
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/d13f84-16ce-4d51-a618-c2a5d9d70313/1/flrIG7zPhS8irI7VLS6S2zHY1gY.mft
File: flrIG7zPhS8irI7VLS6S2zHY1gY.mft (raw, json)
Hash identifier: vOTNI8h6d37leN1o8DmVa+3X+izqkDFLQLLhInwoTqU=
Subject key identifier: 98:3F:F2:39:55:AF:14:75:61:A6:42:D8:89:98:0E:2E:0E:EF:F0:58
Authority key identifier: 7E:5A:C8:1B:BC:CF:85:2F:22:AC:8E:D5:2D:2E:92:DB:31:D8:D6:06
Certificate issuer: /CN=7e5ac81bbccf852f22ac8ed52d2e92db31d8d606
Certificate serial: 01976CCFADBA55053E802DB2B4C8AAF20F59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/flrIG7zPhS8irI7VLS6S2zHY1gY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/d13f84-16ce-4d51-a618-c2a5d9d70313/1/flrIG7zPhS8irI7VLS6S2zHY1gY.mft
Manifest number: 0359
Signing time: Sat 14 Jun 2025 05:00:39 +0000
Manifest this update: Sat 14 Jun 2025 05:00:39 +0000
Manifest next update: Sun 15 Jun 2025 05:00:39 +0000
Files and hashes: 1: d0YXwc1ZBHHMR9ZAKLms7HlOiUA.roa (hash: XtdrQk1bystPGs3Lhcrr1va53IhMr+A/sR56pklaba8=)
2: flrIG7zPhS8irI7VLS6S2zHY1gY.crl (hash: Pz316IptLcrfM1AxcB/Gorcbnmm/Sdja4z/hESRjlMw=)
3: yWx6-5ROTfngpbWofjIrovB2Q6E.roa (hash: v3rtNkszsHfCVuw51qTsQgDiQ2kYX2tvZDcMhV4gxJA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/d13f84-16ce-4d51-a618-c2a5d9d70313/1/flrIG7zPhS8irI7VLS6S2zHY1gY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/d13f84-16ce-4d51-a618-c2a5d9d70313/1/flrIG7zPhS8irI7VLS6S2zHY1gY.mft
rsync://rpki.ripe.net/repository/DEFAULT/flrIG7zPhS8irI7VLS6S2zHY1gY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:cf:ad:ba:55:05:3e:80:2d:b2:b4:c8:aa:f2:0f:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e5ac81bbccf852f22ac8ed52d2e92db31d8d606
Validity
Not Before: Jun 14 05:00:39 2025 GMT
Not After : Jun 15 05:00:39 2025 GMT
Subject: CN=983ff23955af147561a642d889980e2e0eeff058
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e5:b6:d5:a0:9b:8d:15:7d:2b:3f:62:8d:d2:
8b:09:b4:d9:3e:01:f5:58:0c:78:a3:18:62:ea:07:
39:1f:36:82:37:92:6e:64:c1:24:5e:97:0c:20:9b:
bb:57:68:48:8d:14:e0:ee:ef:e3:dd:09:01:87:94:
fd:ed:cf:80:d7:4b:eb:5e:a6:a4:55:ef:a4:f2:9a:
cd:69:fe:d4:95:60:87:69:d5:c3:1f:1f:a0:de:bd:
ef:b7:6c:1c:7e:9b:78:4f:c4:e6:36:a2:90:a9:18:
76:e8:a3:4c:70:33:67:68:2d:e9:16:2d:c9:16:b8:
3d:98:21:08:81:12:df:44:2e:fb:21:ab:42:3b:28:
58:fc:40:90:d5:84:ea:b4:c2:94:00:ad:1e:80:e6:
ee:2c:1f:c6:2b:1d:1a:0b:a1:74:26:ea:7b:7f:dc:
0d:01:d0:b0:43:78:2d:41:c8:da:96:ec:76:42:12:
e5:19:1e:8d:06:e6:67:b3:41:e1:7e:cf:9d:b2:4c:
d2:01:0a:76:29:cc:c8:6e:0e:5f:49:f1:1c:7a:fa:
0f:92:23:f9:e4:6a:99:6e:4d:f4:7a:bb:06:f9:f8:
8a:f4:03:9f:c3:68:ad:6a:fc:e6:70:18:71:5d:90:
63:57:95:dd:5d:fc:6f:f8:68:97:23:6a:04:92:8f:
e3:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:3F:F2:39:55:AF:14:75:61:A6:42:D8:89:98:0E:2E:0E:EF:F0:58
X509v3 Authority Key Identifier:
keyid:7E:5A:C8:1B:BC:CF:85:2F:22:AC:8E:D5:2D:2E:92:DB:31:D8:D6:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/flrIG7zPhS8irI7VLS6S2zHY1gY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d13f84-16ce-4d51-a618-c2a5d9d70313/1/flrIG7zPhS8irI7VLS6S2zHY1gY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d13f84-16ce-4d51-a618-c2a5d9d70313/1/flrIG7zPhS8irI7VLS6S2zHY1gY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:93:ca:82:28:65:8f:6b:39:32:a2:3a:09:90:4b:76:11:3f:
1c:c8:bf:59:74:bb:64:3e:f6:2a:36:3a:f6:33:da:24:a2:43:
f6:cf:66:b4:b9:a6:05:a6:fc:41:e8:7c:c8:e3:c4:1a:f3:08:
f9:27:f9:a9:69:5c:cb:f8:79:d6:01:df:56:14:aa:44:86:b3:
54:dc:03:ee:dc:e4:e8:d0:53:90:79:19:91:e1:f5:a0:07:75:
46:91:55:59:16:53:ad:ca:3e:6d:5a:f8:64:32:02:64:bd:94:
6a:40:7d:aa:00:8a:e3:d7:04:bf:96:13:88:bd:7a:0c:4f:1f:
13:26:f5:79:ab:8b:2d:f8:c3:f6:a2:21:9c:48:b5:e8:a2:c0:
c4:5b:3a:df:07:24:88:cb:bf:22:f6:68:05:fb:31:8f:55:e0:
54:18:8a:a7:d5:f8:d9:57:8c:5e:bf:55:c5:26:e5:97:d2:8d:
98:ad:a1:69:f2:ee:27:61:91:4b:f6:56:28:5b:61:7b:d1:86:
08:11:65:57:e5:06:10:19:f5:68:e0:87:f8:92:de:34:80:c8:
7c:88:c0:d2:dc:29:c2:e7:a4:07:c4:74:05:9a:dc:33:61:c0:
00:8d:92:98:57:43:a9:e5:bb:98:c0:74:b1:5a:e6:6e:d0:66:
be:f4:4e:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:02:13 2025 by rpki-client