Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/aa164f-e5ad-4237-9bb9-0e57bd92b798/1/FlAwKhah7Cm1aambSuEFc8YmNto.mft
File: FlAwKhah7Cm1aambSuEFc8YmNto.mft (raw, json)
Hash identifier: 2gPi0Gjxpwnew+yVWEhN4RWKLw+flTr2cLsmttXO7Uw=
Subject key identifier: 27:94:65:44:9F:54:25:6E:3D:53:C7:38:BE:34:F4:2C:2C:66:2B:D5
Authority key identifier: 16:50:30:2A:16:A1:EC:29:B5:69:A9:9B:4A:E1:05:73:C6:26:36:DA
Certificate issuer: /CN=1650302a16a1ec29b569a99b4ae10573c62636da
Certificate serial: 0198D5BBF47BD8226BEFCA3015EBAABF0484
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FlAwKhah7Cm1aambSuEFc8YmNto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/aa164f-e5ad-4237-9bb9-0e57bd92b798/1/FlAwKhah7Cm1aambSuEFc8YmNto.mft
Manifest number: 083F
Signing time: Sat 23 Aug 2025 07:02:01 +0000
Manifest this update: Sat 23 Aug 2025 07:02:01 +0000
Manifest next update: Sun 24 Aug 2025 07:02:01 +0000
Files and hashes: 1: FlAwKhah7Cm1aambSuEFc8YmNto.crl (hash: 8GJiabIz0kczvmj+6Ma9HorcWlfHA2XQ6Ja4a2RfW7g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/aa164f-e5ad-4237-9bb9-0e57bd92b798/1/FlAwKhah7Cm1aambSuEFc8YmNto.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/aa164f-e5ad-4237-9bb9-0e57bd92b798/1/FlAwKhah7Cm1aambSuEFc8YmNto.mft
rsync://rpki.ripe.net/repository/DEFAULT/FlAwKhah7Cm1aambSuEFc8YmNto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:f4:7b:d8:22:6b:ef:ca:30:15:eb:aa:bf:04:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1650302a16a1ec29b569a99b4ae10573c62636da
Validity
Not Before: Aug 23 07:02:01 2025 GMT
Not After : Aug 24 07:02:01 2025 GMT
Subject: CN=279465449f54256e3d53c738be34f42c2c662bd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:81:b0:2c:0f:27:4a:6f:1c:69:75:3d:e6:2c:
61:02:6e:17:6c:96:98:a4:ad:30:16:40:d5:db:57:
9c:e0:9f:48:1f:97:4a:b7:ee:ee:2b:6d:3c:57:c7:
1e:31:31:42:5c:c4:0a:34:85:45:59:55:7a:4c:90:
5b:9d:2d:15:a6:9a:a0:8d:20:07:5f:63:9b:96:8b:
a6:9c:f6:dc:e9:70:e7:43:3d:a9:73:58:6b:33:de:
78:d0:28:80:ec:1c:a0:8c:7d:11:e0:62:00:d9:9c:
d0:8f:d8:eb:c6:62:97:6a:eb:d2:a1:8f:b0:41:1c:
87:50:6b:08:e6:30:87:91:d0:ff:e3:d9:dd:3f:7e:
6d:b9:ee:96:c3:05:9c:93:f1:b4:c5:7c:8f:7b:e0:
56:3b:30:f3:05:46:db:bc:4c:5a:b1:4e:f0:4f:bb:
87:c3:3c:05:a0:70:f0:2c:95:61:87:92:a1:a1:6a:
75:95:62:a4:9d:de:3d:cf:74:39:88:40:06:26:8e:
41:91:4f:08:02:56:b8:0d:d8:96:5e:c8:02:62:f4:
b8:70:78:ab:68:ff:b4:01:23:5a:e9:dd:60:87:df:
5e:77:34:67:5a:7a:1e:a9:17:97:23:ab:4c:0b:4b:
fc:d6:fb:cd:04:4e:31:32:c4:9d:9e:2e:5d:85:9d:
53:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:94:65:44:9F:54:25:6E:3D:53:C7:38:BE:34:F4:2C:2C:66:2B:D5
X509v3 Authority Key Identifier:
