:81:8f:06:b3:44:
08:df:9a:89:99:ca:be:46:7d:17:42:2e:9e:4b:72:12:fa:01:
fe:12:00:6e:05:04:f5:56:2e:a2:35:98:de:e3:08:91:df:ad:
3c:2b:c1:bf:93:e2:f7:24:dd:80:58:92:af:8e:6a:1e:9b:19:
b5:24:b7:2e:b1:31:ff:c5:2f:e4:44:23:f0:72:28:3e:c8:1e:
f7:1f:0f:b2:4b:4d:95:06:24:80:6b:d4:5e:98:2e:b2:f1:48:
e6:a5:dd:5f:81:37:73:51:df:c3:90:48:63:12:31:ed:c5:1a:
2c:a3:27:fb:da:77:c6:9b:ec:01:dc:52:8f:3a:7d:fc:be:6a:
64:40:bf:35:35:36:28:0d:03:97:76:99:c4:65:be:84:c5:c6:
08:e6:fd:fd:cb:47:d2:ac:80:d6:f1:d7:20:de:bc:ee:7e:d8:
3f:cd:bf:18:53:23:9b:f4:b5:82:48:bb:1a:cb:11:c1:e2:9d:
84:71:2f:be:89:79:2e:1f:9e:78:ea:18:c3:b2:c9:e4:00:23:
e7:c7:1e:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdVa86+VWgQgu4L6vz0rHFVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlNTM1NGUxMzM0NzA4ZjE4MDAxMmJiMjM3YTk1ZjlmYWM3
YTRlNWMwHhcNMjUwNjA5MTYwMDE3WhcNMjUwNjEwMTYwMDE3WjAzMTEwLwYDVQQD
EyhiZjMwZTA3ZTNmOGI3MjBiZWYzNjI1MmQ2YjllYjg0NmE1Njg4NTgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwXJT3iAwJRwLM/1XVwi8cV0GomMf
qG+PEZUFYZuwVojSISvyZJgi2r10FAy3oUiNnSlZaucNHc73re/DxVYe55xTFSr1
MJSLPHDbnwLiGrPcGCjrVYGTaLXf8/OHLC0nsNpwK9L8cw1NA3FBo9mCih6ILsnW
jveckC8pIJOUCtg1v1EQxjysdt8hFr9OjXpIW0ZammQOeI2yf51r3OiyEbhmzkAu
82jrCKsIQtHun8xsc9Zc5+Z3Pd482p25iuJLYt2H3WSF2ntW+C0v/JHUv+cPztQw
OPAE5MP/WnprnP9T+ucFHABGGXWIKygHvZ+MxnubJFGmlEYyrUVwopJ/8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL8w4H4/i3IL7zYlLWueuEalaIWDMB8GA1UdIwQY
MBaAFH5TVOEzRwjxgAErsjepX5+sek5cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmxOVTRUTkhDUEdBQVN1eU42bGZuNng2VGx3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi8yMTQ0M2YtZTY4Zi00OWU2LWFiYzkt
NjA4MzM5M2NmNDZlLzEvZmxOVTRUTkhDUEdBQVN1eU42bGZuNng2VGx3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi8yMTQ0M2YtZTY4Zi00OWU2LWFiYzktNjA4MzM5M2NmNDZl
LzEvZmxOVTRUTkhDUEdBQVN1eU42bGZuNng2VGx3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqJmH8XQJ
4+djF2ESceko9qWUwWmH5eDwiRhYBNQi8SIN5psktGa8aTBv00eRkVY3dYGPBrNE
CN+aiZnKvkZ9F0IunktyEvoB/hIAbgUE9VYuojWY3uMIkd+tPCvBv5Pi9yTdgFiS
r45qHpsZtSS3LrEx/8Uv5EQj8HIoPsge9x8PsktNlQYkgGvUXpgusvFI5qXdX4E3
c1Hfw5BIYxIx7cUaLKMn+9p3xpvsAdxSjzp9/L5qZEC/NTU2KA0Dl3aZxGW+hMXG
COb9/ctH0qyA1vHXIN687n7YP82/GFMjm/S1gki7GssRweKdhHEvvol5Lh+eeOoY
w7LJ5AAj58ceyA==
-----END CERTIFICATE-----
Generated at Mon Jun 9 18:27:03 2025 by rpki-client