Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/aa164f-e5ad-4237-9bb9-0e57bd92b798/1/FlAwKhah7Cm1aambSuEFc8YmNto.mft
File: FlAwKhah7Cm1aambSuEFc8YmNto.mft (raw, json)
Hash identifier: 9Tr4LTbF5jfEZIk8rpK6gevjzw6boYjCdC57FYs6cug=
Subject key identifier: 37:10:CF:91:D3:46:0C:54:6B:64:45:9A:AC:D8:B8:48:B0:32:D1:C2
Authority key identifier: 16:50:30:2A:16:A1:EC:29:B5:69:A9:9B:4A:E1:05:73:C6:26:36:DA
Certificate issuer: /CN=1650302a16a1ec29b569a99b4ae10573c62636da
Certificate serial: 01967F0F65696016273C52A2989FCECD5BF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FlAwKhah7Cm1aambSuEFc8YmNto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/aa164f-e5ad-4237-9bb9-0e57bd92b798/1/FlAwKhah7Cm1aambSuEFc8YmNto.mft
Manifest number: 0709
Signing time: Tue 29 Apr 2025 01:00:37 +0000
Manifest this update: Tue 29 Apr 2025 01:00:37 +0000
Manifest next update: Wed 30 Apr 2025 01:00:37 +0000
Files and hashes: 1: FlAwKhah7Cm1aambSuEFc8YmNto.crl (hash: jAycF222ixMzX01SP+YVSVUcX3opO+Ru4X3PQyE4eVg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/aa164f-e5ad-4237-9bb9-0e57bd92b798/1/FlAwKhah7Cm1aambSuEFc8YmNto.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/aa164f-e5ad-4237-9bb9-0e57bd92b798/1/FlAwKhah7Cm1aambSuEFc8YmNto.mft
rsync://rpki.ripe.net/repository/DEFAULT/FlAwKhah7Cm1aambSuEFc8YmNto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:0f:65:69:60:16:27:3c:52:a2:98:9f:ce:cd:5b:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1650302a16a1ec29b569a99b4ae10573c62636da
Validity
Not Before: Apr 29 01:00:37 2025 GMT
Not After : Apr 30 01:00:37 2025 GMT
Subject: CN=3710cf91d3460c546b64459aacd8b848b032d1c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:c2:1b:c0:a7:88:e3:48:1c:a0:4b:ab:b4:36:
1a:9e:a8:ef:c6:e5:b7:b5:d3:46:ab:62:e1:e1:38:
b5:1b:0a:cf:06:fd:4a:a7:b0:e8:a4:22:88:13:9a:
ec:bc:7a:4e:d4:0a:4c:34:9a:b2:2c:e9:92:86:b7:
ef:4c:a1:5c:0a:a3:23:a2:c2:d8:d8:5b:de:08:b7:
78:50:c9:87:21:d5:df:2e:c6:30:33:94:01:d0:9c:
44:c7:8f:da:e9:50:44:ec:46:c7:c7:59:d7:67:8d:
7d:55:2b:4d:46:99:35:c5:72:f1:98:72:14:59:0d:
4e:e3:fc:cb:ee:61:01:04:bd:35:5f:ad:ad:8e:be:
a2:64:d4:5b:4d:55:c5:03:7a:49:ba:7b:07:0c:d5:
33:df:50:ef:b9:59:b7:81:b3:85:cd:34:52:05:91:
ac:75:7a:2e:48:8b:ca:6d:35:ad:1b:fe:e9:4d:85:
6f:15:7e:94:52:b5:5d:5b:22:92:a4:1c:33:e8:6b:
07:9d:0b:45:ff:a8:91:23:e0:0b:77:cb:4c:33:45:
ea:e7:fa:ca:6b:4e:18:72:b1:dc:ee:eb:25:f1:40:
ae:a8:1f:3f:13:a0:3e:c1:23:31:81:72:14:99:37:
4b:6c:ea:fb:26:15:da:96:df:24:d8:7d:df:99:3a:
1e:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:10:CF:91:D3:46:0C:54:6B:64:45:9A:AC:D8:B8:48:B0:32:D1:C2
X509v3 Authority Key Identifier:
keyid:16:50:30:2A:16:A1:EC:29:B5:69:A9:9B:4A:E1:05:73:C6:26:36:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FlAwKhah7Cm1aambSuEFc8YmNto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/aa164f-e5ad-4237-9bb9-0e57bd92b798/1/FlAwKhah7Cm1aambSuEFc8YmNto.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/aa164f-e5ad-4237-9bb9-0e57bd92b798/1/FlAwKhah7Cm1aambSuEFc8YmNto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:9e:e2:ba:83:e3:8c:78:2c:57:28:5b:53:12:52:e1:02:30:
a2:76:a9:70:ec:86:eb:e2:e6:28:14:86:96:13:ec:82:cc:0f:
56:f8:30:57:51:7a:32:e8:52:58:ef:6b:a2:28:fc:87:19:e1:
a3:75:c9:d5:fb:84:c3:f5:8e:5d:cf:21:52:60:ea:06:4d:32:
40:0e:02:93:81:67:b3:87:5e:33:59:e1:c8:38:c6:f4:71:8d:
2b:f7:02:71:61:77:20:4a:a3:23:40:1a:47:34:7e:9d:7e:88:
01:74:e6:de:f6:d5:17:c9:84:fd:62:71:ec:96:54:f3:f1:ac:
f9:f0:2e:23:20:96:3f:18:9c:14:82:70:a7:61:ac:05:71:f0:
be:08:a7:50:ee:22:08:63:ad:a2:de:83:9a:be:c2:1c:0b:c4:
be:3a:7f:41:6a:15:4b:9d:62:3a:ee:21:d0:ca:4f:d7:97:c9:
fa:66:4d:4c:bb:bd:4f:29:60:fb:19:18:f8:e0:0d:68:3a:e9:
46:7f:bc:2c:93:bd:8b:68:26:af:b6:a7:f5:5b:1c:48:83:26:
f8:a8:7a:4d:bf:2f:f5:6c:4e:d3:fd:70:0a:bf:3e:7e:94:2c:
87:9d:80:96:4e:41:e9:9a:48:a7:19:e2:8f:84:84:98:ab:18:
cd:e7:79:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:18:33 2025 by rpki-client