Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/ff5133-ca11-42db-b03d-544855cc4f57/1/FlnrYEAZPfBoE1CQXmOdDljV-d8.mft
File: FlnrYEAZPfBoE1CQXmOdDljV-d8.mft (raw, json)
Hash identifier: qo3Vk2yBc7fMoluau2Bd6JQJWT0yMxpijctHitMOqwQ=
Subject key identifier: FA:23:4C:C8:8B:45:DD:63:2D:31:3B:6C:9D:A1:A6:62:D0:2B:17:3E
Authority key identifier: 16:59:EB:60:40:19:3D:F0:68:13:50:90:5E:63:9D:0E:58:D5:F9:DF
Certificate issuer: /CN=1659eb6040193df0681350905e639d0e58d5f9df
Certificate serial: 0199277CC79131A1A08BAE39A02EB38D2E87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FlnrYEAZPfBoE1CQXmOdDljV-d8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/ff5133-ca11-42db-b03d-544855cc4f57/1/FlnrYEAZPfBoE1CQXmOdDljV-d8.mft
Manifest number: 14DD
Signing time: Mon 08 Sep 2025 04:01:52 +0000
Manifest this update: Mon 08 Sep 2025 04:01:52 +0000
Manifest next update: Tue 09 Sep 2025 04:01:52 +0000
Files and hashes: 1: 8-v-Z7Xa6lfqMbl7evIHp25t1sA.roa (hash: BWcCx1HwRpdJveviEQtt8WgW8hrEfngJob3ia7RrZwQ=)
2: FlnrYEAZPfBoE1CQXmOdDljV-d8.crl (hash: XT49QobV7mAfwl+ksqsoC9kiPLHKr1wAIi7mcvlSfsQ=)
3: cFc0gNIOK5WxBeuSF5eiQkXoOKE.roa (hash: GkH9aMuKOzi/6cYcKbTikX2OvYkhD9zkPc0LnUJCl1A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/ff5133-ca11-42db-b03d-544855cc4f57/1/FlnrYEAZPfBoE1CQXmOdDljV-d8.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/ff5133-ca11-42db-b03d-544855cc4f57/1/FlnrYEAZPfBoE1CQXmOdDljV-d8.mft
rsync://rpki.ripe.net/repository/DEFAULT/FlnrYEAZPfBoE1CQXmOdDljV-d8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 01:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:27:7c:c7:91:31:a1:a0:8b:ae:39:a0:2e:b3:8d:2e:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1659eb6040193df0681350905e639d0e58d5f9df
Validity
Not Before: Sep 8 04:01:52 2025 GMT
Not After : Sep 9 04:01:52 2025 GMT
Subject: CN=fa234cc88b45dd632d313b6c9da1a662d02b173e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:9b:89:8d:3c:85:9f:71:e9:09:21:68:53:22:
e8:1f:37:7e:5e:b6:f3:ef:81:27:6a:f9:3b:7d:58:
88:1b:4c:96:85:0e:85:f1:3a:17:44:ec:2f:4b:3e:
0c:92:71:ad:3f:fa:f3:8e:e8:5a:c7:c6:8a:f6:c8:
f3:eb:e6:dd:f9:c3:91:fe:e8:f6:2e:31:00:20:5f:
1f:c0:41:09:0b:45:3b:f5:41:28:ca:42:2a:84:b2:
66:9a:9c:7d:88:68:f0:9a:f0:f5:d4:57:74:60:4a:
65:a6:c5:77:35:f3:10:3e:12:d3:a4:0d:5f:1c:eb:
ba:13:4f:7c:25:4d:32:c3:bb:03:e9:66:91:d8:3a:
8c:bf:6f:bd:c6:f2:eb:31:cc:ec:25:db:ef:2e:cd:
be:44:53:13:c7:6a:b9:33:92:d6:52:11:5b:d9:56:
e0:82:41:ac:15:eb:65:8d:88:28:7e:a1:4a:b7:04:
43:ca:1a:1e:76:94:fa:05:aa:60:f5:74:4a:68:4a:
60:c0:7a:e8:7d:8d:82:7d:63:9f:26:26:32:bc:fb:
14:e4:3c:26:0e:15:b2:ea:ce:58:fa:16:2d:f0:bb:
c5:0e:b9:98:64:c2:81:39:61:be:8e:21:67:51:cd:
e8:2b:f1:8a:40:60:04:04:45:4f:60:26:00:10:85:
b5:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:23:4C:C8:8B:45:DD:63:2D:31:3B:6C:9D:A1:A6:62:D0:2B:17:3E
X509v3 Authority Key Identifier:
