
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/ea10b5-21f6-46b9-aad6-3f7a3e025e8b/1/flyFKPgXh8SJxUqZODkmn1prH5Q.mft
File: flyFKPgXh8SJxUqZODkmn1prH5Q.mft (raw, json)
Hash identifier: kqbmwqAdYYUuWwPnwVopbRV3yc17MCq085fTULUTDgk=
Subject key identifier: 94:E3:D6:2B:84:7D:B0:03:8C:CC:22:4F:C6:9B:42:A7:29:7A:4B:E0
Authority key identifier: 7E:5C:85:28:F8:17:87:C4:89:C5:4A:99:38:39:26:9F:5A:6B:1F:94
Certificate issuer: /CN=7e5c8528f81787c489c54a993839269f5a6b1f94
Certificate serial: 01988C20EF34BB159B651983F511167BA3A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/flyFKPgXh8SJxUqZODkmn1prH5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/ea10b5-21f6-46b9-aad6-3f7a3e025e8b/1/flyFKPgXh8SJxUqZODkmn1prH5Q.mft
Manifest number: 1626
Signing time: Sat 09 Aug 2025 00:00:25 +0000
Manifest this update: Sat 09 Aug 2025 00:00:25 +0000
Manifest next update: Sun 10 Aug 2025 00:00:25 +0000
Files and hashes: 1: flyFKPgXh8SJxUqZODkmn1prH5Q.crl (hash: wd/ttS4PpW4sLgV2e01EBaSpAQrB0vlLr6LKIdSQ+aw=)
2: hfVNxhpqjhtY0Y5pPH1kyqqYbyE.roa (hash: aFX0mNsdzdwNbH9dkbmbgQ2YlhtWRYm/NSgRF7fVXw4=)
3: qlFHFeROOID5WaWVEHwvwxWAzLw.roa (hash: //F8owzBylzzc3mWkvQYIjr2mTOF+4WmUYspBcjO8y4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/ea10b5-21f6-46b9-aad6-3f7a3e025e8b/1/flyFKPgXh8SJxUqZODkmn1prH5Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/ea10b5-21f6-46b9-aad6-3f7a3e025e8b/1/flyFKPgXh8SJxUqZODkmn1prH5Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/flyFKPgXh8SJxUqZODkmn1prH5Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8c:20:ef:34:bb:15:9b:65:19:83:f5:11:16:7b:a3:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e5c8528f81787c489c54a993839269f5a6b1f94
Validity
Not Before: Aug 9 00:00:25 2025 GMT
Not After : Aug 10 00:00:25 2025 GMT
Subject: CN=94e3d62b847db0038ccc224fc69b42a7297a4be0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:bd:1f:8c:5d:ef:aa:f0:65:35:14:38:f5:bd:
97:fd:7b:bd:d0:57:e9:62:e3:83:d1:57:8b:37:7d:
ee:e0:5d:4e:44:f0:e2:0c:29:7b:08:41:c1:5f:a2:
d5:d1:0d:5f:b6:8b:d5:1b:2d:54:57:8d:f9:20:a0:
cc:96:db:3c:b0:9a:08:3f:77:50:cd:34:93:97:84:
f8:c8:84:a6:33:24:41:a8:8a:47:7a:1a:cb:70:82:
58:05:97:7a:82:41:48:b3:d1:32:4e:09:1f:27:f7:
cb:d2:1b:ff:07:c8:2c:7b:00:d0:5b:1f:c0:13:a0:
ff:1c:cf:f0:70:2b:d2:bf:25:fd:30:c6:c3:c6:bc:
54:3e:f7:1a:03:29:47:4b:06:82:86:1c:7b:38:18:
7f:5b:75:f6:d3:1b:33:cc:bf:d6:e3:fb:cb:a5:5c:
55:e2:8d:a5:bf:32:ed:d9:c3:10:19:21:b0:3d:9b:
9d:ce:ad:5a:d6:97:40:83:63:6a:46:61:e8:0b:34:
c8:c0:bc:2b:f2:c0:c3:d2:89:07:48:8d:e6:d0:83:
6a:a2:0e:eb:64:5d:af:d3:5e:ce:63:6e:4e:37:ab:
60:3d:0c:24:12:03:3e:e1:a6:87:97:a5:fe:8d:c7:
d5:90:3c:e9:34:46:05:e3:27:ff:b6:44:38:a2:e1:
b6:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:E3:D6:2B:84:7D:B0:03:8C:CC:22:4F:C6:9B:42:A7:29:7A:4B:E0
X509v3 Authority Key Identifier:
keyid:7E:5C:85:28:F8:17:87:C4:89:C5:4A:99:38:39:26:9F:5A:6B:1F:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/flyFKPgXh8SJxUqZODkmn1prH5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/ea10b5-21f6-46b9-aad6-3f7a3e025e8b/1/flyFKPgXh8SJxUqZODkmn1prH5Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/ea10b5-21f6-46b9-aad6-3f7a3e025e8b/1/flyFKPgXh8SJxUqZODkmn1prH5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:86:04:1e:d2:ef:08:8a:0b:2b:2d:84:88:c7:cf:35:d5:5b:
b9:2b:17:e0:75:41:60:91:c7:61:72:55:b2:7e:b2:e2:af:bb:
3d:0e:bc:14:28:29:8f:a1:5a:f5:21:06:83:3a:0b:f4:40:51:
0c:24:de:a4:d4:1a:dc:85:96:70:c7:98:e7:ca:f2:dc:96:9b:
3f:ff:13:b7:d3:ad:1a:04:03:45:fa:6b:20:b1:e4:1f:81:aa:
1e:74:c1:29:7e:c2:45:b4:76:7e:b2:7f:ef:82:98:a4:1f:32:
18:24:9a:48:02:91:45:b0:16:04:a9:cd:c9:b4:34:a4:9b:21:
a0:23:d9:07:d4:f5:34:92:0c:f4:6a:04:c4:52:2d:fa:b5:48:
48:eb:20:dc:39:4e:07:01:3d:36:47:00:34:22:d8:17:39:95:
2b:34:01:2b:ad:bc:1a:2e:f3:e7:e6:55:f9:f0:ca:91:57:43:
c5:60:1e:74:06:3c:66:5f:d1:4d:96:a6:72:54:82:d4:3a:2b:
b0:6c:11:86:90:8b:a0:5f:1c:a2:18:ed:3d:e5:cd:c0:f8:6e:
cd:ea:17:f0:72:e8:f7:35:fe:d5:ac:26:1e:74:c6:a1:69:90:
60:48:b1:2f:9b:e1:ab:84:68:45:44:6b:be:fe:fa:94:d1:ed:
63:c9:c0:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:50:31 2025 by rpki-client