Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/aa164f-e5ad-4237-9bb9-0e57bd92b798/1/FlAwKhah7Cm1aambSuEFc8YmNto.mft
File: FlAwKhah7Cm1aambSuEFc8YmNto.mft (raw, json)
Hash identifier: G/PxPqWsCkbjxhIY225tncATRtd/qT7bS0vKn+a5Z70=
Subject key identifier: BF:1D:F5:B1:8C:6F:00:F5:38:D1:B6:DE:63:2A:C7:79:5E:F6:A6:DE
Authority key identifier: 16:50:30:2A:16:A1:EC:29:B5:69:A9:9B:4A:E1:05:73:C6:26:36:DA
Certificate issuer: /CN=1650302a16a1ec29b569a99b4ae10573c62636da
Certificate serial: 019749D6082C3D24F4757FDC328C0CEB395E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FlAwKhah7Cm1aambSuEFc8YmNto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/aa164f-e5ad-4237-9bb9-0e57bd92b798/1/FlAwKhah7Cm1aambSuEFc8YmNto.mft
Manifest number: 0772
Signing time: Sat 07 Jun 2025 10:00:52 +0000
Manifest this update: Sat 07 Jun 2025 10:00:52 +0000
Manifest next update: Sun 08 Jun 2025 10:00:52 +0000
Files and hashes: 1: FlAwKhah7Cm1aambSuEFc8YmNto.crl (hash: IIKki5aN6cg57zzcMzn/yjllD4G+7+hHosfn/b0c/Ug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/aa164f-e5ad-4237-9bb9-0e57bd92b798/1/FlAwKhah7Cm1aambSuEFc8YmNto.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/aa164f-e5ad-4237-9bb9-0e57bd92b798/1/FlAwKhah7Cm1aambSuEFc8YmNto.mft
rsync://rpki.ripe.net/repository/DEFAULT/FlAwKhah7Cm1aambSuEFc8YmNto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:d6:08:2c:3d:24:f4:75:7f:dc:32:8c:0c:eb:39:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1650302a16a1ec29b569a99b4ae10573c62636da
Validity
Not Before: Jun 7 10:00:52 2025 GMT
Not After : Jun 8 10:00:52 2025 GMT
Subject: CN=bf1df5b18c6f00f538d1b6de632ac7795ef6a6de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ad:ef:19:2b:64:c2:3a:a7:b5:82:02:e9:0a:
47:32:24:ce:80:a1:8c:2d:17:09:c6:b5:bb:1a:ab:
5e:1f:dc:51:3e:ef:b3:a4:df:7a:d3:d7:96:a4:0f:
3d:44:93:72:71:4a:bd:cb:81:83:a2:43:4a:03:47:
82:81:5d:31:c3:24:b9:9b:d4:46:13:3f:9d:b7:7e:
11:4a:19:97:83:a4:b3:c0:45:09:38:d5:a7:4f:9d:
52:20:a7:97:0f:ab:4f:ac:e3:09:3a:14:88:cf:90:
e6:5e:ee:fd:c1:21:1a:ec:ba:87:fd:99:38:f8:32:
09:3d:a9:fc:ab:a6:7e:41:d4:52:ad:3b:3c:52:13:
b4:3a:b6:c8:e3:08:3b:bb:31:64:82:b2:1c:6b:06:
85:87:72:0f:31:74:0c:cb:9e:ee:57:ed:0e:b4:9d:
2b:a9:9c:8b:e6:c4:8d:b0:72:4b:9e:c0:e7:36:3e:
dd:60:be:7f:26:a8:45:cf:d5:59:48:66:aa:1d:3d:
4a:d2:bf:0e:da:01:38:dc:c4:d2:51:28:ac:52:a3:
2e:b8:d4:55:ef:47:46:a7:85:a7:45:98:2e:e6:a0:
bd:bf:0f:0e:6d:08:1c:4e:bb:0a:a9:1d:09:0e:5c:
3b:61:b1:65:60:b5:ed:b4:d8:ed:7d:5e:98:4e:f3:
b6:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:1D:F5:B1:8C:6F:00:F5:38:D1:B6:DE:63:2A:C7:79:5E:F6:A6:DE
X509v3 Authority Key Identifier:
keyid:16:50:30:2A:16:A1:EC:29:B5:69:A9:9B:4A:E1:05:73:C6:26:36:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FlAwKhah7Cm1aambSuEFc8YmNto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/aa164f-e5ad-4237-9bb9-0e57bd92b798/1/FlAwKhah7Cm1aambSuEFc8YmNto.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/aa164f-e5ad-4237-9bb9-0e57bd92b798/1/FlAwKhah7Cm1aambSuEFc8YmNto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:b4:14:44:a9:7e:e6:d5:0c:02:f0:83:69:85:ac:0f:e0:14:
f0:ab:68:5c:5e:63:7e:e9:c6:e8:db:e9:ff:2b:cb:f3:f0:f4:
13:94:3a:4a:dc:f4:c5:c5:3d:56:35:25:2c:79:dc:00:99:74:
91:aa:95:09:d3:84:18:ac:03:43:21:a9:38:cd:8e:60:9b:e6:
04:63:73:d4:63:3f:0c:53:d8:07:93:8e:5a:df:aa:36:87:0a:
39:fa:fd:ee:c3:b7:c4:da:2d:ac:4b:ce:c7:72:4f:1e:44:97:
81:d7:32:a7:7d:a4:91:8f:79:03:66:3f:31:f4:51:66:36:56:
ed:8d:32:21:48:67:81:28:07:24:f7:b8:73:88:57:2c:9b:d8:
7e:35:7d:f7:74:96:2e:67:0f:ea:b9:c7:6d:ad:4e:52:4b:db:
83:6b:3e:ea:99:3f:20:7a:7d:07:4c:54:a7:88:21:f3:05:3f:
de:78:d3:4b:54:7b:fd:a9:f0:d1:dd:83:3c:b5:80:b0:72:ba:
5c:3c:e9:4e:2e:15:18:29:1a:ef:34:81:f5:6b:30:b4:51:8b:
aa:8c:93:7f:6b:81:4b:ee:b1:68:aa:39:8e:28:e3:d6:be:ca:
6e:83:45:ae:bb:cb:98:b6:08:6a:5f:4e:c6:0d:5d:61:bb:80:
78:e8:7d:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:51:24 2025 by rpki-client