Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/3b72c0-5de9-46a4-abd4-31b60311c315/1/Fl-tQQkoOzO287pT-ug6FF0ZNOI.mft
File: Fl-tQQkoOzO287pT-ug6FF0ZNOI.mft (raw, json)
Hash identifier: Sb4SyRZrjqpuZxlVNg61v7OnyjoO6moQbee0S2tn6X8=
Subject key identifier: 1F:51:6B:92:7D:39:09:E5:57:81:54:86:4B:CD:5E:73:0D:C0:B2:08
Authority key identifier: 16:5F:AD:41:09:28:3B:33:B6:F3:BA:53:FA:E8:3A:14:5D:19:34:E2
Certificate issuer: /CN=165fad4109283b33b6f3ba53fae83a145d1934e2
Certificate serial: 019A71B8077DD7B3EA42DE03CC495C838279
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fl-tQQkoOzO287pT-ug6FF0ZNOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/3b72c0-5de9-46a4-abd4-31b60311c315/1/Fl-tQQkoOzO287pT-ug6FF0ZNOI.mft
Manifest number: 0428
Signing time: Tue 11 Nov 2025 07:01:17 +0000
Manifest this update: Tue 11 Nov 2025 07:01:17 +0000
Manifest next update: Wed 12 Nov 2025 07:01:17 +0000
Files and hashes: 1: Fl-tQQkoOzO287pT-ug6FF0ZNOI.crl (hash: 7dMqCkJajqbLt9PDodDjA6npKpdNgHriQcaoCn+v5rs=)
2: Ln2JbGXgQ88O79Pg1zLA68Pqxy0.roa (hash: Mstyw2j7AKFxamlwfGacDBtId3D916+hLBKPld0IQWI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/3b72c0-5de9-46a4-abd4-31b60311c315/1/Fl-tQQkoOzO287pT-ug6FF0ZNOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/3b72c0-5de9-46a4-abd4-31b60311c315/1/Fl-tQQkoOzO287pT-ug6FF0ZNOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fl-tQQkoOzO287pT-ug6FF0ZNOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:07:7d:d7:b3:ea:42:de:03:cc:49:5c:83:82:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=165fad4109283b33b6f3ba53fae83a145d1934e2
Validity
Not Before: Nov 11 07:01:17 2025 GMT
Not After : Nov 12 07:01:17 2025 GMT
Subject: CN=1f516b927d3909e5578154864bcd5e730dc0b208
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:35:29:31:e7:00:98:c4:29:44:25:71:d1:0f:
34:78:6a:1a:57:27:2a:be:68:0d:36:d1:10:6c:a0:
ae:55:ec:3e:b0:6d:a2:6f:63:44:34:5f:e3:4f:a9:
38:75:8e:19:78:c7:a4:35:2d:db:03:4e:d3:b4:1b:
5f:77:d3:f6:9e:4b:82:e4:b9:0d:a3:16:be:ff:ec:
07:29:48:0b:dc:5e:61:db:d5:99:71:c3:00:9f:5d:
a8:12:d0:6a:38:c5:15:73:61:4e:80:8c:8b:e4:51:
79:c0:d9:8c:66:56:75:04:8f:ac:56:30:e8:c6:80:
16:4a:ab:1e:c8:7e:85:53:2e:90:57:f2:56:19:55:
42:6f:59:4e:f8:26:f8:d1:87:bd:94:3d:8f:1f:39:
be:22:d4:14:3f:4e:c5:22:eb:6c:47:b9:a2:61:2d:
f4:e7:2b:b5:8b:02:44:24:8f:e2:81:79:cf:ee:a6:
47:5d:aa:2b:2d:2c:90:a2:eb:5a:45:df:32:0d:da:
8d:05:ed:7d:01:19:bf:32:60:c8:6e:bd:91:f9:f0:
91:91:f4:08:cb:96:35:fe:3e:ea:c8:e3:5c:be:c6:
27:25:44:15:1a:63:cb:35:06:0d:6a:cb:2a:a9:3c:
59:e7:a7:70:de:f3:3b:fc:78:92:7e:02:25:4e:d4:
ca:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:51:6B:92:7D:39:09:E5:57:81:54:86:4B:CD:5E:73:0D:C0:B2:08
X509v3 Authority Key Identifier:
keyid:16:5F:AD:41:09:28:3B:33:B6:F3:BA:53:FA:E8:3A:14:5D:19:34:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fl-tQQkoOzO287pT-ug6FF0ZNOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3b72c0-5de9-46a4-abd4-31b60311c315/1/Fl-tQQkoOzO287pT-ug6FF0ZNOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3b72c0-5de9-46a4-abd4-31b60311c315/1/Fl-tQQkoOzO287pT-ug6FF0ZNOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:b7:59:47:8a:58:26:bd:41:c0:e5:d5:6a:f7:99:d3:b4:96:
c1:96:5c:5f:f5:62:52:85:52:50:de:0a:9f:52:07:c1:18:8b:
85:09:01:76:87:29:62:fc:17:d0:69:d9:f5:4f:db:6a:d2:23:
11:22:f6:37:0c:b5:33:46:85:d4:54:db:84:ee:4a:8e:e1:5c:
21:8e:2c:92:21:fc:12:c5:b7:d9:2b:2b:f5:f4:41:c1:e0:b7:
a2:82:07:31:1a:f6:b2:df:ba:6c:3e:a2:f2:85:d1:84:92:45:
4a:26:4c:8f:8f:e5:7b:bc:8e:04:3f:d3:14:3c:d8:99:70:2e:
16:41:46:29:ff:5b:93:71:77:1f:5a:f8:72:10:fd:cf:fa:95:
3e:b8:fd:cf:07:10:21:bd:5d:5b:86:b7:9e:79:fc:de:8d:09:
bf:77:a4:14:39:b4:6b:0c:ed:4e:3a:75:63:63:cb:8c:df:55:
7a:a1:a4:63:0f:d0:a3:a3:6b:b6:ae:c2:52:96:72:1a:45:ad:
94:ce:63:f7:31:bb:bf:13:84:70:2a:52:0d:1e:37:ee:1b:38:
a3:35:73:32:a9:de:be:00:4c:5c:ca:14:77:1d:60:d0:70:b5:
43:db:fd:61:a8:1d:75:0a:39:ef:87:6c:64:e8:89:8f:7f:da:
d9:9e:bb:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:41:51 2025 by rpki-client