Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/cc47e5-4a21-4f4f-be22-a5c93a7b9fa5/1/flL6ttMgbrYKMduWxy2U_CQsCgg.mft
File: flL6ttMgbrYKMduWxy2U_CQsCgg.mft (raw, json)
Hash identifier: J/QWKlpmyhGGIQ3y7qd+Nuyx6BOTkEtXlpol5IfHg5w=
Subject key identifier: C2:39:1A:8F:21:F5:FE:52:9B:69:D2:F7:36:4F:28:D6:FB:6B:6A:04
Authority key identifier: 7E:52:FA:B6:D3:20:6E:B6:0A:31:DB:96:C7:2D:94:FC:24:2C:0A:08
Certificate issuer: /CN=7e52fab6d3206eb60a31db96c72d94fc242c0a08
Certificate serial: 019A232E55CCC304B653D6672C479956343F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/flL6ttMgbrYKMduWxy2U_CQsCgg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/cc47e5-4a21-4f4f-be22-a5c93a7b9fa5/1/flL6ttMgbrYKMduWxy2U_CQsCgg.mft
Manifest number: 16F5
Signing time: Mon 27 Oct 2025 01:00:30 +0000
Manifest this update: Mon 27 Oct 2025 01:00:30 +0000
Manifest next update: Tue 28 Oct 2025 01:00:30 +0000
Files and hashes: 1: flL6ttMgbrYKMduWxy2U_CQsCgg.crl (hash: Jk5M+TwcKHxKXKBWbOcHKahjQX48ET9kCvy6F3HEm1g=)
2: oR70fW7uVwWXm6EKAN8uqrlQkQ4.roa (hash: 0R/vI9KhNQCuJ8a8jzLTXA2DiQsUAT+t0yjMQ7W3gak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/cc47e5-4a21-4f4f-be22-a5c93a7b9fa5/1/flL6ttMgbrYKMduWxy2U_CQsCgg.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/cc47e5-4a21-4f4f-be22-a5c93a7b9fa5/1/flL6ttMgbrYKMduWxy2U_CQsCgg.mft
rsync://rpki.ripe.net/repository/DEFAULT/flL6ttMgbrYKMduWxy2U_CQsCgg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:23:2e:55:cc:c3:04:b6:53:d6:67:2c:47:99:56:34:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e52fab6d3206eb60a31db96c72d94fc242c0a08
Validity
Not Before: Oct 27 01:00:30 2025 GMT
Not After : Oct 28 01:00:30 2025 GMT
Subject: CN=c2391a8f21f5fe529b69d2f7364f28d6fb6b6a04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:00:2f:6f:29:6d:db:2c:b9:dc:6b:53:aa:57:
5a:5c:ba:02:42:11:5d:61:20:5c:36:54:ef:0c:30:
58:cc:f6:16:e6:57:7e:3e:9b:79:cf:d2:07:3a:6c:
30:dd:07:f1:4d:05:cb:6a:d4:d0:65:73:f8:c1:94:
27:03:57:1c:f2:96:9f:65:53:df:10:36:a7:b9:e4:
7e:ea:b2:d1:35:30:ac:d4:6b:2a:14:88:8b:61:66:
74:3c:e7:44:13:6b:e1:3e:4e:91:7b:0d:81:46:4c:
2a:28:07:b8:c2:ba:cc:23:e7:d6:96:a7:b0:2e:61:
32:da:2b:73:89:2d:22:34:4c:d7:a3:cb:7e:9f:6e:
5d:64:f9:2d:6f:05:45:f5:56:5c:bb:41:e3:4e:b1:
13:bf:14:7e:7b:fb:20:08:d4:8f:0d:3a:c6:f2:ab:
5c:9f:d9:c3:72:e5:86:76:84:ce:bb:47:24:f8:10:
7d:61:bb:7e:ab:11:98:5b:e3:71:15:42:7c:87:63:
3f:ac:b7:bf:d7:fd:fb:3e:bd:3c:1a:fc:22:b3:1b:
6f:ff:ab:68:f4:9a:86:f7:ee:9d:97:73:43:03:9a:
56:44:4d:f4:39:1b:87:ee:cf:f9:f7:1c:f4:9c:3f:
c6:fa:35:b5:c5:c7:9c:57:2c:51:e6:7f:b0:a0:bf:
94:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:39:1A:8F:21:F5:FE:52:9B:69:D2:F7:36:4F:28:D6:FB:6B:6A:04
X509v3 Authority Key Identifier:
keyid:7E:52:FA:B6:D3:20:6E:B6:0A:31:DB:96:C7:2D:94:FC:24:2C:0A:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/flL6ttMgbrYKMduWxy2U_CQsCgg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/cc47e5-4a21-4f4f-be22-a5c93a7b9fa5/1/flL6ttMgbrYKMduWxy2U_CQsCgg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/cc47e5-4a21-4f4f-be22-a5c93a7b9fa5/1/flL6ttMgbrYKMduWxy2U_CQsCgg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:bd:f5:5e:ff:63:77:dc:7d:82:39:38:38:98:9a:6d:c6:c0:
64:9f:cc:ba:5a:aa:2f:90:02:09:6f:7a:20:6e:59:0c:86:6d:
de:2f:50:01:0f:b6:d2:91:78:77:af:06:46:be:aa:58:42:08:
43:40:0c:0e:26:ac:e3:87:f7:5f:94:19:29:b8:62:3a:5f:78:
44:d2:dd:51:88:64:c2:53:9b:62:14:22:95:cb:1d:40:f0:22:
61:27:a6:29:21:5c:82:52:14:36:ef:b2:1a:df:0e:de:27:4d:
e7:58:b9:40:f0:e2:02:10:9e:b1:9a:9e:c8:0e:3c:13:5d:56:
ac:7a:fd:6d:32:4c:20:74:ec:d4:20:88:95:f4:e4:68:2e:0b:
86:8c:a0:ad:94:1e:8a:04:56:87:80:67:e7:b4:74:5a:8c:09:
28:66:42:1f:2e:81:cc:34:66:42:e3:9c:cb:01:7d:9c:a4:63:
c9:3c:8f:7d:77:4a:46:59:fd:76:60:a7:1c:08:b8:65:72:4a:
45:70:6a:9d:87:3a:54:f3:b1:e3:48:32:b7:c6:80:e1:81:12:
7a:f3:d7:2d:e4:87:35:15:4f:f0:79:8f:28:06:c9:b4:3f:8d:
35:5c:06:dd:15:3e:8a:4b:b7:9a:bf:5f:87:a7:23:e7:b1:42:
c9:d0:8a:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 04:15:54 2025 by rpki-client