Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/aa164f-e5ad-4237-9bb9-0e57bd92b798/1/FlAwKhah7Cm1aambSuEFc8YmNto.mft
File: FlAwKhah7Cm1aambSuEFc8YmNto.mft (raw, json)
Hash identifier: ltfA4ejXX0OmWW8tKlJmFeV4eCMTYjbV+14M68FFPjc=
Subject key identifier: EE:BC:C1:D4:13:A1:FB:CE:DE:8E:FF:87:06:A5:50:53:C6:EF:F7:C3
Authority key identifier: 16:50:30:2A:16:A1:EC:29:B5:69:A9:9B:4A:E1:05:73:C6:26:36:DA
Certificate issuer: /CN=1650302a16a1ec29b569a99b4ae10573c62636da
Certificate serial: 0198752B5F0493D3DA245FECEF644A38FC90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FlAwKhah7Cm1aambSuEFc8YmNto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/aa164f-e5ad-4237-9bb9-0e57bd92b798/1/FlAwKhah7Cm1aambSuEFc8YmNto.mft
Manifest number: 080D
Signing time: Mon 04 Aug 2025 13:00:33 +0000
Manifest this update: Mon 04 Aug 2025 13:00:33 +0000
Manifest next update: Tue 05 Aug 2025 13:00:33 +0000
Files and hashes: 1: FlAwKhah7Cm1aambSuEFc8YmNto.crl (hash: z3hZxCdk8ggdCRnbSDTENrLdCmxJYCzigFpmMB32abg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/aa164f-e5ad-4237-9bb9-0e57bd92b798/1/FlAwKhah7Cm1aambSuEFc8YmNto.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/aa164f-e5ad-4237-9bb9-0e57bd92b798/1/FlAwKhah7Cm1aambSuEFc8YmNto.mft
rsync://rpki.ripe.net/repository/DEFAULT/FlAwKhah7Cm1aambSuEFc8YmNto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:75:2b:5f:04:93:d3:da:24:5f:ec:ef:64:4a:38:fc:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1650302a16a1ec29b569a99b4ae10573c62636da
Validity
Not Before: Aug 4 13:00:33 2025 GMT
Not After : Aug 5 13:00:33 2025 GMT
Subject: CN=eebcc1d413a1fbcede8eff8706a55053c6eff7c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:43:75:e5:5b:4a:2e:41:dd:fb:2d:03:bd:49:
22:76:6f:e5:6b:3a:4c:e9:8d:a1:50:c9:ea:da:9e:
fe:f7:1b:93:34:9b:6d:51:c1:45:20:93:13:18:94:
03:36:3c:b4:d7:64:c5:e4:48:60:e9:76:f1:a7:f3:
0b:72:81:e4:23:bb:ae:79:73:64:52:44:0c:1e:bd:
47:8b:22:22:8e:c9:f9:f3:5e:4e:66:1d:56:03:55:
90:31:00:3d:d8:06:38:57:79:a2:21:a1:ed:4d:57:
f4:ee:2d:41:09:2b:77:e0:3f:6d:76:7a:b7:b3:a4:
cd:51:41:b5:6d:c9:6d:29:22:5a:96:50:9e:2a:2a:
23:48:d4:8a:c2:5d:86:fd:84:bd:0d:73:af:68:e3:
ed:51:75:1c:36:7f:79:1c:f7:af:6e:17:98:f9:28:
59:43:b7:ae:a0:7b:4e:16:00:e2:1e:e5:ca:27:72:
41:f0:8f:65:96:5a:20:a4:dc:db:cc:39:95:05:97:
f6:4a:2e:0c:79:b3:45:45:f1:b2:51:0f:b6:7f:e6:
62:5d:9c:63:d7:52:4e:08:e1:de:37:77:d4:e6:2b:
23:66:af:2e:9e:6d:4e:1a:3d:05:e5:79:6d:0b:b9:
7e:c1:a8:33:31:f7:b0:ab:c6:41:e3:59:c1:7d:20:
07:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:BC:C1:D4:13:A1:FB:CE:DE:8E:FF:87:06:A5:50:53:C6:EF:F7:C3
X509v3 Authority Key Identifier:
keyid:16:50:30:2A:16:A1:EC:29:B5:69:A9:9B:4A:E1:05:73:C6:26:36:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FlAwKhah7Cm1aambSuEFc8YmNto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/aa164f-e5ad-4237-9bb9-0e57bd92b798/1/FlAwKhah7Cm1aambSuEFc8YmNto.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/aa164f-e5ad-4237-9bb9-0e57bd92b798/1/FlAwKhah7Cm1aambSuEFc8YmNto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:e0:52:e4:1f:ae:4d:4d:0a:3d:9b:81:e4:16:69:43:ef:dc:
3c:23:a5:2f:af:37:4c:17:d5:46:a9:88:f8:06:fc:2c:76:6b:
62:d2:75:ab:ee:7f:d3:fc:2d:1c:7c:d1:5b:37:58:6a:58:70:
e7:30:8d:67:65:03:79:cf:95:f1:e0:8b:78:34:71:bb:92:1f:
db:7f:f6:6a:da:b5:b0:99:48:1b:68:8c:de:17:a9:53:1c:fa:
06:39:34:5f:8a:cd:dc:7c:dd:36:ce:6d:ff:3a:d2:32:02:d9:
a6:fb:cc:b9:80:6d:f1:a6:5c:11:3c:95:26:32:36:9c:c0:24:
aa:46:e1:7e:b8:de:24:a0:1b:11:37:71:12:4e:a1:f0:25:04:
5a:21:0e:53:06:80:d8:63:03:02:d9:ff:a3:59:2b:ed:07:88:
fe:6b:e2:43:b0:e3:34:58:42:2c:56:fc:6f:26:4c:a9:67:a3:
fe:f5:22:81:c8:07:44:fe:2e:bf:cc:f9:a7:87:50:ea:f9:1a:
ba:56:ee:17:7b:e5:1c:f4:e7:94:87:01:45:df:86:3e:c5:98:
67:18:2c:05:b8:65:99:8b:e3:2a:39:d6:2a:99:62:5e:c7:61:
76:84:06:55:9a:a1:3d:96:fc:13:b6:f8:1e:37:9e:3c:71:77:
45:86:34:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:37:11 2025 by rpki-client