Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/ea10b5-21f6-46b9-aad6-3f7a3e025e8b/1/flyFKPgXh8SJxUqZODkmn1prH5Q.mft
File: flyFKPgXh8SJxUqZODkmn1prH5Q.mft (raw, json)
Hash identifier: 94NJvf2blnK0W7eJEcJRoKvWLWR0K4raSAMjkkyp7rI=
Subject key identifier: 81:6D:62:1D:8D:CC:59:F9:CF:67:78:DB:D2:44:A7:5B:62:C6:E8:39
Authority key identifier: 7E:5C:85:28:F8:17:87:C4:89:C5:4A:99:38:39:26:9F:5A:6B:1F:94
Certificate issuer: /CN=7e5c8528f81787c489c54a993839269f5a6b1f94
Certificate serial: 019511D9A63DF39D9366C4D6E8D1674C9240
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/flyFKPgXh8SJxUqZODkmn1prH5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/ea10b5-21f6-46b9-aad6-3f7a3e025e8b/1/flyFKPgXh8SJxUqZODkmn1prH5Q.mft
Manifest number: 1459
Signing time: Mon 17 Feb 2025 03:00:31 +0000
Manifest this update: Mon 17 Feb 2025 03:00:31 +0000
Manifest next update: Tue 18 Feb 2025 03:00:31 +0000
Files and hashes: 1: flyFKPgXh8SJxUqZODkmn1prH5Q.crl (hash: uVhw3/78xDySeadyPGse1YOF+r/yyqDtnyFfAPzgWjY=)
2: hfVNxhpqjhtY0Y5pPH1kyqqYbyE.roa (hash: aFX0mNsdzdwNbH9dkbmbgQ2YlhtWRYm/NSgRF7fVXw4=)
3: qlFHFeROOID5WaWVEHwvwxWAzLw.roa (hash: //F8owzBylzzc3mWkvQYIjr2mTOF+4WmUYspBcjO8y4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/ea10b5-21f6-46b9-aad6-3f7a3e025e8b/1/flyFKPgXh8SJxUqZODkmn1prH5Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/ea10b5-21f6-46b9-aad6-3f7a3e025e8b/1/flyFKPgXh8SJxUqZODkmn1prH5Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/flyFKPgXh8SJxUqZODkmn1prH5Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:d9:a6:3d:f3:9d:93:66:c4:d6:e8:d1:67:4c:92:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e5c8528f81787c489c54a993839269f5a6b1f94
Validity
Not Before: Feb 17 03:00:31 2025 GMT
Not After : Feb 18 03:00:31 2025 GMT
Subject: CN=816d621d8dcc59f9cf6778dbd244a75b62c6e839
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:e0:38:10:5b:bc:3a:e7:53:3b:95:b2:c5:c8:
4b:23:60:f0:6e:9d:c6:3a:31:54:10:6d:d9:51:1a:
a6:a7:c4:40:5e:a1:69:a1:bc:d7:e7:07:b2:50:5d:
32:a4:d0:50:4c:e2:27:6b:93:4b:fe:f6:c7:2a:3d:
d6:93:2b:39:11:f3:90:20:63:e4:c6:8a:51:c1:1d:
27:59:86:19:58:3e:f3:3a:51:15:79:7e:35:52:14:
3c:84:93:f7:4f:b3:69:1b:ea:46:25:a9:92:f6:d6:
7c:7c:5a:7f:69:48:ba:21:ed:35:59:1f:b1:df:42:
07:7f:b6:32:b7:53:bb:a0:e1:8f:15:66:b7:af:88:
90:be:c0:06:32:9c:0b:3e:5a:19:92:82:22:ca:e8:
34:c2:41:5a:90:4d:b8:97:3c:e2:83:be:80:43:9d:
2c:49:82:9b:4d:59:3b:06:75:6a:5b:c4:42:16:e8:
97:5a:21:58:e1:c8:69:3b:00:51:c4:53:37:47:0f:
61:73:3c:68:e6:2b:f6:6a:87:aa:a3:02:32:2a:94:
74:6d:1c:2d:63:e5:b8:dc:95:8f:48:30:94:c6:0d:
3f:1b:86:af:67:6d:7c:ed:09:df:01:6c:bc:4e:65:
83:ff:9b:2f:c9:97:5b:f0:2b:99:11:ff:e9:ff:4e:
aa:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:6D:62:1D:8D:CC:59:F9:CF:67:78:DB:D2:44:A7:5B:62:C6:E8:39
X509v3 Authority Key Identifier:
