Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/aa164f-e5ad-4237-9bb9-0e57bd92b798/1/FlAwKhah7Cm1aambSuEFc8YmNto.mft
File: FlAwKhah7Cm1aambSuEFc8YmNto.mft (raw, json)
Hash identifier: jxSofM1dZzN2MZW0dacT/K68eSQZRRRTA78jN02yWLQ=
Subject key identifier: B5:22:A1:E9:23:2C:2E:69:90:A0:41:DC:D3:F7:CD:A6:54:D8:AE:45
Authority key identifier: 16:50:30:2A:16:A1:EC:29:B5:69:A9:9B:4A:E1:05:73:C6:26:36:DA
Certificate issuer: /CN=1650302a16a1ec29b569a99b4ae10573c62636da
Certificate serial: 0197B5FC221DC146EBB07530717845C5C17A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FlAwKhah7Cm1aambSuEFc8YmNto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/aa164f-e5ad-4237-9bb9-0e57bd92b798/1/FlAwKhah7Cm1aambSuEFc8YmNto.mft
Manifest number: 07AA
Signing time: Sat 28 Jun 2025 10:01:29 +0000
Manifest this update: Sat 28 Jun 2025 10:01:29 +0000
Manifest next update: Sun 29 Jun 2025 10:01:29 +0000
Files and hashes: 1: FlAwKhah7Cm1aambSuEFc8YmNto.crl (hash: RXOluTyLvBNQaBOKmxdnNflasvCVs98UksryMafZ48w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/aa164f-e5ad-4237-9bb9-0e57bd92b798/1/FlAwKhah7Cm1aambSuEFc8YmNto.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/aa164f-e5ad-4237-9bb9-0e57bd92b798/1/FlAwKhah7Cm1aambSuEFc8YmNto.mft
rsync://rpki.ripe.net/repository/DEFAULT/FlAwKhah7Cm1aambSuEFc8YmNto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:fc:22:1d:c1:46:eb:b0:75:30:71:78:45:c5:c1:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1650302a16a1ec29b569a99b4ae10573c62636da
Validity
Not Before: Jun 28 10:01:29 2025 GMT
Not After : Jun 29 10:01:29 2025 GMT
Subject: CN=b522a1e9232c2e6990a041dcd3f7cda654d8ae45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:24:4c:e4:a7:61:36:f3:67:0c:f3:3e:c2:92:
2b:f8:c7:e7:5c:3f:7c:cd:d8:c3:ef:7b:7d:f3:11:
fa:88:b9:30:06:1f:74:31:8c:64:2b:c3:5f:0b:6c:
08:e8:7c:1d:db:db:82:26:ec:f3:dc:00:b4:eb:71:
63:54:2a:67:2f:ba:23:fd:d7:6e:ba:3e:6b:3c:24:
44:67:22:09:3c:dc:18:93:5c:0c:b2:b7:8a:71:c3:
b6:2f:9b:3d:97:0b:22:9f:e0:93:54:ee:88:9e:37:
17:59:3a:29:17:76:c6:ad:f0:bf:3e:ef:97:17:df:
4f:4e:6c:cc:1a:1a:4c:ac:bb:58:56:5f:d9:d1:15:
f1:16:a0:11:0d:c9:52:20:7b:0d:ee:25:26:19:8e:
0a:73:8c:ec:4c:6d:c6:dd:81:24:12:ac:45:85:8f:
9d:2f:78:7c:4d:a9:93:d6:b2:d1:a7:a2:e6:a3:f5:
44:a7:0e:14:84:ac:a7:0a:db:77:3a:e4:45:3e:fa:
ae:4f:4f:bf:dd:00:a8:35:2b:04:74:97:e1:02:bf:
3e:2d:36:b9:13:b3:9c:03:66:f0:fb:9c:22:d7:20:
21:26:8c:a3:90:43:85:2f:32:0b:31:9d:fd:b0:5e:
af:54:20:12:70:2b:e2:36:45:a7:24:9c:0a:80:12:
93:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:22:A1:E9:23:2C:2E:69:90:A0:41:DC:D3:F7:CD:A6:54:D8:AE:45
X509v3 Authority Key Identifier:
