Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/321f74-092d-4dff-b335-2054f6e61922/1/FlHT3cat1IO3YawEdiaVM_5-pxc.mft
File: FlHT3cat1IO3YawEdiaVM_5-pxc.mft (raw, json)
Hash identifier: 7BTigkQjQTDEmSoIYuTACT1XnYvMPg63Z5gaS8CJ2wE=
Subject key identifier: E5:2F:4E:93:28:BF:BF:B9:51:5E:91:55:9A:D5:49:5B:BE:8B:14:B2
Authority key identifier: 16:51:D3:DD:C6:AD:D4:83:B7:61:AC:04:76:26:95:33:FE:7E:A7:17
Certificate issuer: /CN=1651d3ddc6add483b761ac0476269533fe7ea717
Certificate serial: 019683C7AEF9C0B77047B627C6F25973C5E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FlHT3cat1IO3YawEdiaVM_5-pxc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/321f74-092d-4dff-b335-2054f6e61922/1/FlHT3cat1IO3YawEdiaVM_5-pxc.mft
Manifest number: 1517
Signing time: Tue 29 Apr 2025 23:00:23 +0000
Manifest this update: Tue 29 Apr 2025 23:00:23 +0000
Manifest next update: Wed 30 Apr 2025 23:00:23 +0000
Files and hashes: 1: FlHT3cat1IO3YawEdiaVM_5-pxc.crl (hash: /n/w/oW+9frRCskhkuWULfbmI7iQInEBkvHk68CbNFc=)
2: OAOWe7maY9pSBU-5gVNjG4r2PZI.roa (hash: cj95WRLXDZ1GDxFc9L374qruvZwqpq+kg9Wr756ijmA=)
3: RS5heur6Cn3t-3NSKUpCkvrpLSg.roa (hash: TdAX1fGTzy2GwxRzSlF7GAvHIAjv8je9eFZvPOiAzfs=)
4: cisW_uPMTWGjpMgFOVf9HNh_jYk.roa (hash: Wdm0HXAD65sFut0/XjR/drYS0oNc3aDjPik/CLx6CYk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/321f74-092d-4dff-b335-2054f6e61922/1/FlHT3cat1IO3YawEdiaVM_5-pxc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/321f74-092d-4dff-b335-2054f6e61922/1/FlHT3cat1IO3YawEdiaVM_5-pxc.mft
rsync://rpki.ripe.net/repository/DEFAULT/FlHT3cat1IO3YawEdiaVM_5-pxc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 23:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:83:c7:ae:f9:c0:b7:70:47:b6:27:c6:f2:59:73:c5:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1651d3ddc6add483b761ac0476269533fe7ea717
Validity
Not Before: Apr 29 23:00:23 2025 GMT
Not After : Apr 30 23:00:23 2025 GMT
Subject: CN=e52f4e9328bfbfb9515e91559ad5495bbe8b14b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:60:69:6a:11:54:fb:f1:09:38:40:fd:fc:75:
c8:8f:44:3e:ee:66:84:41:eb:4d:ba:bb:28:db:dc:
6a:d6:40:f7:85:44:16:1b:6c:0d:9d:cd:9b:ad:4c:
cd:08:3f:ec:b1:ce:c8:99:5e:2f:3c:8a:f4:dc:6b:
85:3f:b5:47:1d:2c:fe:7e:85:97:75:66:8f:cd:7b:
c1:ec:5e:29:fb:c5:3c:40:9b:22:96:d4:b6:ea:55:
e2:61:17:de:0d:f7:8a:be:f0:ef:b8:47:32:41:3a:
00:46:ab:0a:8d:a8:d6:73:a4:0d:05:55:c0:92:07:
c2:a0:a0:d8:91:f5:20:58:b8:9e:75:2f:8a:b6:c4:
fe:dd:14:29:66:39:63:8e:8c:6d:c7:cc:da:38:cb:
17:f5:1a:21:6a:f5:f8:95:b5:d8:f7:74:ce:29:2a:
4b:cf:e9:00:22:9a:bb:df:fc:ba:f4:ba:a9:0c:e4:
6f:52:ad:6d:77:04:f4:f2:10:dc:1c:75:4d:6a:9e:
6a:49:b1:9f:0d:0e:dd:65:e3:ae:4b:80:ff:9a:0b:
2a:b8:2e:9d:69:82:55:b0:4c:b6:b1:7e:b5:fb:00:
e7:b3:63:c2:67:4f:50:ba:88:43:a0:fc:c9:fa:90:
a6:ec:4c:a9:4f:de:43:da:a4:a2:64:05:14:39:20:
fb:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:2F:4E:93:28:BF:BF:B9:51:5E:91:55:9A:D5:49:5B:BE:8B:14:B2
X509v3 Authority Key Identifier:
keyid:16:51:D3:DD:C6:AD:D4:83:B7:61:AC:04:76:26:95:33:FE:7E:A7:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FlHT3cat1IO3YawEdiaVM_5-pxc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/321f74-092d-4dff-b335-2054f6e61922/1/FlHT3cat1IO3YawEdiaVM_5-pxc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/321f74-092d-4dff-b335-2054f6e61922/1/FlHT3cat1IO3YawEdiaVM_5-pxc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:27:31:3f:fd:97:a8:ac:7a:12:fc:30:49:bb:29:8e:09:f9:
53:9a:0c:bd:e0:09:90:4c:67:79:3c:1c:a0:28:d0:59:38:e0:
b0:71:2c:89:8b:84:5d:2d:8c:35:b3:7d:e3:02:38:d2:b7:26:
62:fb:7d:cc:27:03:e8:52:1d:16:5b:03:b9:86:3b:32:81:59:
d8:a8:1f:67:40:2c:21:c9:f2:0f:76:2b:2e:c4:5c:5c:6c:5b:
2c:5d:47:45:d8:36:25:94:2a:95:64:36:90:65:5a:78:ea:37:
d9:09:a4:d1:21:46:55:30:0a:9f:97:79:58:14:cb:5b:7c:ee:
e2:84:8a:20:5c:16:d4:19:3d:2f:a8:c2:3e:05:b9:34:f0:16:
75:d9:56:0e:34:5e:0d:5d:6f:89:0d:e6:4d:28:ed:ef:af:8a:
cd:bd:56:48:f2:94:5e:ff:d7:dc:54:c9:16:d1:3c:6d:c0:e4:
e9:6e:fd:93:13:dc:b1:bb:38:6a:1d:6a:00:64:fa:ac:56:85:
39:b0:65:ec:07:45:ce:97:a4:e4:f0:95:00:01:2d:31:20:1a:
a3:7b:0b:ce:c7:80:b7:c6:84:71:d6:e0:ef:59:f5:e1:78:04:
74:bd:7d:e7:d5:a8:93:2c:99:2f:4e:35:e8:5e:26:3a:1a:d9:
db:c0:67:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 08:15:07 2025 by rpki-client