Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/ea10b5-21f6-46b9-aad6-3f7a3e025e8b/1/flyFKPgXh8SJxUqZODkmn1prH5Q.mft
File: flyFKPgXh8SJxUqZODkmn1prH5Q.mft (raw, json)
Hash identifier: Pi/kL+RlG4/lvumt0IjZ6R5sqrnA9TyweoxutcRtMXM=
Subject key identifier: A0:8A:09:7B:EA:4A:31:D6:16:04:85:A0:AD:A0:5F:A5:F8:78:FA:6D
Authority key identifier: 7E:5C:85:28:F8:17:87:C4:89:C5:4A:99:38:39:26:9F:5A:6B:1F:94
Certificate issuer: /CN=7e5c8528f81787c489c54a993839269f5a6b1f94
Certificate serial: 01976C61C0F4E06E2784594884492B26C6B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/flyFKPgXh8SJxUqZODkmn1prH5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/ea10b5-21f6-46b9-aad6-3f7a3e025e8b/1/flyFKPgXh8SJxUqZODkmn1prH5Q.mft
Manifest number: 1591
Signing time: Sat 14 Jun 2025 03:00:35 +0000
Manifest this update: Sat 14 Jun 2025 03:00:35 +0000
Manifest next update: Sun 15 Jun 2025 03:00:35 +0000
Files and hashes: 1: flyFKPgXh8SJxUqZODkmn1prH5Q.crl (hash: ubQ9ntS/UJmdOZ/UAFUty2pFANX9QNKu9bvCYqzYvKg=)
2: hfVNxhpqjhtY0Y5pPH1kyqqYbyE.roa (hash: aFX0mNsdzdwNbH9dkbmbgQ2YlhtWRYm/NSgRF7fVXw4=)
3: qlFHFeROOID5WaWVEHwvwxWAzLw.roa (hash: //F8owzBylzzc3mWkvQYIjr2mTOF+4WmUYspBcjO8y4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/ea10b5-21f6-46b9-aad6-3f7a3e025e8b/1/flyFKPgXh8SJxUqZODkmn1prH5Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/ea10b5-21f6-46b9-aad6-3f7a3e025e8b/1/flyFKPgXh8SJxUqZODkmn1prH5Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/flyFKPgXh8SJxUqZODkmn1prH5Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:61:c0:f4:e0:6e:27:84:59:48:84:49:2b:26:c6:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e5c8528f81787c489c54a993839269f5a6b1f94
Validity
Not Before: Jun 14 03:00:35 2025 GMT
Not After : Jun 15 03:00:35 2025 GMT
Subject: CN=a08a097bea4a31d6160485a0ada05fa5f878fa6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:3f:0f:9c:2e:50:51:6b:4a:8d:53:a1:a0:3b:
fb:25:8b:a4:dc:8a:68:18:d1:fe:f2:ad:9a:b5:59:
11:d4:3a:14:91:31:01:8c:19:5d:37:4f:8c:28:d8:
b0:91:48:44:ba:d9:c9:b0:39:67:47:b1:f3:e4:dc:
b1:2e:69:52:59:f0:06:5e:20:9b:9f:cd:b1:c4:85:
a3:06:e1:e3:13:ca:91:15:85:40:cc:b3:dc:3f:96:
1c:fc:4e:00:9c:92:a5:27:95:dd:0b:4e:c8:2a:3c:
86:b1:9e:3f:7a:6a:f6:be:f5:43:75:f4:32:13:3e:
b2:da:a4:09:a9:36:e6:87:f9:42:75:8f:1d:18:0b:
e5:bb:de:65:d9:40:1d:be:64:10:26:0f:b0:3b:a1:
99:6e:ca:e4:6d:06:48:46:8f:05:94:79:8f:cc:ce:
6b:25:62:c8:cd:25:47:81:68:37:f1:47:94:05:25:
bf:78:24:cf:0f:b8:a3:9f:ce:ec:ca:2f:35:de:1d:
52:32:2c:af:8d:97:b3:0a:2b:b9:95:83:9e:10:85:
b0:fc:09:5f:08:35:d2:5e:ea:10:08:cf:da:ce:93:
ea:79:03:6d:a9:3b:5a:24:75:66:95:28:14:ce:28:
74:33:0f:6b:0f:21:8e:c5:04:ea:f0:ec:72:6e:c8:
31:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:8A:09:7B:EA:4A:31:D6:16:04:85:A0:AD:A0:5F:A5:F8:78:FA:6D
X509v3 Authority Key Identifier:
