Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/3b72c0-5de9-46a4-abd4-31b60311c315/1/Fl-tQQkoOzO287pT-ug6FF0ZNOI.mft
File: Fl-tQQkoOzO287pT-ug6FF0ZNOI.mft (raw, json)
Hash identifier: f6qcJVcMZt0B22L/DuG0/giB51Ptcvya+TO3hr+lH4I=
Subject key identifier: DD:08:7A:8E:2C:32:9F:65:2A:18:C8:36:52:88:D8:5E:BC:11:C8:50
Authority key identifier: 16:5F:AD:41:09:28:3B:33:B6:F3:BA:53:FA:E8:3A:14:5D:19:34:E2
Certificate issuer: /CN=165fad4109283b33b6f3ba53fae83a145d1934e2
Certificate serial: 0198D6608E628A2001F394F142F798F0C4C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fl-tQQkoOzO287pT-ug6FF0ZNOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/3b72c0-5de9-46a4-abd4-31b60311c315/1/Fl-tQQkoOzO287pT-ug6FF0ZNOI.mft
Manifest number: 0353
Signing time: Sat 23 Aug 2025 10:01:48 +0000
Manifest this update: Sat 23 Aug 2025 10:01:48 +0000
Manifest next update: Sun 24 Aug 2025 10:01:48 +0000
Files and hashes: 1: Fl-tQQkoOzO287pT-ug6FF0ZNOI.crl (hash: h32Onv5JO4A3eS5kyXMpNdD/1slvxkag631+AR4rg1A=)
2: Ln2JbGXgQ88O79Pg1zLA68Pqxy0.roa (hash: Mstyw2j7AKFxamlwfGacDBtId3D916+hLBKPld0IQWI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/3b72c0-5de9-46a4-abd4-31b60311c315/1/Fl-tQQkoOzO287pT-ug6FF0ZNOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/3b72c0-5de9-46a4-abd4-31b60311c315/1/Fl-tQQkoOzO287pT-ug6FF0ZNOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fl-tQQkoOzO287pT-ug6FF0ZNOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:8e:62:8a:20:01:f3:94:f1:42:f7:98:f0:c4:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=165fad4109283b33b6f3ba53fae83a145d1934e2
Validity
Not Before: Aug 23 10:01:48 2025 GMT
Not After : Aug 24 10:01:48 2025 GMT
Subject: CN=dd087a8e2c329f652a18c8365288d85ebc11c850
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ac:8c:c7:63:b7:f1:69:dc:cc:d2:be:bd:fe:
bb:fb:0b:ca:70:7d:fa:21:0b:ec:ed:67:05:42:5b:
3e:3c:eb:f2:c9:0f:63:39:40:a9:5c:9b:37:40:8b:
98:e9:96:52:85:06:68:0d:c2:46:54:97:94:23:09:
9e:b9:41:a3:87:a4:2d:82:19:f0:05:11:ae:e7:b7:
ec:b9:5a:06:56:28:3f:c7:b9:50:c9:3f:2f:b0:78:
c0:69:0e:4f:3b:89:57:71:20:ca:96:f6:c4:07:db:
39:e2:a6:b0:1a:bf:d3:4f:60:da:36:6f:cf:e5:d5:
d9:89:19:8b:d1:06:42:26:ad:21:75:46:11:4f:64:
e5:f2:ef:f1:49:b9:c7:1d:44:75:81:d1:83:25:e6:
47:6b:c3:dd:f7:11:7f:2d:20:a5:1c:21:d9:2d:52:
44:06:ef:10:c5:19:24:dd:c6:a6:82:e6:51:e6:3d:
d9:2a:f9:bb:25:e6:36:b7:10:e2:b1:dc:84:a4:17:
81:b1:ad:93:fd:f3:4d:5d:8a:5c:51:40:a7:96:48:
e1:09:c2:0f:80:aa:a4:a7:00:f6:76:f8:75:2f:67:
32:9c:7b:f9:21:0b:4b:76:33:19:f6:68:a0:ac:25:
3d:0b:03:9d:36:0d:58:00:ab:b5:46:c0:41:db:ee:
cf:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:08:7A:8E:2C:32:9F:65:2A:18:C8:36:52:88:D8:5E:BC:11:C8:50
X509v3 Authority Key Identifier:
keyid:16:5F:AD:41:09:28:3B:33:B6:F3:BA:53:FA:E8:3A:14:5D:19:34:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fl-tQQkoOzO287pT-ug6FF0ZNOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3b72c0-5de9-46a4-abd4-31b60311c315/1/Fl-tQQkoOzO287pT-ug6FF0ZNOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3b72c0-5de9-46a4-abd4-31b60311c315/1/Fl-tQQkoOzO287pT-ug6FF0ZNOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:77:26:4f:c0:94:c3:e0:aa:af:7b:91:83:00:b5:70:77:99:
96:af:d0:2d:2f:2c:cb:9f:ec:f2:7c:7f:50:71:d8:9d:bb:99:
ec:6c:ac:ea:5b:25:81:7e:15:01:0e:c6:29:18:35:52:6f:42:
42:26:0c:af:c5:29:fa:08:96:c8:90:cf:88:c4:dc:ad:ff:c8:
94:38:5b:f4:f5:43:96:55:ab:49:11:26:3e:f8:c8:fe:da:af:
b5:1c:df:d3:95:ec:bd:e5:9e:11:95:32:3e:e4:c0:0e:13:f8:
c9:74:e4:d9:e6:c8:eb:39:2a:02:b0:cc:71:ae:7b:4f:1b:a1:
bd:b8:71:7d:7f:7a:95:e6:d2:6f:5e:e7:4e:52:0c:43:53:3b:
61:a5:11:e1:81:9d:7e:07:73:3f:8d:c3:7b:ba:07:33:f3:0e:
09:4e:9b:59:bd:a1:0d:ef:07:db:15:6c:41:68:f7:62:bd:98:
a5:de:28:48:42:0d:a2:6a:3d:1e:1b:5a:de:0c:83:8b:e6:a2:
62:5e:c7:c0:8a:09:91:eb:a0:53:cb:6a:d7:89:03:26:75:61:
70:f2:e8:59:25:8c:24:ee:c8:42:eb:47:34:7c:ae:ea:a6:b1:
8a:83:e7:ee:8e:2e:38:f2:a6:50:0e:72:c2:df:24:65:fb:c1:
7c:b9:1d:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:52:23 2025 by rpki-client