keyid:16:50:30:2A:16:A1:EC:29:B5:69:A9:9B:4A:E1:05:73:C6:26:36:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FlAwKhah7Cm1aambSuEFc8YmNto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/aa164f-e5ad-4237-9bb9-0e57bd92b798/1/FlAwKhah7Cm1aambSuEFc8YmNto.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/aa164f-e5ad-4237-9bb9-0e57bd92b798/1/FlAwKhah7Cm1aambSuEFc8YmNto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:9e:dc:86:6b:03:c6:7f:93:08:84:48:67:39:2d:0e:93:40:
89:88:cc:4f:7c:b8:19:ab:11:f1:c5:85:fa:ed:d7:61:88:46:
2f:31:81:7f:d7:09:bb:1c:c9:14:d7:31:4b:27:cd:13:a6:c2:
53:4b:89:f8:51:d8:de:35:cd:99:33:9b:db:fe:fb:5b:1a:6b:
07:9e:10:09:83:fa:2c:83:b4:d7:18:c6:17:73:28:01:65:7b:
b2:86:91:f6:95:c8:8d:85:9b:d0:c3:82:76:da:a1:6f:b2:39:
8b:52:45:c3:ae:38:aa:d7:07:cd:24:59:da:b0:76:d2:d2:a4:
eb:b1:3d:5a:ca:dd:af:ef:91:97:bc:20:34:39:f0:5f:ab:70:
7c:d0:5e:5e:c6:83:93:32:fa:cf:78:70:a9:65:57:46:a6:b3:
68:d5:6c:64:f8:69:29:da:de:5e:b7:ec:cb:92:e5:7b:88:cb:
c5:a7:78:58:3e:9e:a6:57:30:59:36:ef:ac:ce:4a:9f:97:3a:
0f:38:40:5e:e2:5f:d3:08:19:73:c9:4e:2d:b2:14:14:54:2e:
7a:89:f1:8c:2c:47:d8:bd:49:ab:98:1b:46:61:96:38:0f:0e:
15:ae:51:fc:8c:33:45:a6:8c:37:66:02:c5:b3:05:6e:12:31:
58:1d:7e:18
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe1/CIdwUbrsHUwcXhFxcF6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2NTAzMDJhMTZhMWVjMjliNTY5YTk5YjRhZTEwNTczYzYy
NjM2ZGEwHhcNMjUwNjI4MTAwMTI5WhcNMjUwNjI5MTAwMTI5WjAzMTEwLwYDVQQD
EyhiNTIyYTFlOTIzMmMyZTY5OTBhMDQxZGNkM2Y3Y2RhNjU0ZDhhZTQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5iRM5KdhNvNnDPM+wpIr+MfnXD98
zdjD73t98xH6iLkwBh90MYxkK8NfC2wI6Hwd29uCJuzz3AC063FjVCpnL7oj/ddu
uj5rPCREZyIJPNwYk1wMsreKccO2L5s9lwsin+CTVO6InjcXWTopF3bGrfC/Pu+X
F99PTmzMGhpMrLtYVl/Z0RXxFqARDclSIHsN7iUmGY4Kc4zsTG3G3YEkEqxFhY+d
L3h8TamT1rLRp6Lmo/VEpw4UhKynCtt3OuRFPvquT0+/3QCoNSsEdJfhAr8+LTa5
E7OcA2bw+5wi1yAhJoyjkEOFLzILMZ39sF6vVCAScCviNkWnJJwKgBKT8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLUioekjLC5pkKBB3NP3zaZU2K5FMB8GA1UdIwQY
MBaAFBZQMCoWoewptWmpm0rhBXPGJjbaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmxBd0toYWg3Q20xYWFtYlN1RUZjOFltTnRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9hYTE2NGYtZTVhZC00MjM3LTliYjkt
MGU1N2JkOTJiNzk4LzEvRmxBd0toYWg3Q20xYWFtYlN1RUZjOFltTnRvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC9hYTE2NGYtZTVhZC00MjM3LTliYjktMGU1N2JkOTJiNzk4
LzEvRmxBd0toYWg3Q20xYWFtYlN1RUZjOFltTnRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc57chmsD
xn+TCIRIZzktDpNAiYjMT3y4GasR8cWF+u3XYYhGLzGBf9cJuxzJFNcxSyfNE6bC
U0uJ+FHY3jXNmTOb2/77WxprB54QCYP6LIO01xjGF3MoAWV7soaR9pXIjYWb0MOC
dtqhb7I5i1JFw644qtcHzSRZ2rB20tKk67E9Wsrdr++Rl7wgNDnwX6twfNBeXsaD
kzL6z3hwqWVXRqazaNVsZPhpKdreXrfsy5Lle4jLxad4WD6eplcwWTbvrM5Kn5c6
DzhAXuJf0wgZc8lOLbIUFFQueonxjCxH2L1Jq5gbRmGWOA8OFa5R/IwzRaaMN2YC
xbMFbhIxWB1+GA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:26:09 2025 by rpki-client