keyid:7E:5C:85:28:F8:17:87:C4:89:C5:4A:99:38:39:26:9F:5A:6B:1F:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/flyFKPgXh8SJxUqZODkmn1prH5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/ea10b5-21f6-46b9-aad6-3f7a3e025e8b/1/flyFKPgXh8SJxUqZODkmn1prH5Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/ea10b5-21f6-46b9-aad6-3f7a3e025e8b/1/flyFKPgXh8SJxUqZODkmn1prH5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:78:a5:a1:b9:c9:c6:00:a9:62:26:36:b5:ae:35:c1:14:5a:
72:a6:93:a7:36:27:3d:a3:30:3b:c1:ea:86:60:20:97:59:fe:
3b:f9:0a:fe:ec:c5:ab:ea:27:a4:e4:e9:00:76:eb:2e:3e:ee:
36:fb:6b:e2:b3:d1:43:cf:b7:01:f6:f1:6e:db:13:74:75:01:
67:5e:f9:63:15:b0:6a:8b:63:de:bc:dd:f9:25:69:cc:58:32:
c9:87:36:c8:91:fc:b4:2e:3c:4e:a5:28:a2:2c:78:cc:6e:53:
ab:9c:b1:fd:ca:b3:9e:dd:35:7b:a1:39:91:b9:fd:55:fc:80:
67:f7:65:3b:02:e1:12:da:ea:cd:c8:6d:91:db:f4:9a:ad:3a:
07:5c:60:ad:86:21:dd:fb:51:dd:61:b6:71:43:3e:75:c3:62:
dd:d0:c5:75:1d:26:bc:7a:76:c4:4a:94:d7:00:a4:37:4f:ad:
2d:84:f3:74:c2:f8:04:25:e2:49:4f:83:3b:8a:0c:1e:cf:57:
59:c2:a4:28:f9:19:a4:b6:31:17:e7:dd:28:07:3a:9f:46:e8:
b6:8e:5c:c5:00:d7:c5:42:0a:77:1d:19:9e:d7:08:cd:a4:26:
9a:2e:2f:28:a0:5c:96:7c:de:8a:11:17:51:ed:7b:cd:50:c4:
e1:21:5d:53
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdsYcD04G4nhFlIhEkrJsa3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlNWM4NTI4ZjgxNzg3YzQ4OWM1NGE5OTM4MzkyNjlmNWE2
YjFmOTQwHhcNMjUwNjE0MDMwMDM1WhcNMjUwNjE1MDMwMDM1WjAzMTEwLwYDVQQD
EyhhMDhhMDk3YmVhNGEzMWQ2MTYwNDg1YTBhZGEwNWZhNWY4NzhmYTZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmT8PnC5QUWtKjVOhoDv7JYuk3Ipo
GNH+8q2atVkR1DoUkTEBjBldN0+MKNiwkUhEutnJsDlnR7Hz5NyxLmlSWfAGXiCb
n82xxIWjBuHjE8qRFYVAzLPcP5Yc/E4AnJKlJ5XdC07IKjyGsZ4/emr2vvVDdfQy
Ez6y2qQJqTbmh/lCdY8dGAvlu95l2UAdvmQQJg+wO6GZbsrkbQZIRo8FlHmPzM5r
JWLIzSVHgWg38UeUBSW/eCTPD7ijn87syi813h1SMiyvjZezCiu5lYOeEIWw/Alf
CDXSXuoQCM/azpPqeQNtqTtaJHVmlSgUzih0Mw9rDyGOxQTq8Oxybsgx/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKCKCXvqSjHWFgSFoK2gX6X4ePptMB8GA1UdIwQY
MBaAFH5chSj4F4fEicVKmTg5Jp9aax+UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmx5RktQZ1hoOFNKeFVxWk9Ea21uMXBySDVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9lYTEwYjUtMjFmNi00NmI5LWFhZDYt
M2Y3YTNlMDI1ZThiLzEvZmx5RktQZ1hoOFNKeFVxWk9Ea21uMXBySDVRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi9lYTEwYjUtMjFmNi00NmI5LWFhZDYtM2Y3YTNlMDI1ZThi
LzEvZmx5RktQZ1hoOFNKeFVxWk9Ea21uMXBySDVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZXilobnJ
xgCpYiY2ta41wRRacqaTpzYnPaMwO8HqhmAgl1n+O/kK/uzFq+onpOTpAHbrLj7u
Nvtr4rPRQ8+3AfbxbtsTdHUBZ175YxWwaotj3rzd+SVpzFgyyYc2yJH8tC48TqUo
oix4zG5Tq5yx/cqznt01e6E5kbn9VfyAZ/dlOwLhEtrqzchtkdv0mq06B1xgrYYh
3ftR3WG2cUM+dcNi3dDFdR0mvHp2xEqU1wCkN0+tLYTzdML4BCXiSU+DO4oMHs9X
WcKkKPkZpLYxF+fdKAc6n0boto5cxQDXxUIKdx0ZntcIzaQmmi4vKKBclnzeihEX
Ue17zVDE4SFdUw==
-----END CERTIFICATE-----
Generated at Sat Jun 14 12:23:32 2025 by rpki-client