keyid:16:59:EB:60:40:19:3D:F0:68:13:50:90:5E:63:9D:0E:58:D5:F9:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FlnrYEAZPfBoE1CQXmOdDljV-d8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/ff5133-ca11-42db-b03d-544855cc4f57/1/FlnrYEAZPfBoE1CQXmOdDljV-d8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/ff5133-ca11-42db-b03d-544855cc4f57/1/FlnrYEAZPfBoE1CQXmOdDljV-d8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:72:c5:bf:ee:24:21:bf:fd:da:58:01:68:e7:c8:02:36:22:
c4:22:2d:d7:fc:45:4b:1f:b5:d6:1d:77:79:cf:e8:3f:a5:90:
6e:20:0d:f9:51:a3:68:82:e1:a1:dd:46:dc:a1:72:d8:c9:9e:
2e:29:75:1e:15:bc:03:20:02:de:7a:cd:41:6b:08:13:c9:6e:
db:de:1c:fe:7f:74:dc:b7:b3:89:bb:79:5b:75:1c:40:34:a2:
f3:29:da:21:02:24:43:91:ea:4e:bf:2d:e2:53:78:2c:eb:52:
65:96:3d:cf:70:e9:66:29:da:9b:4f:ea:24:cb:e8:a4:99:f8:
86:a2:76:8b:72:7f:db:2f:49:19:2a:30:bb:a9:d9:d3:f3:71:
04:9a:00:cb:11:25:50:e2:14:2d:d3:b7:ca:7a:d6:26:12:72:
d7:08:36:e6:88:3d:bc:83:0f:64:b2:02:72:69:6f:36:f2:1e:
b8:1a:b7:a3:92:8f:83:b0:13:2d:65:4b:39:c2:58:5a:22:49:
60:2d:76:37:86:50:85:4c:4b:5f:d7:ee:66:d8:ac:7d:03:0b:
4a:7f:64:fd:b7:8c:4b:e6:18:4f:7b:79:6b:83:ab:e4:65:a9:
16:b4:a7:79:21:d1:b4:49:94:e5:19:61:77:d4:d6:92:7d:20:
bd:8d:47:86
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZknfMeRMaGgi645oC6zjS6HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2NTllYjYwNDAxOTNkZjA2ODEzNTA5MDVlNjM5ZDBlNThk
NWY5ZGYwHhcNMjUwOTA4MDQwMTUyWhcNMjUwOTA5MDQwMTUyWjAzMTEwLwYDVQQD
EyhmYTIzNGNjODhiNDVkZDYzMmQzMTNiNmM5ZGExYTY2MmQwMmIxNzNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJuJjTyFn3HpCSFoUyLoHzd+Xrbz
74Enavk7fViIG0yWhQ6F8ToXROwvSz4MknGtP/rzjuhax8aK9sjz6+bd+cOR/uj2
LjEAIF8fwEEJC0U79UEoykIqhLJmmpx9iGjwmvD11Fd0YEplpsV3NfMQPhLTpA1f
HOu6E098JU0yw7sD6WaR2DqMv2+9xvLrMczsJdvvLs2+RFMTx2q5M5LWUhFb2Vbg
gkGsFetljYgofqFKtwRDyhoedpT6Bapg9XRKaEpgwHrofY2CfWOfJiYyvPsU5Dwm
DhWy6s5Y+hYt8LvFDrmYZMKBOWG+jiFnUc3oK/GKQGAEBEVPYCYAEIW1BQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPojTMiLRd1jLTE7bJ2hpmLQKxc+MB8GA1UdIwQY
MBaAFBZZ62BAGT3waBNQkF5jnQ5Y1fnfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmxucllFQVpQZkJvRTFDUVhtT2REbGpWLWQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9mZjUxMzMtY2ExMS00MmRiLWIwM2Qt
NTQ0ODU1Y2M0ZjU3LzEvRmxucllFQVpQZkJvRTFDUVhtT2REbGpWLWQ4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS9mZjUxMzMtY2ExMS00MmRiLWIwM2QtNTQ0ODU1Y2M0ZjU3
LzEvRmxucllFQVpQZkJvRTFDUVhtT2REbGpWLWQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzHLFv+4k
Ib/92lgBaOfIAjYixCIt1/xFSx+11h13ec/oP6WQbiAN+VGjaILhod1G3KFy2Mme
Lil1HhW8AyAC3nrNQWsIE8lu294c/n903Lezibt5W3UcQDSi8ynaIQIkQ5HqTr8t
4lN4LOtSZZY9z3DpZinam0/qJMvopJn4hqJ2i3J/2y9JGSowu6nZ0/NxBJoAyxEl
UOIULdO3ynrWJhJy1wg25og9vIMPZLICcmlvNvIeuBq3o5KPg7ATLWVLOcJYWiJJ
YC12N4ZQhUxLX9fuZtisfQMLSn9k/beMS+YYT3t5a4Or5GWpFrSneSHRtEmU5Rlh
d9TWkn0gvY1Hhg==
-----END CERTIFICATE-----
Generated at Mon Sep 8 08:36:51 2025 by rpki-client