Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/996c72-b4a9-4058-bdf8-bd2e77cd4793/1/FL8A3_gGMjG9mWdomeq-q6M7xdk.mft
File: FL8A3_gGMjG9mWdomeq-q6M7xdk.mft (raw, json)
Hash identifier: K4mJlkhOyuhlPr8WVX9TVgPWSM5PqXryqbpoJD4Rxuk=
Subject key identifier: 62:E0:7E:E5:0D:E4:B1:B4:4B:FE:28:18:FE:C2:92:33:55:18:C0:86
Authority key identifier: 14:BF:00:DF:F8:06:32:31:BD:99:67:68:99:EA:BE:AB:A3:3B:C5:D9
Certificate issuer: /CN=14bf00dff8063231bd99676899eabeaba33bc5d9
Certificate serial: 0196BECA6C1460D294450C409B169559B31E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FL8A3_gGMjG9mWdomeq-q6M7xdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/996c72-b4a9-4058-bdf8-bd2e77cd4793/1/FL8A3_gGMjG9mWdomeq-q6M7xdk.mft
Manifest number: 1536
Signing time: Sun 11 May 2025 10:00:58 +0000
Manifest this update: Sun 11 May 2025 10:00:58 +0000
Manifest next update: Mon 12 May 2025 10:00:58 +0000
Files and hashes: 1: Csk6MxobRULFjoV8vwBDWTrNIjY.roa (hash: /qSTaCee19sT1splpe2clgwA+iPwSFp3O0YpahxqTpY=)
2: FL8A3_gGMjG9mWdomeq-q6M7xdk.crl (hash: ZrPAG5xIvdWvAqpJuXx+8tHbUsnU0sF5Gp8v37zCCfM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/996c72-b4a9-4058-bdf8-bd2e77cd4793/1/FL8A3_gGMjG9mWdomeq-q6M7xdk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/996c72-b4a9-4058-bdf8-bd2e77cd4793/1/FL8A3_gGMjG9mWdomeq-q6M7xdk.mft
rsync://rpki.ripe.net/repository/DEFAULT/FL8A3_gGMjG9mWdomeq-q6M7xdk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:be:ca:6c:14:60:d2:94:45:0c:40:9b:16:95:59:b3:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14bf00dff8063231bd99676899eabeaba33bc5d9
Validity
Not Before: May 11 10:00:58 2025 GMT
Not After : May 12 10:00:58 2025 GMT
Subject: CN=62e07ee50de4b1b44bfe2818fec292335518c086
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:68:4a:52:ec:87:d4:8c:94:c9:57:38:0e:bb:
db:e2:a7:fc:a6:fb:56:62:b8:aa:86:c5:94:a1:3c:
ce:9d:e9:90:5e:1a:d0:40:9e:77:35:66:c3:20:63:
5c:8e:9d:69:e4:8a:28:4c:0c:b6:66:a6:04:40:f8:
a2:8e:20:5b:85:1b:b0:08:de:6a:04:3b:68:10:e1:
a3:06:11:53:ce:30:90:9c:9f:25:e2:9f:2e:3c:fd:
a5:96:4a:62:3e:25:e2:51:1c:74:94:77:5e:c3:ba:
dc:6c:ac:4e:af:a4:b4:8e:f4:d8:1f:53:fd:a9:e0:
32:7e:df:f9:a3:43:8a:3b:77:ab:21:2e:8c:c0:d3:
b5:f1:55:55:f8:c8:bf:cf:ad:26:11:0a:b7:75:5c:
9a:1c:a4:05:4c:83:6c:8f:79:46:8c:c6:49:89:48:
70:cc:c2:c6:14:5f:5d:f0:a4:cd:75:f2:c9:ac:31:
29:b5:4f:4a:0c:fd:77:96:6d:1a:a4:1c:cb:06:d8:
27:22:32:7a:84:57:69:e5:00:77:09:3a:fb:fb:69:
a1:45:81:4b:15:ec:ea:5b:7f:59:04:71:76:e1:b9:
4b:a1:57:41:c9:cd:dd:ee:49:c8:e6:93:4e:90:2b:
09:21:ab:2d:bf:6f:c7:90:a3:88:77:10:89:0a:ba:
72:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:E0:7E:E5:0D:E4:B1:B4:4B:FE:28:18:FE:C2:92:33:55:18:C0:86
X509v3 Authority Key Identifier:
