Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/ea10b5-21f6-46b9-aad6-3f7a3e025e8b/1/flyFKPgXh8SJxUqZODkmn1prH5Q.mft
File: flyFKPgXh8SJxUqZODkmn1prH5Q.mft (raw, json)
Hash identifier: CTKsBOtDdT78ruiix74coVa1CIeSB9gS4AeOTSZH7TQ=
Subject key identifier: B2:BC:7F:7E:B0:16:0B:89:47:5D:E0:A5:ED:24:52:01:1F:E5:B9:7B
Authority key identifier: 7E:5C:85:28:F8:17:87:C4:89:C5:4A:99:38:39:26:9F:5A:6B:1F:94
Certificate issuer: /CN=7e5c8528f81787c489c54a993839269f5a6b1f94
Certificate serial: 0197B9A1E89857DEC819C08E929AC3262A76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/flyFKPgXh8SJxUqZODkmn1prH5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/ea10b5-21f6-46b9-aad6-3f7a3e025e8b/1/flyFKPgXh8SJxUqZODkmn1prH5Q.mft
Manifest number: 15B9
Signing time: Sun 29 Jun 2025 03:01:25 +0000
Manifest this update: Sun 29 Jun 2025 03:01:25 +0000
Manifest next update: Mon 30 Jun 2025 03:01:25 +0000
Files and hashes: 1: flyFKPgXh8SJxUqZODkmn1prH5Q.crl (hash: iorfLWxwlQI9RogYkkKK950hGdY0W85dqK1HgMUixD4=)
2: hfVNxhpqjhtY0Y5pPH1kyqqYbyE.roa (hash: aFX0mNsdzdwNbH9dkbmbgQ2YlhtWRYm/NSgRF7fVXw4=)
3: qlFHFeROOID5WaWVEHwvwxWAzLw.roa (hash: //F8owzBylzzc3mWkvQYIjr2mTOF+4WmUYspBcjO8y4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/ea10b5-21f6-46b9-aad6-3f7a3e025e8b/1/flyFKPgXh8SJxUqZODkmn1prH5Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/ea10b5-21f6-46b9-aad6-3f7a3e025e8b/1/flyFKPgXh8SJxUqZODkmn1prH5Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/flyFKPgXh8SJxUqZODkmn1prH5Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:a1:e8:98:57:de:c8:19:c0:8e:92:9a:c3:26:2a:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e5c8528f81787c489c54a993839269f5a6b1f94
Validity
Not Before: Jun 29 03:01:25 2025 GMT
Not After : Jun 30 03:01:25 2025 GMT
Subject: CN=b2bc7f7eb0160b89475de0a5ed2452011fe5b97b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ee:57:c8:d9:fe:b9:5a:39:86:b0:b6:10:01:
a8:cd:0f:52:61:b2:10:06:1c:e9:f3:2e:5d:8d:7c:
fa:61:54:87:c5:aa:58:b7:5d:ff:22:84:b3:66:18:
40:6e:67:0c:0e:e4:88:3b:8e:9e:82:16:9e:c8:a2:
4d:7c:41:c2:0f:73:de:f2:2c:fd:5d:32:f3:4c:3e:
d8:3e:02:71:0b:41:0d:c7:54:93:ea:83:d4:27:6d:
98:b6:36:2a:58:f2:79:a3:a8:1f:68:7d:1e:8f:a4:
fe:fe:73:09:bf:26:41:34:93:c2:e2:74:8b:cd:4c:
7e:81:bf:c4:e7:64:2b:7a:3c:ae:7a:04:b2:4f:af:
d9:5f:9e:83:34:08:41:58:49:be:24:72:df:62:f4:
fb:97:61:df:94:39:23:aa:c9:55:ad:29:44:99:6f:
31:5d:79:f6:bd:75:f2:50:03:2d:83:b3:8b:14:9d:
b2:f2:ba:29:07:9b:ba:87:29:33:22:ed:c5:a0:3b:
77:45:cf:51:98:16:59:64:5f:5f:74:38:5d:8d:34:
3d:6e:43:0d:46:f6:f9:66:69:25:1c:d9:77:da:41:
1b:de:36:45:90:65:10:c6:99:0d:50:cf:83:50:2c:
ea:ad:19:99:2c:9f:22:38:e9:59:94:4a:12:8e:2d:
29:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:BC:7F:7E:B0:16:0B:89:47:5D:E0:A5:ED:24:52:01:1F:E5:B9:7B
X509v3 Authority Key Identifier:
keyid:7E:5C:85:28:F8:17:87:C4:89:C5:4A:99:38:39:26:9F:5A:6B:1F:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/flyFKPgXh8SJxUqZODkmn1prH5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/ea10b5-21f6-46b9-aad6-3f7a3e025e8b/1/flyFKPgXh8SJxUqZODkmn1prH5Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/ea10b5-21f6-46b9-aad6-3f7a3e025e8b/1/flyFKPgXh8SJxUqZODkmn1prH5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:61:3a:b5:6a:59:4c:42:65:d6:24:2f:99:a7:0f:e9:32:22:
70:71:1e:ef:c2:5a:a1:8c:4e:da:40:41:6a:90:23:69:a5:71:
d5:6a:75:82:e8:dd:88:8a:55:8e:93:43:eb:1e:9a:97:61:d8:
bd:16:2d:3b:5b:c9:d1:4d:36:e8:2a:64:e5:3a:16:b5:9d:2c:
46:10:80:40:c8:3f:10:14:67:b0:2d:31:bc:07:59:70:8d:9f:
db:72:cd:e9:9d:bd:1d:6e:e1:63:cb:8b:59:29:e7:86:f0:9f:
95:44:fb:23:8f:ae:73:37:ff:26:fa:88:79:99:39:1e:f5:b1:
78:47:9d:f5:60:a0:c9:d0:77:a9:f3:5b:b0:0f:9d:19:72:b9:
05:f4:e8:d0:22:d6:25:c8:99:19:1c:7f:7f:ce:17:3f:08:21:
06:1c:65:8e:d5:14:86:51:a9:07:e4:04:04:c0:6d:bb:96:0c:
69:e4:77:9c:ac:20:e4:1d:c4:df:4d:f1:33:32:0e:1e:b2:19:
37:5f:1f:11:40:32:88:20:b6:54:03:45:ee:a0:95:3a:6c:8d:
d4:9e:3b:9c:27:f4:07:c9:78:30:dc:11:d5:68:02:a5:85:c7:
ff:9a:a1:2b:26:ce:fd:dd:ff:5c:1c:bc:4a:fd:ff:45:09:49:
c3:25:d6:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:25:33 2025 by rpki-client