Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/d13f84-16ce-4d51-a618-c2a5d9d70313/1/flrIG7zPhS8irI7VLS6S2zHY1gY.mft
File: flrIG7zPhS8irI7VLS6S2zHY1gY.mft (raw, json)
Hash identifier: VhsRqH54QwT/4Ari95Oi2uosFUZ92LTmD+Hs8FSgSfo=
Subject key identifier: 4B:4F:8F:2B:C4:A4:10:C9:D6:F2:FA:BC:0C:4A:1B:10:10:DE:26:03
Authority key identifier: 7E:5A:C8:1B:BC:CF:85:2F:22:AC:8E:D5:2D:2E:92:DB:31:D8:D6:06
Certificate issuer: /CN=7e5ac81bbccf852f22ac8ed52d2e92db31d8d606
Certificate serial: 0197462FCA0823CE41DF1B08AFB072213792
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/flrIG7zPhS8irI7VLS6S2zHY1gY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/d13f84-16ce-4d51-a618-c2a5d9d70313/1/flrIG7zPhS8irI7VLS6S2zHY1gY.mft
Manifest number: 0345
Signing time: Fri 06 Jun 2025 17:00:26 +0000
Manifest this update: Fri 06 Jun 2025 17:00:26 +0000
Manifest next update: Sat 07 Jun 2025 17:00:26 +0000
Files and hashes: 1: d0YXwc1ZBHHMR9ZAKLms7HlOiUA.roa (hash: XtdrQk1bystPGs3Lhcrr1va53IhMr+A/sR56pklaba8=)
2: flrIG7zPhS8irI7VLS6S2zHY1gY.crl (hash: mZn9aPYmf5+Ab9IyU77G9/3v6peBrGBEojEl7h7SHbI=)
3: yWx6-5ROTfngpbWofjIrovB2Q6E.roa (hash: v3rtNkszsHfCVuw51qTsQgDiQ2kYX2tvZDcMhV4gxJA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/d13f84-16ce-4d51-a618-c2a5d9d70313/1/flrIG7zPhS8irI7VLS6S2zHY1gY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/d13f84-16ce-4d51-a618-c2a5d9d70313/1/flrIG7zPhS8irI7VLS6S2zHY1gY.mft
rsync://rpki.ripe.net/repository/DEFAULT/flrIG7zPhS8irI7VLS6S2zHY1gY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 17:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:2f:ca:08:23:ce:41:df:1b:08:af:b0:72:21:37:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e5ac81bbccf852f22ac8ed52d2e92db31d8d606
Validity
Not Before: Jun 6 17:00:26 2025 GMT
Not After : Jun 7 17:00:26 2025 GMT
Subject: CN=4b4f8f2bc4a410c9d6f2fabc0c4a1b1010de2603
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:b7:b3:8a:70:0e:2e:78:16:5c:aa:84:58:45:
4a:ba:73:52:46:b0:0a:a4:82:a5:5a:ee:25:d4:0c:
55:a2:bc:b6:6a:0a:22:92:cc:55:82:13:fc:f3:09:
57:a6:2a:1e:9a:8f:7b:e2:4c:a8:e8:32:bb:ee:c1:
0b:7b:6d:b4:7e:c2:27:95:d0:21:7c:a2:47:89:b1:
33:be:67:05:b9:19:f6:05:f6:4e:a0:47:8d:10:df:
e4:47:17:d9:04:90:76:d7:b8:f6:74:c6:ab:f8:e4:
76:7c:6e:e8:00:40:50:8e:9a:e6:9e:48:96:db:9e:
5b:5e:76:94:93:cc:0f:d1:52:77:fa:b9:e9:2f:73:
ee:c8:47:5b:ed:4e:40:93:fb:76:d7:f0:81:74:95:
10:d3:fc:86:ac:3f:25:ac:34:b5:65:08:c6:7e:2e:
86:c9:b0:08:ea:ff:b2:0b:5d:a8:58:2d:2d:94:a1:
39:69:61:e8:92:bb:85:87:98:a3:3a:21:b3:dd:84:
e4:1e:93:0c:65:6a:84:30:f0:5b:77:99:45:38:19:
3e:96:b0:72:c0:43:99:4e:b8:9a:b3:85:83:c1:ae:
3f:2b:ac:ea:03:f1:25:00:33:97:f8:b2:f5:48:ff:
21:ec:1b:fc:da:34:7f:fc:1e:d9:f5:13:2b:ea:79:
0a:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:4F:8F:2B:C4:A4:10:C9:D6:F2:FA:BC:0C:4A:1B:10:10:DE:26:03
X509v3 Authority Key Identifier:
keyid:7E:5A:C8:1B:BC:CF:85:2F:22:AC:8E:D5:2D:2E:92:DB:31:D8:D6:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/flrIG7zPhS8irI7VLS6S2zHY1gY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d13f84-16ce-4d51-a618-c2a5d9d70313/1/flrIG7zPhS8irI7VLS6S2zHY1gY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d13f84-16ce-4d51-a618-c2a5d9d70313/1/flrIG7zPhS8irI7VLS6S2zHY1gY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:4e:6c:72:ca:35:7b:c6:61:52:56:69:9c:4a:c5:cc:76:a1:
63:82:10:c5:e6:71:57:c9:fd:46:b3:06:eb:d9:eb:4e:55:5f:
7e:ad:87:c0:fb:a9:61:78:3a:56:b4:dc:e0:95:ec:50:43:d2:
19:cc:a0:af:0c:f3:c9:39:02:3b:3d:c7:c2:5c:3d:a4:5d:40:
73:e8:7f:56:1d:28:73:44:a4:63:2b:b6:52:b2:9f:90:ac:3c:
3d:db:d1:e9:b2:a6:64:09:47:75:4b:ff:3f:66:12:fb:05:3c:
6b:78:a1:74:35:b6:3d:c8:a6:43:f2:24:82:c2:f3:cf:ec:cc:
aa:7d:b1:a1:68:56:bf:54:4f:70:8d:b3:f9:d3:7b:c6:28:75:
53:14:b4:e5:fe:df:bc:1a:c9:02:f8:c4:51:5f:2b:e4:73:9c:
9c:85:68:ed:b7:aa:3a:54:a1:d6:3e:34:5d:ad:ae:a4:d9:8f:
96:02:78:c2:58:c0:26:9b:b5:1c:28:7a:37:18:8e:dd:f1:e8:
ad:4d:fa:db:bc:b6:f4:c7:6d:3d:18:4a:41:ce:6a:ca:c1:ab:
bd:c9:e0:db:43:45:e0:75:60:95:f8:4a:ab:8f:df:aa:ae:72:
8b:21:cb:00:41:02:92:40:20:c3:79:6d:ec:dc:de:8b:b9:a1:
ee:6b:b1:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 03:20:28 2025 by rpki-client