Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/321f74-092d-4dff-b335-2054f6e61922/1/FlHT3cat1IO3YawEdiaVM_5-pxc.mft
File: FlHT3cat1IO3YawEdiaVM_5-pxc.mft (raw, json)
Hash identifier: fgvcyaXMBi7+JVJ2ftCVsW39IRhuX5sLBUYF38wnmmg=
Subject key identifier: B4:00:3A:14:72:42:46:76:50:2B:DF:13:08:E8:F3:82:8F:0E:29:F6
Authority key identifier: 16:51:D3:DD:C6:AD:D4:83:B7:61:AC:04:76:26:95:33:FE:7E:A7:17
Certificate issuer: /CN=1651d3ddc6add483b761ac0476269533fe7ea717
Certificate serial: 019746D47E59737DBE8B4B429B01F447168F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FlHT3cat1IO3YawEdiaVM_5-pxc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/321f74-092d-4dff-b335-2054f6e61922/1/FlHT3cat1IO3YawEdiaVM_5-pxc.mft
Manifest number: 157C
Signing time: Fri 06 Jun 2025 20:00:20 +0000
Manifest this update: Fri 06 Jun 2025 20:00:20 +0000
Manifest next update: Sat 07 Jun 2025 20:00:20 +0000
Files and hashes: 1: FlHT3cat1IO3YawEdiaVM_5-pxc.crl (hash: +OZDds2bmOfO7Z0obWvv2M+poKWU6e3/rBDjxP2RITg=)
2: OAOWe7maY9pSBU-5gVNjG4r2PZI.roa (hash: cj95WRLXDZ1GDxFc9L374qruvZwqpq+kg9Wr756ijmA=)
3: RS5heur6Cn3t-3NSKUpCkvrpLSg.roa (hash: TdAX1fGTzy2GwxRzSlF7GAvHIAjv8je9eFZvPOiAzfs=)
4: cisW_uPMTWGjpMgFOVf9HNh_jYk.roa (hash: Wdm0HXAD65sFut0/XjR/drYS0oNc3aDjPik/CLx6CYk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/321f74-092d-4dff-b335-2054f6e61922/1/FlHT3cat1IO3YawEdiaVM_5-pxc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/321f74-092d-4dff-b335-2054f6e61922/1/FlHT3cat1IO3YawEdiaVM_5-pxc.mft
rsync://rpki.ripe.net/repository/DEFAULT/FlHT3cat1IO3YawEdiaVM_5-pxc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:d4:7e:59:73:7d:be:8b:4b:42:9b:01:f4:47:16:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1651d3ddc6add483b761ac0476269533fe7ea717
Validity
Not Before: Jun 6 20:00:20 2025 GMT
Not After : Jun 7 20:00:20 2025 GMT
Subject: CN=b4003a1472424676502bdf1308e8f3828f0e29f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:78:cc:b3:a1:e5:ea:38:65:ff:1c:82:ad:8d:
d2:77:7d:73:f8:a7:7c:12:1a:c2:82:56:31:2c:31:
d3:f9:56:a1:4c:91:32:92:1a:1b:35:e1:5a:5f:3a:
81:a9:9e:14:f9:a4:ff:ee:e7:52:d0:2d:0e:ae:2a:
b6:7c:18:ae:ad:86:5a:24:75:72:ef:fb:a1:d3:68:
af:87:cb:3c:84:40:41:48:46:92:5e:3a:58:08:89:
c6:ff:fc:bd:e7:a2:a8:6f:06:de:be:de:e1:f5:4e:
99:f4:b6:64:ea:d7:74:60:50:07:dc:51:96:7e:c2:
52:5f:52:d9:32:cc:65:21:c9:21:43:1d:d7:b7:d9:
e4:7a:21:70:73:5d:c8:45:59:40:61:fc:76:29:23:
ea:96:3d:bb:e0:9b:79:fa:10:90:62:36:6e:f6:b1:
96:13:0d:bb:c3:e3:c8:09:06:b8:7b:3d:e8:ba:8b:
ef:47:43:8a:9d:dd:39:46:32:a9:7b:84:06:2d:8a:
cf:d1:7b:c4:78:af:39:03:2a:3b:8f:10:13:47:2c:
1b:5f:a8:7f:4d:07:d3:6a:5f:82:76:dd:e8:ef:66:
22:36:bb:e5:01:38:a1:8f:83:28:a2:68:7a:a4:66:
55:c0:97:b3:61:64:23:1d:a2:ff:8e:d0:14:0e:35:
28:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:00:3A:14:72:42:46:76:50:2B:DF:13:08:E8:F3:82:8F:0E:29:F6
X509v3 Authority Key Identifier:
keyid:16:51:D3:DD:C6:AD:D4:83:B7:61:AC:04:76:26:95:33:FE:7E:A7:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FlHT3cat1IO3YawEdiaVM_5-pxc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/321f74-092d-4dff-b335-2054f6e61922/1/FlHT3cat1IO3YawEdiaVM_5-pxc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/321f74-092d-4dff-b335-2054f6e61922/1/FlHT3cat1IO3YawEdiaVM_5-pxc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:fb:96:fd:5f:55:e9:a1:e3:c1:8d:8c:41:f4:2a:2e:05:d6:
93:ef:de:d6:ad:b8:13:bb:87:4f:34:01:02:8c:9d:18:b6:4c:
e9:ac:a0:d6:66:45:97:b3:25:09:c8:d4:9b:67:db:a2:4c:32:
be:8a:ac:0e:26:dd:c2:6e:69:98:9d:8d:67:b7:cf:d0:4b:26:
dd:ea:0b:46:0b:8d:86:ad:c6:9c:97:5b:70:ef:53:ba:6e:3d:
b8:87:f7:d3:07:3e:e5:b9:0a:43:32:a7:ba:ae:17:f4:35:88:
6b:13:99:3d:55:70:83:01:1f:b2:65:d8:42:05:52:d8:98:08:
f7:bf:f4:44:81:54:95:b0:97:e7:a1:58:fa:4d:05:8c:25:37:
e0:4d:81:22:9d:62:b0:e7:19:6e:96:69:b0:f7:e3:cf:4d:ca:
9d:0a:37:28:93:f4:9f:ee:62:ac:41:61:10:dc:90:ba:0f:0d:
e1:34:dd:f8:dd:69:f4:2d:6e:29:00:08:7d:42:22:f3:53:86:
f2:39:97:9a:2f:cd:e0:e3:9e:1b:98:f5:ad:23:96:5e:78:84:
2b:4e:bd:43:ff:8b:6c:cd:43:cd:91:a6:5d:83:1a:00:eb:20:
b1:c0:98:d8:86:bf:c2:4e:4d:61:46:76:25:ce:11:26:3b:ab:
85:77:d0:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:00:27 2025 by rpki-client