Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/996c72-b4a9-4058-bdf8-bd2e77cd4793/1/FL8A3_gGMjG9mWdomeq-q6M7xdk.mft
File: FL8A3_gGMjG9mWdomeq-q6M7xdk.mft (raw, json)
Hash identifier: 4n4+mkxPAwpBCn6PDd4fRVre4jLZzKsJ37vZf5i8E08=
Subject key identifier: 6A:FC:9D:66:9F:B4:83:82:48:37:94:9D:9D:C7:E9:D6:C2:0F:5D:AD
Authority key identifier: 14:BF:00:DF:F8:06:32:31:BD:99:67:68:99:EA:BE:AB:A3:3B:C5:D9
Certificate issuer: /CN=14bf00dff8063231bd99676899eabeaba33bc5d9
Certificate serial: 0197B7EAB4F7CB1C561549F2719BC377FA22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FL8A3_gGMjG9mWdomeq-q6M7xdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/996c72-b4a9-4058-bdf8-bd2e77cd4793/1/FL8A3_gGMjG9mWdomeq-q6M7xdk.mft
Manifest number: 15B7
Signing time: Sat 28 Jun 2025 19:01:41 +0000
Manifest this update: Sat 28 Jun 2025 19:01:41 +0000
Manifest next update: Sun 29 Jun 2025 19:01:41 +0000
Files and hashes: 1: Csk6MxobRULFjoV8vwBDWTrNIjY.roa (hash: /qSTaCee19sT1splpe2clgwA+iPwSFp3O0YpahxqTpY=)
2: FL8A3_gGMjG9mWdomeq-q6M7xdk.crl (hash: 3HOq8BYjeYh0cGz7p1P8QAUSEhwen9w2eYe3RyKYRd4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/996c72-b4a9-4058-bdf8-bd2e77cd4793/1/FL8A3_gGMjG9mWdomeq-q6M7xdk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/996c72-b4a9-4058-bdf8-bd2e77cd4793/1/FL8A3_gGMjG9mWdomeq-q6M7xdk.mft
rsync://rpki.ripe.net/repository/DEFAULT/FL8A3_gGMjG9mWdomeq-q6M7xdk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:b4:f7:cb:1c:56:15:49:f2:71:9b:c3:77:fa:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14bf00dff8063231bd99676899eabeaba33bc5d9
Validity
Not Before: Jun 28 19:01:41 2025 GMT
Not After : Jun 29 19:01:41 2025 GMT
Subject: CN=6afc9d669fb483824837949d9dc7e9d6c20f5dad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:03:24:6f:dc:1a:1d:d1:48:42:8e:9a:ca:3e:
af:38:31:65:eb:04:45:a3:9f:18:71:a0:81:a7:ae:
e3:5d:55:96:99:e2:f8:42:b3:7d:7e:00:28:12:f3:
0c:b7:59:0d:2b:a5:52:55:b5:29:81:4e:5f:6a:64:
bd:97:b3:a4:2d:da:bf:95:79:bd:1a:81:d0:bd:e2:
18:89:ee:0a:51:b6:51:e9:45:c6:5f:7c:eb:2b:61:
1d:23:fc:b3:31:22:c3:8b:c4:87:6b:93:f8:56:33:
52:97:23:32:37:f9:6c:30:b8:0d:16:62:1d:29:fe:
85:12:28:60:f3:76:66:cb:3f:c6:c8:a1:ba:4a:97:
68:09:fa:d5:4f:c1:05:43:cb:77:b4:dd:f0:4e:c8:
7c:e2:e6:47:b9:23:e1:e7:5f:e1:32:6c:c0:c0:03:
ff:9c:38:e1:0c:bf:24:50:51:16:37:99:15:fc:5b:
b3:57:92:c9:f6:ee:3a:0f:ea:84:5e:98:5c:6e:03:
ea:df:11:2a:75:e8:52:35:5b:b8:b0:b9:73:68:c1:
5c:ae:68:30:73:73:9c:70:33:46:c8:56:ee:79:d9:
48:b6:7b:19:92:bc:4b:f3:4a:88:2b:a0:b2:31:96:
6f:f4:29:37:fb:b6:55:53:3d:ef:9d:83:21:cc:92:
fa:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:FC:9D:66:9F:B4:83:82:48:37:94:9D:9D:C7:E9:D6:C2:0F:5D:AD
X509v3 Authority Key Identifier:
keyid:14:BF:00:DF:F8:06:32:31:BD:99:67:68:99:EA:BE:AB:A3:3B:C5:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FL8A3_gGMjG9mWdomeq-q6M7xdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/996c72-b4a9-4058-bdf8-bd2e77cd4793/1/FL8A3_gGMjG9mWdomeq-q6M7xdk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/996c72-b4a9-4058-bdf8-bd2e77cd4793/1/FL8A3_gGMjG9mWdomeq-q6M7xdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:fa:6c:0b:59:89:b6:90:9f:36:ce:c1:ee:75:63:d3:c8:6a:
ca:72:c8:72:0e:4e:89:7f:ea:c8:bf:e0:5f:5c:a6:17:64:fa:
4a:13:d0:dc:3d:ca:b9:c5:26:d1:00:37:09:8a:d5:3f:32:27:
6c:f8:fa:30:45:d5:91:9b:93:b8:6e:5c:63:00:39:b8:d2:a4:
11:fe:10:f3:44:32:be:86:c4:99:7b:b4:98:45:62:b8:7a:5d:
20:ac:86:c2:ec:2d:a8:36:74:ae:4a:46:e3:87:d1:18:0f:cb:
23:a7:f2:57:13:6c:a8:f4:34:bd:f5:c8:a1:ee:3d:0c:5b:ec:
5e:ee:a0:0f:5c:17:03:96:9c:bc:ca:e5:64:6b:fb:ce:b9:7e:
f2:b4:47:f1:88:fb:d8:46:9d:ba:0d:6f:f4:91:8f:41:ec:db:
0a:be:65:68:1d:ad:ed:92:99:28:77:79:f8:ac:2d:e9:b3:97:
2f:23:e7:b0:0b:19:3c:85:b6:3b:2d:5a:6f:d7:2a:b3:db:e7:
88:f1:4a:5f:3e:05:f9:67:77:16:2e:bb:0d:b8:df:7c:aa:bb:
be:e2:fd:25:89:70:9f:85:67:78:d5:19:77:54:ae:ed:c5:bf:
fe:31:d6:0f:67:99:41:c3:f0:3c:10:de:73:86:17:31:f8:ab:
39:df:7d:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:20:12 2025 by rpki-client