Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/ea10b5-21f6-46b9-aad6-3f7a3e025e8b/1/flyFKPgXh8SJxUqZODkmn1prH5Q.mft
File: flyFKPgXh8SJxUqZODkmn1prH5Q.mft (raw, json)
Hash identifier: NTumnKanRVc0VpNBuGOKw3ykbarbmH822LVs8AtOCdU=
Subject key identifier: 59:4D:DC:B6:50:E5:6E:04:10:57:43:AE:90:37:33:98:6D:4F:D0:77
Authority key identifier: 7E:5C:85:28:F8:17:87:C4:89:C5:4A:99:38:39:26:9F:5A:6B:1F:94
Certificate issuer: /CN=7e5c8528f81787c489c54a993839269f5a6b1f94
Certificate serial: 01984A77D250CDF48B41B7769A3C14AEA656
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/flyFKPgXh8SJxUqZODkmn1prH5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/ea10b5-21f6-46b9-aad6-3f7a3e025e8b/1/flyFKPgXh8SJxUqZODkmn1prH5Q.mft
Manifest number: 1604
Signing time: Sun 27 Jul 2025 06:00:23 +0000
Manifest this update: Sun 27 Jul 2025 06:00:23 +0000
Manifest next update: Mon 28 Jul 2025 06:00:23 +0000
Files and hashes: 1: flyFKPgXh8SJxUqZODkmn1prH5Q.crl (hash: 8sfB34NaM0fxXlP2f3AgU53rjRFvBmI3BpsZcbuBhIQ=)
2: hfVNxhpqjhtY0Y5pPH1kyqqYbyE.roa (hash: aFX0mNsdzdwNbH9dkbmbgQ2YlhtWRYm/NSgRF7fVXw4=)
3: qlFHFeROOID5WaWVEHwvwxWAzLw.roa (hash: //F8owzBylzzc3mWkvQYIjr2mTOF+4WmUYspBcjO8y4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/ea10b5-21f6-46b9-aad6-3f7a3e025e8b/1/flyFKPgXh8SJxUqZODkmn1prH5Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/ea10b5-21f6-46b9-aad6-3f7a3e025e8b/1/flyFKPgXh8SJxUqZODkmn1prH5Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/flyFKPgXh8SJxUqZODkmn1prH5Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:77:d2:50:cd:f4:8b:41:b7:76:9a:3c:14:ae:a6:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e5c8528f81787c489c54a993839269f5a6b1f94
Validity
Not Before: Jul 27 06:00:23 2025 GMT
Not After : Jul 28 06:00:23 2025 GMT
Subject: CN=594ddcb650e56e04105743ae903733986d4fd077
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:ce:e3:00:d2:fc:0c:f2:a4:d9:96:aa:29:54:
03:71:bf:0f:69:17:d3:54:96:98:83:0c:d1:ba:0e:
aa:02:d0:f8:fb:55:19:17:5d:f1:7c:f2:c8:13:f1:
f3:e0:ee:02:f2:9b:36:3f:a9:25:13:9a:1d:6b:a1:
2a:9d:be:87:32:4f:a9:a7:2d:3c:49:a7:a7:6d:8f:
56:0b:75:c3:c4:55:36:2d:53:9e:67:28:f4:78:d0:
ca:d7:a7:da:85:e2:ae:40:bc:a1:af:90:cc:97:29:
b4:00:da:b4:c4:fd:25:22:64:da:6f:56:cb:e5:af:
23:18:8b:ce:e3:94:53:ef:48:ef:63:08:d3:1e:13:
9d:18:51:9c:c7:2c:34:9e:a5:86:45:6b:10:34:23:
bb:1d:d2:da:bc:99:7b:49:d8:71:4d:0a:70:e8:98:
e0:8f:98:e7:c2:c1:3c:1b:2c:b8:cc:2a:90:9f:c7:
06:ce:02:6b:3f:2c:6c:5a:dd:7b:f4:b6:62:27:d7:
82:ba:90:bf:15:bd:cf:07:0b:44:92:bb:ab:9a:f0:
8b:af:53:22:f9:db:2d:31:2f:da:5d:de:33:b7:64:
45:a0:9f:1b:9a:86:57:fa:f4:f0:9c:64:48:ec:cf:
c0:b5:1b:7a:12:d6:d1:8e:b6:69:91:f9:db:6b:07:
da:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:4D:DC:B6:50:E5:6E:04:10:57:43:AE:90:37:33:98:6D:4F:D0:77
X509v3 Authority Key Identifier:
keyid:7E:5C:85:28:F8:17:87:C4:89:C5:4A:99:38:39:26:9F:5A:6B:1F:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/flyFKPgXh8SJxUqZODkmn1prH5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/ea10b5-21f6-46b9-aad6-3f7a3e025e8b/1/flyFKPgXh8SJxUqZODkmn1prH5Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/ea10b5-21f6-46b9-aad6-3f7a3e025e8b/1/flyFKPgXh8SJxUqZODkmn1prH5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:72:0a:23:6a:06:52:cf:6e:73:80:71:d1:fc:4d:b7:d0:c6:
ee:13:de:92:fc:9e:12:c4:1f:ee:f1:89:7d:52:09:2e:3d:08:
f0:dd:9c:3a:db:22:98:1d:99:b6:e0:23:72:68:b8:52:69:c8:
92:f5:ee:d0:44:f3:70:a8:5a:28:85:9a:43:6a:85:02:41:5d:
b0:4c:a8:c7:0f:de:74:85:78:fa:21:9f:30:d3:d9:6a:39:24:
ab:9e:c2:49:c6:7b:61:6c:11:c1:40:bc:32:0f:b1:c1:18:0f:
57:45:70:3b:80:2e:1a:b3:6c:e2:b2:ae:6a:91:88:59:fc:22:
a1:6f:30:45:51:39:47:c1:5c:42:25:60:f5:1c:da:82:2b:5d:
c0:b2:e3:b3:51:14:d1:31:fe:f2:59:17:79:a3:c9:f5:35:68:
68:c0:58:27:ea:b4:44:55:7c:16:ae:ab:1f:65:be:4d:e9:c1:
e5:6e:b8:cf:f3:f3:bd:16:5b:00:9f:ac:f2:0b:70:19:98:62:
42:c4:bf:a1:16:9f:3c:62:99:1a:63:75:ba:48:30:90:bc:fb:
38:c6:b0:fa:06:ac:08:cc:42:fa:a8:74:42:7a:9e:bb:12:0f:
95:21:ec:3f:75:fa:e3:2e:43:2b:d6:31:ef:f4:d3:d7:a5:49:
18:cc:e4:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:28:37 2025 by rpki-client