
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/21443f-e68f-49e6-abc9-6083393cf46e/1/flNU4TNHCPGAASuyN6lfn6x6Tlw.mft
File: flNU4TNHCPGAASuyN6lfn6x6Tlw.mft (raw, json)
Hash identifier: uSXZVi9CXokmszd19w0b8idD04NnzB7wEKvt85umC5o=
Subject key identifier: 78:36:AB:1D:E0:CE:38:80:55:0B:EF:5A:BB:28:71:69:AA:8A:8D:BF
Authority key identifier: 7E:53:54:E1:33:47:08:F1:80:01:2B:B2:37:A9:5F:9F:AC:7A:4E:5C
Certificate issuer: /CN=7e5354e1334708f180012bb237a95f9fac7a4e5c
Certificate serial: 01976C992E63C40CFBFFB45A11CCD12863C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/flNU4TNHCPGAASuyN6lfn6x6Tlw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/21443f-e68f-49e6-abc9-6083393cf46e/1/flNU4TNHCPGAASuyN6lfn6x6Tlw.mft
Manifest number: 0897
Signing time: Sat 14 Jun 2025 04:01:07 +0000
Manifest this update: Sat 14 Jun 2025 04:01:07 +0000
Manifest next update: Sun 15 Jun 2025 04:01:07 +0000
Files and hashes: 1: 7NZ3oQkMOQoPZU36C6qwxb2VoVE.roa (hash: 47N6P40TbSFw4GF5u3qAezQZQpvVncE6hSSscr+AiT4=)
2: flNU4TNHCPGAASuyN6lfn6x6Tlw.crl (hash: 6RJelW31vbDk/lOnIhQJefcdSXISzjroOy1MMmFJr38=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/21443f-e68f-49e6-abc9-6083393cf46e/1/flNU4TNHCPGAASuyN6lfn6x6Tlw.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/21443f-e68f-49e6-abc9-6083393cf46e/1/flNU4TNHCPGAASuyN6lfn6x6Tlw.mft
rsync://rpki.ripe.net/repository/DEFAULT/flNU4TNHCPGAASuyN6lfn6x6Tlw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:99:2e:63:c4:0c:fb:ff:b4:5a:11:cc:d1:28:63:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e5354e1334708f180012bb237a95f9fac7a4e5c
Validity
Not Before: Jun 14 04:01:07 2025 GMT
Not After : Jun 15 04:01:07 2025 GMT
Subject: CN=7836ab1de0ce3880550bef5abb287169aa8a8dbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:6d:2e:69:d2:d4:df:91:14:ae:07:34:da:2d:
71:27:5f:8b:c2:08:6f:c8:56:2d:47:f6:96:27:d4:
31:99:75:01:57:24:d4:48:3f:22:dd:1d:2f:79:a5:
37:60:53:c4:17:86:7e:33:26:51:93:0a:f9:2f:a2:
92:69:54:36:07:f2:82:5a:6b:2c:51:00:ad:2d:c2:
dc:a0:c9:1e:c3:72:5d:89:41:23:5e:57:12:4d:7f:
df:1d:5b:21:eb:1f:d0:31:7f:05:8c:16:41:00:fe:
9a:78:81:3a:19:72:dc:28:40:6d:50:0d:2e:ac:05:
c0:39:4b:fc:4c:2e:4e:fd:a3:28:6d:c3:57:0b:37:
9a:d1:a1:d3:cc:d4:cf:79:d1:94:88:28:d1:7c:d2:
6e:1d:77:90:44:e0:a1:0b:8d:1f:1a:dc:31:2e:66:
be:c4:50:9b:c2:46:5c:f7:fb:76:9e:7e:67:7c:d6:
bc:7a:fd:69:76:e2:2c:05:d7:1e:d9:14:a6:c2:c0:
fe:4a:9d:63:cb:a3:e9:22:8c:b8:44:35:10:75:76:
31:8f:de:26:3b:8b:ec:09:68:8e:42:20:db:70:2a:
de:76:7a:20:62:c1:4f:b8:91:f7:ac:07:61:6d:cd:
f9:d4:39:28:2c:12:3d:61:f1:81:34:e1:d2:d1:28:
c8:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:36:AB:1D:E0:CE:38:80:55:0B:EF:5A:BB:28:71:69:AA:8A:8D:BF
X509v3 Authority Key Identifier:
keyid:7E:53:54:E1:33:47:08:F1:80:01:2B:B2:37:A9:5F:9F:AC:7A:4E:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/flNU4TNHCPGAASuyN6lfn6x6Tlw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/21443f-e68f-49e6-abc9-6083393cf46e/1/flNU4TNHCPGAASuyN6lfn6x6Tlw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/21443f-e68f-49e6-abc9-6083393cf46e/1/flNU4TNHCPGAASuyN6lfn6x6Tlw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:b5:20:8e:be:71:90:b6:41:e6:8e:fb:32:1b:69:c9:1f:db:
b0:20:ca:19:af:7c:a1:11:1c:38:55:a6:62:c8:0e:7b:f4:bb:
e1:dd:a5:dc:20:eb:a9:d7:67:d4:27:03:67:b3:90:44:bf:bc:
1d:62:4d:cf:a7:bd:cd:6b:a5:0c:8d:bb:e4:f0:cd:54:57:e6:
b6:e1:35:70:3d:f8:c3:5f:a3:46:71:2e:f8:8d:a8:c7:71:c1:
e8:2c:7f:57:81:d7:15:0e:d2:bc:83:e3:95:70:46:67:37:bb:
0d:e5:0e:85:75:ed:40:33:0d:dc:ad:a0:3d:f3:f1:c4:19:8a:
1a:7e:0b:19:a5:2f:47:5e:bf:88:6c:c2:29:43:c6:f1:87:c0:
83:7a:60:9f:dc:7d:db:27:a6:18:3c:e9:c7:4c:84:f3:79:6b:
b6:51:2a:af:34:e1:1f:a9:11:ff:73:63:ac:5d:a6:c0:09:ad:
14:6c:bf:34:f6:6d:a5:ef:f6:8b:6d:bd:64:6d:2e:75:48:9f:
26:5c:08:a2:41:c5:07:10:c7:d8:cf:81:30:64:7e:ca:a4:30:
7b:32:e9:de:f8:4a:7e:bd:7e:47:e0:22:54:99:11:09:06:12:
d9:bb:4a:57:46:0e:e7:fb:e5:11:a1:20:cd:82:9f:bc:f3:4b:
bb:7c:30:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:15:33 2025 by rpki-client