Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/d13f84-16ce-4d51-a618-c2a5d9d70313/1/flrIG7zPhS8irI7VLS6S2zHY1gY.mft
File: flrIG7zPhS8irI7VLS6S2zHY1gY.mft (raw, json)
Hash identifier: tc2dJ8jhpS2X8gRb1Yi+/aCb/n+TruUIQx5xIiCkHYE=
Subject key identifier: C9:1D:E4:71:16:27:DC:2D:E3:00:29:B7:96:47:BB:13:C3:5D:6F:45
Authority key identifier: 7E:5A:C8:1B:BC:CF:85:2F:22:AC:8E:D5:2D:2E:92:DB:31:D8:D6:06
Certificate issuer: /CN=7e5ac81bbccf852f22ac8ed52d2e92db31d8d606
Certificate serial: 0199FB0ED0FC533048B1926E3A3484F25359
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/flrIG7zPhS8irI7VLS6S2zHY1gY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/d13f84-16ce-4d51-a618-c2a5d9d70313/1/flrIG7zPhS8irI7VLS6S2zHY1gY.mft
Manifest number: 04AC
Signing time: Sun 19 Oct 2025 06:01:16 +0000
Manifest this update: Sun 19 Oct 2025 06:01:16 +0000
Manifest next update: Mon 20 Oct 2025 06:01:16 +0000
Files and hashes: 1: flrIG7zPhS8irI7VLS6S2zHY1gY.crl (hash: rs5VMukGbQ47fnkyrNJHk61Wy7MHXyoEcCFaUZVLFaA=)
2: mmN32mNsq6CY-gUtYsm7TMdzzD0.roa (hash: H4OADNjQr8Zl5dZsnvZU+5uN1GfozSdChxvNI1Amd/k=)
3: yWx6-5ROTfngpbWofjIrovB2Q6E.roa (hash: v3rtNkszsHfCVuw51qTsQgDiQ2kYX2tvZDcMhV4gxJA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/d13f84-16ce-4d51-a618-c2a5d9d70313/1/flrIG7zPhS8irI7VLS6S2zHY1gY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/d13f84-16ce-4d51-a618-c2a5d9d70313/1/flrIG7zPhS8irI7VLS6S2zHY1gY.mft
rsync://rpki.ripe.net/repository/DEFAULT/flrIG7zPhS8irI7VLS6S2zHY1gY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0e:d0:fc:53:30:48:b1:92:6e:3a:34:84:f2:53:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e5ac81bbccf852f22ac8ed52d2e92db31d8d606
Validity
Not Before: Oct 19 06:01:16 2025 GMT
Not After : Oct 20 06:01:16 2025 GMT
Subject: CN=c91de4711627dc2de30029b79647bb13c35d6f45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:47:75:78:b3:9f:de:01:0e:f4:c6:47:a0:7c:
75:c2:6b:94:20:26:42:fd:75:5e:99:a0:84:81:69:
2e:ed:d3:cb:98:d8:92:a6:57:e3:30:0d:1a:a8:5b:
2c:0b:b9:07:85:ec:ce:ef:01:5b:9e:45:b9:3a:66:
21:12:8d:62:49:19:02:cf:26:36:e6:77:a3:37:36:
09:62:c6:ae:6b:b4:db:63:3d:38:1f:4f:4a:fb:1d:
e5:69:b2:8d:30:73:c3:2a:4e:64:16:c9:b2:99:1e:
7e:79:7e:e6:11:9d:b8:b2:d2:30:32:a7:f6:aa:e6:
71:f8:25:18:d6:29:c4:5d:94:01:5d:56:cc:9a:d6:
c3:87:57:72:fa:64:1f:f0:51:a6:96:63:1e:43:02:
7e:62:df:39:a3:a7:53:4a:2b:0e:0d:9f:84:90:27:
c6:c5:be:b2:70:e6:45:66:5e:de:76:e9:4e:91:82:
44:6a:3d:e5:7c:21:88:b6:6b:9a:2c:eb:53:fe:23:
a5:7f:bf:41:1c:94:77:b3:e1:df:16:76:d3:7e:84:
22:9e:33:ed:81:7e:c5:d4:6f:26:5e:5b:23:30:3c:
17:c3:28:48:39:91:d5:bf:20:39:9e:02:d3:6a:70:
8c:6c:3f:8d:d9:25:87:c0:6c:f9:e4:eb:cf:25:9f:
7d:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:1D:E4:71:16:27:DC:2D:E3:00:29:B7:96:47:BB:13:C3:5D:6F:45
X509v3 Authority Key Identifier:
keyid:7E:5A:C8:1B:BC:CF:85:2F:22:AC:8E:D5:2D:2E:92:DB:31:D8:D6:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/flrIG7zPhS8irI7VLS6S2zHY1gY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d13f84-16ce-4d51-a618-c2a5d9d70313/1/flrIG7zPhS8irI7VLS6S2zHY1gY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d13f84-16ce-4d51-a618-c2a5d9d70313/1/flrIG7zPhS8irI7VLS6S2zHY1gY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:89:4d:65:19:8a:54:24:8a:f2:8f:f7:c3:96:4d:1a:b3:80:
01:db:b7:27:1c:89:13:a3:a5:f2:d0:6e:e3:ce:42:2f:b1:bb:
83:99:51:ee:f1:d2:60:28:6e:aa:7c:ea:2d:cd:9a:2e:e5:bc:
8b:22:87:24:32:d6:34:38:2f:d4:a9:8a:f5:c5:34:e0:a5:a5:
aa:be:96:e4:a2:ae:74:77:b4:b6:ab:3b:30:bf:e0:7d:33:21:
31:5a:f4:7c:27:df:e2:21:8d:d6:75:07:88:5d:2f:e1:83:bf:
7d:45:18:dc:58:d1:5f:51:fe:49:ad:f5:ba:92:71:ea:d5:b7:
f1:8c:8c:f0:02:b5:c0:7d:56:0c:74:b8:cd:de:87:cd:f7:2b:
b2:84:7b:18:5e:39:81:e9:ed:ba:7d:8f:3e:21:c7:7e:fe:f4:
32:a6:ea:21:2c:c2:29:33:0f:07:6b:23:8b:ef:7f:7a:a2:ad:
00:a1:e4:83:a8:2c:35:08:55:88:b6:f1:89:9f:0a:7b:61:7c:
ce:01:18:bd:85:29:2e:75:ab:10:d5:ee:97:43:09:69:20:9c:
bb:83:42:89:0b:4e:5f:9a:a1:a5:ca:db:8c:f2:c3:2b:a7:da:
52:e4:3f:16:a9:37:ec:4b:93:4b:42:7c:bc:06:5f:15:15:ed:
82:b6:57:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:11:09 2025 by rpki-client