keyid:7E:5C:85:28:F8:17:87:C4:89:C5:4A:99:38:39:26:9F:5A:6B:1F:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/flyFKPgXh8SJxUqZODkmn1prH5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/ea10b5-21f6-46b9-aad6-3f7a3e025e8b/1/flyFKPgXh8SJxUqZODkmn1prH5Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/ea10b5-21f6-46b9-aad6-3f7a3e025e8b/1/flyFKPgXh8SJxUqZODkmn1prH5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:9b:f7:58:b8:43:b8:15:04:36:57:c8:b0:3c:53:87:11:ee:
a8:aa:16:78:8a:0f:e2:cc:73:29:48:b9:5e:f3:25:80:a8:44:
9b:e5:5e:30:95:d3:ec:29:f7:83:00:33:4c:99:ea:a8:fe:67:
83:56:ae:ab:a4:61:13:d2:da:a1:34:36:ab:03:fd:b1:8a:53:
7f:5a:ae:6e:e8:46:cb:1e:90:1c:9e:e2:be:71:62:d5:af:42:
8e:79:5b:05:47:6c:1e:a7:3a:d6:ac:bf:86:56:4e:25:3f:56:
cc:df:b2:66:ee:27:65:fd:cf:93:35:01:b9:4b:6e:de:3f:30:
a8:90:97:5e:8d:c2:a6:63:ec:17:c6:e1:11:39:ed:c3:64:7b:
d0:dd:05:34:24:b3:dc:4e:f8:1e:d7:12:e1:de:a2:50:4e:b9:
32:9d:64:f5:34:e5:35:fb:a7:d4:3e:c5:22:46:64:1a:d4:d8:
a7:e5:a1:05:b5:13:50:d0:24:e1:ca:8b:f0:6c:8b:71:d9:5e:
f6:d2:32:d5:31:4b:47:74:06:77:cf:31:e8:3c:d6:ee:ee:0b:
52:24:45:1d:8e:0d:cb:f3:11:0e:17:ae:66:73:a4:5b:0b:1a:
9a:b6:1a:c7:a0:d3:f4:39:27:b6:fd:38:51:ee:86:fa:35:c8:
70:d1:70:6c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZUR2aY9852TZsTW6NFnTJJAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlNWM4NTI4ZjgxNzg3YzQ4OWM1NGE5OTM4MzkyNjlmNWE2
YjFmOTQwHhcNMjUwMjE3MDMwMDMxWhcNMjUwMjE4MDMwMDMxWjAzMTEwLwYDVQQD
Eyg4MTZkNjIxZDhkY2M1OWY5Y2Y2Nzc4ZGJkMjQ0YTc1YjYyYzZlODM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2uA4EFu8OudTO5WyxchLI2Dwbp3G
OjFUEG3ZURqmp8RAXqFpobzX5weyUF0ypNBQTOIna5NL/vbHKj3Wkys5EfOQIGPk
xopRwR0nWYYZWD7zOlEVeX41UhQ8hJP3T7NpG+pGJamS9tZ8fFp/aUi6Ie01WR+x
30IHf7Yyt1O7oOGPFWa3r4iQvsAGMpwLPloZkoIiyug0wkFakE24lzzig76AQ50s
SYKbTVk7BnVqW8RCFuiXWiFY4chpOwBRxFM3Rw9hczxo5iv2aoeqowIyKpR0bRwt
Y+W43JWPSDCUxg0/G4avZ2187QnfAWy8TmWD/5svyZdb8CuZEf/p/06qDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIFtYh2NzFn5z2d429JEp1tixug5MB8GA1UdIwQY
MBaAFH5chSj4F4fEicVKmTg5Jp9aax+UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmx5RktQZ1hoOFNKeFVxWk9Ea21uMXBySDVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9lYTEwYjUtMjFmNi00NmI5LWFhZDYt
M2Y3YTNlMDI1ZThiLzEvZmx5RktQZ1hoOFNKeFVxWk9Ea21uMXBySDVRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi9lYTEwYjUtMjFmNi00NmI5LWFhZDYtM2Y3YTNlMDI1ZThi
LzEvZmx5RktQZ1hoOFNKeFVxWk9Ea21uMXBySDVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM5v3WLhD
uBUENlfIsDxThxHuqKoWeIoP4sxzKUi5XvMlgKhEm+VeMJXT7Cn3gwAzTJnqqP5n
g1auq6RhE9LaoTQ2qwP9sYpTf1qubuhGyx6QHJ7ivnFi1a9CjnlbBUdsHqc61qy/
hlZOJT9WzN+yZu4nZf3PkzUBuUtu3j8wqJCXXo3CpmPsF8bhETntw2R70N0FNCSz
3E74HtcS4d6iUE65Mp1k9TTlNfun1D7FIkZkGtTYp+WhBbUTUNAk4cqL8GyLcdle
9tIy1TFLR3QGd88x6DzW7u4LUiRFHY4Ny/MRDheuZnOkWwsamrYax6DT9Dkntv04
Ue6G+jXIcNFwbA==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:12:34 2025 by rpki-client