Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/321f74-092d-4dff-b335-2054f6e61922/1/FlHT3cat1IO3YawEdiaVM_5-pxc.mft
File: FlHT3cat1IO3YawEdiaVM_5-pxc.mft (raw, json)
Hash identifier: 8azyU1LNnliRwhRGD7nT73jYkzp6V8pGJfN876Kq/JU=
Subject key identifier: 5B:2F:85:99:75:59:E6:15:91:DF:DF:81:6A:0A:80:7D:2A:A8:C2:A4
Authority key identifier: 16:51:D3:DD:C6:AD:D4:83:B7:61:AC:04:76:26:95:33:FE:7E:A7:17
Certificate issuer: /CN=1651d3ddc6add483b761ac0476269533fe7ea717
Certificate serial: 019923D6374D2430C99EB0F22FF8CE602806
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FlHT3cat1IO3YawEdiaVM_5-pxc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/321f74-092d-4dff-b335-2054f6e61922/1/FlHT3cat1IO3YawEdiaVM_5-pxc.mft
Manifest number: 1673
Signing time: Sun 07 Sep 2025 11:01:05 +0000
Manifest this update: Sun 07 Sep 2025 11:01:05 +0000
Manifest next update: Mon 08 Sep 2025 11:01:05 +0000
Files and hashes: 1: FlHT3cat1IO3YawEdiaVM_5-pxc.crl (hash: 8GdhoytQisvarxpJd8KAAeI4/OY3xgwU0JMssKOZG7U=)
2: OAOWe7maY9pSBU-5gVNjG4r2PZI.roa (hash: cj95WRLXDZ1GDxFc9L374qruvZwqpq+kg9Wr756ijmA=)
3: RS5heur6Cn3t-3NSKUpCkvrpLSg.roa (hash: TdAX1fGTzy2GwxRzSlF7GAvHIAjv8je9eFZvPOiAzfs=)
4: cisW_uPMTWGjpMgFOVf9HNh_jYk.roa (hash: Wdm0HXAD65sFut0/XjR/drYS0oNc3aDjPik/CLx6CYk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/321f74-092d-4dff-b335-2054f6e61922/1/FlHT3cat1IO3YawEdiaVM_5-pxc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/321f74-092d-4dff-b335-2054f6e61922/1/FlHT3cat1IO3YawEdiaVM_5-pxc.mft
rsync://rpki.ripe.net/repository/DEFAULT/FlHT3cat1IO3YawEdiaVM_5-pxc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:d6:37:4d:24:30:c9:9e:b0:f2:2f:f8:ce:60:28:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1651d3ddc6add483b761ac0476269533fe7ea717
Validity
Not Before: Sep 7 11:01:05 2025 GMT
Not After : Sep 8 11:01:05 2025 GMT
Subject: CN=5b2f85997559e61591dfdf816a0a807d2aa8c2a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:80:7f:19:a9:6a:d8:01:68:bc:d0:fb:4d:3f:
96:d4:d5:1f:e9:3a:9c:c1:a9:f8:b7:1b:c7:7a:38:
ae:e1:27:dc:e0:ad:15:9e:6f:be:18:03:07:f4:5e:
7f:40:68:2f:82:6b:ea:1d:90:f8:6c:f6:33:82:43:
b6:81:74:f7:62:4c:53:33:73:cc:4f:2e:9f:d8:15:
ee:d1:91:8d:6f:94:d6:92:38:6f:3f:15:af:59:3c:
71:bd:49:0a:de:e1:b9:fc:72:30:ef:f1:8c:c9:b3:
3a:12:a8:9f:62:82:c0:80:d7:1f:ad:7f:a7:7f:70:
d1:47:90:ff:ee:a4:ab:0a:ae:4c:fe:0e:9e:59:2d:
d4:5e:bd:24:6a:fb:fa:8b:65:9f:4b:d4:14:3e:26:
84:61:e9:e1:77:2d:5b:a7:c9:8e:b0:45:57:5a:cc:
ff:23:f6:f4:95:69:0d:58:ce:8d:17:76:99:7c:99:
dd:e6:c7:d8:12:58:66:8f:7c:7c:05:dd:83:07:73:
11:5c:15:37:df:4b:de:c0:3d:23:7a:96:8f:fa:e5:
66:4f:c3:2a:55:db:61:21:50:61:2c:13:69:1e:93:
c1:27:d3:1c:ca:48:ca:18:07:25:f2:b8:a7:73:d4:
10:61:16:f4:5f:b0:c4:a3:66:a4:55:4e:dd:c1:4a:
f7:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:2F:85:99:75:59:E6:15:91:DF:DF:81:6A:0A:80:7D:2A:A8:C2:A4
X509v3 Authority Key Identifier:
keyid:16:51:D3:DD:C6:AD:D4:83:B7:61:AC:04:76:26:95:33:FE:7E:A7:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FlHT3cat1IO3YawEdiaVM_5-pxc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/321f74-092d-4dff-b335-2054f6e61922/1/FlHT3cat1IO3YawEdiaVM_5-pxc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/321f74-092d-4dff-b335-2054f6e61922/1/FlHT3cat1IO3YawEdiaVM_5-pxc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:79:4f:b5:c1:17:65:38:8d:3b:f5:53:e9:e1:a2:fb:55:aa:
6c:9d:6d:bf:a6:ba:a5:db:3d:0f:fd:9d:7b:f6:03:5f:f4:da:
22:aa:1f:1d:15:dc:e4:78:6e:d3:92:0f:35:e0:1c:eb:7e:ac:
6d:71:fd:b6:80:2a:3f:36:d7:30:52:49:b7:8f:b0:87:f3:87:
97:3f:2d:56:16:09:a1:5b:68:85:70:a2:76:7d:63:95:b3:a9:
7b:cc:68:7a:71:3a:a5:71:ae:f4:31:27:de:e4:44:86:3c:7a:
e3:3b:53:6c:2a:92:44:17:6c:13:6c:07:9d:ce:1b:95:29:79:
f9:cc:71:c1:a3:c1:7f:bc:dd:cc:22:62:d7:c5:f2:b5:06:fe:
4b:e7:e2:ec:94:22:87:18:9c:06:c3:85:47:48:fc:9d:73:d4:
90:bd:fd:63:4f:d1:0e:e7:4b:63:74:5c:63:7e:cf:8b:0d:b4:
86:5e:a3:25:87:a5:cb:c4:91:bd:ab:71:93:f4:51:59:64:aa:
53:9a:6c:0e:fd:31:d8:42:51:bb:f4:b2:8a:6a:4c:ed:b7:16:
5f:20:2e:eb:68:99:fa:35:e7:0f:bc:08:15:ca:24:af:c5:d4:
3c:a7:42:bf:bd:32:12:b2:c7:c5:1f:68:ab:7e:53:67:4c:36:
96:27:04:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:56:11 2025 by rpki-client