keyid:16:50:30:2A:16:A1:EC:29:B5:69:A9:9B:4A:E1:05:73:C6:26:36:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FlAwKhah7Cm1aambSuEFc8YmNto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/aa164f-e5ad-4237-9bb9-0e57bd92b798/1/FlAwKhah7Cm1aambSuEFc8YmNto.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/aa164f-e5ad-4237-9bb9-0e57bd92b798/1/FlAwKhah7Cm1aambSuEFc8YmNto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:0d:1d:99:27:b0:e7:fb:58:0a:03:0f:c6:c8:92:cc:2c:3f:
5e:57:b6:2a:3a:bd:9d:66:1d:94:86:60:8b:93:fb:eb:ea:75:
69:31:ad:d6:b7:4a:e1:99:1c:db:23:87:a6:eb:4d:b1:2a:fe:
d1:be:b2:96:71:58:74:ad:35:01:cc:e6:e2:d6:43:cd:c5:ad:
9c:f2:40:b5:9f:1b:c3:1e:08:85:7d:83:71:67:5e:33:10:e4:
29:a3:43:85:ac:a2:bf:f0:6f:78:df:d4:1f:3d:4c:06:0d:04:
4d:2d:7c:b3:91:cb:88:8e:2e:fd:39:45:08:5f:ee:bc:8e:ad:
e7:43:8c:35:bc:31:ba:ac:ff:ef:46:4e:40:5d:ff:23:1b:65:
fd:ad:3b:77:e4:99:35:13:2a:8c:18:45:00:7a:75:62:a8:9f:
ea:0d:5e:3a:68:8e:83:b4:6b:c1:c6:06:38:aa:fe:6d:22:1d:
56:f4:73:11:91:9d:72:9e:22:cc:6b:27:b7:d4:04:78:0f:65:
c7:bf:02:f5:7f:43:61:7b:dc:2e:b5:15:13:ad:f3:de:94:cb:
08:15:e5:5b:b6:8f:cb:0f:40:48:6b:3a:bf:06:5c:2d:d0:a7:
36:28:6d:22:23:8b:3f:64:db:04:a5:88:43:60:f7:4d:b8:e5:
d8:46:d2:16
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVu/R72CJr78owFeuqvwSEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2NTAzMDJhMTZhMWVjMjliNTY5YTk5YjRhZTEwNTczYzYy
NjM2ZGEwHhcNMjUwODIzMDcwMjAxWhcNMjUwODI0MDcwMjAxWjAzMTEwLwYDVQQD
EygyNzk0NjU0NDlmNTQyNTZlM2Q1M2M3MzhiZTM0ZjQyYzJjNjYyYmQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuoGwLA8nSm8caXU95ixhAm4XbJaY
pK0wFkDV21ec4J9IH5dKt+7uK208V8ceMTFCXMQKNIVFWVV6TJBbnS0VppqgjSAH
X2ObloumnPbc6XDnQz2pc1hrM9540CiA7BygjH0R4GIA2ZzQj9jrxmKXauvSoY+w
QRyHUGsI5jCHkdD/49ndP35tue6WwwWck/G0xXyPe+BWOzDzBUbbvExasU7wT7uH
wzwFoHDwLJVhh5KhoWp1lWKknd49z3Q5iEAGJo5BkU8IAla4DdiWXsgCYvS4cHir
aP+0ASNa6d1gh99edzRnWnoeqReXI6tMC0v81vvNBE4xMsSdni5dhZ1TIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCeUZUSfVCVuPVPHOL409CwsZivVMB8GA1UdIwQY
MBaAFBZQMCoWoewptWmpm0rhBXPGJjbaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmxBd0toYWg3Q20xYWFtYlN1RUZjOFltTnRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9hYTE2NGYtZTVhZC00MjM3LTliYjkt
MGU1N2JkOTJiNzk4LzEvRmxBd0toYWg3Q20xYWFtYlN1RUZjOFltTnRvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC9hYTE2NGYtZTVhZC00MjM3LTliYjktMGU1N2JkOTJiNzk4
LzEvRmxBd0toYWg3Q20xYWFtYlN1RUZjOFltTnRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARA0dmSew
5/tYCgMPxsiSzCw/Xle2Kjq9nWYdlIZgi5P76+p1aTGt1rdK4Zkc2yOHputNsSr+
0b6ylnFYdK01Aczm4tZDzcWtnPJAtZ8bwx4IhX2DcWdeMxDkKaNDhayiv/BveN/U
Hz1MBg0ETS18s5HLiI4u/TlFCF/uvI6t50OMNbwxuqz/70ZOQF3/Ixtl/a07d+SZ
NRMqjBhFAHp1Yqif6g1eOmiOg7RrwcYGOKr+bSIdVvRzEZGdcp4izGsnt9QEeA9l
x78C9X9DYXvcLrUVE63z3pTLCBXlW7aPyw9ASGs6vwZcLdCnNihtIiOLP2TbBKWI
Q2D3Tbjl2EbSFg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:49:40 2025 by rpki-client