Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/aa164f-e5ad-4237-9bb9-0e57bd92b798/1/FlAwKhah7Cm1aambSuEFc8YmNto.mft
File: FlAwKhah7Cm1aambSuEFc8YmNto.mft (raw, json)
Hash identifier: A/RWiv5kBYv5iLWCj3PQqN7KHYUAVVtD3bq46VNKFVA=
Subject key identifier: CB:17:1C:52:3C:3D:04:EF:C7:4D:FA:02:C6:99:58:AA:60:A1:F2:14
Authority key identifier: 16:50:30:2A:16:A1:EC:29:B5:69:A9:9B:4A:E1:05:73:C6:26:36:DA
Certificate issuer: /CN=1650302a16a1ec29b569a99b4ae10573c62636da
Certificate serial: 019682EC03CA8A18B731A1282D7103A3BD6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FlAwKhah7Cm1aambSuEFc8YmNto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/aa164f-e5ad-4237-9bb9-0e57bd92b798/1/FlAwKhah7Cm1aambSuEFc8YmNto.mft
Manifest number: 070B
Signing time: Tue 29 Apr 2025 19:00:27 +0000
Manifest this update: Tue 29 Apr 2025 19:00:27 +0000
Manifest next update: Wed 30 Apr 2025 19:00:27 +0000
Files and hashes: 1: FlAwKhah7Cm1aambSuEFc8YmNto.crl (hash: CvUUvopLGTqMAkgzQwpKJ387/mNJSJ64Ld+iBZucr7w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/aa164f-e5ad-4237-9bb9-0e57bd92b798/1/FlAwKhah7Cm1aambSuEFc8YmNto.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/aa164f-e5ad-4237-9bb9-0e57bd92b798/1/FlAwKhah7Cm1aambSuEFc8YmNto.mft
rsync://rpki.ripe.net/repository/DEFAULT/FlAwKhah7Cm1aambSuEFc8YmNto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 19:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:82:ec:03:ca:8a:18:b7:31:a1:28:2d:71:03:a3:bd:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1650302a16a1ec29b569a99b4ae10573c62636da
Validity
Not Before: Apr 29 19:00:27 2025 GMT
Not After : Apr 30 19:00:27 2025 GMT
Subject: CN=cb171c523c3d04efc74dfa02c69958aa60a1f214
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:53:5a:01:41:30:a1:8e:06:84:03:15:5d:b7:
95:6f:41:ab:d8:e5:3a:05:44:a9:63:f8:ec:9e:7c:
36:de:38:5e:03:86:45:f1:19:a1:b9:1d:93:a3:7c:
65:a1:ad:ed:e4:a8:95:9a:6b:f0:0c:84:d4:07:ac:
ba:c1:85:a6:a6:3a:ea:81:97:b7:de:59:ff:ad:1e:
26:b6:88:5e:dc:3c:67:bc:46:79:16:b2:fb:35:18:
9b:ee:ed:f7:ba:52:73:9a:46:fa:42:bf:c6:c3:64:
d4:1c:28:e0:55:1b:63:32:ed:b6:fc:f7:0e:fa:2c:
72:04:47:b3:c4:0f:87:4e:e0:3f:8a:ed:4b:f1:eb:
2c:b9:8d:22:51:83:64:bc:70:6d:62:93:a7:eb:c4:
e0:73:b2:15:0c:13:82:e4:9d:22:68:9d:80:bc:92:
5a:f3:df:e7:64:4e:5c:59:6d:0b:e2:e4:6d:32:f4:
0f:b8:ce:d5:fd:c7:44:68:34:b3:85:a4:29:74:90:
7a:54:d8:ca:b0:33:3d:37:c4:31:2f:2e:90:a1:0a:
70:1b:b6:ea:63:e6:03:0d:9b:b6:65:fb:8c:09:2e:
d8:cc:9e:1b:a4:70:ed:6a:05:14:fb:33:b2:f1:9e:
27:3d:6d:56:4a:bf:fc:04:1e:aa:7b:db:1e:59:79:
8a:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:17:1C:52:3C:3D:04:EF:C7:4D:FA:02:C6:99:58:AA:60:A1:F2:14
X509v3 Authority Key Identifier:
keyid:16:50:30:2A:16:A1:EC:29:B5:69:A9:9B:4A:E1:05:73:C6:26:36:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FlAwKhah7Cm1aambSuEFc8YmNto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/aa164f-e5ad-4237-9bb9-0e57bd92b798/1/FlAwKhah7Cm1aambSuEFc8YmNto.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/aa164f-e5ad-4237-9bb9-0e57bd92b798/1/FlAwKhah7Cm1aambSuEFc8YmNto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:5b:c3:ff:f3:4d:ce:75:4a:dd:ad:c2:88:09:22:b4:5d:c2:
7f:a1:36:96:1c:64:5e:b2:cc:28:a3:2b:b7:26:34:0b:bd:c4:
f1:65:d6:16:44:90:d1:33:8e:8f:ba:7e:5f:a3:a9:df:f3:03:
39:f1:4b:84:e3:98:bc:c2:af:d9:3b:e7:04:af:48:93:28:97:
97:7f:89:06:e7:fd:5c:1f:fe:b6:e7:22:4f:d3:fb:d8:e0:11:
7a:59:cc:a9:95:10:ab:47:f3:c0:e9:f0:6b:ff:02:86:97:5d:
fb:91:4d:a1:7c:98:81:21:d7:13:d7:2b:23:ad:7f:d5:d6:64:
e1:0e:a0:5e:ca:1e:ef:2c:f0:7a:ee:92:0f:f3:f7:db:16:6a:
80:04:fd:2e:02:01:3d:82:af:32:55:c1:9c:41:3c:23:29:9d:
e8:95:46:42:e7:04:ef:06:9f:fb:07:34:23:8d:22:bd:e4:8c:
13:c6:ed:b3:b9:9c:3b:47:1b:88:78:df:45:0f:44:b7:80:58:
95:a9:54:93:af:eb:00:5b:15:91:22:16:ba:4b:8d:68:48:fe:
31:7b:d0:a8:09:7c:bf:bb:50:48:68:7f:6b:8c:88:19:9b:40:
70:7b:35:62:f7:39:c3:cb:59:9d:01:9e:2d:65:75:78:7f:26:
d1:67:a6:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 03:34:16 2025 by rpki-client