Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/ea10b5-21f6-46b9-aad6-3f7a3e025e8b/1/flyFKPgXh8SJxUqZODkmn1prH5Q.mft
File: flyFKPgXh8SJxUqZODkmn1prH5Q.mft (raw, json)
Hash identifier: h2UXAfDiFzE2GEW6x9+6fxyNl8ygHtPos5ZqZbKvxWg=
Subject key identifier: 07:39:EE:5E:A9:AA:63:3B:7F:C9:F6:AB:6F:5B:12:01:28:FF:00:DB
Authority key identifier: 7E:5C:85:28:F8:17:87:C4:89:C5:4A:99:38:39:26:9F:5A:6B:1F:94
Certificate issuer: /CN=7e5c8528f81787c489c54a993839269f5a6b1f94
Certificate serial: 019A2966F8FDDBFB3827CFBC6037BA98D409
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/flyFKPgXh8SJxUqZODkmn1prH5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/ea10b5-21f6-46b9-aad6-3f7a3e025e8b/1/flyFKPgXh8SJxUqZODkmn1prH5Q.mft
Manifest number: 16FC
Signing time: Tue 28 Oct 2025 06:00:05 +0000
Manifest this update: Tue 28 Oct 2025 06:00:05 +0000
Manifest next update: Wed 29 Oct 2025 06:00:05 +0000
Files and hashes: 1: flyFKPgXh8SJxUqZODkmn1prH5Q.crl (hash: hIjKLpxJ9jTB0gsiV8KpB+5zZY4POA0XkBxtCyQXcvM=)
2: hfVNxhpqjhtY0Y5pPH1kyqqYbyE.roa (hash: aFX0mNsdzdwNbH9dkbmbgQ2YlhtWRYm/NSgRF7fVXw4=)
3: qlFHFeROOID5WaWVEHwvwxWAzLw.roa (hash: //F8owzBylzzc3mWkvQYIjr2mTOF+4WmUYspBcjO8y4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/ea10b5-21f6-46b9-aad6-3f7a3e025e8b/1/flyFKPgXh8SJxUqZODkmn1prH5Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/ea10b5-21f6-46b9-aad6-3f7a3e025e8b/1/flyFKPgXh8SJxUqZODkmn1prH5Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/flyFKPgXh8SJxUqZODkmn1prH5Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 06:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:29:66:f8:fd:db:fb:38:27:cf:bc:60:37:ba:98:d4:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e5c8528f81787c489c54a993839269f5a6b1f94
Validity
Not Before: Oct 28 06:00:05 2025 GMT
Not After : Oct 29 06:00:05 2025 GMT
Subject: CN=0739ee5ea9aa633b7fc9f6ab6f5b120128ff00db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:fb:75:33:80:01:3f:ad:04:1f:a8:5e:3f:31:
f8:d3:b9:79:5d:21:75:2d:6d:2c:aa:2a:cc:20:e1:
ff:0e:f9:ec:2d:4a:58:06:48:8c:8d:d8:2d:5a:59:
02:2d:cf:ea:8b:5d:64:f7:20:9b:d8:53:cd:5a:bf:
9d:9b:db:64:8c:e8:3d:be:59:2d:d2:a0:9d:4d:0a:
79:76:db:94:49:03:d0:54:23:30:7a:2c:95:ff:3d:
5a:85:17:39:c9:44:c7:2d:a5:f8:61:e7:36:c8:02:
16:4c:83:ea:3f:dc:71:2f:74:00:54:36:c1:e0:af:
4a:f4:77:10:c1:82:42:79:0c:d6:6e:e4:c5:5b:07:
70:c0:23:fe:26:49:c0:e0:7a:f2:c9:8a:11:99:0b:
e3:6d:d5:77:71:7b:5a:6d:a3:8f:01:b2:1d:8c:24:
5e:81:01:db:42:52:67:0f:20:73:a2:ea:84:6a:51:
f7:3a:9a:92:ab:e5:eb:b6:ee:4d:15:d5:a7:c4:8b:
52:a2:75:b2:e2:e8:7e:e8:ce:09:1f:04:9c:25:45:
c6:66:ce:5b:ec:45:28:c5:73:64:d1:1b:90:ca:23:
e4:71:2c:b0:fa:64:3c:79:28:fe:4f:3e:3f:b7:9e:
33:46:f6:f9:5a:75:6b:11:30:cd:3c:4d:67:e2:73:
cf:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:39:EE:5E:A9:AA:63:3B:7F:C9:F6:AB:6F:5B:12:01:28:FF:00:DB
X509v3 Authority Key Identifier:
keyid:7E:5C:85:28:F8:17:87:C4:89:C5:4A:99:38:39:26:9F:5A:6B:1F:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/flyFKPgXh8SJxUqZODkmn1prH5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/ea10b5-21f6-46b9-aad6-3f7a3e025e8b/1/flyFKPgXh8SJxUqZODkmn1prH5Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/ea10b5-21f6-46b9-aad6-3f7a3e025e8b/1/flyFKPgXh8SJxUqZODkmn1prH5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:b6:11:ab:e0:51:33:f9:c2:45:a8:a5:13:6b:2d:e8:58:17:
eb:01:6b:7f:3a:e5:82:eb:53:84:8c:fb:73:2e:ed:36:11:2c:
f9:48:a7:5e:24:6f:10:0a:28:85:e3:0a:89:14:6b:02:46:7b:
1a:7b:ed:5f:78:25:0a:09:cb:66:d5:46:b2:e9:8f:60:ec:96:
b7:22:e7:91:13:46:f6:45:fc:35:b4:39:56:36:d1:32:75:18:
a5:ed:7d:1a:5a:ae:29:3e:fc:d4:0d:ff:3b:a9:6c:69:ad:22:
d6:bc:d3:10:1e:7d:98:d5:1c:bb:bf:4e:5f:03:d5:4e:03:b3:
2d:8d:76:16:ed:c2:66:21:78:11:bf:f3:1d:7d:d2:77:a5:0d:
6d:f4:8a:7b:8f:59:80:e0:cc:3d:4b:8b:21:72:95:a0:75:bf:
fd:ea:71:a4:60:b1:b7:17:06:d9:35:72:2f:2a:b2:27:d7:b8:
82:02:40:51:9d:82:bc:01:0c:db:17:b4:b7:aa:4f:68:fb:10:
4d:77:5d:35:b0:b9:52:b2:75:1b:87:51:50:8d:39:98:0a:18:
ab:31:b8:52:c8:78:95:9c:1a:84:6e:1f:52:76:02:1b:b4:92:
75:35:50:7b:d2:ed:d3:5e:c7:5b:3d:e4:d6:eb:d5:54:a6:44:
f6:2f:e2:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 14:03:24 2025 by rpki-client