Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/aa164f-e5ad-4237-9bb9-0e57bd92b798/1/FlAwKhah7Cm1aambSuEFc8YmNto.mft
File: FlAwKhah7Cm1aambSuEFc8YmNto.mft (raw, json)
Hash identifier: ovjUmjFVigzWUtlKK0rG7iZjD+NH65gLXdPpa1ng4z4=
Subject key identifier: 8E:C5:55:15:7F:05:1F:84:71:F7:26:67:65:23:05:A2:71:5D:69:A8
Authority key identifier: 16:50:30:2A:16:A1:EC:29:B5:69:A9:9B:4A:E1:05:73:C6:26:36:DA
Certificate issuer: /CN=1650302a16a1ec29b569a99b4ae10573c62636da
Certificate serial: 01976E874640C85FF9BD3BCD15202F06516F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FlAwKhah7Cm1aambSuEFc8YmNto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/aa164f-e5ad-4237-9bb9-0e57bd92b798/1/FlAwKhah7Cm1aambSuEFc8YmNto.mft
Manifest number: 0785
Signing time: Sat 14 Jun 2025 13:00:48 +0000
Manifest this update: Sat 14 Jun 2025 13:00:48 +0000
Manifest next update: Sun 15 Jun 2025 13:00:48 +0000
Files and hashes: 1: FlAwKhah7Cm1aambSuEFc8YmNto.crl (hash: TqSqy2F7Ts7rFcYZlHDLorzPh14cQxGK9pfsS68FXq4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/aa164f-e5ad-4237-9bb9-0e57bd92b798/1/FlAwKhah7Cm1aambSuEFc8YmNto.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/aa164f-e5ad-4237-9bb9-0e57bd92b798/1/FlAwKhah7Cm1aambSuEFc8YmNto.mft
rsync://rpki.ripe.net/repository/DEFAULT/FlAwKhah7Cm1aambSuEFc8YmNto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:87:46:40:c8:5f:f9:bd:3b:cd:15:20:2f:06:51:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1650302a16a1ec29b569a99b4ae10573c62636da
Validity
Not Before: Jun 14 13:00:48 2025 GMT
Not After : Jun 15 13:00:48 2025 GMT
Subject: CN=8ec555157f051f8471f72667652305a2715d69a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:fa:d9:7e:9e:43:6c:67:a2:f7:d2:d9:42:33:
32:cc:b4:b0:05:3a:13:98:77:c9:70:89:1c:ec:b6:
73:05:2d:fd:65:5b:17:cf:3d:78:61:7a:2d:02:ab:
44:7e:00:d0:79:75:72:d7:e8:3d:f7:3e:2d:41:34:
94:3a:b0:15:4b:3b:db:92:82:c9:7a:30:08:cd:50:
8a:3a:01:91:b5:2e:98:4e:2e:96:48:bc:32:3c:c9:
56:fc:23:7a:8f:87:ac:b1:74:23:dd:cb:5b:fc:a5:
9d:f6:5f:71:f6:c5:d8:1c:ca:fe:0b:a5:8b:3d:f2:
a2:70:90:af:de:b0:c4:0b:a3:0c:79:93:84:ff:81:
ee:c3:41:e8:b4:90:fe:d8:cf:d6:85:15:41:66:bd:
56:3a:ee:b8:c7:6f:5a:49:41:0e:8a:74:03:6a:ae:
3b:53:5c:52:02:11:fc:d2:00:cd:f8:af:da:03:e1:
cc:8f:20:10:f3:d8:29:4e:84:42:41:a7:4c:c5:07:
dc:1f:46:03:96:ad:62:88:11:6d:e2:06:bb:f8:8b:
79:0f:8c:84:29:b7:07:7a:7d:1c:87:34:24:f5:e1:
09:41:35:a7:72:78:93:fd:a2:16:dd:42:84:92:dd:
39:a9:40:f0:60:82:37:22:18:8a:cf:7d:c0:95:7b:
f1:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:C5:55:15:7F:05:1F:84:71:F7:26:67:65:23:05:A2:71:5D:69:A8
X509v3 Authority Key Identifier:
