Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/321f74-092d-4dff-b335-2054f6e61922/1/FlHT3cat1IO3YawEdiaVM_5-pxc.mft
File: FlHT3cat1IO3YawEdiaVM_5-pxc.mft (raw, json)
Hash identifier: Is0lUANo7vB8E/bMsbgj2q/WOXc3Wh5cEpE9zRoUJfo=
Subject key identifier: 60:56:86:9B:25:84:9C:7A:AC:1E:F2:66:C8:11:BC:4D:2A:F4:AE:BB
Authority key identifier: 16:51:D3:DD:C6:AD:D4:83:B7:61:AC:04:76:26:95:33:FE:7E:A7:17
Certificate issuer: /CN=1651d3ddc6add483b761ac0476269533fe7ea717
Certificate serial: 01976F632243E1660FE09A506B8CBF7ECD18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FlHT3cat1IO3YawEdiaVM_5-pxc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/321f74-092d-4dff-b335-2054f6e61922/1/FlHT3cat1IO3YawEdiaVM_5-pxc.mft
Manifest number: 1591
Signing time: Sat 14 Jun 2025 17:00:57 +0000
Manifest this update: Sat 14 Jun 2025 17:00:57 +0000
Manifest next update: Sun 15 Jun 2025 17:00:57 +0000
Files and hashes: 1: FlHT3cat1IO3YawEdiaVM_5-pxc.crl (hash: jPgY6Mrj3dXSwrOvK1bxQi/9E/3HFiEltL2p6GK9lPU=)
2: OAOWe7maY9pSBU-5gVNjG4r2PZI.roa (hash: cj95WRLXDZ1GDxFc9L374qruvZwqpq+kg9Wr756ijmA=)
3: RS5heur6Cn3t-3NSKUpCkvrpLSg.roa (hash: TdAX1fGTzy2GwxRzSlF7GAvHIAjv8je9eFZvPOiAzfs=)
4: cisW_uPMTWGjpMgFOVf9HNh_jYk.roa (hash: Wdm0HXAD65sFut0/XjR/drYS0oNc3aDjPik/CLx6CYk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/321f74-092d-4dff-b335-2054f6e61922/1/FlHT3cat1IO3YawEdiaVM_5-pxc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/321f74-092d-4dff-b335-2054f6e61922/1/FlHT3cat1IO3YawEdiaVM_5-pxc.mft
rsync://rpki.ripe.net/repository/DEFAULT/FlHT3cat1IO3YawEdiaVM_5-pxc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 17:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:63:22:43:e1:66:0f:e0:9a:50:6b:8c:bf:7e:cd:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1651d3ddc6add483b761ac0476269533fe7ea717
Validity
Not Before: Jun 14 17:00:57 2025 GMT
Not After : Jun 15 17:00:57 2025 GMT
Subject: CN=6056869b25849c7aac1ef266c811bc4d2af4aebb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:0f:3c:53:4a:c3:0c:e3:a9:9a:3b:68:00:a7:
ee:78:b3:4f:95:ab:80:e1:de:71:49:38:f8:76:37:
b2:93:6c:9b:76:1a:91:2d:2f:50:68:73:57:d0:a3:
3e:6d:ec:45:c3:e3:ac:a4:35:84:2a:3e:3d:7d:43:
78:24:c6:09:d0:d1:88:cb:db:ce:e0:86:a2:da:73:
e5:66:34:ed:5d:8a:e1:b3:cf:21:e5:6a:21:10:b2:
8e:45:5f:2e:8b:60:bc:84:72:bf:8f:0b:09:f2:1d:
3f:27:13:49:f7:65:81:b5:39:72:85:b4:c5:cd:f3:
6d:09:58:d3:0a:8a:36:18:0a:c0:86:c9:c8:c8:d6:
4e:2e:f3:88:d2:35:1d:e7:3e:2e:79:78:06:08:13:
43:89:4d:37:f2:10:55:00:2e:39:9f:59:e3:4f:1b:
d9:94:0e:f8:c2:70:f6:be:4c:ae:42:7c:d1:b0:67:
86:27:47:64:8a:5a:0d:8b:48:33:ed:7d:cc:5c:13:
78:10:4d:57:0b:b5:4a:13:8b:81:fa:d4:8e:5c:b4:
cf:b3:6a:1c:02:62:13:a9:84:6d:8f:9d:98:1f:53:
4c:7d:c6:56:d8:07:b3:f6:06:4f:7b:98:dc:73:ad:
cb:62:93:cb:7f:83:c1:f4:fa:c5:06:df:e4:6c:e0:
ae:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:56:86:9B:25:84:9C:7A:AC:1E:F2:66:C8:11:BC:4D:2A:F4:AE:BB
X509v3 Authority Key Identifier:
keyid:16:51:D3:DD:C6:AD:D4:83:B7:61:AC:04:76:26:95:33:FE:7E:A7:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FlHT3cat1IO3YawEdiaVM_5-pxc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/321f74-092d-4dff-b335-2054f6e61922/1/FlHT3cat1IO3YawEdiaVM_5-pxc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/321f74-092d-4dff-b335-2054f6e61922/1/FlHT3cat1IO3YawEdiaVM_5-pxc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:db:40:98:16:21:37:1d:86:fa:ef:8e:65:88:3a:ab:06:e2:
5b:c2:ea:f2:d1:82:72:ae:4f:18:cc:af:56:ba:3b:e8:c3:33:
a1:9e:c5:fc:5b:0b:52:10:1b:97:14:2b:d5:28:3b:25:da:91:
d8:c7:3d:af:5a:82:93:2a:80:7f:62:88:a0:e4:9b:99:68:d6:
3d:d2:59:14:df:67:92:6a:f3:bc:39:4b:c1:e1:97:70:24:6d:
d3:d3:74:1d:15:a6:c1:08:1a:fb:55:32:b5:c1:f9:ad:d7:90:
4f:30:25:9c:9b:47:60:e0:fc:c5:98:40:26:a6:81:2b:c2:45:
9e:48:82:00:3c:e8:9a:a1:22:e0:9d:05:ce:42:49:f7:f3:a8:
6c:8d:52:80:ae:66:c8:47:85:06:0a:2a:ae:07:40:f0:5b:90:
45:ba:71:db:54:3a:62:26:6a:e5:f6:cb:21:63:69:b9:51:a1:
b5:58:46:b7:3a:96:33:41:e3:5b:b6:3a:5e:07:94:9e:9c:9e:
43:34:1f:4e:ab:3a:08:05:bf:f7:82:49:c2:71:26:73:f7:96:
4b:0e:e3:b1:cf:d8:54:24:85:89:60:46:f4:64:a5:d9:a7:b6:
f8:3f:c7:4d:fb:44:39:36:2a:73:20:1e:71:42:a7:d4:47:36:
92:5c:bf:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 23:48:46 2025 by rpki-client