Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/321f74-092d-4dff-b335-2054f6e61922/1/FlHT3cat1IO3YawEdiaVM_5-pxc.mft
File: FlHT3cat1IO3YawEdiaVM_5-pxc.mft (raw, json)
Hash identifier: 2oAWLt48EU8rPi8BI3hx0EAgSsgKiF0phSGYc6QqG6w=
Subject key identifier: C5:E4:47:5A:79:E6:E1:86:45:4A:5E:C8:F6:18:E6:6B:77:6B:E1:34
Authority key identifier: 16:51:D3:DD:C6:AD:D4:83:B7:61:AC:04:76:26:95:33:FE:7E:A7:17
Certificate issuer: /CN=1651d3ddc6add483b761ac0476269533fe7ea717
Certificate serial: 0196A68A7AC268ADAAC016BA5BCD790F54A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FlHT3cat1IO3YawEdiaVM_5-pxc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/321f74-092d-4dff-b335-2054f6e61922/1/FlHT3cat1IO3YawEdiaVM_5-pxc.mft
Manifest number: 1529
Signing time: Tue 06 May 2025 17:00:15 +0000
Manifest this update: Tue 06 May 2025 17:00:15 +0000
Manifest next update: Wed 07 May 2025 17:00:15 +0000
Files and hashes: 1: FlHT3cat1IO3YawEdiaVM_5-pxc.crl (hash: z9/SwYcOUFxCEkA8P2F2D01nFTrPHUFKrHJWFv4JSYQ=)
2: OAOWe7maY9pSBU-5gVNjG4r2PZI.roa (hash: cj95WRLXDZ1GDxFc9L374qruvZwqpq+kg9Wr756ijmA=)
3: RS5heur6Cn3t-3NSKUpCkvrpLSg.roa (hash: TdAX1fGTzy2GwxRzSlF7GAvHIAjv8je9eFZvPOiAzfs=)
4: cisW_uPMTWGjpMgFOVf9HNh_jYk.roa (hash: Wdm0HXAD65sFut0/XjR/drYS0oNc3aDjPik/CLx6CYk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/321f74-092d-4dff-b335-2054f6e61922/1/FlHT3cat1IO3YawEdiaVM_5-pxc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/321f74-092d-4dff-b335-2054f6e61922/1/FlHT3cat1IO3YawEdiaVM_5-pxc.mft
rsync://rpki.ripe.net/repository/DEFAULT/FlHT3cat1IO3YawEdiaVM_5-pxc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 14:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a6:8a:7a:c2:68:ad:aa:c0:16:ba:5b:cd:79:0f:54:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1651d3ddc6add483b761ac0476269533fe7ea717
Validity
Not Before: May 6 17:00:15 2025 GMT
Not After : May 7 17:00:15 2025 GMT
Subject: CN=c5e4475a79e6e186454a5ec8f618e66b776be134
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:8e:b7:ab:f4:f8:66:31:97:5b:58:95:94:5f:
f5:38:f7:fb:79:7d:e5:d4:ad:20:34:67:6b:d0:c0:
a4:6d:e5:93:c7:c2:36:17:7a:94:8d:8e:0b:66:08:
af:93:a6:d2:c5:4f:9f:c1:54:8e:d1:5a:be:5c:b4:
27:d0:8c:d2:d8:d7:5a:1e:35:9e:7d:2f:0e:b5:15:
ce:49:db:13:ff:f9:0c:a3:71:16:67:64:0f:02:e1:
c8:62:20:78:48:cc:d8:45:76:7a:02:b5:6d:3a:6d:
01:cf:07:dd:e9:0c:6e:82:37:1e:2a:35:ef:b2:89:
fc:56:f9:79:04:30:a4:e0:57:d1:00:dc:9f:18:50:
f8:ef:68:8b:f1:d6:7e:93:37:7c:66:65:37:91:7a:
93:fc:25:78:8d:b3:2b:f1:8d:1c:2e:34:d7:45:29:
5c:78:0f:53:6d:31:f8:99:d9:b6:1e:cb:ed:1c:c8:
3a:62:7b:88:3b:65:f2:f5:a6:e7:51:98:01:3b:b9:
c2:e5:20:a1:5c:8a:5d:27:08:03:f2:64:3b:d2:7e:
a9:b8:79:84:d6:ad:a1:4c:e9:60:70:34:87:85:fb:
b3:36:bb:d9:df:0f:db:09:8d:01:1a:2f:a1:a5:f8:
87:fd:24:af:20:81:ac:62:68:6f:72:19:cb:dc:8e:
ab:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:E4:47:5A:79:E6:E1:86:45:4A:5E:C8:F6:18:E6:6B:77:6B:E1:34