keyid:14:BF:00:DF:F8:06:32:31:BD:99:67:68:99:EA:BE:AB:A3:3B:C5:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FL8A3_gGMjG9mWdomeq-q6M7xdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/996c72-b4a9-4058-bdf8-bd2e77cd4793/1/FL8A3_gGMjG9mWdomeq-q6M7xdk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/996c72-b4a9-4058-bdf8-bd2e77cd4793/1/FL8A3_gGMjG9mWdomeq-q6M7xdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:f6:65:0d:19:58:ae:d0:12:85:90:70:68:22:f9:07:9b:7b:
0d:bd:84:35:11:ea:9f:46:19:2b:05:d5:9e:7f:8e:e2:30:09:
59:99:27:75:0c:f0:db:37:72:21:a3:ea:43:44:8e:8a:5c:bf:
5b:d5:dc:59:c5:50:3a:72:b7:16:5c:96:de:75:ec:ba:7a:7a:
c7:e0:8d:87:9f:1b:75:bd:d4:8a:e8:ff:34:bd:f2:cf:61:87:
70:82:b4:6b:ed:40:1a:51:36:55:9a:49:b8:36:1d:7b:8d:c3:
83:1a:2d:d3:40:7d:bd:76:67:fd:70:bc:e8:a4:7d:97:7e:2e:
45:be:e9:7d:b7:2e:99:9c:21:5c:5f:3d:ec:87:98:a1:4a:2c:
a9:62:de:e6:a6:d2:23:8d:94:c8:78:fb:ef:98:bc:df:d2:81:
30:4f:66:8e:91:05:e6:fb:66:33:98:63:31:8d:61:77:62:ee:
d0:df:88:8b:7b:8e:65:73:7e:87:f5:64:e2:59:f4:9e:b7:b6:
bc:a8:60:3c:5e:df:d5:ba:95:3e:d9:f9:29:5a:d1:ca:14:0a:
93:19:26:d6:44:c7:f3:03:1f:01:4c:67:c2:c2:04:fc:40:c0:
6c:06:b9:27:07:63:bb:f0:72:97:59:56:ec:45:40:6a:37:e9:
ff:c6:d7:7c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa+ymwUYNKURQxAmxaVWbMeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE0YmYwMGRmZjgwNjMyMzFiZDk5Njc2ODk5ZWFiZWFiYTMz
YmM1ZDkwHhcNMjUwNTExMTAwMDU4WhcNMjUwNTEyMTAwMDU4WjAzMTEwLwYDVQQD
Eyg2MmUwN2VlNTBkZTRiMWI0NGJmZTI4MThmZWMyOTIzMzU1MThjMDg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvWhKUuyH1IyUyVc4Drvb4qf8pvtW
YriqhsWUoTzOnemQXhrQQJ53NWbDIGNcjp1p5IooTAy2ZqYEQPiijiBbhRuwCN5q
BDtoEOGjBhFTzjCQnJ8l4p8uPP2llkpiPiXiURx0lHdew7rcbKxOr6S0jvTYH1P9
qeAyft/5o0OKO3erIS6MwNO18VVV+Mi/z60mEQq3dVyaHKQFTINsj3lGjMZJiUhw
zMLGFF9d8KTNdfLJrDEptU9KDP13lm0apBzLBtgnIjJ6hFdp5QB3CTr7+2mhRYFL
FezqW39ZBHF24blLoVdByc3d7knI5pNOkCsJIastv2/HkKOIdxCJCrpyUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGLgfuUN5LG0S/4oGP7CkjNVGMCGMB8GA1UdIwQY
MBaAFBS/AN/4BjIxvZlnaJnqvqujO8XZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRkw4QTNfZ0dNakc5bVdkb21lcS1xNk03eGRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS85OTZjNzItYjRhOS00MDU4LWJkZjgt
YmQyZTc3Y2Q0NzkzLzEvRkw4QTNfZ0dNakc5bVdkb21lcS1xNk03eGRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS85OTZjNzItYjRhOS00MDU4LWJkZjgtYmQyZTc3Y2Q0Nzkz
LzEvRkw4QTNfZ0dNakc5bVdkb21lcS1xNk03eGRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfPZlDRlY
rtAShZBwaCL5B5t7Db2ENRHqn0YZKwXVnn+O4jAJWZkndQzw2zdyIaPqQ0SOily/
W9XcWcVQOnK3FlyW3nXsunp6x+CNh58bdb3Uiuj/NL3yz2GHcIK0a+1AGlE2VZpJ
uDYde43Dgxot00B9vXZn/XC86KR9l34uRb7pfbcumZwhXF897IeYoUosqWLe5qbS
I42UyHj775i839KBME9mjpEF5vtmM5hjMY1hd2Lu0N+Ii3uOZXN+h/Vk4ln0nre2
vKhgPF7f1bqVPtn5KVrRyhQKkxkm1kTH8wMfAUxnwsIE/EDAbAa5Jwdju/Byl1lW
7EVAajfp/8bXfA==
-----END CERTIFICATE-----
Generated at Sun May 11 12:29:18 2025 by rpki-client