keyid:16:50:30:2A:16:A1:EC:29:B5:69:A9:9B:4A:E1:05:73:C6:26:36:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FlAwKhah7Cm1aambSuEFc8YmNto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/aa164f-e5ad-4237-9bb9-0e57bd92b798/1/FlAwKhah7Cm1aambSuEFc8YmNto.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/aa164f-e5ad-4237-9bb9-0e57bd92b798/1/FlAwKhah7Cm1aambSuEFc8YmNto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:fa:1d:2e:2b:de:30:8b:dc:62:2c:a4:d7:9d:04:4e:ed:57:
f4:5e:cb:43:f1:be:2a:34:56:d2:47:bd:bd:d9:80:37:12:3d:
42:12:1e:5f:29:3f:7c:9d:38:61:30:0a:44:8d:2a:71:cf:0f:
cf:b3:e0:b7:4f:1e:90:85:dc:cd:f7:7a:3f:18:90:e0:a0:b7:
13:aa:d0:56:d0:b6:7e:31:76:40:a5:8c:f5:48:9f:b5:94:b1:
54:d2:46:7f:03:6a:4d:b7:38:24:48:bb:2f:94:ee:d8:d7:48:
48:59:45:4d:86:4f:ff:0f:fa:79:3f:0b:38:d2:ff:e9:6c:c6:
de:7e:b7:cd:80:98:11:81:17:5c:6d:fc:9b:83:51:a8:d1:c8:
e0:4f:96:94:c5:e4:d2:1d:46:f2:1e:22:e2:6e:dd:27:19:07:
b3:b0:b7:b1:33:98:4b:38:44:64:69:27:07:c6:0b:d5:94:0d:
01:7a:26:4f:95:0a:79:3f:9e:95:b9:4f:00:cf:4e:dd:d1:61:
f8:e5:5e:9f:98:eb:48:1b:b2:f2:9a:01:b9:d6:9e:64:a7:71:
2f:56:d2:48:8c:aa:5e:5c:0b:53:d6:6b:8a:a2:6d:b2:00:a3:
41:ca:fb:4e:8e:64:ed:64:ce:de:67:77:1a:b8:b5:30:ff:b7:
09:25:88:12
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZduh0ZAyF/5vTvNFSAvBlFvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2NTAzMDJhMTZhMWVjMjliNTY5YTk5YjRhZTEwNTczYzYy
NjM2ZGEwHhcNMjUwNjE0MTMwMDQ4WhcNMjUwNjE1MTMwMDQ4WjAzMTEwLwYDVQQD
Eyg4ZWM1NTUxNTdmMDUxZjg0NzFmNzI2Njc2NTIzMDVhMjcxNWQ2OWE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsfrZfp5DbGei99LZQjMyzLSwBToT
mHfJcIkc7LZzBS39ZVsXzz14YXotAqtEfgDQeXVy1+g99z4tQTSUOrAVSzvbkoLJ
ejAIzVCKOgGRtS6YTi6WSLwyPMlW/CN6j4essXQj3ctb/KWd9l9x9sXYHMr+C6WL
PfKicJCv3rDEC6MMeZOE/4Huw0HotJD+2M/WhRVBZr1WOu64x29aSUEOinQDaq47
U1xSAhH80gDN+K/aA+HMjyAQ89gpToRCQadMxQfcH0YDlq1iiBFt4ga7+It5D4yE
KbcHen0chzQk9eEJQTWncniT/aIW3UKEkt05qUDwYII3IhiKz33AlXvxpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI7FVRV/BR+EcfcmZ2UjBaJxXWmoMB8GA1UdIwQY
MBaAFBZQMCoWoewptWmpm0rhBXPGJjbaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmxBd0toYWg3Q20xYWFtYlN1RUZjOFltTnRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9hYTE2NGYtZTVhZC00MjM3LTliYjkt
MGU1N2JkOTJiNzk4LzEvRmxBd0toYWg3Q20xYWFtYlN1RUZjOFltTnRvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC9hYTE2NGYtZTVhZC00MjM3LTliYjktMGU1N2JkOTJiNzk4
LzEvRmxBd0toYWg3Q20xYWFtYlN1RUZjOFltTnRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUvodLive
MIvcYiyk150ETu1X9F7LQ/G+KjRW0ke9vdmANxI9QhIeXyk/fJ04YTAKRI0qcc8P
z7Pgt08ekIXczfd6PxiQ4KC3E6rQVtC2fjF2QKWM9UiftZSxVNJGfwNqTbc4JEi7
L5Tu2NdISFlFTYZP/w/6eT8LONL/6WzG3n63zYCYEYEXXG38m4NRqNHI4E+WlMXk
0h1G8h4i4m7dJxkHs7C3sTOYSzhEZGknB8YL1ZQNAXomT5UKeT+elblPAM9O3dFh
+OVen5jrSBuy8poBudaeZKdxL1bSSIyqXlwLU9ZriqJtsgCjQcr7To5k7WTO3md3
Gri1MP+3CSWIEg==
-----END CERTIFICATE-----
Generated at Sat Jun 14 22:03:58 2025 by rpki-client