Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/aa164f-e5ad-4237-9bb9-0e57bd92b798/1/FlAwKhah7Cm1aambSuEFc8YmNto.mft
File: FlAwKhah7Cm1aambSuEFc8YmNto.mft (raw, json)
Hash identifier: Slq4B62X+cczSq6Y3IF+UxmIAOQqr6PPWFjbUa/rDF8=
Subject key identifier: 0E:27:88:6A:B4:04:42:C3:C2:DB:4F:5A:8A:51:52:C8:8C:FD:E9:17
Authority key identifier: 16:50:30:2A:16:A1:EC:29:B5:69:A9:9B:4A:E1:05:73:C6:26:36:DA
Certificate issuer: /CN=1650302a16a1ec29b569a99b4ae10573c62636da
Certificate serial: 019922FA6A14123847990AF695803AAA2BB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FlAwKhah7Cm1aambSuEFc8YmNto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/aa164f-e5ad-4237-9bb9-0e57bd92b798/1/FlAwKhah7Cm1aambSuEFc8YmNto.mft
Manifest number: 0867
Signing time: Sun 07 Sep 2025 07:01:00 +0000
Manifest this update: Sun 07 Sep 2025 07:01:00 +0000
Manifest next update: Mon 08 Sep 2025 07:01:00 +0000
Files and hashes: 1: FlAwKhah7Cm1aambSuEFc8YmNto.crl (hash: C79DmkbaWyv2X3CjC5AVMbyE5t0lMS6257MFT5grkjc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/aa164f-e5ad-4237-9bb9-0e57bd92b798/1/FlAwKhah7Cm1aambSuEFc8YmNto.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/aa164f-e5ad-4237-9bb9-0e57bd92b798/1/FlAwKhah7Cm1aambSuEFc8YmNto.mft
rsync://rpki.ripe.net/repository/DEFAULT/FlAwKhah7Cm1aambSuEFc8YmNto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:6a:14:12:38:47:99:0a:f6:95:80:3a:aa:2b:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1650302a16a1ec29b569a99b4ae10573c62636da
Validity
Not Before: Sep 7 07:01:00 2025 GMT
Not After : Sep 8 07:01:00 2025 GMT
Subject: CN=0e27886ab40442c3c2db4f5a8a5152c88cfde917
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:c2:71:77:71:0b:b0:58:cb:03:32:d1:59:f5:
df:4f:06:a1:75:cc:11:d5:04:e6:58:78:16:5d:64:
86:ff:d6:14:dd:b2:12:8c:2d:e8:c6:4c:92:4d:54:
4a:00:06:e4:4e:85:b2:1d:8f:b7:d0:5c:14:11:62:
b7:16:8f:76:91:f4:15:87:d1:3e:9b:44:e7:e8:de:
48:92:98:ce:44:9f:b1:e6:0b:49:72:59:7b:9a:61:
9e:43:e7:28:54:1c:db:ce:5e:19:a3:7a:a0:53:86:
fd:d3:ab:9d:4d:ac:a3:a5:82:23:0a:97:6a:19:75:
b0:b5:c5:36:d8:99:46:71:b5:80:a9:06:72:4c:b5:
c1:c6:14:cd:d4:6a:e1:95:84:b9:08:27:aa:3f:3c:
47:60:a9:1c:23:fb:63:3e:5c:39:c7:6a:df:9b:24:
21:7d:65:af:bc:e4:ee:a9:be:94:39:b9:af:ce:ce:
fa:bf:23:a3:54:b2:d4:fc:bd:ee:7d:95:4d:a5:cd:
90:a0:7a:13:f4:cd:00:e3:01:ca:4a:bf:8f:34:29:
63:26:9d:8b:b2:5e:8a:3c:3b:1d:ef:85:69:2d:49:
71:20:c5:d9:7f:9f:3d:f7:4b:7a:bc:0b:9c:99:68:
bd:83:84:5c:88:23:7a:9f:b6:23:2a:8a:04:46:77:
06:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:27:88:6A:B4:04:42:C3:C2:DB:4F:5A:8A:51:52:C8:8C:FD:E9:17
X509v3 Authority Key Identifier:
