Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/d13f84-16ce-4d51-a618-c2a5d9d70313/1/flrIG7zPhS8irI7VLS6S2zHY1gY.mft
File: flrIG7zPhS8irI7VLS6S2zHY1gY.mft (raw, json)
Hash identifier: h/x2QCw70YoIhCD3QpGZu0OTHW6/EeNjbObgGDuPC34=
Subject key identifier: 23:3F:82:36:F0:16:11:75:99:2D:51:BD:B1:3F:31:FE:09:E1:76:97
Authority key identifier: 7E:5A:C8:1B:BC:CF:85:2F:22:AC:8E:D5:2D:2E:92:DB:31:D8:D6:06
Certificate issuer: /CN=7e5ac81bbccf852f22ac8ed52d2e92db31d8d606
Certificate serial: 019A4E187BD34F95573BFAEC94534982A1E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/flrIG7zPhS8irI7VLS6S2zHY1gY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/d13f84-16ce-4d51-a618-c2a5d9d70313/1/flrIG7zPhS8irI7VLS6S2zHY1gY.mft
Manifest number: 04D7
Signing time: Tue 04 Nov 2025 09:00:18 +0000
Manifest this update: Tue 04 Nov 2025 09:00:18 +0000
Manifest next update: Wed 05 Nov 2025 09:00:18 +0000
Files and hashes: 1: flrIG7zPhS8irI7VLS6S2zHY1gY.crl (hash: M7Yl+0sPKMB9aSnikZeropJE+xG0wLDgGpw+4yijlDk=)
2: mmN32mNsq6CY-gUtYsm7TMdzzD0.roa (hash: H4OADNjQr8Zl5dZsnvZU+5uN1GfozSdChxvNI1Amd/k=)
3: yWx6-5ROTfngpbWofjIrovB2Q6E.roa (hash: v3rtNkszsHfCVuw51qTsQgDiQ2kYX2tvZDcMhV4gxJA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/d13f84-16ce-4d51-a618-c2a5d9d70313/1/flrIG7zPhS8irI7VLS6S2zHY1gY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/d13f84-16ce-4d51-a618-c2a5d9d70313/1/flrIG7zPhS8irI7VLS6S2zHY1gY.mft
rsync://rpki.ripe.net/repository/DEFAULT/flrIG7zPhS8irI7VLS6S2zHY1gY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:7b:d3:4f:95:57:3b:fa:ec:94:53:49:82:a1:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e5ac81bbccf852f22ac8ed52d2e92db31d8d606
Validity
Not Before: Nov 4 09:00:18 2025 GMT
Not After : Nov 5 09:00:18 2025 GMT
Subject: CN=233f8236f0161175992d51bdb13f31fe09e17697
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:f0:c8:d7:c9:7d:0b:8f:ca:12:49:eb:ff:79:
d3:24:2b:e3:bc:91:b5:b5:5e:a8:6a:3e:6c:3d:fc:
1b:9e:a9:22:4f:91:7b:9f:cd:91:5b:92:d5:26:fe:
1d:71:96:a9:8e:68:57:98:cd:c3:33:5d:73:fe:d6:
45:d5:7a:8a:b9:f1:5f:2d:63:4b:44:ae:e4:d7:68:
80:14:fd:fd:d0:fe:fc:83:ca:e0:eb:7b:93:a6:b4:
f8:f5:41:db:65:3e:33:64:96:e4:87:e1:fc:a7:be:
f2:04:e7:19:9e:18:ec:52:55:39:93:23:ee:86:3b:
d5:ff:93:7e:74:55:87:bd:70:45:8f:f1:e9:1d:75:
99:07:4f:09:77:61:46:fd:b9:69:5f:cc:14:81:58:
65:28:de:6d:4b:07:05:59:c1:da:41:52:c5:53:ec:
2d:dd:b4:d8:9f:21:05:80:f7:c4:60:ca:92:fc:09:
c2:e1:3b:4b:43:1e:dc:db:a1:ad:b4:1f:30:02:7d:
c0:e5:35:35:e2:46:9b:f4:b3:7c:ac:10:30:b6:c4:
19:85:74:77:98:92:e6:2e:c2:fc:c2:88:6b:33:b8:
2d:af:86:2b:86:37:6d:21:ea:c8:6e:56:ce:53:75:
92:4c:2e:db:8f:d5:10:ca:9e:8b:4b:4c:37:a1:38:
24:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:3F:82:36:F0:16:11:75:99:2D:51:BD:B1:3F:31:FE:09:E1:76:97
X509v3 Authority Key Identifier:
keyid:7E:5A:C8:1B:BC:CF:85:2F:22:AC:8E:D5:2D:2E:92:DB:31:D8:D6:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/flrIG7zPhS8irI7VLS6S2zHY1gY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d13f84-16ce-4d51-a618-c2a5d9d70313/1/flrIG7zPhS8irI7VLS6S2zHY1gY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d13f84-16ce-4d51-a618-c2a5d9d70313/1/flrIG7zPhS8irI7VLS6S2zHY1gY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:8b:db:ef:5d:c9:9b:97:10:02:81:93:51:80:5e:57:41:66:
a4:36:f2:01:6c:57:3a:d9:76:7f:7c:1d:ca:0c:7d:b5:d4:2b:
f9:60:9b:43:00:de:f1:7d:50:7d:41:1a:66:af:93:5f:a8:17:
6b:4d:a9:28:5d:75:7c:a9:c7:80:4b:98:06:18:ae:61:2d:18:
f0:22:03:29:8f:83:f4:0a:49:1f:4f:05:db:f8:f1:6a:8f:86:
2d:7d:35:51:49:d1:e2:b5:2d:82:98:12:fe:9d:ee:8e:8b:d6:
11:d7:d7:07:f2:11:67:b0:3d:ce:79:d0:eb:93:bd:b4:1b:dd:
7a:98:a6:61:cb:85:75:e1:02:d9:19:43:48:2c:da:7f:0f:75:
0b:95:45:7e:7c:c0:46:dc:47:fd:52:d5:fc:0f:e0:6a:c1:d9:
01:3e:71:96:e0:bd:c6:01:cb:2b:89:50:f2:a2:c0:4c:7f:e6:
3b:df:93:66:71:1c:96:41:61:0e:92:15:e1:8b:a0:42:59:31:
9a:d3:f1:ca:f7:19:0e:36:69:68:e6:54:f0:12:50:50:ca:dd:
df:43:f7:70:27:60:86:ab:01:f2:ef:76:de:ef:8d:81:e7:f7:
5a:1f:a8:01:ca:0c:5f:15:4f:a5:69:6f:3a:d2:88:92:75:24:
6d:e9:c5:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:51:03 2025 by rpki-client