Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/21443f-e68f-49e6-abc9-6083393cf46e/1/flNU4TNHCPGAASuyN6lfn6x6Tlw.mft
File: flNU4TNHCPGAASuyN6lfn6x6Tlw.mft (raw, json)
Hash identifier: ymgOsonx6N64HHREOoOvssOj4OHWZKPl8IsAE8IKU0g=
Subject key identifier: 93:36:69:08:92:A0:59:51:BD:8D:80:02:46:B6:94:28:F6:D1:CE:11
Authority key identifier: 7E:53:54:E1:33:47:08:F1:80:01:2B:B2:37:A9:5F:9F:AC:7A:4E:5C
Certificate issuer: /CN=7e5354e1334708f180012bb237a95f9fac7a4e5c
Certificate serial: 0199FD341422CA37FDC619767BD4255E2850
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/flNU4TNHCPGAASuyN6lfn6x6Tlw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/21443f-e68f-49e6-abc9-6083393cf46e/1/flNU4TNHCPGAASuyN6lfn6x6Tlw.mft
Manifest number: 09EB
Signing time: Sun 19 Oct 2025 16:01:12 +0000
Manifest this update: Sun 19 Oct 2025 16:01:12 +0000
Manifest next update: Mon 20 Oct 2025 16:01:12 +0000
Files and hashes: 1: 7NZ3oQkMOQoPZU36C6qwxb2VoVE.roa (hash: 47N6P40TbSFw4GF5u3qAezQZQpvVncE6hSSscr+AiT4=)
2: flNU4TNHCPGAASuyN6lfn6x6Tlw.crl (hash: YjfEbm2430DCOD1FuSeQvzeTAxHHV5sZDQ+w+qiECLI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/21443f-e68f-49e6-abc9-6083393cf46e/1/flNU4TNHCPGAASuyN6lfn6x6Tlw.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/21443f-e68f-49e6-abc9-6083393cf46e/1/flNU4TNHCPGAASuyN6lfn6x6Tlw.mft
rsync://rpki.ripe.net/repository/DEFAULT/flNU4TNHCPGAASuyN6lfn6x6Tlw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:14:22:ca:37:fd:c6:19:76:7b:d4:25:5e:28:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e5354e1334708f180012bb237a95f9fac7a4e5c
Validity
Not Before: Oct 19 16:01:12 2025 GMT
Not After : Oct 20 16:01:12 2025 GMT
Subject: CN=9336690892a05951bd8d800246b69428f6d1ce11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:19:b4:1e:2c:04:ad:51:98:b0:1c:09:1a:ec:
71:c1:cd:90:39:b5:19:cb:f9:f1:3c:b9:8c:70:fd:
12:3e:a6:a9:5c:d7:69:99:d2:06:80:d9:32:bc:6d:
9e:1d:fd:f7:a0:5e:2b:70:e7:ee:a1:92:4d:67:5d:
e8:64:47:ea:5b:5f:07:73:65:50:7a:7b:6f:44:76:
fd:03:cb:89:04:ff:a3:78:c2:ee:ae:17:14:ea:bd:
c6:f7:23:38:39:e9:ae:5c:2c:77:f9:8a:7f:77:2e:
ca:31:73:da:2f:f7:5c:73:65:17:6b:ff:99:54:c9:
47:5b:a2:08:c6:1c:0b:53:6a:36:5a:0a:dc:e2:60:
cc:ec:5c:25:81:5c:f9:3f:23:f4:34:2b:92:e2:62:
f4:ae:64:0b:a0:28:18:ff:ed:7f:53:f5:cf:3b:92:
20:38:d7:5d:76:8b:a3:e3:80:d3:0b:e1:92:e3:97:
63:7c:bf:a0:be:fe:4b:fd:b2:f9:bb:1e:7d:48:ec:
c2:98:df:68:bb:0c:bd:4c:b0:3a:08:7a:50:b9:06:
3d:94:b5:85:1c:35:a0:2c:54:47:90:cb:8d:c5:17:
30:8c:6a:0b:ae:32:f6:3f:39:49:a9:bd:56:93:9b:
92:0f:9b:93:c6:62:00:55:b0:20:28:da:c7:38:f1:
3b:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:36:69:08:92:A0:59:51:BD:8D:80:02:46:B6:94:28:F6:D1:CE:11
X509v3 Authority Key Identifier:
keyid:7E:53:54:E1:33:47:08:F1:80:01:2B:B2:37:A9:5F:9F:AC:7A:4E:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/flNU4TNHCPGAASuyN6lfn6x6Tlw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/21443f-e68f-49e6-abc9-6083393cf46e/1/flNU4TNHCPGAASuyN6lfn6x6Tlw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/21443f-e68f-49e6-abc9-6083393cf46e/1/flNU4TNHCPGAASuyN6lfn6x6Tlw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:47:61:11:87:33:d2:e4:b7:b5:95:b4:28:f4:3c:cd:43:61:
4c:20:26:d9:4d:56:2b:16:15:34:0c:59:b8:fc:5c:69:84:ba:
b6:64:28:46:3d:99:c0:6a:4c:a6:21:f1:90:f8:5f:66:f7:01:
73:d0:01:f2:5f:f0:98:80:c1:f7:34:ff:dd:99:77:ce:43:18:
62:2b:54:04:bb:e3:14:58:1d:11:b4:09:05:23:c9:b0:ad:52:
0c:29:d7:60:ef:c3:f4:19:c4:61:8c:a9:c9:25:34:a8:c0:6c:
23:d7:8d:12:d6:62:e7:a4:9f:78:4d:70:bb:e1:b7:d6:18:14:
36:ed:90:d6:dd:c2:cb:25:c2:11:72:03:33:58:96:ef:cc:83:
c3:3f:15:70:e9:8f:64:91:b9:54:44:4c:a5:b3:f5:bc:1c:8e:
9f:73:2a:87:b9:ef:19:88:e6:30:63:da:18:d4:0a:81:83:f0:
1c:bd:2b:11:5a:f7:3e:c2:15:e9:7b:f9:90:c1:95:c7:7d:f3:
2b:d8:94:0f:be:70:45:4b:78:83:59:46:d6:ad:02:a8:81:4d:
67:ee:c2:60:4c:95:9e:dd:9d:c3:94:8a:92:0f:b5:7b:5e:84:
c2:c3:71:d3:b4:58:7c:71:ac:19:75:43:f4:64:08:20:4a:a0:
04:a5:0d:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:58:42 2025 by rpki-client