keyid:16:50:30:2A:16:A1:EC:29:B5:69:A9:9B:4A:E1:05:73:C6:26:36:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FlAwKhah7Cm1aambSuEFc8YmNto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/aa164f-e5ad-4237-9bb9-0e57bd92b798/1/FlAwKhah7Cm1aambSuEFc8YmNto.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/aa164f-e5ad-4237-9bb9-0e57bd92b798/1/FlAwKhah7Cm1aambSuEFc8YmNto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:e7:06:06:65:64:e4:87:bb:6d:83:6a:49:f2:73:5f:bd:1a:
49:8c:72:6e:d9:25:c5:d8:16:23:0d:45:d7:04:6f:aa:70:bf:
fe:31:4d:92:6a:11:a0:3b:3c:4e:6d:26:c2:d8:68:b6:e7:56:
24:d7:28:a6:9c:b5:01:e9:d6:58:7f:35:17:cf:f7:55:36:66:
6c:6f:6c:a9:7f:cc:e3:19:8a:38:e3:1c:d7:6e:3a:24:f6:12:
bd:1f:2e:89:2b:90:42:75:7b:03:0b:ef:c7:eb:cf:4f:f3:b9:
94:f9:07:5e:e9:7e:60:8e:fe:b0:22:fa:9a:24:6b:25:76:3e:
46:5b:26:05:75:e4:8d:68:8f:fa:10:9b:dc:3d:c3:06:cf:ca:
5e:e4:32:a9:10:37:fc:20:2c:ca:a5:4a:f9:75:0a:01:da:da:
9b:66:f1:4c:aa:1f:5f:07:d4:17:4d:0f:ab:6b:f8:a0:f0:00:
b4:63:db:00:5f:85:53:ca:c1:1c:9a:07:b0:fd:c3:1d:70:e3:
c9:76:ea:3b:e8:76:47:88:7e:07:0f:b6:6f:5f:1a:e0:39:69:
a9:26:23:03:7b:a0:a1:5c:1a:9b:09:1a:ef:df:24:c4:5b:b5:
b5:84:74:ac:79:03:fb:af:65:c0:4b:ba:d7:71:ff:6a:99:0b:
3c:94:44:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZki+moUEjhHmQr2lYA6qiuyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2NTAzMDJhMTZhMWVjMjliNTY5YTk5YjRhZTEwNTczYzYy
NjM2ZGEwHhcNMjUwOTA3MDcwMTAwWhcNMjUwOTA4MDcwMTAwWjAzMTEwLwYDVQQD
EygwZTI3ODg2YWI0MDQ0MmMzYzJkYjRmNWE4YTUxNTJjODhjZmRlOTE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1sJxd3ELsFjLAzLRWfXfTwahdcwR
1QTmWHgWXWSG/9YU3bISjC3oxkySTVRKAAbkToWyHY+30FwUEWK3Fo92kfQVh9E+
m0Tn6N5IkpjORJ+x5gtJcll7mmGeQ+coVBzbzl4Zo3qgU4b906udTayjpYIjCpdq
GXWwtcU22JlGcbWAqQZyTLXBxhTN1GrhlYS5CCeqPzxHYKkcI/tjPlw5x2rfmyQh
fWWvvOTuqb6UObmvzs76vyOjVLLU/L3ufZVNpc2QoHoT9M0A4wHKSr+PNCljJp2L
sl6KPDsd74VpLUlxIMXZf58990t6vAucmWi9g4RciCN6n7YjKooERncGbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA4niGq0BELDwttPWopRUsiM/ekXMB8GA1UdIwQY
MBaAFBZQMCoWoewptWmpm0rhBXPGJjbaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmxBd0toYWg3Q20xYWFtYlN1RUZjOFltTnRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9hYTE2NGYtZTVhZC00MjM3LTliYjkt
MGU1N2JkOTJiNzk4LzEvRmxBd0toYWg3Q20xYWFtYlN1RUZjOFltTnRvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC9hYTE2NGYtZTVhZC00MjM3LTliYjktMGU1N2JkOTJiNzk4
LzEvRmxBd0toYWg3Q20xYWFtYlN1RUZjOFltTnRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPOcGBmVk
5Ie7bYNqSfJzX70aSYxybtklxdgWIw1F1wRvqnC//jFNkmoRoDs8Tm0mwthotudW
JNcoppy1AenWWH81F8/3VTZmbG9sqX/M4xmKOOMc1246JPYSvR8uiSuQQnV7Awvv
x+vPT/O5lPkHXul+YI7+sCL6miRrJXY+RlsmBXXkjWiP+hCb3D3DBs/KXuQyqRA3
/CAsyqVK+XUKAdram2bxTKofXwfUF00Pq2v4oPAAtGPbAF+FU8rBHJoHsP3DHXDj
yXbqO+h2R4h+Bw+2b18a4DlpqSYjA3ugoVwamwka798kxFu1tYR0rHkD+69lwEu6
13H/apkLPJRE2A==
-----END CERTIFICATE-----
Generated at Sun Sep 7 14:41:32 2025 by rpki-client