Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/ea10b5-21f6-46b9-aad6-3f7a3e025e8b/1/flyFKPgXh8SJxUqZODkmn1prH5Q.mft
File: flyFKPgXh8SJxUqZODkmn1prH5Q.mft (raw, json)
Hash identifier: MEzfJc1kzWSntFe52s2kLNcuDm4JydWV2sw/K64DiEQ=
Subject key identifier: 1D:7E:58:7C:AD:F4:CE:DF:E0:9B:EA:56:0D:C7:81:55:65:61:82:5A
Authority key identifier: 7E:5C:85:28:F8:17:87:C4:89:C5:4A:99:38:39:26:9F:5A:6B:1F:94
Certificate issuer: /CN=7e5c8528f81787c489c54a993839269f5a6b1f94
Certificate serial: 019A4E18A024B3B21307AE7B3998A421A3B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/flyFKPgXh8SJxUqZODkmn1prH5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/ea10b5-21f6-46b9-aad6-3f7a3e025e8b/1/flyFKPgXh8SJxUqZODkmn1prH5Q.mft
Manifest number: 170F
Signing time: Tue 04 Nov 2025 09:00:27 +0000
Manifest this update: Tue 04 Nov 2025 09:00:27 +0000
Manifest next update: Wed 05 Nov 2025 09:00:27 +0000
Files and hashes: 1: flyFKPgXh8SJxUqZODkmn1prH5Q.crl (hash: NOIlFxLunpZ77k3GUw5k3CLlnflRKhqo65ySjFZU804=)
2: hfVNxhpqjhtY0Y5pPH1kyqqYbyE.roa (hash: aFX0mNsdzdwNbH9dkbmbgQ2YlhtWRYm/NSgRF7fVXw4=)
3: qlFHFeROOID5WaWVEHwvwxWAzLw.roa (hash: //F8owzBylzzc3mWkvQYIjr2mTOF+4WmUYspBcjO8y4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/ea10b5-21f6-46b9-aad6-3f7a3e025e8b/1/flyFKPgXh8SJxUqZODkmn1prH5Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/ea10b5-21f6-46b9-aad6-3f7a3e025e8b/1/flyFKPgXh8SJxUqZODkmn1prH5Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/flyFKPgXh8SJxUqZODkmn1prH5Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:a0:24:b3:b2:13:07:ae:7b:39:98:a4:21:a3:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e5c8528f81787c489c54a993839269f5a6b1f94
Validity
Not Before: Nov 4 09:00:27 2025 GMT
Not After : Nov 5 09:00:27 2025 GMT
Subject: CN=1d7e587cadf4cedfe09bea560dc781556561825a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:a4:ac:6b:36:2d:ea:9f:67:b0:62:26:11:1d:
61:dc:c7:49:b4:88:3e:84:67:ab:1a:00:ba:41:d6:
dd:5a:fe:02:98:34:68:c6:8a:40:96:5c:6b:8a:31:
e9:76:bb:12:36:78:75:6b:7b:3e:e3:c4:47:41:0c:
ed:d9:41:11:08:f6:7a:0b:94:4b:9c:33:90:ed:5d:
e8:15:25:3d:12:08:0b:e2:56:da:82:2a:df:24:31:
ea:61:c5:e6:19:98:ca:14:0b:65:d0:47:5e:25:59:
57:90:71:47:77:e5:a2:42:cb:75:67:f6:ba:93:6e:
3f:9f:59:b1:c3:4a:6c:24:53:7c:8a:a5:a9:33:0d:
a8:b7:6d:b7:29:ff:f4:0c:e7:52:26:af:a9:fd:d6:
11:f5:37:e7:6a:5b:93:04:8b:15:54:0d:25:2f:64:
60:b1:81:8f:40:3b:61:d7:4a:a2:d8:88:a3:48:95:
87:6d:a3:ed:15:2e:83:76:33:b8:4c:52:6f:79:ce:
7d:4b:12:2a:07:a6:ef:a6:e7:34:2f:37:45:ed:b3:
2f:cd:a7:e2:4c:76:16:ad:43:86:ba:b7:13:3d:48:
7f:72:fc:e6:fc:bf:09:13:e1:56:fa:80:c5:e3:1d:
59:ae:24:73:01:5f:83:a6:25:ed:ab:f8:99:74:66:
2b:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:7E:58:7C:AD:F4:CE:DF:E0:9B:EA:56:0D:C7:81:55:65:61:82:5A
X509v3 Authority Key Identifier:
keyid:7E:5C:85:28:F8:17:87:C4:89:C5:4A:99:38:39:26:9F:5A:6B:1F:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/flyFKPgXh8SJxUqZODkmn1prH5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/ea10b5-21f6-46b9-aad6-3f7a3e025e8b/1/flyFKPgXh8SJxUqZODkmn1prH5Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/ea10b5-21f6-46b9-aad6-3f7a3e025e8b/1/flyFKPgXh8SJxUqZODkmn1prH5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:a6:6f:12:66:8e:5f:c1:bb:1f:fc:f5:83:11:2d:21:0c:c3:
26:d8:a7:92:5f:a6:af:5e:f2:c5:ba:c4:a5:17:9f:66:36:d5:
66:59:b3:82:b6:69:70:92:0a:28:cb:f9:b3:6e:0e:3e:12:72:
1a:b3:bf:9c:4e:7e:20:c0:87:48:71:e7:0d:78:60:87:04:bb:
37:67:be:25:f0:02:e7:ec:ce:8e:0c:6d:68:49:42:64:88:31:
bb:a5:f9:72:ec:2a:da:15:ca:ce:25:4a:a6:bb:f0:cc:28:d3:
00:c4:95:88:18:2f:16:40:1b:46:d2:64:00:38:d5:74:43:ae:
b1:67:3f:6a:9d:78:50:48:1d:71:74:cd:64:17:b6:fc:63:f1:
cd:b3:8e:83:31:33:52:c0:88:b1:f2:e2:b5:23:ab:21:c1:db:
ff:a6:8a:1f:81:8e:04:4f:48:f4:8f:ac:a8:b1:14:d5:39:1d:
aa:19:53:bf:42:8b:f8:bb:f7:28:fa:12:aa:0d:95:f1:08:d7:
61:d2:95:3f:41:c3:be:2c:0e:b7:44:ea:1f:08:18:66:b7:16:
76:35:d8:68:04:ee:1c:97:ce:e2:f4:91:ba:e2:eb:cb:ab:a2:
73:60:25:d6:57:49:d5:cc:7a:37:3c:14:2d:1e:e8:49:0b:f0:
37:ea:ba:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:36:44 2025 by rpki-client