Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/ff5133-ca11-42db-b03d-544855cc4f57/1/FlnrYEAZPfBoE1CQXmOdDljV-d8.mft
File: FlnrYEAZPfBoE1CQXmOdDljV-d8.mft (raw, json)
Hash identifier: tXBDnMp1MXOvgKybWr5HVbQIwcwKPUyl/pHWguDLU3I=
Subject key identifier: 20:2C:A1:1E:B7:AC:7F:46:FD:F3:E4:4E:D6:68:89:DE:4A:B4:4D:6C
Authority key identifier: 16:59:EB:60:40:19:3D:F0:68:13:50:90:5E:63:9D:0E:58:D5:F9:DF
Certificate issuer: /CN=1659eb6040193df0681350905e639d0e58d5f9df
Certificate serial: 0197C236CEDF3BD3E6C53F6106C4C05E5C99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FlnrYEAZPfBoE1CQXmOdDljV-d8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/ff5133-ca11-42db-b03d-544855cc4f57/1/FlnrYEAZPfBoE1CQXmOdDljV-d8.mft
Manifest number: 1424
Signing time: Mon 30 Jun 2025 19:01:01 +0000
Manifest this update: Mon 30 Jun 2025 19:01:01 +0000
Manifest next update: Tue 01 Jul 2025 19:01:01 +0000
Files and hashes: 1: 8-v-Z7Xa6lfqMbl7evIHp25t1sA.roa (hash: BWcCx1HwRpdJveviEQtt8WgW8hrEfngJob3ia7RrZwQ=)
2: FlnrYEAZPfBoE1CQXmOdDljV-d8.crl (hash: 4L+dQ/5s5gtx4e6G8yVt/gL1fbPAKdjLSrziGfB3IrU=)
3: cFc0gNIOK5WxBeuSF5eiQkXoOKE.roa (hash: GkH9aMuKOzi/6cYcKbTikX2OvYkhD9zkPc0LnUJCl1A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/ff5133-ca11-42db-b03d-544855cc4f57/1/FlnrYEAZPfBoE1CQXmOdDljV-d8.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/ff5133-ca11-42db-b03d-544855cc4f57/1/FlnrYEAZPfBoE1CQXmOdDljV-d8.mft
rsync://rpki.ripe.net/repository/DEFAULT/FlnrYEAZPfBoE1CQXmOdDljV-d8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 19:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c2:36:ce:df:3b:d3:e6:c5:3f:61:06:c4:c0:5e:5c:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1659eb6040193df0681350905e639d0e58d5f9df
Validity
Not Before: Jun 30 19:01:01 2025 GMT
Not After : Jul 1 19:01:01 2025 GMT
Subject: CN=202ca11eb7ac7f46fdf3e44ed66889de4ab44d6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:96:c9:8f:53:54:37:d8:36:93:03:4b:21:56:
54:79:61:ea:7b:c1:51:b5:3a:12:2c:53:d2:f6:f1:
8b:6f:17:1d:53:4f:7c:ce:d2:1c:85:02:e6:40:32:
a5:88:8c:a1:d4:09:2b:54:19:4a:b5:d8:d2:91:8a:
c6:0e:76:e8:d1:1c:44:0b:09:61:76:4d:e2:4a:0b:
13:5f:57:93:a9:23:de:86:0b:c2:e0:9a:bd:86:a0:
c9:c7:9a:7c:86:c5:8f:c6:f5:e0:d1:7f:8d:e3:d0:
7f:05:b0:da:e3:40:6f:df:2b:4b:66:17:ed:da:b9:
db:b3:a6:56:ba:71:a7:7f:5f:44:d6:3c:96:7c:06:
21:df:7d:d7:20:6f:90:bb:fb:8e:a0:9c:e2:fb:29:
b0:fd:d9:e8:27:14:6f:22:e7:42:35:88:1a:99:d6:
5e:8c:71:fc:a8:0c:dd:d4:25:2d:85:14:11:b1:8d:
98:50:b8:7c:31:1a:e3:94:74:1a:37:7b:b8:e5:b0:
02:2d:f7:d3:bd:37:cf:f3:cc:12:5a:f1:00:2a:44:
d7:fb:b4:37:a2:cf:da:1b:e5:4e:d3:e8:ab:9d:84:
95:ba:97:bc:e0:09:ad:d3:bf:09:33:d4:5a:97:01:
82:70:a5:de:40:02:ed:94:f2:5b:d8:72:a7:2f:68:
3b:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:2C:A1:1E:B7:AC:7F:46:FD:F3:E4:4E:D6:68:89:DE:4A:B4:4D:6C
X509v3 Authority Key Identifier:
keyid:16:59:EB:60:40:19:3D:F0:68:13:50:90:5E:63:9D:0E:58:D5:F9:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FlnrYEAZPfBoE1CQXmOdDljV-d8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/ff5133-ca11-42db-b03d-544855cc4f57/1/FlnrYEAZPfBoE1CQXmOdDljV-d8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/ff5133-ca11-42db-b03d-544855cc4f57/1/FlnrYEAZPfBoE1CQXmOdDljV-d8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:55:cc:8f:e6:2a:e6:59:8d:a3:b5:66:f8:b0:b5:da:7c:a0:
a5:57:4f:73:a1:e5:ca:42:34:50:0f:69:fd:83:df:ec:6e:09:
39:99:03:9c:8d:5a:32:3e:e6:2d:f4:41:07:3c:c4:36:e1:44:
50:6e:d4:c9:fa:5b:81:e8:46:d7:da:61:7a:7d:06:4d:04:14:
04:6b:77:c4:81:2b:94:22:85:a6:67:75:ef:2f:41:00:a5:e6:
20:57:90:43:a0:62:66:8c:eb:79:76:27:70:b6:e1:b1:65:3e:
88:a2:9a:a6:5d:a6:da:fb:83:ed:6b:f1:e4:b1:cc:de:6f:9c:
22:df:d7:85:bf:24:f6:84:94:a0:9f:2a:1d:f2:86:5a:97:25:
65:eb:73:01:b4:50:16:6e:a8:47:23:56:f3:8c:77:64:6d:2a:
42:db:b9:2c:44:64:57:17:28:51:fb:99:e1:b3:51:94:31:51:
41:82:17:19:61:dc:83:81:f8:79:a8:2b:61:f5:80:87:53:68:
a2:ae:0c:0f:d8:10:d9:fe:67:80:1d:18:59:f6:e5:17:dc:81:
07:68:11:e9:4f:d4:ec:f7:a0:6d:d2:aa:4e:e9:db:c1:d3:22:
2d:7c:38:c9:7d:4d:85:f1:1f:fb:57:5d:03:31:00:1f:0f:2d:
7b:bb:a3:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 04:03:58 2025 by rpki-client