Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/321f74-092d-4dff-b335-2054f6e61922/1/FlHT3cat1IO3YawEdiaVM_5-pxc.mft
File: FlHT3cat1IO3YawEdiaVM_5-pxc.mft (raw, json)
Hash identifier: 3T78dUCh2MXsQWwL7roZ0Bw7iOTaPDvcFDYeAkP9yhQ=
Subject key identifier: 86:8C:F5:B8:3A:0D:F4:02:F6:E5:30:9F:88:F3:45:5E:BF:98:D9:1E
Authority key identifier: 16:51:D3:DD:C6:AD:D4:83:B7:61:AC:04:76:26:95:33:FE:7E:A7:17
Certificate issuer: /CN=1651d3ddc6add483b761ac0476269533fe7ea717
Certificate serial: 0198D884B4507773078992D23FA6C6553278
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FlHT3cat1IO3YawEdiaVM_5-pxc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/321f74-092d-4dff-b335-2054f6e61922/1/FlHT3cat1IO3YawEdiaVM_5-pxc.mft
Manifest number: 164C
Signing time: Sat 23 Aug 2025 20:00:32 +0000
Manifest this update: Sat 23 Aug 2025 20:00:32 +0000
Manifest next update: Sun 24 Aug 2025 20:00:32 +0000
Files and hashes: 1: FlHT3cat1IO3YawEdiaVM_5-pxc.crl (hash: CPwvIj1OlcwX+cJXWKkZsDNj0i83JRxDQkYzN1Tn5gU=)
2: OAOWe7maY9pSBU-5gVNjG4r2PZI.roa (hash: cj95WRLXDZ1GDxFc9L374qruvZwqpq+kg9Wr756ijmA=)
3: RS5heur6Cn3t-3NSKUpCkvrpLSg.roa (hash: TdAX1fGTzy2GwxRzSlF7GAvHIAjv8je9eFZvPOiAzfs=)
4: cisW_uPMTWGjpMgFOVf9HNh_jYk.roa (hash: Wdm0HXAD65sFut0/XjR/drYS0oNc3aDjPik/CLx6CYk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/321f74-092d-4dff-b335-2054f6e61922/1/FlHT3cat1IO3YawEdiaVM_5-pxc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/321f74-092d-4dff-b335-2054f6e61922/1/FlHT3cat1IO3YawEdiaVM_5-pxc.mft
rsync://rpki.ripe.net/repository/DEFAULT/FlHT3cat1IO3YawEdiaVM_5-pxc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d8:84:b4:50:77:73:07:89:92:d2:3f:a6:c6:55:32:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1651d3ddc6add483b761ac0476269533fe7ea717
Validity
Not Before: Aug 23 20:00:32 2025 GMT
Not After : Aug 24 20:00:32 2025 GMT
Subject: CN=868cf5b83a0df402f6e5309f88f3455ebf98d91e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:81:9b:8d:32:33:28:b1:cd:d6:3c:5c:67:26:
cb:ab:f7:23:b6:10:64:4b:31:c5:f1:95:e7:01:2b:
09:a8:40:9c:42:8c:ad:de:38:9b:3d:2c:da:04:46:
8a:99:df:ee:71:a1:b6:12:a0:2b:2b:ef:27:89:de:
0c:57:4b:71:9a:f4:b4:a6:43:63:d3:64:de:1b:cf:
d4:ee:8d:e8:0b:58:10:37:87:62:d8:48:89:14:e5:
88:56:d4:c0:29:4d:e3:14:fe:49:3e:da:bc:5e:da:
42:ed:d2:19:82:ce:4d:a7:74:04:ca:f9:ab:2d:4e:
f1:53:ea:68:4e:e9:a6:66:7e:0b:e4:95:87:4b:61:
22:c3:d8:4d:2d:71:23:75:19:f5:ba:b7:30:5f:b4:
9e:a4:a0:4e:4c:4b:7e:ce:8e:11:88:23:e0:1c:62:
1d:83:70:71:2c:20:b2:7b:22:6b:68:f0:bb:d0:a2:
15:69:d6:2e:7c:08:40:67:ff:14:9a:05:83:e8:33:
72:8a:0b:80:d1:1e:c0:2e:31:6e:a5:cc:67:e6:03:
d3:09:a2:e8:33:47:17:cf:c3:2a:c9:07:a8:93:93:
76:37:da:93:3a:9c:40:8d:87:a0:e6:45:ef:dd:57:
66:ba:6f:e9:a6:f0:23:2c:1c:e2:59:d6:06:4c:c0:
2d:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:8C:F5:B8:3A:0D:F4:02:F6:E5:30:9F:88:F3:45:5E:BF:98:D9:1E
X509v3 Authority Key Identifier:
keyid:16:51:D3:DD:C6:AD:D4:83:B7:61:AC:04:76:26:95:33:FE:7E:A7:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FlHT3cat1IO3YawEdiaVM_5-pxc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/321f74-092d-4dff-b335-2054f6e61922/1/FlHT3cat1IO3YawEdiaVM_5-pxc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/321f74-092d-4dff-b335-2054f6e61922/1/FlHT3cat1IO3YawEdiaVM_5-pxc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:6c:9e:a3:44:0a:47:37:7f:e5:90:62:b8:a2:ef:f8:cd:7c:
04:53:da:e3:3a:bf:c6:c7:65:e1:11:ba:85:6d:62:63:05:19:
ac:b6:52:de:f7:ec:34:b7:27:d8:33:c0:e2:7f:c3:3c:79:c6:
85:1a:71:62:bc:7e:28:ca:76:f5:77:ba:35:07:1f:00:44:9e:
a7:8f:35:a4:e3:ce:7e:10:14:8d:4c:42:a6:0b:f6:a3:e4:f5:
a9:5f:c9:40:fe:94:f1:50:9b:a8:45:26:1e:2a:11:fe:8f:46:
92:73:8c:a0:dd:8f:30:b0:e3:e5:78:5c:c1:59:ee:ae:84:2e:
58:68:45:d5:f7:cd:51:ab:c2:c1:52:40:00:37:6e:7c:9d:95:
22:a6:da:36:74:65:a5:18:b0:f8:15:75:d7:57:83:29:e1:43:
67:d0:a8:9f:05:cc:1e:62:8d:35:3b:e8:7b:f9:98:1f:1f:1c:
1e:59:64:b8:a2:39:39:88:6d:cd:4b:94:11:fd:82:12:89:f2:
26:c4:6b:40:d6:fe:34:fb:14:94:78:19:dc:de:f3:5e:a8:bf:
b4:57:e7:49:23:9b:b1:d4:c4:90:dc:9f:66:5f:a9:f7:15:9c:
0a:02:8c:15:0c:c7:a3:26:8f:63:cf:ce:e3:50:8f:ea:ff:cc:
5c:f1:0a:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:25:49 2025 by rpki-client