Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/3b72c0-5de9-46a4-abd4-31b60311c315/1/Fl-tQQkoOzO287pT-ug6FF0ZNOI.mft
File: Fl-tQQkoOzO287pT-ug6FF0ZNOI.mft (raw, json)
Hash identifier: No6t2GoGwHv1k523wHSe2OlyS2NI5zw0WTO4IY+NZw0=
Subject key identifier: 0B:A1:2C:1B:A5:36:CD:F5:99:2A:39:4F:E0:76:21:55:D1:C7:4B:26
Authority key identifier: 16:5F:AD:41:09:28:3B:33:B6:F3:BA:53:FA:E8:3A:14:5D:19:34:E2
Certificate issuer: /CN=165fad4109283b33b6f3ba53fae83a145d1934e2
Certificate serial: 0197B6A0AB8109259690D7486329F6B062BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fl-tQQkoOzO287pT-ug6FF0ZNOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/3b72c0-5de9-46a4-abd4-31b60311c315/1/Fl-tQQkoOzO287pT-ug6FF0ZNOI.mft
Manifest number: 02BE
Signing time: Sat 28 Jun 2025 13:01:12 +0000
Manifest this update: Sat 28 Jun 2025 13:01:12 +0000
Manifest next update: Sun 29 Jun 2025 13:01:12 +0000
Files and hashes: 1: Fl-tQQkoOzO287pT-ug6FF0ZNOI.crl (hash: RaDpNkbB3kM6bycLan1/i/RUqo4XO4Veacn2liHyHb4=)
2: Ln2JbGXgQ88O79Pg1zLA68Pqxy0.roa (hash: Mstyw2j7AKFxamlwfGacDBtId3D916+hLBKPld0IQWI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/3b72c0-5de9-46a4-abd4-31b60311c315/1/Fl-tQQkoOzO287pT-ug6FF0ZNOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/3b72c0-5de9-46a4-abd4-31b60311c315/1/Fl-tQQkoOzO287pT-ug6FF0ZNOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fl-tQQkoOzO287pT-ug6FF0ZNOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:ab:81:09:25:96:90:d7:48:63:29:f6:b0:62:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=165fad4109283b33b6f3ba53fae83a145d1934e2
Validity
Not Before: Jun 28 13:01:12 2025 GMT
Not After : Jun 29 13:01:12 2025 GMT
Subject: CN=0ba12c1ba536cdf5992a394fe0762155d1c74b26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:71:a7:7d:32:6d:9e:79:e3:91:6c:7a:9d:86:
dc:56:7d:70:0f:d5:2e:a7:70:85:bb:ea:ce:7f:4a:
2b:bf:18:77:66:8e:f6:62:22:66:dc:09:ae:c9:3c:
83:33:2b:fe:0f:80:92:1c:11:d0:2e:4c:89:02:38:
9b:20:fc:c0:b1:90:27:dd:5f:46:fd:48:3f:1b:62:
f8:e2:c3:dd:81:12:5d:10:bf:bf:30:9a:35:b1:e0:
76:cd:1e:7e:45:01:3d:db:23:ee:01:7e:ab:03:3d:
ab:1a:b1:3a:50:2e:85:be:1c:ef:b0:65:f5:eb:20:
f7:ff:af:7a:7e:64:ff:9b:9d:0a:95:53:cf:66:29:
79:4d:cd:42:bd:89:98:2c:a3:b1:de:55:43:7b:3c:
c9:9c:bd:23:83:9d:c5:23:9a:67:83:17:d8:ec:d7:
27:6d:0d:d6:b0:0b:be:58:fb:88:66:70:59:3a:36:
52:97:cb:7e:bf:ed:94:86:0d:d5:34:19:8e:05:b9:
40:84:62:dc:17:ce:65:21:25:69:f8:5d:52:ef:f5:
7d:5a:34:11:88:d2:e3:9c:fd:df:36:cc:a4:03:80:
8d:4e:66:a3:c7:9a:57:91:ff:79:06:e6:59:cd:85:
ed:d5:1c:d3:6e:fa:3a:80:42:db:4b:6a:e3:d3:e8:
f9:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:A1:2C:1B:A5:36:CD:F5:99:2A:39:4F:E0:76:21:55:D1:C7:4B:26
X509v3 Authority Key Identifier:
keyid:16:5F:AD:41:09:28:3B:33:B6:F3:BA:53:FA:E8:3A:14:5D:19:34:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fl-tQQkoOzO287pT-ug6FF0ZNOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3b72c0-5de9-46a4-abd4-31b60311c315/1/Fl-tQQkoOzO287pT-ug6FF0ZNOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3b72c0-5de9-46a4-abd4-31b60311c315/1/Fl-tQQkoOzO287pT-ug6FF0ZNOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:0a:1a:fe:1f:87:c1:e1:b0:9e:96:91:c1:3f:5e:8b:e6:84:
9c:d6:a0:fe:d1:cc:2d:d8:6a:53:ae:a7:8f:0c:6f:25:e9:a7:
2b:d1:7c:c1:4c:a2:5d:01:a7:45:8f:2f:51:82:f2:3c:2c:74:
9c:1d:10:7a:c4:b0:5a:f6:52:34:87:06:e6:14:7d:d7:c6:be:
d0:38:c0:9f:d7:88:2d:b1:0d:cc:04:10:16:73:56:8b:1e:e4:
3a:63:5d:24:66:2f:6a:ab:da:be:e4:52:77:14:77:fd:f0:f9:
fa:1c:b6:59:9d:f5:bd:06:22:e2:62:64:64:09:09:02:5f:07:
3c:37:20:72:65:58:74:b9:91:49:0c:15:cd:2f:de:62:b9:06:
ba:93:15:65:58:64:7e:41:1f:fe:34:2d:6b:7c:90:3d:4b:3e:
9b:d7:44:03:e3:b5:22:12:39:03:45:57:a3:d6:d5:4f:71:50:
ef:bc:75:eb:89:56:8d:20:47:54:51:cb:4b:ab:0c:7e:31:cf:
3c:61:49:08:2f:45:46:9d:42:ca:4d:b0:5e:4f:f4:2c:88:d6:
0f:cf:e9:23:44:8d:02:d7:2e:9c:3c:00:46:7a:db:12:f4:44:
ff:c8:cc:10:26:db:92:a9:61:78:3d:70:f7:f4:1d:d6:79:08:
d2:37:8f:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:12:23 2025 by rpki-client