Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/3b72c0-5de9-46a4-abd4-31b60311c315/1/Fl-tQQkoOzO287pT-ug6FF0ZNOI.mft
File: Fl-tQQkoOzO287pT-ug6FF0ZNOI.mft (raw, json)
Hash identifier: LstflAHiN2EkSAqs7xnKCT9LfN/cC9SIhrcNycMhPTM=
Subject key identifier: D9:F1:78:5C:0A:97:85:67:FD:EB:F9:64:BC:CF:F0:76:74:51:B2:FC
Authority key identifier: 16:5F:AD:41:09:28:3B:33:B6:F3:BA:53:FA:E8:3A:14:5D:19:34:E2
Certificate issuer: /CN=165fad4109283b33b6f3ba53fae83a145d1934e2
Certificate serial: 01969E635AB8CA8EB339A9D50C5730B7DF5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fl-tQQkoOzO287pT-ug6FF0ZNOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/3b72c0-5de9-46a4-abd4-31b60311c315/1/Fl-tQQkoOzO287pT-ug6FF0ZNOI.mft
Manifest number: 022D
Signing time: Mon 05 May 2025 03:00:33 +0000
Manifest this update: Mon 05 May 2025 03:00:33 +0000
Manifest next update: Tue 06 May 2025 03:00:33 +0000
Files and hashes: 1: Fl-tQQkoOzO287pT-ug6FF0ZNOI.crl (hash: MkFdcrugTtYKdlnkFeDcIWpK3xiJGuJ/VnT99YRhhM0=)
2: Ln2JbGXgQ88O79Pg1zLA68Pqxy0.roa (hash: Mstyw2j7AKFxamlwfGacDBtId3D916+hLBKPld0IQWI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/3b72c0-5de9-46a4-abd4-31b60311c315/1/Fl-tQQkoOzO287pT-ug6FF0ZNOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/3b72c0-5de9-46a4-abd4-31b60311c315/1/Fl-tQQkoOzO287pT-ug6FF0ZNOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fl-tQQkoOzO287pT-ug6FF0ZNOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9e:63:5a:b8:ca:8e:b3:39:a9:d5:0c:57:30:b7:df:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=165fad4109283b33b6f3ba53fae83a145d1934e2
Validity
Not Before: May 5 03:00:33 2025 GMT
Not After : May 6 03:00:33 2025 GMT
Subject: CN=d9f1785c0a978567fdebf964bccff0767451b2fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:99:f3:ba:7c:36:78:8c:f9:72:1d:6d:74:3f:
94:6f:f1:43:c9:7a:4d:7c:81:ad:24:e8:73:9a:d4:
f1:d4:7b:e4:68:b9:16:62:3d:67:87:a7:e2:c1:0e:
ca:c7:8e:64:2a:94:ff:89:d2:aa:1f:cd:15:f9:fc:
fe:ef:10:40:14:d9:ba:1d:2a:cd:53:52:2e:e7:ce:
e6:7b:84:65:8b:55:d9:4c:dc:0f:3f:7f:f6:c0:99:
f9:12:c4:12:ba:89:0a:7f:42:55:82:0d:bc:7e:c3:
07:a6:15:d5:5b:3b:49:eb:5a:13:ff:96:da:4d:23:
1a:ed:25:3f:7b:10:04:58:ea:78:56:7b:d7:40:d9:
27:a3:36:67:2b:91:47:fc:59:e7:67:5d:36:05:33:
8c:7a:40:87:6c:e2:80:c6:f7:6a:52:60:96:da:35:
d0:ea:1b:99:fc:56:21:c8:d5:ef:8f:0c:2e:36:61:
42:30:27:d0:ad:3e:92:28:0a:05:eb:3f:55:33:87:
15:30:8c:69:eb:22:4d:e7:9d:83:af:3e:95:fa:08:
74:f0:52:26:c7:1b:ff:f3:02:96:28:2e:f9:fb:b4:
b5:21:31:3a:43:8e:dd:16:0e:00:2a:f4:4a:c1:d6:
61:a7:a0:2c:2f:a7:af:6a:91:79:87:e8:59:81:9e:
22:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:F1:78:5C:0A:97:85:67:FD:EB:F9:64:BC:CF:F0:76:74:51:B2:FC
X509v3 Authority Key Identifier:
keyid:16:5F:AD:41:09:28:3B:33:B6:F3:BA:53:FA:E8:3A:14:5D:19:34:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fl-tQQkoOzO287pT-ug6FF0ZNOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3b72c0-5de9-46a4-abd4-31b60311c315/1/Fl-tQQkoOzO287pT-ug6FF0ZNOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3b72c0-5de9-46a4-abd4-31b60311c315/1/Fl-tQQkoOzO287pT-ug6FF0ZNOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:47:6a:e7:76:5f:c0:82:ad:af:ca:d1:49:7c:b0:9a:07:89:
e3:68:3b:a8:37:d3:f1:78:57:a2:d1:ba:20:03:2d:16:c5:dd:
cd:b5:b4:db:57:a1:6a:4c:fe:09:7a:a9:b6:46:9b:5d:c2:77:
61:41:08:21:9b:f1:43:b0:4c:94:8b:5d:12:0a:31:ee:3a:2e:
cf:01:cd:50:89:27:2d:2b:57:c1:d1:ef:ad:19:79:e8:49:37:
dd:18:87:93:83:0d:a4:78:b7:7c:bd:99:54:37:c3:05:27:47:
88:20:3c:df:84:60:a9:87:1e:92:45:6a:e1:1e:bc:38:a1:07:
47:fd:72:a5:2a:bc:96:fd:b5:ec:61:73:f6:f8:c8:44:49:9f:
c2:15:3d:58:e0:96:c6:d8:ca:c1:37:27:c6:3f:e3:e2:1a:d2:
4a:6c:ab:55:21:70:fd:f6:4c:c7:99:9d:7a:39:17:f9:3c:0c:
c6:96:d2:53:1b:0f:f2:44:da:0d:de:70:6f:c6:73:6c:aa:40:
89:0c:d3:48:a4:9d:96:8e:65:8c:62:6f:b3:0f:c2:09:eb:5f:
35:83:b8:f0:b6:83:9e:48:d5:91:f5:3f:1e:9c:37:92:c2:5a:
62:14:5b:d0:ba:02:40:5f:24:0b:1b:5a:6c:42:5f:c8:01:ba:
08:6d:fc:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 10:56:34 2025 by rpki-client