Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/3b72c0-5de9-46a4-abd4-31b60311c315/1/Fl-tQQkoOzO287pT-ug6FF0ZNOI.mft
File: Fl-tQQkoOzO287pT-ug6FF0ZNOI.mft (raw, json)
Hash identifier: 1AU260vHyD1kwD+RZ9Tdwi62BtKFMVTDLhSKRzpvZfo=
Subject key identifier: D9:33:E3:B8:13:72:94:97:93:16:20:C4:71:B3:2A:4D:D3:BE:4F:69
Authority key identifier: 16:5F:AD:41:09:28:3B:33:B6:F3:BA:53:FA:E8:3A:14:5D:19:34:E2
Certificate issuer: /CN=165fad4109283b33b6f3ba53fae83a145d1934e2
Certificate serial: 0199239F59854B1DD01E95EB9D26F21130B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fl-tQQkoOzO287pT-ug6FF0ZNOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/3b72c0-5de9-46a4-abd4-31b60311c315/1/Fl-tQQkoOzO287pT-ug6FF0ZNOI.mft
Manifest number: 037B
Signing time: Sun 07 Sep 2025 10:01:09 +0000
Manifest this update: Sun 07 Sep 2025 10:01:09 +0000
Manifest next update: Mon 08 Sep 2025 10:01:09 +0000
Files and hashes: 1: Fl-tQQkoOzO287pT-ug6FF0ZNOI.crl (hash: u5eOsPXi9adjT3md16GipWJk6d+ty+DkvA9AYTCdr38=)
2: Ln2JbGXgQ88O79Pg1zLA68Pqxy0.roa (hash: Mstyw2j7AKFxamlwfGacDBtId3D916+hLBKPld0IQWI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/3b72c0-5de9-46a4-abd4-31b60311c315/1/Fl-tQQkoOzO287pT-ug6FF0ZNOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/3b72c0-5de9-46a4-abd4-31b60311c315/1/Fl-tQQkoOzO287pT-ug6FF0ZNOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fl-tQQkoOzO287pT-ug6FF0ZNOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9f:59:85:4b:1d:d0:1e:95:eb:9d:26:f2:11:30:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=165fad4109283b33b6f3ba53fae83a145d1934e2
Validity
Not Before: Sep 7 10:01:09 2025 GMT
Not After : Sep 8 10:01:09 2025 GMT
Subject: CN=d933e3b813729497931620c471b32a4dd3be4f69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:77:dd:5e:24:84:d7:b9:be:ce:6e:cc:70:83:
95:a2:8b:8d:17:bc:e5:d0:1c:90:d8:27:86:e4:6a:
48:ab:8a:39:74:f8:64:a0:f8:53:92:49:ca:28:3b:
57:f7:9b:99:ba:ca:bd:c1:00:e1:d1:75:6d:87:3a:
29:d3:5e:25:df:b2:bd:72:a9:75:2b:ef:e3:09:8d:
9b:d3:70:2c:8b:9a:f7:71:fc:45:c1:83:02:6d:da:
a7:2d:c5:8b:d9:e6:d4:ac:e9:61:55:05:f4:2f:be:
ec:b9:6b:5a:4b:04:9f:71:1d:34:00:39:71:11:f9:
09:3b:2b:79:e7:f5:cf:12:11:b2:f4:36:47:92:eb:
76:a1:48:05:b2:46:20:bd:95:a9:91:50:e3:79:46:
ee:1c:5e:81:9b:08:08:e1:47:b6:1f:0f:44:1f:57:
04:f0:b6:c6:88:97:cb:fc:f2:3b:9b:b8:53:0c:90:
89:28:0b:2b:db:bf:dc:06:16:93:87:00:2e:cf:ca:
43:5c:e5:ba:8c:84:22:f9:1b:af:a2:d8:87:ba:0f:
94:fb:57:ea:ad:67:4d:c1:99:a4:cb:d6:6e:52:f8:
66:0e:96:5a:9a:8a:f1:63:b5:d1:30:4e:04:28:7d:
15:a5:47:36:0c:6b:3c:ff:04:b8:b4:18:35:43:fe:
b7:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:33:E3:B8:13:72:94:97:93:16:20:C4:71:B3:2A:4D:D3:BE:4F:69
X509v3 Authority Key Identifier:
keyid:16:5F:AD:41:09:28:3B:33:B6:F3:BA:53:FA:E8:3A:14:5D:19:34:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fl-tQQkoOzO287pT-ug6FF0ZNOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3b72c0-5de9-46a4-abd4-31b60311c315/1/Fl-tQQkoOzO287pT-ug6FF0ZNOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3b72c0-5de9-46a4-abd4-31b60311c315/1/Fl-tQQkoOzO287pT-ug6FF0ZNOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:49:b7:91:4d:2c:87:b0:2a:b6:b1:ed:a6:3c:a7:51:b4:4e:
74:c1:d4:2a:66:ae:51:31:bb:15:39:8e:c3:32:80:7b:79:fa:
47:f7:b1:38:61:0f:8b:c2:a1:05:aa:0f:68:6e:8f:b2:1d:fa:
5e:37:95:d7:da:2e:a7:79:ad:39:58:8d:91:3d:88:68:81:01:
70:c5:36:4f:96:de:21:bc:2f:31:d2:9d:81:07:92:56:ba:c5:
64:50:bc:c5:83:03:27:97:42:dc:e9:92:6e:ee:6d:5d:c9:9b:
bf:2f:a2:3d:d3:c9:0a:35:3e:70:c5:c4:ea:9b:60:5c:8b:6c:
9f:97:0e:64:6a:40:96:95:c7:3f:b1:80:4a:de:04:9c:91:79:
bc:6f:c9:e3:8d:3c:19:c2:ff:1d:6e:9b:40:ce:c5:0a:ac:55:
c5:af:da:1c:f1:9d:6b:da:3f:e9:28:fe:a9:09:de:f6:0b:a7:
25:93:a3:77:27:5b:01:45:82:29:99:bc:1d:b6:80:28:76:cf:
cd:aa:e0:a6:93:db:46:4e:73:cd:69:92:79:98:99:d3:7c:6e:
b9:b5:91:58:bf:79:94:4b:d1:52:5d:bc:24:7b:5c:28:84:40:
a9:2c:25:a3:67:91:f8:67:6e:7f:6d:4b:bd:3d:68:d8:94:c5:
7c:28:df:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:56:16 2025 by rpki-client