X509v3 Authority Key Identifier:
keyid:16:51:D3:DD:C6:AD:D4:83:B7:61:AC:04:76:26:95:33:FE:7E:A7:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FlHT3cat1IO3YawEdiaVM_5-pxc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/321f74-092d-4dff-b335-2054f6e61922/1/FlHT3cat1IO3YawEdiaVM_5-pxc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/321f74-092d-4dff-b335-2054f6e61922/1/FlHT3cat1IO3YawEdiaVM_5-pxc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:6d:58:7b:7f:23:5e:ee:13:54:a6:0e:46:9d:40:61:c1:e1:
bb:83:dd:cf:27:b3:48:eb:14:d6:ec:cc:5b:6d:86:fe:9d:a8:
1d:a4:7a:aa:ee:fc:58:34:d6:98:03:a5:ff:11:f9:86:54:43:
b4:cb:ae:93:cf:ed:2a:51:39:2c:58:2e:02:ed:fc:ae:2f:f2:
04:dc:10:a3:0f:60:1f:09:17:e1:dc:1f:d9:e1:62:4d:65:62:
fb:03:6d:dc:91:dc:85:bd:f5:44:04:5d:b4:34:e7:a2:57:7e:
37:b5:f0:df:8e:70:24:13:ea:26:74:ba:a4:f3:45:bf:fe:a9:
a8:73:70:40:75:7a:66:a7:02:62:67:c4:b3:3c:e7:92:e1:da:
25:c4:50:1b:8e:01:49:42:fc:c7:fc:03:da:2a:85:88:ce:1d:
a3:9c:c3:47:f9:95:71:6a:e4:4c:2d:da:7d:70:52:c2:31:67:
95:73:8d:6e:b2:b5:e1:e6:32:9a:2c:e2:b3:9f:77:72:9a:b9:
5a:46:e3:0f:31:a5:d4:4b:f6:f9:b2:a0:85:ea:9b:49:85:05:
d3:9d:e4:63:34:ce:69:cb:bb:05:4c:fa:22:b9:88:5c:76:9c:
ca:52:1d:1b:d8:ce:22:24:9f:2e:48:fc:7c:ae:46:fd:06:1e:
fa:4d:b7:85
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaminrCaK2qwBa6W815D1SgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2NTFkM2RkYzZhZGQ0ODNiNzYxYWMwNDc2MjY5NTMzZmU3
ZWE3MTcwHhcNMjUwNTA2MTcwMDE1WhcNMjUwNTA3MTcwMDE1WjAzMTEwLwYDVQQD
EyhjNWU0NDc1YTc5ZTZlMTg2NDU0YTVlYzhmNjE4ZTY2Yjc3NmJlMTM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs463q/T4ZjGXW1iVlF/1OPf7eX3l
1K0gNGdr0MCkbeWTx8I2F3qUjY4LZgivk6bSxU+fwVSO0Vq+XLQn0IzS2NdaHjWe
fS8OtRXOSdsT//kMo3EWZ2QPAuHIYiB4SMzYRXZ6ArVtOm0Bzwfd6QxugjceKjXv
son8Vvl5BDCk4FfRANyfGFD472iL8dZ+kzd8ZmU3kXqT/CV4jbMr8Y0cLjTXRSlc
eA9TbTH4mdm2HsvtHMg6YnuIO2Xy9abnUZgBO7nC5SChXIpdJwgD8mQ70n6puHmE
1q2hTOlgcDSHhfuzNrvZ3w/bCY0BGi+hpfiH/SSvIIGsYmhvchnL3I6rwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMXkR1p55uGGRUpeyPYY5mt3a+E0MB8GA1UdIwQY
MBaAFBZR093GrdSDt2GsBHYmlTP+fqcXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmxIVDNjYXQxSU8zWWF3RWRpYVZNXzUtcHhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi8zMjFmNzQtMDkyZC00ZGZmLWIzMzUt
MjA1NGY2ZTYxOTIyLzEvRmxIVDNjYXQxSU8zWWF3RWRpYVZNXzUtcHhjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi8zMjFmNzQtMDkyZC00ZGZmLWIzMzUtMjA1NGY2ZTYxOTIy
LzEvRmxIVDNjYXQxSU8zWWF3RWRpYVZNXzUtcHhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPW1Ye38j
Xu4TVKYORp1AYcHhu4PdzyezSOsU1uzMW22G/p2oHaR6qu78WDTWmAOl/xH5hlRD
tMuuk8/tKlE5LFguAu38ri/yBNwQow9gHwkX4dwf2eFiTWVi+wNt3JHchb31RARd
tDTnold+N7Xw345wJBPqJnS6pPNFv/6pqHNwQHV6ZqcCYmfEszznkuHaJcRQG44B
SUL8x/wD2iqFiM4do5zDR/mVcWrkTC3afXBSwjFnlXONbrK14eYymizis593cpq5
WkbjDzGl1Ev2+bKgheqbSYUF053kYzTOacu7BUz6IrmIXHacylIdG9jOIiSfLkj8
fK5G/QYe+k23hQ==
-----END CERTIFICATE-----
Generated at Tue May 6 22:02:32 2025 by rpki-client