Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/ea10b5-21f6-46b9-aad6-3f7a3e025e8b/1/flyFKPgXh8SJxUqZODkmn1prH5Q.mft
File: flyFKPgXh8SJxUqZODkmn1prH5Q.mft (raw, json)
Hash identifier: 4IvvMFwd2otHf7OXOx0Ovk/9IdB5T2XW5imomvQt8XI=
Subject key identifier: 13:AD:36:3E:1C:4E:92:24:8D:3E:C5:4E:75:0F:E8:E2:FD:11:9D:D5
Authority key identifier: 7E:5C:85:28:F8:17:87:C4:89:C5:4A:99:38:39:26:9F:5A:6B:1F:94
Certificate issuer: /CN=7e5c8528f81787c489c54a993839269f5a6b1f94
Certificate serial: 0196C64CB4B91FE6B339D7F27BF7603A386E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/flyFKPgXh8SJxUqZODkmn1prH5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/ea10b5-21f6-46b9-aad6-3f7a3e025e8b/1/flyFKPgXh8SJxUqZODkmn1prH5Q.mft
Manifest number: 153B
Signing time: Mon 12 May 2025 21:00:37 +0000
Manifest this update: Mon 12 May 2025 21:00:37 +0000
Manifest next update: Tue 13 May 2025 21:00:37 +0000
Files and hashes: 1: flyFKPgXh8SJxUqZODkmn1prH5Q.crl (hash: QJtDSA9ZeRawi7m8V6oWQpMrIX3voA7Co5qVoMBNm4c=)
2: hfVNxhpqjhtY0Y5pPH1kyqqYbyE.roa (hash: aFX0mNsdzdwNbH9dkbmbgQ2YlhtWRYm/NSgRF7fVXw4=)
3: qlFHFeROOID5WaWVEHwvwxWAzLw.roa (hash: //F8owzBylzzc3mWkvQYIjr2mTOF+4WmUYspBcjO8y4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/ea10b5-21f6-46b9-aad6-3f7a3e025e8b/1/flyFKPgXh8SJxUqZODkmn1prH5Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/ea10b5-21f6-46b9-aad6-3f7a3e025e8b/1/flyFKPgXh8SJxUqZODkmn1prH5Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/flyFKPgXh8SJxUqZODkmn1prH5Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 21:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c6:4c:b4:b9:1f:e6:b3:39:d7:f2:7b:f7:60:3a:38:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e5c8528f81787c489c54a993839269f5a6b1f94
Validity
Not Before: May 12 21:00:37 2025 GMT
Not After : May 13 21:00:37 2025 GMT
Subject: CN=13ad363e1c4e92248d3ec54e750fe8e2fd119dd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:48:4d:64:29:0f:a6:3a:3e:f4:e7:73:e0:c5:
b3:ca:ef:ce:9f:ce:d0:8e:ea:6f:c9:f6:ce:79:60:
9a:10:69:2e:f5:be:d4:15:57:ca:42:18:4a:c0:54:
88:e7:a6:35:09:37:6c:52:cd:62:87:a1:4b:dd:e6:
e8:8b:84:e0:e3:71:2a:9a:dc:48:f5:bf:83:65:71:
ab:b0:55:7f:19:a0:45:fd:d0:7d:24:71:48:ad:38:
aa:ca:67:f1:0e:9a:a3:01:16:1b:eb:08:e6:07:57:
22:f2:1e:50:78:4c:45:f2:b9:cc:9a:8c:c9:fe:92:
96:b1:5c:bd:50:15:13:25:a6:a1:e1:0f:87:51:12:
94:80:44:6a:4e:42:89:70:ad:a8:74:e0:97:22:4a:
d9:e7:27:33:9f:c5:27:58:c6:ea:92:e0:62:9c:e4:
f5:17:5b:9f:cd:1a:ff:58:71:d8:b0:d0:86:32:37:
fe:41:07:71:76:52:ae:19:6f:24:d4:72:e8:ab:02:
e6:f0:1b:9d:61:74:a1:87:d0:79:89:53:27:89:47:
92:bf:a7:86:eb:d8:62:bb:8c:4b:03:be:b6:4f:41:
0c:8c:75:20:49:e8:58:4d:f3:fb:33:2e:73:2c:16:
2b:86:e0:9f:21:75:00:43:4e:fc:e8:4d:c3:98:16:
35:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:AD:36:3E:1C:4E:92:24:8D:3E:C5:4E:75:0F:E8:E2:FD:11:9D:D5
X509v3 Authority Key Identifier:
keyid:7E:5C:85:28:F8:17:87:C4:89:C5:4A:99:38:39:26:9F:5A:6B:1F:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/flyFKPgXh8SJxUqZODkmn1prH5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/ea10b5-21f6-46b9-aad6-3f7a3e025e8b/1/flyFKPgXh8SJxUqZODkmn1prH5Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/ea10b5-21f6-46b9-aad6-3f7a3e025e8b/1/flyFKPgXh8SJxUqZODkmn1prH5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:f0:26:58:e6:46:e8:c2:b4:02:3d:6b:de:38:8b:0a:77:c0:
c7:8d:1e:13:1a:30:12:58:af:d7:4d:91:93:29:f2:cc:a5:de:
6f:89:88:c2:6a:1f:2c:62:9d:7b:4b:23:c0:ed:ac:15:d1:3c:
0d:db:07:df:0f:0e:9b:3e:98:c7:11:b9:51:2f:54:d4:6c:9d:
16:87:e0:da:be:b5:3c:14:3b:29:ae:dc:fd:70:fd:d0:0d:8b:
3c:d8:89:e6:1c:6c:55:e5:1f:19:62:5e:84:07:c6:03:55:e2:
16:65:76:02:c1:45:07:74:0b:97:a6:b4:05:b4:e9:4a:9a:82:
89:9e:12:af:fc:dd:5f:fd:e6:b1:fe:f1:db:ac:73:4b:99:24:
e7:8c:93:d6:b6:1f:b2:38:d9:b6:58:db:10:03:d8:b0:f1:74:
cb:50:99:eb:19:e6:a6:26:65:5f:f0:cd:e2:de:36:21:08:15:
3b:8f:c0:88:2a:b4:f2:ce:d5:42:cb:d2:a6:bc:8e:43:e6:07:
60:08:22:a4:a8:6a:3b:df:b7:a2:e5:ba:3a:fa:73:76:3d:af:
60:a9:fb:25:ce:f1:a5:74:19:7b:15:f2:6e:f8:ff:6c:a7:be:
7a:c4:15:10:4d:a3:eb:60:3c:4d:b4:f9:bf:a1:2c:51:f5:30:
1a:2f:02:4c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbGTLS5H+azOdfye/dgOjhuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlNWM4NTI4ZjgxNzg3YzQ4OWM1NGE5OTM4MzkyNjlmNWE2
YjFmOTQwHhcNMjUwNTEyMjEwMDM3WhcNMjUwNTEzMjEwMDM3WjAzMTEwLwYDVQQD
EygxM2FkMzYzZTFjNGU5MjI0OGQzZWM1NGU3NTBmZThlMmZkMTE5ZGQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3khNZCkPpjo+9Odz4MWzyu/On87Q
jupvyfbOeWCaEGku9b7UFVfKQhhKwFSI56Y1CTdsUs1ih6FL3eboi4Tg43EqmtxI
9b+DZXGrsFV/GaBF/dB9JHFIrTiqymfxDpqjARYb6wjmB1ci8h5QeExF8rnMmozJ
/pKWsVy9UBUTJaah4Q+HURKUgERqTkKJcK2odOCXIkrZ5yczn8UnWMbqkuBinOT1
F1ufzRr/WHHYsNCGMjf+QQdxdlKuGW8k1HLoqwLm8BudYXShh9B5iVMniUeSv6eG
69hiu4xLA762T0EMjHUgSehYTfP7My5zLBYrhuCfIXUAQ0786E3DmBY1DwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBOtNj4cTpIkjT7FTnUP6OL9EZ3VMB8GA1UdIwQY
MBaAFH5chSj4F4fEicVKmTg5Jp9aax+UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmx5RktQZ1hoOFNKeFVxWk9Ea21uMXBySDVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9lYTEwYjUtMjFmNi00NmI5LWFhZDYt
M2Y3YTNlMDI1ZThiLzEvZmx5RktQZ1hoOFNKeFVxWk9Ea21uMXBySDVRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi9lYTEwYjUtMjFmNi00NmI5LWFhZDYtM2Y3YTNlMDI1ZThi
LzEvZmx5RktQZ1hoOFNKeFVxWk9Ea21uMXBySDVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR/AmWOZG
6MK0Aj1r3jiLCnfAx40eExowEliv102RkynyzKXeb4mIwmofLGKde0sjwO2sFdE8
DdsH3w8Omz6YxxG5US9U1GydFofg2r61PBQ7Ka7c/XD90A2LPNiJ5hxsVeUfGWJe
hAfGA1XiFmV2AsFFB3QLl6a0BbTpSpqCiZ4Sr/zdX/3msf7x26xzS5kk54yT1rYf
sjjZtljbEAPYsPF0y1CZ6xnmpiZlX/DN4t42IQgVO4/AiCq08s7VQsvSpryOQ+YH
YAgipKhqO9+3ouW6Ovpzdj2vYKn7Jc7xpXQZexXybvj/bKe+esQVEE2j62A8TbT5
v6EsUfUwGi8CTA==
-----END CERTIFICATE-----
Generated at Tue May 13 06:19:36 2025 by rpki-client