Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/ff5133-ca11-42db-b03d-544855cc4f57/1/FlnrYEAZPfBoE1CQXmOdDljV-d8.mft
File: FlnrYEAZPfBoE1CQXmOdDljV-d8.mft (raw, json)
Hash identifier: 3h4f59T3lb0eQDWVQMiL/yixY2ZAbtxY0+pWDNIyWZ4=
Subject key identifier: 14:1B:9B:E5:0B:02:16:3F:34:A4:B9:F3:42:00:82:C4:26:82:13:B5
Authority key identifier: 16:59:EB:60:40:19:3D:F0:68:13:50:90:5E:63:9D:0E:58:D5:F9:DF
Certificate issuer: /CN=1659eb6040193df0681350905e639d0e58d5f9df
Certificate serial: 01977AC202F4470155984330CA14E031B2B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FlnrYEAZPfBoE1CQXmOdDljV-d8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/ff5133-ca11-42db-b03d-544855cc4f57/1/FlnrYEAZPfBoE1CQXmOdDljV-d8.mft
Manifest number: 13FF
Signing time: Mon 16 Jun 2025 22:00:24 +0000
Manifest this update: Mon 16 Jun 2025 22:00:24 +0000
Manifest next update: Tue 17 Jun 2025 22:00:24 +0000
Files and hashes: 1: 8-v-Z7Xa6lfqMbl7evIHp25t1sA.roa (hash: BWcCx1HwRpdJveviEQtt8WgW8hrEfngJob3ia7RrZwQ=)
2: FlnrYEAZPfBoE1CQXmOdDljV-d8.crl (hash: bklbFlfTVVeBVPGlAFAj0te/EEK7CurtPriCSzYDR14=)
3: cFc0gNIOK5WxBeuSF5eiQkXoOKE.roa (hash: GkH9aMuKOzi/6cYcKbTikX2OvYkhD9zkPc0LnUJCl1A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/ff5133-ca11-42db-b03d-544855cc4f57/1/FlnrYEAZPfBoE1CQXmOdDljV-d8.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/ff5133-ca11-42db-b03d-544855cc4f57/1/FlnrYEAZPfBoE1CQXmOdDljV-d8.mft
rsync://rpki.ripe.net/repository/DEFAULT/FlnrYEAZPfBoE1CQXmOdDljV-d8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 21:51:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7a:c2:02:f4:47:01:55:98:43:30:ca:14:e0:31:b2:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1659eb6040193df0681350905e639d0e58d5f9df
Validity
Not Before: Jun 16 22:00:24 2025 GMT
Not After : Jun 17 22:00:24 2025 GMT
Subject: CN=141b9be50b02163f34a4b9f3420082c4268213b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:14:ed:da:55:09:4d:87:e1:e4:98:90:2d:64:
03:51:35:83:9f:98:ce:8c:06:f9:dc:19:b0:77:d6:
d1:13:e8:f4:e4:2c:17:d1:07:87:2e:e1:2e:86:40:
87:c7:05:84:fa:79:1d:45:25:6b:5e:95:22:69:0c:
c0:32:ef:40:fe:10:a2:6f:38:a4:26:c6:af:c9:b1:
fa:2a:e5:78:c7:40:80:3f:e9:4c:ff:56:50:e9:97:
ca:90:75:bb:1b:a6:91:40:07:e2:03:d7:22:13:32:
d4:52:a6:1f:93:7a:e8:0a:3e:32:8c:88:8c:92:dd:
67:06:35:33:01:e6:5c:8e:f9:b9:41:a3:50:15:87:
74:db:85:69:50:11:dc:84:8e:37:16:ec:23:18:46:
8b:93:18:5c:c0:f7:49:df:4b:5d:37:ee:27:c0:55:
2e:b0:d7:f6:9b:89:c9:56:37:11:3a:b9:6b:a6:0c:
ae:eb:b1:48:95:83:d1:dc:36:01:4b:e3:81:3f:df:
b1:f6:ba:f4:6b:a6:0f:5d:cf:14:57:7c:71:ab:21:
48:cf:2a:51:59:5a:22:65:23:cf:cf:76:a3:f4:1d:
9c:67:f6:01:3a:e1:0a:a8:8f:c3:22:70:91:0d:32:
67:b9:e4:da:50:16:af:df:de:6e:2d:fe:c8:85:0c:
89:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:1B:9B:E5:0B:02:16:3F:34:A4:B9:F3:42:00:82:C4:26:82:13:B5
X509v3 Authority Key Identifier:
