Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/cc47e5-4a21-4f4f-be22-a5c93a7b9fa5/1/flL6ttMgbrYKMduWxy2U_CQsCgg.mft
File: flL6ttMgbrYKMduWxy2U_CQsCgg.mft (raw, json)
Hash identifier: rGSnqFS+DbqX/Q/7HvPAVqap2K3JsMOzwUksIgULNUw=
Subject key identifier: 05:B0:6A:2C:C5:CF:D7:9D:01:2D:B9:81:2F:06:74:20:58:A7:1E:52
Authority key identifier: 7E:52:FA:B6:D3:20:6E:B6:0A:31:DB:96:C7:2D:94:FC:24:2C:0A:08
Certificate issuer: /CN=7e52fab6d3206eb60a31db96c72d94fc242c0a08
Certificate serial: 0197B74533FFC8700510FD40D1B5CB741D47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/flL6ttMgbrYKMduWxy2U_CQsCgg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/cc47e5-4a21-4f4f-be22-a5c93a7b9fa5/1/flL6ttMgbrYKMduWxy2U_CQsCgg.mft
Manifest number: 15B4
Signing time: Sat 28 Jun 2025 16:00:54 +0000
Manifest this update: Sat 28 Jun 2025 16:00:54 +0000
Manifest next update: Sun 29 Jun 2025 16:00:54 +0000
Files and hashes: 1: flL6ttMgbrYKMduWxy2U_CQsCgg.crl (hash: b6Dw3+DZ1IuE3vDDMuEbju/UaSpxZ3tOLA5T5ALs4v0=)
2: oR70fW7uVwWXm6EKAN8uqrlQkQ4.roa (hash: 0R/vI9KhNQCuJ8a8jzLTXA2DiQsUAT+t0yjMQ7W3gak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/cc47e5-4a21-4f4f-be22-a5c93a7b9fa5/1/flL6ttMgbrYKMduWxy2U_CQsCgg.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/cc47e5-4a21-4f4f-be22-a5c93a7b9fa5/1/flL6ttMgbrYKMduWxy2U_CQsCgg.mft
rsync://rpki.ripe.net/repository/DEFAULT/flL6ttMgbrYKMduWxy2U_CQsCgg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:33:ff:c8:70:05:10:fd:40:d1:b5:cb:74:1d:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e52fab6d3206eb60a31db96c72d94fc242c0a08
Validity
Not Before: Jun 28 16:00:54 2025 GMT
Not After : Jun 29 16:00:54 2025 GMT
Subject: CN=05b06a2cc5cfd79d012db9812f06742058a71e52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:12:84:ed:fd:6f:e4:f4:f5:7b:f9:f4:9b:3e:
6b:a1:dc:df:d8:ae:4d:1e:88:16:c4:93:7d:f6:d1:
66:86:a1:a7:8a:fc:04:22:bc:8b:0c:fb:4f:3e:2a:
cc:63:3a:d1:2a:78:73:35:ff:c6:4c:65:cd:77:2d:
fc:16:cb:33:f1:86:ae:b9:1d:c2:6e:6d:15:69:c3:
da:b9:b2:b8:ff:06:bd:35:9e:a5:73:16:a5:83:b6:
66:c9:55:a2:32:28:d0:f9:f5:c3:38:c4:e5:47:2b:
54:b6:bd:11:65:3d:43:2d:1a:1b:35:bd:c3:86:c1:
80:dc:20:31:a9:39:af:6f:24:5b:34:2e:b7:94:02:
ba:92:e7:ca:5c:39:49:71:8b:99:97:2c:01:fe:0d:
64:67:20:fe:4b:1d:65:cf:8d:b4:a7:50:fd:06:0d:
d3:18:e3:51:fd:93:5e:70:63:f8:e1:79:81:ad:76:
93:16:1f:8d:b0:d4:ec:ac:c6:a8:a0:e8:7e:94:d7:
2b:6a:53:04:9c:24:97:2e:8d:86:e5:3d:a0:16:c2:
36:eb:4f:53:b9:89:61:72:33:78:ef:7e:f8:2e:49:
dd:3c:74:93:87:03:bd:f0:26:01:f6:6c:50:35:b6:
27:59:32:17:76:2f:55:03:21:7f:4a:c5:45:87:ce:
67:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:B0:6A:2C:C5:CF:D7:9D:01:2D:B9:81:2F:06:74:20:58:A7:1E:52
X509v3 Authority Key Identifier:
keyid:7E:52:FA:B6:D3:20:6E:B6:0A:31:DB:96:C7:2D:94:FC:24:2C:0A:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/flL6ttMgbrYKMduWxy2U_CQsCgg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/cc47e5-4a21-4f4f-be22-a5c93a7b9fa5/1/flL6ttMgbrYKMduWxy2U_CQsCgg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/cc47e5-4a21-4f4f-be22-a5c93a7b9fa5/1/flL6ttMgbrYKMduWxy2U_CQsCgg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:b9:0a:e6:ca:6d:53:36:fd:05:e3:89:61:ca:07:e8:d6:7e:
e9:a6:24:89:3d:5f:84:f1:4d:87:e9:79:75:1d:89:be:c4:3f:
ea:e1:9d:2c:5c:89:ae:1c:71:39:cb:0f:b0:3f:81:eb:95:51:
8a:98:07:fe:54:42:c8:06:ef:d5:a3:3c:52:66:e9:aa:24:a0:
0d:6a:05:17:bd:ac:74:1e:75:44:d7:5c:4b:22:2e:e8:18:db:
d7:c9:50:63:f7:8f:5b:97:13:39:3d:83:a9:bd:f2:49:23:51:
6b:64:02:9b:f2:c6:78:fd:bc:a7:3b:3b:fc:f9:38:c4:30:e3:
43:b4:53:af:78:2b:58:bb:cc:65:31:c2:07:8e:88:b8:e7:87:
40:e5:03:0e:af:43:67:5f:eb:45:13:87:71:62:94:4e:a2:35:
8b:f3:cf:76:c1:33:7a:4c:8e:99:47:89:5c:ce:ad:95:09:00:
72:43:53:89:16:f0:66:53:73:78:76:1f:3b:32:4f:77:72:3c:
83:a3:21:39:1b:b0:c6:96:25:53:85:65:aa:78:60:ee:52:19:
7e:ce:83:35:ab:f0:67:51:29:6d:e2:33:65:e0:bf:8f:b7:d4:
74:9e:38:50:ad:5c:a3:25:31:f1:54:90:85:66:fc:df:a0:e2:
ab:a4:45:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:40:25 2025 by rpki-client