Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/d13f84-16ce-4d51-a618-c2a5d9d70313/1/flrIG7zPhS8irI7VLS6S2zHY1gY.mft
File: flrIG7zPhS8irI7VLS6S2zHY1gY.mft (raw, json)
Hash identifier: qfZ+kd+qPezaCy76OpjRHIzDoCIP9a98GtcIgdh37qw=
Subject key identifier: 11:D6:DA:05:10:B7:C4:2F:D5:42:A3:00:2C:DA:02:A3:BA:52:4C:AC
Authority key identifier: 7E:5A:C8:1B:BC:CF:85:2F:22:AC:8E:D5:2D:2E:92:DB:31:D8:D6:06
Certificate issuer: /CN=7e5ac81bbccf852f22ac8ed52d2e92db31d8d606
Certificate serial: 0198451A4DDEF66230D9F48AD5F18BB6D65E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/flrIG7zPhS8irI7VLS6S2zHY1gY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/d13f84-16ce-4d51-a618-c2a5d9d70313/1/flrIG7zPhS8irI7VLS6S2zHY1gY.mft
Manifest number: 03C9
Signing time: Sat 26 Jul 2025 05:00:08 +0000
Manifest this update: Sat 26 Jul 2025 05:00:08 +0000
Manifest next update: Sun 27 Jul 2025 05:00:08 +0000
Files and hashes: 1: d0YXwc1ZBHHMR9ZAKLms7HlOiUA.roa (hash: XtdrQk1bystPGs3Lhcrr1va53IhMr+A/sR56pklaba8=)
2: flrIG7zPhS8irI7VLS6S2zHY1gY.crl (hash: jEwkocvwYHaTq06IR0zijeg3uNlZRWOYnxB71vg+F0w=)
3: yWx6-5ROTfngpbWofjIrovB2Q6E.roa (hash: v3rtNkszsHfCVuw51qTsQgDiQ2kYX2tvZDcMhV4gxJA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/d13f84-16ce-4d51-a618-c2a5d9d70313/1/flrIG7zPhS8irI7VLS6S2zHY1gY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/d13f84-16ce-4d51-a618-c2a5d9d70313/1/flrIG7zPhS8irI7VLS6S2zHY1gY.mft
rsync://rpki.ripe.net/repository/DEFAULT/flrIG7zPhS8irI7VLS6S2zHY1gY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 05:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:1a:4d:de:f6:62:30:d9:f4:8a:d5:f1:8b:b6:d6:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e5ac81bbccf852f22ac8ed52d2e92db31d8d606
Validity
Not Before: Jul 26 05:00:08 2025 GMT
Not After : Jul 27 05:00:08 2025 GMT
Subject: CN=11d6da0510b7c42fd542a3002cda02a3ba524cac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:fe:58:4c:27:2f:8f:f3:35:ad:80:83:a3:b2:
1d:e7:95:fa:d2:5d:3a:b9:ef:c4:65:79:45:c5:e6:
5b:e4:87:da:53:6c:e5:e5:c6:50:9f:f6:12:92:b1:
27:6e:1d:3d:24:1a:30:da:9f:d4:b2:73:49:13:17:
f4:fd:d1:fa:2c:41:c3:b3:a5:95:6a:f5:3b:51:ff:
9e:47:cd:0e:5a:11:6c:bc:85:a3:a5:cd:53:8f:a5:
76:13:76:0c:b4:17:69:06:dd:5d:b6:7b:6c:e0:bd:
87:1d:e5:ce:95:8f:9c:2b:32:3f:61:eb:e8:81:68:
01:30:94:da:cb:8f:3e:83:5f:62:3a:5b:bc:b7:c7:
be:d4:31:08:7b:73:cd:5c:59:a4:35:cf:86:0a:7e:
bd:c2:a8:3c:08:3a:ad:e0:a6:20:eb:fc:5e:1e:4a:
9e:3f:75:0b:ff:cb:37:04:c1:72:51:6b:84:ef:3a:
bd:45:ce:57:eb:6a:67:c5:31:b6:4c:1c:db:a3:b7:
98:4e:f8:80:05:2a:e8:76:04:5f:9b:af:93:60:26:
62:d1:c3:b3:41:c9:a6:46:c1:43:63:4d:49:f7:be:
58:aa:c9:3a:29:01:81:44:37:2b:a0:a2:f8:ea:1a:
c3:8a:84:3f:fb:49:f4:98:cb:3b:cf:f1:2d:d6:eb:
a3:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:D6:DA:05:10:B7:C4:2F:D5:42:A3:00:2C:DA:02:A3:BA:52:4C:AC
X509v3 Authority Key Identifier:
keyid:7E:5A:C8:1B:BC:CF:85:2F:22:AC:8E:D5:2D:2E:92:DB:31:D8:D6:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/flrIG7zPhS8irI7VLS6S2zHY1gY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d13f84-16ce-4d51-a618-c2a5d9d70313/1/flrIG7zPhS8irI7VLS6S2zHY1gY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d13f84-16ce-4d51-a618-c2a5d9d70313/1/flrIG7zPhS8irI7VLS6S2zHY1gY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:ab:af:ae:17:52:c8:3d:80:5d:c6:c2:7e:38:b0:0e:85:ff:
ba:84:85:55:6e:d6:0a:f7:d8:d8:48:f1:d8:bd:ab:4e:bb:01:
37:53:ad:fd:ba:da:86:49:b8:25:36:d3:90:8d:78:d6:9f:20:
69:06:33:2e:61:c0:17:37:e4:35:8f:64:d9:60:c4:21:87:16:
9b:75:8d:23:49:bf:bf:0d:f9:fd:9d:01:a4:c1:e5:b0:7e:27:
e9:ec:95:f6:a0:87:fb:64:4e:fc:7e:31:72:df:7e:49:70:43:
0a:c3:6b:6c:45:59:40:07:41:c4:5f:d1:ef:f1:bf:a7:37:9b:
9f:09:b0:87:fd:55:36:22:bc:3c:ba:33:0a:b4:8a:fe:d1:d0:
de:16:d4:7c:28:3f:3e:2c:8d:2a:d7:7c:01:e4:d6:35:9a:45:
16:8e:e1:ed:03:75:e2:0d:fb:6d:11:4a:6f:75:f7:e0:68:92:
2c:4b:73:3d:ce:67:89:85:63:00:9e:c3:a3:f3:40:af:09:20:
d6:2d:87:bf:ad:27:1c:bb:64:6e:b9:1e:b7:37:15:11:ff:41:
12:5d:bb:c1:3e:ce:77:5b:55:4b:9a:df:06:bb:21:44:74:6f:
f8:38:56:b7:c7:53:b8:fc:c3:70:d2:66:89:17:e3:c6:2a:52:
d4:5a:70:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 15:09:29 2025 by rpki-client