Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/040564-5952-4223-bcca-f876c055a315/1/flZv_0B_McauhWw3Q-8-XyL401s.mft
File: flZv_0B_McauhWw3Q-8-XyL401s.mft (raw, json)
Hash identifier: 09HXUqD1IXeRcNibJ5bxnvwafWso4NVAfXld7YqAQi0=
Subject key identifier: 71:20:0B:24:67:96:3F:6F:59:30:DE:06:E9:87:49:D0:B4:17:5D:27
Authority key identifier: 7E:56:6F:FF:40:7F:31:C6:AE:85:6C:37:43:EF:3E:5F:22:F8:D3:5B
Certificate issuer: /CN=7e566fff407f31c6ae856c3743ef3e5f22f8d35b
Certificate serial: 019A5119743694FF3E4551BA8BB6E751C6A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/flZv_0B_McauhWw3Q-8-XyL401s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/040564-5952-4223-bcca-f876c055a315/1/flZv_0B_McauhWw3Q-8-XyL401s.mft
Manifest number: 1625
Signing time: Tue 04 Nov 2025 23:00:13 +0000
Manifest this update: Tue 04 Nov 2025 23:00:13 +0000
Manifest next update: Wed 05 Nov 2025 23:00:13 +0000
Files and hashes: 1: CF8GaEatgxJbaKh474IjZo5fECA.roa (hash: jNeYnMymis49T6EQU4PdS7BLisDarhceBgl5yuJAqIM=)
2: flZv_0B_McauhWw3Q-8-XyL401s.crl (hash: kovoBLNanlhgA8owjfSQecYBNcmPciXSJQ3xrqMnZkA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/040564-5952-4223-bcca-f876c055a315/1/flZv_0B_McauhWw3Q-8-XyL401s.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/040564-5952-4223-bcca-f876c055a315/1/flZv_0B_McauhWw3Q-8-XyL401s.mft
rsync://rpki.ripe.net/repository/DEFAULT/flZv_0B_McauhWw3Q-8-XyL401s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:19:74:36:94:ff:3e:45:51:ba:8b:b6:e7:51:c6:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e566fff407f31c6ae856c3743ef3e5f22f8d35b
Validity
Not Before: Nov 4 23:00:13 2025 GMT
Not After : Nov 5 23:00:13 2025 GMT
Subject: CN=71200b2467963f6f5930de06e98749d0b4175d27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:85:3b:b2:41:51:7d:49:5e:66:34:af:f7:eb:
bb:3e:74:63:95:07:fc:78:3b:6f:22:84:cd:fd:a4:
8f:a9:b4:da:d4:c7:83:6c:72:cd:b2:f8:40:21:11:
0a:dc:68:1d:a0:6f:79:ec:4e:d7:ed:6b:ed:fb:e9:
43:f9:bf:bd:dc:51:9c:1f:3b:8d:56:72:b4:fc:13:
7e:75:ea:87:bb:4c:4e:8c:4a:b7:5a:b7:f4:a5:3c:
de:8a:e7:f5:9c:29:6a:57:03:da:ab:53:9d:69:0c:
40:26:97:26:e5:6b:e0:e7:5b:d1:64:5a:87:1a:f0:
61:a1:85:86:e8:50:1c:24:8e:65:eb:a5:7c:3b:ff:
e5:e1:18:18:dc:dd:54:28:6a:c8:36:eb:ee:e7:4b:
ac:b1:d5:40:0d:cf:34:9e:9d:cb:33:96:92:13:36:
13:c4:3f:70:91:23:b5:12:5c:2a:4d:02:24:ba:c6:
08:52:0e:19:c2:91:14:2a:5f:d0:e8:51:d2:cb:fc:
17:03:d6:ae:ae:f9:5f:14:57:15:a8:2e:cd:e2:8f:
66:3a:c5:f1:df:98:e9:ce:9e:b7:3f:a5:4c:1e:5f:
84:bb:e8:61:2e:43:34:e2:60:b1:92:9a:80:3a:a4:
f0:67:64:cf:bf:2e:e1:bd:c3:fc:09:5b:c5:de:e8:
88:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:20:0B:24:67:96:3F:6F:59:30:DE:06:E9:87:49:D0:B4:17:5D:27
X509v3 Authority Key Identifier:
keyid:7E:56:6F:FF:40:7F:31:C6:AE:85:6C:37:43:EF:3E:5F:22:F8:D3:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/flZv_0B_McauhWw3Q-8-XyL401s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/040564-5952-4223-bcca-f876c055a315/1/flZv_0B_McauhWw3Q-8-XyL401s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/040564-5952-4223-bcca-f876c055a315/1/flZv_0B_McauhWw3Q-8-XyL401s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:e6:e0:62:7e:1e:1e:83:86:a4:02:79:1f:f6:e8:f6:0a:68:
f7:69:61:28:39:cc:7d:1c:55:74:8a:73:3e:38:6f:8b:20:ea:
9a:b3:79:58:41:93:05:5c:7e:db:ef:dc:b5:1e:ef:c1:ca:f7:
fd:3a:da:8a:98:33:60:36:fe:ae:35:c9:78:a9:4b:26:7d:94:
09:1b:6d:51:82:4e:54:e4:08:75:f9:c1:97:64:3f:ed:ad:29:
40:83:41:ea:db:94:28:0d:7a:3c:12:69:db:92:ce:1c:42:9e:
8e:ca:e6:f9:7f:d4:bc:c8:fa:62:60:88:dc:a5:96:f3:af:1a:
13:dd:9e:50:63:b4:b1:c1:bc:0b:6c:57:21:01:2f:fd:70:31:
6a:a3:54:06:03:72:ae:de:9e:22:76:b3:37:d7:07:6b:cd:4d:
63:e4:4a:1e:1d:02:d0:4d:bf:a7:f7:29:7a:ea:29:66:be:71:
a8:b0:37:58:52:98:fb:e9:69:60:54:ab:48:67:4d:7a:c6:c0:
8d:39:b5:42:41:80:17:d3:de:36:0c:7e:29:88:93:43:e6:6e:
46:31:64:4d:55:f8:8b:10:f4:ee:31:76:2a:6c:9b:aa:4e:e4:
d4:70:2c:e0:41:1c:c4:0a:98:f5:56:f8:74:eb:61:0c:04:a3:
89:af:01:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 06:32:11 2025 by rpki-client