keyid:16:59:EB:60:40:19:3D:F0:68:13:50:90:5E:63:9D:0E:58:D5:F9:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FlnrYEAZPfBoE1CQXmOdDljV-d8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/ff5133-ca11-42db-b03d-544855cc4f57/1/FlnrYEAZPfBoE1CQXmOdDljV-d8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/ff5133-ca11-42db-b03d-544855cc4f57/1/FlnrYEAZPfBoE1CQXmOdDljV-d8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:b5:2c:5b:06:55:09:1e:7b:95:34:30:88:6e:47:95:41:81:
d8:a8:be:8f:a5:cf:eb:d0:a1:98:92:bc:29:57:38:5c:5c:0a:
f7:a6:14:00:e8:ce:6c:82:86:3a:ef:73:58:70:ee:e3:e0:12:
02:24:32:e8:32:0f:46:ac:6a:a0:db:fe:0d:03:72:04:19:b7:
7d:a8:38:70:a3:f7:58:82:70:41:e5:5d:04:19:1b:18:5d:76:
5a:ca:9c:da:ae:c4:be:b7:25:3d:7e:78:48:94:58:62:e4:3c:
71:ad:8d:ae:d7:ad:8a:99:eb:3d:fd:a6:4e:e3:a1:f9:8f:0c:
11:29:81:6b:25:86:6e:fd:5d:12:70:89:63:cb:b3:46:40:51:
1b:95:0b:96:e0:74:29:bb:39:c2:f2:24:94:f0:79:3b:c3:a0:
be:09:d7:23:fc:e3:af:a5:f2:f0:63:a3:a2:8f:ff:7f:13:b6:
53:aa:e2:22:a5:cc:e9:93:f3:c1:61:f4:37:73:ef:8e:1d:c9:
b2:8c:b1:83:30:9d:e0:de:1c:78:5d:3c:17:be:a9:bc:ee:90:
66:fd:18:4d:9d:74:86:09:13:e9:4c:b2:e2:62:23:ee:c3:5d:
d8:5a:ec:fe:fb:b8:26:53:a4:3b:fa:97:0d:d5:c4:32:3f:0f:
87:c4:ee:e9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd6wgL0RwFVmEMwyhTgMbKzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2NTllYjYwNDAxOTNkZjA2ODEzNTA5MDVlNjM5ZDBlNThk
NWY5ZGYwHhcNMjUwNjE2MjIwMDI0WhcNMjUwNjE3MjIwMDI0WjAzMTEwLwYDVQQD
EygxNDFiOWJlNTBiMDIxNjNmMzRhNGI5ZjM0MjAwODJjNDI2ODIxM2I1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvhTt2lUJTYfh5JiQLWQDUTWDn5jO
jAb53Bmwd9bRE+j05CwX0QeHLuEuhkCHxwWE+nkdRSVrXpUiaQzAMu9A/hCibzik
JsavybH6KuV4x0CAP+lM/1ZQ6ZfKkHW7G6aRQAfiA9ciEzLUUqYfk3roCj4yjIiM
kt1nBjUzAeZcjvm5QaNQFYd024VpUBHchI43FuwjGEaLkxhcwPdJ30tdN+4nwFUu
sNf2m4nJVjcROrlrpgyu67FIlYPR3DYBS+OBP9+x9rr0a6YPXc8UV3xxqyFIzypR
WVoiZSPPz3aj9B2cZ/YBOuEKqI/DInCRDTJnueTaUBav395uLf7IhQyJYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBQbm+ULAhY/NKS580IAgsQmghO1MB8GA1UdIwQY
MBaAFBZZ62BAGT3waBNQkF5jnQ5Y1fnfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmxucllFQVpQZkJvRTFDUVhtT2REbGpWLWQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9mZjUxMzMtY2ExMS00MmRiLWIwM2Qt
NTQ0ODU1Y2M0ZjU3LzEvRmxucllFQVpQZkJvRTFDUVhtT2REbGpWLWQ4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS9mZjUxMzMtY2ExMS00MmRiLWIwM2QtNTQ0ODU1Y2M0ZjU3
LzEvRmxucllFQVpQZkJvRTFDUVhtT2REbGpWLWQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT7UsWwZV
CR57lTQwiG5HlUGB2Ki+j6XP69ChmJK8KVc4XFwK96YUAOjObIKGOu9zWHDu4+AS
AiQy6DIPRqxqoNv+DQNyBBm3fag4cKP3WIJwQeVdBBkbGF12Wsqc2q7EvrclPX54
SJRYYuQ8ca2NrtetipnrPf2mTuOh+Y8MESmBayWGbv1dEnCJY8uzRkBRG5ULluB0
Kbs5wvIklPB5O8OgvgnXI/zjr6Xy8GOjoo//fxO2U6riIqXM6ZPzwWH0N3Pvjh3J
soyxgzCd4N4ceF08F76pvO6QZv0YTZ10hgkT6Uyy4mIj7sNd2Frs/vu4JlOkO/qX
DdXEMj8Ph8Tu6Q==
-----END CERTIFICATE-----
Generated at Tue Jun 17 03:52:49 2025 by rpki-client