Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/ff5133-ca11-42db-b03d-544855cc4f57/1/FlnrYEAZPfBoE1CQXmOdDljV-d8.mft
File: FlnrYEAZPfBoE1CQXmOdDljV-d8.mft (raw, json)
Hash identifier: 88H1wgcKy6S0kpVxYAWi+ep3SYLzdLQ7sT8BcbjErIs=
Subject key identifier: D0:E4:8B:4A:7C:5D:0E:47:78:14:7E:9A:67:E7:70:99:7D:64:8E:D0
Authority key identifier: 16:59:EB:60:40:19:3D:F0:68:13:50:90:5E:63:9D:0E:58:D5:F9:DF
Certificate issuer: /CN=1659eb6040193df0681350905e639d0e58d5f9df
Certificate serial: 019A52D15235598DF065CF1C998EC6A22B3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FlnrYEAZPfBoE1CQXmOdDljV-d8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/ff5133-ca11-42db-b03d-544855cc4f57/1/FlnrYEAZPfBoE1CQXmOdDljV-d8.mft
Manifest number: 1578
Signing time: Wed 05 Nov 2025 07:00:40 +0000
Manifest this update: Wed 05 Nov 2025 07:00:40 +0000
Manifest next update: Thu 06 Nov 2025 07:00:40 +0000
Files and hashes: 1: 8-v-Z7Xa6lfqMbl7evIHp25t1sA.roa (hash: BWcCx1HwRpdJveviEQtt8WgW8hrEfngJob3ia7RrZwQ=)
2: FlnrYEAZPfBoE1CQXmOdDljV-d8.crl (hash: zwwmYX0sffIQuNDSBlnu9QL74KM6YKsbS38mxLOi5zU=)
3: cFc0gNIOK5WxBeuSF5eiQkXoOKE.roa (hash: GkH9aMuKOzi/6cYcKbTikX2OvYkhD9zkPc0LnUJCl1A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/ff5133-ca11-42db-b03d-544855cc4f57/1/FlnrYEAZPfBoE1CQXmOdDljV-d8.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/ff5133-ca11-42db-b03d-544855cc4f57/1/FlnrYEAZPfBoE1CQXmOdDljV-d8.mft
rsync://rpki.ripe.net/repository/DEFAULT/FlnrYEAZPfBoE1CQXmOdDljV-d8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d1:52:35:59:8d:f0:65:cf:1c:99:8e:c6:a2:2b:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1659eb6040193df0681350905e639d0e58d5f9df
Validity
Not Before: Nov 5 07:00:40 2025 GMT
Not After : Nov 6 07:00:40 2025 GMT
Subject: CN=d0e48b4a7c5d0e4778147e9a67e770997d648ed0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:48:40:24:82:0d:b8:b7:3f:84:6f:f1:f7:3a:
1e:95:9a:96:a7:2f:54:4a:a5:d5:3d:b0:79:c3:d1:
69:02:43:5d:72:de:aa:25:1f:26:d8:f1:c3:43:f6:
b0:cc:7f:f8:64:e0:b6:05:78:ea:5e:f0:cc:d3:8b:
84:8b:84:b2:9c:04:d4:49:fb:5d:f3:9e:51:42:08:
bb:40:3a:74:fb:9d:90:b9:e5:76:94:9e:0b:10:8f:
ed:1c:93:b7:93:9d:f9:c4:25:8b:df:d4:e6:9e:f4:
e8:09:5f:b5:98:1c:a9:2a:90:22:20:b4:1c:e3:f6:
a8:89:14:38:8c:70:be:d3:d0:79:49:cb:c1:0a:3d:
f7:85:ff:ee:ce:30:49:e7:5e:06:71:a4:31:47:21:
69:05:78:80:c8:35:0d:22:86:88:54:9e:3d:95:0b:
dc:cd:26:5a:8b:d5:8e:08:17:41:db:1e:17:b8:41:
e3:c1:55:e0:a9:e9:fe:62:0f:7d:33:11:b7:25:a5:
23:77:16:1b:e0:29:ab:96:8a:93:dd:4a:2b:cd:1f:
26:b0:c2:04:b5:d2:15:75:49:75:d6:ab:e5:cb:26:
fd:ca:b2:1a:7c:9f:d5:d3:a8:55:aa:1f:b6:83:c2:
06:68:a4:65:e1:b3:4c:7f:18:34:cb:e0:0a:0c:e9:
11:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:E4:8B:4A:7C:5D:0E:47:78:14:7E:9A:67:E7:70:99:7D:64:8E:D0
X509v3 Authority Key Identifier:
keyid:16:59:EB:60:40:19:3D:F0:68:13:50:90:5E:63:9D:0E:58:D5:F9:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FlnrYEAZPfBoE1CQXmOdDljV-d8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/ff5133-ca11-42db-b03d-544855cc4f57/1/FlnrYEAZPfBoE1CQXmOdDljV-d8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/ff5133-ca11-42db-b03d-544855cc4f57/1/FlnrYEAZPfBoE1CQXmOdDljV-d8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:c2:af:11:77:cc:83:1b:9d:0d:ff:7f:cb:24:95:46:b1:6e:
b7:39:76:e6:5d:bf:15:34:4a:06:be:2c:81:d6:cf:0d:b0:72:
a4:9f:3b:c3:be:f0:47:83:87:3b:84:0d:e5:4d:41:11:31:4e:
6b:c9:0c:1b:0f:6b:ef:b3:c2:28:e3:25:58:33:c6:97:40:f6:
6f:b4:ea:76:7e:86:d1:39:9a:f8:b9:10:a5:69:96:08:41:e6:
2c:33:3a:b8:c9:0e:90:83:22:dc:fc:be:d2:86:81:a2:8d:9e:
ed:0c:fb:94:d7:3f:2a:04:03:e7:d9:77:b8:50:c8:e6:6e:3a:
96:ba:3e:8e:59:b0:35:2c:ce:40:ab:12:90:2d:c2:9f:11:54:
4d:a4:4d:1b:a2:e2:9f:d6:db:81:5e:5d:a8:87:5b:96:f0:89:
b5:06:26:f4:97:74:dc:a7:be:3d:fc:9f:03:39:ab:34:ea:29:
e0:9f:99:23:6c:37:56:72:a0:6d:f5:00:2e:1e:ee:10:84:43:
19:c6:04:66:86:72:cf:b2:8b:ea:23:1d:3a:4b:4e:6e:2e:e5:
c4:33:05:94:81:f1:4c:77:1c:0a:35:25:6d:0a:44:8b:94:cf:
44:c2:8b:f8:6c:76:a4:e6:37:2c:08:6b:f3:2e:04:44:aa:23:
d4:f0:3b:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:24:47 2025 by rpki-client