Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/05a1ca-33c5-4aef-9c9a-f50fd99373ec/1/flVV8aLO6JtxNGVghvBU15Y1PB4.mft
File: flVV8aLO6JtxNGVghvBU15Y1PB4.mft (raw, json)
Hash identifier: i96xnoev0FkIi3adr3BkrPOYXQy//imHd6fjalLCNo0=
Subject key identifier: 42:8C:78:57:0A:05:AC:68:8E:CB:BD:CC:42:A7:66:0B:9A:F7:DD:13
Authority key identifier: 7E:55:55:F1:A2:CE:E8:9B:71:34:65:60:86:F0:54:D7:96:35:3C:1E
Certificate issuer: /CN=7e5555f1a2cee89b7134656086f054d796353c1e
Certificate serial: 01984965A38DD87249C8BC27DC8769D199B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/flVV8aLO6JtxNGVghvBU15Y1PB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/05a1ca-33c5-4aef-9c9a-f50fd99373ec/1/flVV8aLO6JtxNGVghvBU15Y1PB4.mft
Manifest number: 1605
Signing time: Sun 27 Jul 2025 01:00:54 +0000
Manifest this update: Sun 27 Jul 2025 01:00:54 +0000
Manifest next update: Mon 28 Jul 2025 01:00:54 +0000
Files and hashes: 1: KqK95kA_OeRU7nACiSd3lAze0vY.roa (hash: B7AMB5/+VeIa1+pxAsGTh2RB/UvVZMPeKnxdMUh4GP8=)
2: XDVhwmlTf_nqhCgNATZSd0ar0Aw.roa (hash: 4sk0t2n52t1+zIieedKbu6GF5jguH4obuoBrZPYHYOc=)
3: flVV8aLO6JtxNGVghvBU15Y1PB4.crl (hash: yveySIlhDfo6jPuhwiAStgpEOucZ2FNq+G8+olsZh2c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/05a1ca-33c5-4aef-9c9a-f50fd99373ec/1/flVV8aLO6JtxNGVghvBU15Y1PB4.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/05a1ca-33c5-4aef-9c9a-f50fd99373ec/1/flVV8aLO6JtxNGVghvBU15Y1PB4.mft
rsync://rpki.ripe.net/repository/DEFAULT/flVV8aLO6JtxNGVghvBU15Y1PB4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:a3:8d:d8:72:49:c8:bc:27:dc:87:69:d1:99:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e5555f1a2cee89b7134656086f054d796353c1e
Validity
Not Before: Jul 27 01:00:54 2025 GMT
Not After : Jul 28 01:00:54 2025 GMT
Subject: CN=428c78570a05ac688ecbbdcc42a7660b9af7dd13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:3d:82:0b:a4:8c:f0:d9:fb:4d:2d:0c:ca:99:
90:ec:d4:eb:a5:1f:3f:e3:93:b2:b6:e7:93:bc:5f:
68:18:16:e2:bb:b7:61:8e:e7:26:a6:22:f9:03:58:
b1:f8:b7:c3:87:23:41:6c:1d:a0:33:c9:9b:71:33:
04:89:e2:9b:47:74:a5:d7:83:c8:32:e6:0e:9b:1b:
bc:aa:f1:0f:07:52:80:c9:fb:84:12:d7:32:fe:40:
af:b9:49:1a:4b:5f:0a:a4:b1:2a:c9:e8:1d:14:4b:
fa:93:60:33:a9:87:5e:b5:2e:ba:3d:a5:dd:b2:59:
e8:1c:97:5a:e6:c6:5c:50:45:7f:bf:3a:4c:74:f4:
e9:76:8d:dc:2f:19:32:80:d4:7a:0d:2c:d6:cc:21:
ab:a6:0f:01:70:69:34:71:00:dc:e7:09:ff:53:0e:
26:d3:b9:4b:94:04:a5:12:eb:b8:1a:d8:eb:40:8c:
96:6e:23:ce:db:10:7e:f7:da:57:f0:e0:5f:a8:de:
39:b0:0c:20:60:95:62:86:d1:c1:58:75:6d:f7:99:
03:13:10:86:b9:f7:40:50:25:79:10:c3:e3:2e:a6:
46:40:6a:31:e3:f5:c1:6e:17:db:ec:da:5f:6a:36:
ef:ff:c5:c5:e9:09:c1:da:fe:62:e8:73:e3:3e:c0:
c3:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:8C:78:57:0A:05:AC:68:8E:CB:BD:CC:42:A7:66:0B:9A:F7:DD:13
X509v3 Authority Key Identifier:
keyid:7E:55:55:F1:A2:CE:E8:9B:71:34:65:60:86:F0:54:D7:96:35:3C:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/flVV8aLO6JtxNGVghvBU15Y1PB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/05a1ca-33c5-4aef-9c9a-f50fd99373ec/1/flVV8aLO6JtxNGVghvBU15Y1PB4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/05a1ca-33c5-4aef-9c9a-f50fd99373ec/1/flVV8aLO6JtxNGVghvBU15Y1PB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:cb:7c:b8:eb:53:8e:14:2e:d7:57:3f:04:bd:ad:5f:0a:17:
41:d9:3f:77:5e:b4:df:85:b1:d7:41:64:20:0d:b6:c2:a0:0a:
c5:7c:dc:b1:e4:68:04:30:4b:a9:a2:56:06:ef:e3:f8:21:0d:
a7:44:6d:91:0a:cb:00:1a:41:f4:92:f4:9c:fc:ee:94:38:12:
a7:8d:75:3b:f7:50:f3:19:b2:62:ba:f7:e0:03:b2:73:b2:c9:
9e:65:31:09:7f:88:95:0c:ab:0d:6c:31:44:3b:e4:0f:dd:56:
a6:49:52:c7:d2:73:9e:96:af:a9:ba:41:46:1c:ca:f2:c0:bc:
7c:48:93:f7:17:3b:fe:12:72:c6:ef:f0:d2:a5:d0:db:7a:68:
0f:d5:3b:44:98:8a:7e:2a:20:b2:58:81:90:bb:82:98:56:63:
69:f1:0e:3b:84:9c:9f:12:fe:ce:97:59:cb:d9:13:7a:11:71:
82:ab:b1:23:9d:b0:1e:cb:1e:01:49:3f:b6:d3:9b:a1:10:90:
99:61:8c:27:34:70:e1:f0:c4:8a:23:10:ba:47:12:a4:c3:b1:
a4:f9:f2:b5:ed:f7:7b:dc:8b:4f:41:e1:22:31:20:da:fb:10:
e2:1f:3c:be:ad:98:f7:05:14:d9:4b:13:fa:76:fd:7c:8a:eb:
94:38:29:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 04:46:57 2025 by rpki-client