Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/d13f84-16ce-4d51-a618-c2a5d9d70313/1/flrIG7zPhS8irI7VLS6S2zHY1gY.mft
File: flrIG7zPhS8irI7VLS6S2zHY1gY.mft (raw, json)
Hash identifier: eB7tYvQkQCCaE3J7JycNrA5SVBACbTWuzYXSMUsVtJQ=
Subject key identifier: 3F:5F:4A:1A:7F:14:75:33:70:35:8A:D8:F3:F3:DF:F3:BE:D7:D2:ED
Authority key identifier: 7E:5A:C8:1B:BC:CF:85:2F:22:AC:8E:D5:2D:2E:92:DB:31:D8:D6:06
Certificate issuer: /CN=7e5ac81bbccf852f22ac8ed52d2e92db31d8d606
Certificate serial: 019A2B5601960E9C4C2F767AF51A02324403
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/flrIG7zPhS8irI7VLS6S2zHY1gY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/d13f84-16ce-4d51-a618-c2a5d9d70313/1/flrIG7zPhS8irI7VLS6S2zHY1gY.mft
Manifest number: 04C5
Signing time: Tue 28 Oct 2025 15:00:47 +0000
Manifest this update: Tue 28 Oct 2025 15:00:47 +0000
Manifest next update: Wed 29 Oct 2025 15:00:47 +0000
Files and hashes: 1: flrIG7zPhS8irI7VLS6S2zHY1gY.crl (hash: ES2brmIVx/hOV+MM+RshaLRDFZO23ct5U4jYt0me82k=)
2: mmN32mNsq6CY-gUtYsm7TMdzzD0.roa (hash: H4OADNjQr8Zl5dZsnvZU+5uN1GfozSdChxvNI1Amd/k=)
3: yWx6-5ROTfngpbWofjIrovB2Q6E.roa (hash: v3rtNkszsHfCVuw51qTsQgDiQ2kYX2tvZDcMhV4gxJA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/d13f84-16ce-4d51-a618-c2a5d9d70313/1/flrIG7zPhS8irI7VLS6S2zHY1gY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/d13f84-16ce-4d51-a618-c2a5d9d70313/1/flrIG7zPhS8irI7VLS6S2zHY1gY.mft
rsync://rpki.ripe.net/repository/DEFAULT/flrIG7zPhS8irI7VLS6S2zHY1gY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 14:12:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2b:56:01:96:0e:9c:4c:2f:76:7a:f5:1a:02:32:44:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e5ac81bbccf852f22ac8ed52d2e92db31d8d606
Validity
Not Before: Oct 28 15:00:47 2025 GMT
Not After : Oct 29 15:00:47 2025 GMT
Subject: CN=3f5f4a1a7f14753370358ad8f3f3dff3bed7d2ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:29:03:d5:42:96:15:e9:7c:ea:20:98:93:a7:
3c:9e:8d:8c:1e:90:d1:9e:4e:04:88:43:9e:8a:c6:
5b:72:26:8a:7e:a4:6a:77:d7:1d:2c:8e:ef:b1:3e:
7c:12:49:09:24:6c:40:cb:d4:76:15:55:83:00:d2:
5b:9c:02:b7:d8:94:a4:3e:f3:78:26:7a:2a:56:ad:
a7:31:33:8f:cf:62:54:c3:b7:17:c7:58:5d:a3:a1:
0e:01:31:78:f7:12:a1:ea:96:c9:1f:78:6e:da:27:
06:95:be:45:90:14:68:2a:1a:e4:88:8f:80:94:95:
f6:72:ce:a0:5a:e1:74:7d:be:7b:23:a7:66:97:ba:
4c:d2:98:59:f1:07:4a:e1:d1:48:10:6e:55:7d:e2:
a5:c9:9e:57:af:94:60:c2:1f:65:25:98:0c:1a:7e:
4a:95:83:22:2e:37:b6:6c:d5:a7:f0:4f:09:be:81:
48:cb:52:aa:60:6c:4c:1b:a0:27:ba:8e:06:36:b1:
51:1d:a1:fc:2d:92:cf:97:b0:83:16:e1:98:5f:32:
7c:08:2d:fb:49:c7:6d:0e:28:f2:e0:e1:a0:1b:14:
10:e4:26:ea:46:0a:0d:fc:5e:38:63:58:15:7b:40:
be:ee:20:13:f2:1a:cd:fd:d8:95:05:1a:b6:b2:38:
b8:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:5F:4A:1A:7F:14:75:33:70:35:8A:D8:F3:F3:DF:F3:BE:D7:D2:ED
X509v3 Authority Key Identifier:
keyid:7E:5A:C8:1B:BC:CF:85:2F:22:AC:8E:D5:2D:2E:92:DB:31:D8:D6:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/flrIG7zPhS8irI7VLS6S2zHY1gY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d13f84-16ce-4d51-a618-c2a5d9d70313/1/flrIG7zPhS8irI7VLS6S2zHY1gY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d13f84-16ce-4d51-a618-c2a5d9d70313/1/flrIG7zPhS8irI7VLS6S2zHY1gY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:7c:91:8d:57:f0:e3:56:76:78:33:a2:41:00:8f:f5:85:72:
db:6d:dd:be:8e:82:4e:59:ad:8b:4e:cf:3b:0e:b1:53:f0:4e:
2e:be:62:3c:87:7d:61:b4:b4:c9:18:a3:83:72:9b:b1:74:e5:
c8:9c:57:2f:04:2c:02:9e:68:eb:ae:e3:bf:0e:7e:ee:22:04:
3c:3b:0d:8f:50:19:ea:75:48:cb:69:8c:2b:b5:4a:30:e1:5e:
6c:1c:78:72:4a:0f:77:4c:cc:76:88:e0:41:ff:1c:39:12:d2:
47:08:8c:48:01:ef:f9:f0:e7:ac:9e:cf:f7:43:02:57:90:71:
9c:dc:4c:83:8a:a5:7c:0e:2a:fc:4b:b2:a0:14:43:56:09:c1:
74:8c:7b:41:a4:15:c7:21:87:8e:06:16:fc:8c:7e:5e:b6:fc:
93:0c:f0:c6:62:84:62:39:ac:9b:c9:f2:43:39:11:95:5b:a8:
3b:c1:4e:00:25:77:c4:33:eb:bf:91:67:d5:81:ac:99:16:66:
3f:b8:5f:18:1e:31:e0:ed:9f:fa:c6:3e:17:ca:36:2a:3c:b1:
a5:c5:5e:75:6c:9e:b9:ce:ac:df:df:f3:53:f3:88:df:8a:20:
47:1b:35:f0:90:82:3e:fd:9b:90:d6:fe:9d:42:75:29:18:d5:
4c:e2:10:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 20:19:38 2025 by rpki-client