Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/040564-5952-4223-bcca-f876c055a315/1/flZv_0B_McauhWw3Q-8-XyL401s.mft
File: flZv_0B_McauhWw3Q-8-XyL401s.mft (raw, json)
Hash identifier: K5pNG7Jp2wfTjReTv3WWkFUFcU8Hq+zkYcQhYOdCSjI=
Subject key identifier: FF:F2:13:94:BD:87:7A:8C:92:12:74:59:9F:36:D1:80:3C:D1:AD:8E
Authority key identifier: 7E:56:6F:FF:40:7F:31:C6:AE:85:6C:37:43:EF:3E:5F:22:F8:D3:5B
Certificate issuer: /CN=7e566fff407f31c6ae856c3743ef3e5f22f8d35b
Certificate serial: 019923D619A61F224C7172A22D56710B8B8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/flZv_0B_McauhWw3Q-8-XyL401s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/040564-5952-4223-bcca-f876c055a315/1/flZv_0B_McauhWw3Q-8-XyL401s.mft
Manifest number: 1589
Signing time: Sun 07 Sep 2025 11:00:57 +0000
Manifest this update: Sun 07 Sep 2025 11:00:57 +0000
Manifest next update: Mon 08 Sep 2025 11:00:57 +0000
Files and hashes: 1: CF8GaEatgxJbaKh474IjZo5fECA.roa (hash: jNeYnMymis49T6EQU4PdS7BLisDarhceBgl5yuJAqIM=)
2: flZv_0B_McauhWw3Q-8-XyL401s.crl (hash: TOOs1dwyTo29OQszSyW5ph87EbxLaTNdROakynBeUbo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/040564-5952-4223-bcca-f876c055a315/1/flZv_0B_McauhWw3Q-8-XyL401s.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/040564-5952-4223-bcca-f876c055a315/1/flZv_0B_McauhWw3Q-8-XyL401s.mft
rsync://rpki.ripe.net/repository/DEFAULT/flZv_0B_McauhWw3Q-8-XyL401s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:d6:19:a6:1f:22:4c:71:72:a2:2d:56:71:0b:8b:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e566fff407f31c6ae856c3743ef3e5f22f8d35b
Validity
Not Before: Sep 7 11:00:57 2025 GMT
Not After : Sep 8 11:00:57 2025 GMT
Subject: CN=fff21394bd877a8c921274599f36d1803cd1ad8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:3f:28:b1:24:b6:aa:f1:04:82:6f:ad:a8:7e:
46:a9:06:bc:1b:8b:05:38:e1:ae:fe:a7:96:26:4e:
5e:65:b5:3f:3b:69:5d:5b:c1:61:95:fc:d0:76:fe:
dc:42:b6:bf:10:f2:10:63:a5:4b:b6:31:c7:81:11:
71:e7:27:e4:a2:b2:44:f9:8b:d0:a0:4e:dd:21:1b:
4d:24:29:c5:3f:0c:7c:28:ac:21:53:ad:e9:4e:46:
f1:b1:4f:fd:df:c4:9b:0a:da:de:f6:34:72:49:72:
4d:46:60:ee:43:ea:7b:42:5b:19:65:1a:86:ad:30:
a5:e7:c3:3b:4b:7c:23:7c:45:34:a2:b9:04:53:49:
b1:da:da:0f:c9:59:42:5f:46:00:35:b2:90:b2:e4:
dd:da:17:07:ee:6e:c4:51:56:55:64:71:31:58:20:
54:3c:03:33:23:5b:62:17:1b:ca:3b:16:fe:81:ca:
bf:85:0e:2e:ef:31:50:4f:9c:9a:3f:87:28:b6:52:
34:96:4e:a7:71:06:cb:b2:2a:e2:cc:df:aa:43:13:
67:06:a7:c3:2d:05:42:b8:a2:66:7f:ec:63:9a:ad:
2d:b9:99:97:7f:51:f8:99:20:96:08:77:79:37:a6:
92:95:64:35:23:e0:50:5f:22:1a:6a:45:42:f4:03:
24:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:F2:13:94:BD:87:7A:8C:92:12:74:59:9F:36:D1:80:3C:D1:AD:8E
X509v3 Authority Key Identifier:
keyid:7E:56:6F:FF:40:7F:31:C6:AE:85:6C:37:43:EF:3E:5F:22:F8:D3:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/flZv_0B_McauhWw3Q-8-XyL401s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/040564-5952-4223-bcca-f876c055a315/1/flZv_0B_McauhWw3Q-8-XyL401s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/040564-5952-4223-bcca-f876c055a315/1/flZv_0B_McauhWw3Q-8-XyL401s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:7d:cf:97:f4:06:72:f8:83:38:28:6b:43:85:ca:1f:8f:33:
96:ed:18:38:ca:ad:a1:b5:9c:d1:9a:21:a5:be:f6:fe:48:a6:
a4:6c:42:2e:78:63:ed:91:1f:f5:9f:13:4d:fa:1e:d6:01:5b:
0e:51:a2:15:ba:28:17:ac:2f:35:e8:e4:3a:50:00:14:af:8a:
b6:2d:f4:24:c4:f3:c3:78:41:d6:99:54:7a:bf:e2:bf:20:a1:
6e:75:67:14:7d:d5:b5:03:07:3d:3f:c4:0e:d1:8e:15:24:a4:
8b:ae:e5:7c:31:5d:0e:51:ce:47:86:92:6b:94:be:1e:ef:c5:
77:2f:b1:a3:cf:56:3e:9c:89:91:27:47:d6:ba:59:ce:a1:2a:
b6:f1:0e:7a:bf:67:8c:af:23:d8:06:c3:e3:16:b9:fe:f5:40:
67:76:ca:47:97:5e:46:16:77:b3:c9:63:a9:3f:b9:a6:24:a4:
7e:df:85:55:72:c2:a9:c7:a5:aa:41:22:89:c3:41:65:42:d4:
fd:71:a8:46:2b:4e:b8:ad:00:52:da:93:02:7d:21:10:09:61:
4b:ed:25:16:83:3c:1f:25:f1:dd:9f:c3:15:47:a8:7c:39:e2:
18:08:18:b0:30:b1:68:1d:e3:5b:20:7b:98:43:7f:e5:c5:e7:
c3:04:89:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:50:10 2025 by rpki-client