Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/ea10b5-21f6-46b9-aad6-3f7a3e025e8b/1/flyFKPgXh8SJxUqZODkmn1prH5Q.mft
File: flyFKPgXh8SJxUqZODkmn1prH5Q.mft (raw, json)
Hash identifier: 6vQ0wPJfNOXSiHME9fxwgQdTYXOmfkVIzCaJKteF4rE=
Subject key identifier: F9:FD:EE:DE:84:0B:69:98:90:A9:9B:0F:8A:29:40:F1:92:A5:8B:47
Authority key identifier: 7E:5C:85:28:F8:17:87:C4:89:C5:4A:99:38:39:26:9F:5A:6B:1F:94
Certificate issuer: /CN=7e5c8528f81787c489c54a993839269f5a6b1f94
Certificate serial: 01958B842F1541ACB74BFB921E12DE049C72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/flyFKPgXh8SJxUqZODkmn1prH5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/ea10b5-21f6-46b9-aad6-3f7a3e025e8b/1/flyFKPgXh8SJxUqZODkmn1prH5Q.mft
Manifest number: 1498
Signing time: Wed 12 Mar 2025 18:00:50 +0000
Manifest this update: Wed 12 Mar 2025 18:00:50 +0000
Manifest next update: Thu 13 Mar 2025 18:00:50 +0000
Files and hashes: 1: flyFKPgXh8SJxUqZODkmn1prH5Q.crl (hash: NCmj9lJ0aY2oJ4j4Ak75izOWS9FY45u+XTEVWlCAKi0=)
2: hfVNxhpqjhtY0Y5pPH1kyqqYbyE.roa (hash: aFX0mNsdzdwNbH9dkbmbgQ2YlhtWRYm/NSgRF7fVXw4=)
3: qlFHFeROOID5WaWVEHwvwxWAzLw.roa (hash: //F8owzBylzzc3mWkvQYIjr2mTOF+4WmUYspBcjO8y4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/ea10b5-21f6-46b9-aad6-3f7a3e025e8b/1/flyFKPgXh8SJxUqZODkmn1prH5Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/ea10b5-21f6-46b9-aad6-3f7a3e025e8b/1/flyFKPgXh8SJxUqZODkmn1prH5Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/flyFKPgXh8SJxUqZODkmn1prH5Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 18:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8b:84:2f:15:41:ac:b7:4b:fb:92:1e:12:de:04:9c:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e5c8528f81787c489c54a993839269f5a6b1f94
Validity
Not Before: Mar 12 18:00:50 2025 GMT
Not After : Mar 13 18:00:50 2025 GMT
Subject: CN=f9fdeede840b699890a99b0f8a2940f192a58b47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:28:9d:06:8f:e6:1b:fa:ca:47:13:6b:60:ea:
c2:45:4f:64:7a:3a:14:1e:0b:d7:fe:ee:1a:ec:a6:
c3:88:ec:11:3e:ac:4a:28:f6:73:85:3d:37:c0:3f:
30:96:ee:90:2d:44:5b:dd:ba:5b:62:50:50:13:ea:
07:d7:cf:92:0f:23:a0:87:52:ad:d0:f2:1d:88:49:
c0:07:12:0d:69:db:1a:cb:ba:82:23:66:a9:44:d8:
72:6c:dc:db:00:d2:99:a2:d6:ac:d2:03:71:4a:5d:
1c:83:5f:0d:b0:20:1c:52:69:26:f7:63:3f:bd:8d:
aa:27:59:6b:e4:a2:78:73:3c:3d:ec:33:98:4f:d1:
bd:0c:c2:fa:99:22:03:aa:07:9a:85:39:43:12:87:
00:3e:88:aa:bb:11:5b:f9:49:a9:a5:ca:d2:e6:ed:
94:b6:0d:3a:40:c5:00:8e:02:07:10:c6:b8:2c:7a:
8b:78:09:50:db:3e:d5:24:e4:db:15:f5:37:c2:1c:
88:74:fc:81:8b:f5:6f:c4:68:d1:88:3b:97:f1:6f:
36:59:9d:5b:bb:0a:ca:38:4d:e7:6a:06:be:38:82:
49:72:5f:13:5d:26:15:c9:2e:73:40:30:80:4b:47:
46:af:39:cc:07:8a:15:53:f3:1f:9c:07:64:70:0f:
d3:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:FD:EE:DE:84:0B:69:98:90:A9:9B:0F:8A:29:40:F1:92:A5:8B:47
X509v3 Authority Key Identifier:
