Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/ff5133-ca11-42db-b03d-544855cc4f57/1/FlnrYEAZPfBoE1CQXmOdDljV-d8.mft
File: FlnrYEAZPfBoE1CQXmOdDljV-d8.mft (raw, json)
Hash identifier: NHJdGHFEaxnOMHUopzmFHRvFx4SFcERJ0cH5a/GLzf0=
Subject key identifier: 50:C8:5D:DE:96:43:8B:F8:AA:F4:39:4F:53:DB:70:24:3B:8D:33:E3
Authority key identifier: 16:59:EB:60:40:19:3D:F0:68:13:50:90:5E:63:9D:0E:58:D5:F9:DF
Certificate issuer: /CN=1659eb6040193df0681350905e639d0e58d5f9df
Certificate serial: 0196BB928DE39A5AFC9090BE6C52C54E8389
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FlnrYEAZPfBoE1CQXmOdDljV-d8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/ff5133-ca11-42db-b03d-544855cc4f57/1/FlnrYEAZPfBoE1CQXmOdDljV-d8.mft
Manifest number: 139C
Signing time: Sat 10 May 2025 19:01:06 +0000
Manifest this update: Sat 10 May 2025 19:01:06 +0000
Manifest next update: Sun 11 May 2025 19:01:06 +0000
Files and hashes: 1: 8-v-Z7Xa6lfqMbl7evIHp25t1sA.roa (hash: BWcCx1HwRpdJveviEQtt8WgW8hrEfngJob3ia7RrZwQ=)
2: FlnrYEAZPfBoE1CQXmOdDljV-d8.crl (hash: XNO/odi3mC79qibZw5NSMCdLjL73fvmMZpaqJ6B/BH4=)
3: cFc0gNIOK5WxBeuSF5eiQkXoOKE.roa (hash: GkH9aMuKOzi/6cYcKbTikX2OvYkhD9zkPc0LnUJCl1A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/ff5133-ca11-42db-b03d-544855cc4f57/1/FlnrYEAZPfBoE1CQXmOdDljV-d8.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/ff5133-ca11-42db-b03d-544855cc4f57/1/FlnrYEAZPfBoE1CQXmOdDljV-d8.mft
rsync://rpki.ripe.net/repository/DEFAULT/FlnrYEAZPfBoE1CQXmOdDljV-d8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 19:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bb:92:8d:e3:9a:5a:fc:90:90:be:6c:52:c5:4e:83:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1659eb6040193df0681350905e639d0e58d5f9df
Validity
Not Before: May 10 19:01:06 2025 GMT
Not After : May 11 19:01:06 2025 GMT
Subject: CN=50c85dde96438bf8aaf4394f53db70243b8d33e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:e7:b5:7e:4c:00:05:4b:bd:b6:2a:b2:94:47:
1c:1e:92:8a:b5:ea:3f:6a:87:0e:9a:60:a3:4c:b9:
54:cc:22:7b:67:b6:48:60:59:3c:9f:c7:c0:a7:e5:
0f:a4:83:90:24:79:28:71:56:2a:24:db:81:e3:74:
6e:bb:1a:2b:89:54:6d:cd:ea:36:ce:6b:e7:75:1a:
d0:bb:20:78:fb:6a:db:55:50:da:13:35:ac:80:c5:
c3:29:c4:82:40:7f:22:cf:4a:13:68:39:3b:03:81:
79:15:9f:cc:13:a8:27:b5:8f:a3:fe:c8:83:50:cb:
27:41:fc:66:6d:8e:e0:e1:9f:03:aa:b9:9c:b7:e7:
5b:87:28:5d:9c:c7:cd:4c:8f:78:f3:45:e7:73:1f:
ae:ec:d4:90:b1:30:5f:a3:5f:e7:d2:54:94:31:be:
e0:ac:b8:87:be:82:07:60:ff:15:df:05:da:11:cf:
08:ee:2d:8d:88:1d:97:a7:e8:95:96:18:14:91:25:
7f:27:f7:df:63:af:03:56:49:07:ec:b9:10:cd:fb:
98:00:66:c0:9b:65:2b:26:50:22:4b:95:e2:7f:0b:
15:6e:3e:2e:95:92:ed:79:4a:e8:e4:62:47:aa:57:
14:0a:ad:5c:63:28:a3:6c:8a:d1:5f:8b:9b:ee:62:
8f:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:C8:5D:DE:96:43:8B:F8:AA:F4:39:4F:53:DB:70:24:3B:8D:33:E3
X509v3 Authority Key Identifier:
keyid:16:59:EB:60:40:19:3D:F0:68:13:50:90:5E:63:9D:0E:58:D5:F9:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FlnrYEAZPfBoE1CQXmOdDljV-d8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/ff5133-ca11-42db-b03d-544855cc4f57/1/FlnrYEAZPfBoE1CQXmOdDljV-d8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/ff5133-ca11-42db-b03d-544855cc4f57/1/FlnrYEAZPfBoE1CQXmOdDljV-d8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:8a:17:17:b4:bb:1a:12:db:da:6d:59:46:fa:e0:3c:6d:c6:
19:f6:7d:32:6a:9d:28:66:1e:65:24:8c:5f:3a:36:b1:58:1f:
29:79:21:66:6c:81:de:39:03:03:67:d9:c8:f1:a6:69:84:58:
08:cd:60:55:6d:4e:06:4e:27:d4:68:b4:9e:a5:3e:0e:20:3c:
c8:89:d3:70:d5:5d:8b:56:36:05:43:f9:8e:7f:d2:06:77:2e:
fe:a5:7c:91:e9:f4:2e:ca:1c:37:a8:74:a4:75:44:d3:23:26:
32:af:5c:9d:50:dd:2d:cd:93:20:77:ee:db:5e:2b:3f:d9:d7:
bd:ea:2d:b2:76:b0:78:59:d2:91:6a:71:c1:38:c7:71:c5:6c:
b3:68:35:8b:88:d8:12:7d:11:39:de:47:92:fe:d7:34:88:cf:
05:31:92:cc:dc:bb:28:f6:55:19:99:f1:0c:5f:ed:2e:54:d4:
5c:c2:bd:c9:4b:61:29:6b:dd:31:5c:01:ca:1f:8f:98:85:17:
d2:0a:6b:12:80:51:b6:68:fb:b1:6d:30:57:82:74:27:37:23:
20:93:e1:0b:6b:d3:09:2c:bd:dd:94:22:b4:79:f5:41:e7:45:
c0:ad:4e:94:92:13:38:9b:1d:d7:29:e4:a4:74:71:9f:bd:d0:
72:83:b1:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 00:41:04 2025 by rpki-client