Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/040564-5952-4223-bcca-f876c055a315/1/flZv_0B_McauhWw3Q-8-XyL401s.mft
File: flZv_0B_McauhWw3Q-8-XyL401s.mft (raw, json)
Hash identifier: NA3KYRyx94RjBU3LE4X3oNb5iv+IRlHn/G/g3YYW6rs=
Subject key identifier: 85:84:FF:E7:F4:EB:D1:97:35:66:6C:7A:4B:D5:B4:FD:4E:B2:DB:64
Authority key identifier: 7E:56:6F:FF:40:7F:31:C6:AE:85:6C:37:43:EF:3E:5F:22:F8:D3:5B
Certificate issuer: /CN=7e566fff407f31c6ae856c3743ef3e5f22f8d35b
Certificate serial: 019A71EEF664924150346235EC44333C8BB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/flZv_0B_McauhWw3Q-8-XyL401s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/040564-5952-4223-bcca-f876c055a315/1/flZv_0B_McauhWw3Q-8-XyL401s.mft
Manifest number: 1636
Signing time: Tue 11 Nov 2025 08:01:17 +0000
Manifest this update: Tue 11 Nov 2025 08:01:17 +0000
Manifest next update: Wed 12 Nov 2025 08:01:17 +0000
Files and hashes: 1: CF8GaEatgxJbaKh474IjZo5fECA.roa (hash: jNeYnMymis49T6EQU4PdS7BLisDarhceBgl5yuJAqIM=)
2: flZv_0B_McauhWw3Q-8-XyL401s.crl (hash: eLdt5NymeUYsKcuw/GYDIQhRKUdf2PQc8CYrBIqBuW0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/040564-5952-4223-bcca-f876c055a315/1/flZv_0B_McauhWw3Q-8-XyL401s.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/040564-5952-4223-bcca-f876c055a315/1/flZv_0B_McauhWw3Q-8-XyL401s.mft
rsync://rpki.ripe.net/repository/DEFAULT/flZv_0B_McauhWw3Q-8-XyL401s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:f6:64:92:41:50:34:62:35:ec:44:33:3c:8b:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e566fff407f31c6ae856c3743ef3e5f22f8d35b
Validity
Not Before: Nov 11 08:01:17 2025 GMT
Not After : Nov 12 08:01:17 2025 GMT
Subject: CN=8584ffe7f4ebd19735666c7a4bd5b4fd4eb2db64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b2:3a:76:6c:35:50:b6:c2:15:75:ed:a5:78:
a5:72:44:ef:f8:44:7d:39:a7:63:1c:06:7f:94:5e:
40:31:ed:26:60:73:72:4b:1c:2b:f9:37:54:88:b1:
01:da:e7:a6:fe:00:e4:15:a1:21:80:14:73:16:1c:
b4:f3:39:88:c3:16:ae:9f:56:23:e1:8f:e9:da:df:
98:5f:7c:09:03:9a:8c:3e:64:18:c6:b7:c1:89:37:
65:0b:61:12:24:49:a7:63:05:aa:98:a8:11:36:e5:
76:3c:44:7b:eb:37:74:55:1c:7d:3a:c8:4e:dd:32:
9e:b1:7d:f3:e8:27:99:e2:79:5d:fd:67:e0:1d:b4:
ec:f3:71:79:10:17:12:e5:53:33:ec:e9:9b:92:a7:
f0:e6:70:ac:56:2e:9b:7f:69:61:29:9e:7e:b0:58:
a8:f5:da:0c:3a:5e:6b:11:98:95:59:83:2c:95:3a:
44:d8:b3:14:1b:6a:80:9e:01:b9:94:53:42:12:c0:
1f:83:71:d7:0f:43:65:1d:8a:50:60:48:ba:1a:00:
c4:21:91:90:a7:c3:55:0f:fc:f8:25:50:53:02:75:
cf:a5:3e:a8:94:64:b0:96:76:bd:fc:6e:27:00:bf:
41:9e:a1:b4:65:bb:95:84:3a:53:df:dd:1a:7a:73:
d5:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:84:FF:E7:F4:EB:D1:97:35:66:6C:7A:4B:D5:B4:FD:4E:B2:DB:64
X509v3 Authority Key Identifier:
keyid:7E:56:6F:FF:40:7F:31:C6:AE:85:6C:37:43:EF:3E:5F:22:F8:D3:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/flZv_0B_McauhWw3Q-8-XyL401s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/040564-5952-4223-bcca-f876c055a315/1/flZv_0B_McauhWw3Q-8-XyL401s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/040564-5952-4223-bcca-f876c055a315/1/flZv_0B_McauhWw3Q-8-XyL401s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:17:79:91:c4:22:c3:88:41:e8:66:4f:5a:c8:7d:ad:90:b1:
e2:d7:65:24:66:82:eb:a2:21:56:ad:7c:56:b2:41:ee:b6:c6:
0f:13:90:13:8d:81:77:dc:1e:a3:6b:ec:68:1d:49:8f:7e:ae:
a1:56:16:0b:90:34:df:7c:65:e6:bb:a4:71:a0:0d:53:fe:2a:
df:29:0d:6f:85:83:55:c3:91:87:77:54:c4:23:76:f3:53:05:
7f:67:5f:bb:12:fe:94:db:dc:da:08:ad:75:69:bb:ac:cb:79:
18:88:8e:dc:19:a6:84:e4:3a:39:33:2b:c0:aa:90:66:97:f5:
bd:54:c7:c3:15:d0:dd:f0:97:70:51:e9:d2:ce:5a:69:c0:00:
29:3b:b5:14:6a:73:9c:ce:86:79:6e:5f:45:57:90:d1:bb:89:
b6:53:31:b7:50:21:0f:6e:87:2d:b1:9c:1d:ac:03:fa:33:63:
3b:01:54:60:34:b3:05:d2:85:13:82:45:04:d7:fa:c1:78:13:
3f:5b:8e:ee:e2:23:ab:0b:cc:e6:1a:0c:0c:d1:3d:09:4e:d8:
7a:7f:a7:6c:22:6b:0e:b2:f0:22:67:4a:aa:eb:65:2e:08:2f:
e3:32:44:89:5d:c2:fb:3c:c0:84:1e:44:7e:16:cd:10:a2:87:
9b:44:85:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:48:00 2025 by rpki-client