keyid:7E:5C:85:28:F8:17:87:C4:89:C5:4A:99:38:39:26:9F:5A:6B:1F:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/flyFKPgXh8SJxUqZODkmn1prH5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/ea10b5-21f6-46b9-aad6-3f7a3e025e8b/1/flyFKPgXh8SJxUqZODkmn1prH5Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/ea10b5-21f6-46b9-aad6-3f7a3e025e8b/1/flyFKPgXh8SJxUqZODkmn1prH5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:fc:43:dc:cd:04:e9:41:12:ba:7f:4d:33:b6:40:b9:5f:fe:
da:d7:84:97:b6:24:5a:2a:84:10:69:5f:c6:5c:26:1b:ce:02:
16:9d:1b:13:10:5f:41:ea:5e:89:c9:fb:c8:f2:54:b2:df:1e:
6a:0e:3a:00:b5:ff:47:e7:bf:cf:c2:e8:b5:aa:63:af:b9:d5:
5f:55:7a:97:61:98:ca:62:2f:54:b3:b9:f0:7b:d9:85:35:8f:
d8:82:30:77:11:d5:ef:3a:99:2d:20:65:9f:77:66:c6:87:11:
53:91:4e:f3:25:1f:2b:99:a2:90:bd:65:7f:90:4c:41:93:bf:
ef:8c:2b:26:90:46:28:e6:09:bc:58:0e:65:7a:36:87:eb:c0:
17:2d:aa:54:5c:34:38:cd:96:ea:cc:d3:45:52:08:51:79:ca:
8d:38:0d:42:14:6b:61:4f:5f:b5:e5:1a:ff:52:b3:fa:09:31:
d3:4e:d6:b1:b3:a0:7b:25:c3:fa:b8:38:a2:27:39:83:a3:91:
c4:43:d6:64:62:58:4b:65:0e:c7:d1:48:a2:19:35:53:20:ae:
55:f6:77:92:70:b4:d5:55:ae:fc:d2:88:b7:34:ab:17:2c:b3:
cc:1a:fa:2b:19:e5:10:db:d9:dd:0e:38:db:07:45:f5:1c:cc:
89:31:a0:23
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZWLhC8VQay3S/uSHhLeBJxyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlNWM4NTI4ZjgxNzg3YzQ4OWM1NGE5OTM4MzkyNjlmNWE2
YjFmOTQwHhcNMjUwMzEyMTgwMDUwWhcNMjUwMzEzMTgwMDUwWjAzMTEwLwYDVQQD
EyhmOWZkZWVkZTg0MGI2OTk4OTBhOTliMGY4YTI5NDBmMTkyYTU4YjQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtSidBo/mG/rKRxNrYOrCRU9kejoU
HgvX/u4a7KbDiOwRPqxKKPZzhT03wD8wlu6QLURb3bpbYlBQE+oH18+SDyOgh1Kt
0PIdiEnABxINadsay7qCI2apRNhybNzbANKZotas0gNxSl0cg18NsCAcUmkm92M/
vY2qJ1lr5KJ4czw97DOYT9G9DML6mSIDqgeahTlDEocAPoiquxFb+UmppcrS5u2U
tg06QMUAjgIHEMa4LHqLeAlQ2z7VJOTbFfU3whyIdPyBi/VvxGjRiDuX8W82WZ1b
uwrKOE3naga+OIJJcl8TXSYVyS5zQDCAS0dGrznMB4oVU/MfnAdkcA/TEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPn97t6EC2mYkKmbD4opQPGSpYtHMB8GA1UdIwQY
MBaAFH5chSj4F4fEicVKmTg5Jp9aax+UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmx5RktQZ1hoOFNKeFVxWk9Ea21uMXBySDVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9lYTEwYjUtMjFmNi00NmI5LWFhZDYt
M2Y3YTNlMDI1ZThiLzEvZmx5RktQZ1hoOFNKeFVxWk9Ea21uMXBySDVRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi9lYTEwYjUtMjFmNi00NmI5LWFhZDYtM2Y3YTNlMDI1ZThi
LzEvZmx5RktQZ1hoOFNKeFVxWk9Ea21uMXBySDVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKPxD3M0E
6UESun9NM7ZAuV/+2teEl7YkWiqEEGlfxlwmG84CFp0bExBfQepeicn7yPJUst8e
ag46ALX/R+e/z8Lotapjr7nVX1V6l2GYymIvVLO58HvZhTWP2IIwdxHV7zqZLSBl
n3dmxocRU5FO8yUfK5mikL1lf5BMQZO/74wrJpBGKOYJvFgOZXo2h+vAFy2qVFw0
OM2W6szTRVIIUXnKjTgNQhRrYU9fteUa/1Kz+gkx007WsbOgeyXD+rg4oic5g6OR
xEPWZGJYS2UOx9FIohk1UyCuVfZ3knC01VWu/NKItzSrFyyzzBr6KxnlENvZ3Q44
2wdF9RzMiTGgIw==
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:46:27 2025 by rpki-client