Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/6a3f35-35b8-49e0-9f44-b818faecb717/1/1-k5AU1miExcI_AJDjUclaOLANHA.mft
File: 1-k5AU1miExcI_AJDjUclaOLANHA.mft (raw, json)
Hash identifier: P8MnXjjAHPRf86XEwYpzj3vnQXg10W53x62Q1juD8yU=
Subject key identifier: C1:6C:20:05:4E:46:B2:DA:96:11:8E:36:7D:6A:15:A9:F6:6C:FB:2C
Authority key identifier: FA:4E:40:53:59:A2:13:17:08:FC:02:43:8D:47:25:68:E2:C0:34:70
Certificate issuer: /CN=fa4e405359a2131708fc02438d472568e2c03470
Certificate serial: 01991EE6C5793755C66F7E92AF5BAFA94291
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-k5AU1miExcI_AJDjUclaOLANHA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/6a3f35-35b8-49e0-9f44-b818faecb717/1/1-k5AU1miExcI_AJDjUclaOLANHA.mft
Manifest number: 0A9B
Signing time: Sat 06 Sep 2025 12:01:04 +0000
Manifest this update: Sat 06 Sep 2025 12:01:04 +0000
Manifest next update: Sun 07 Sep 2025 12:01:04 +0000
Files and hashes: 1: 1-k5AU1miExcI_AJDjUclaOLANHA.crl (hash: Wolzwnw3AE1Dy0omjNm5ZBpABR7rvqWUQ2MveNwPdYE=)
2: NeBz797_B5ESEnGcmvd7nUsUi1U.roa (hash: JbBjirkyCazFybALAaB9Vxb1oZwyg2E4gTHpGuD81y4=)
3: bgZI8eq8qLB9cRKsLzzVy6IhfPw.roa (hash: n1uW0Jj8dPeSPuQyP7lT/OB/Y/KhKi4od2gGB+1AWD8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/6a3f35-35b8-49e0-9f44-b818faecb717/1/1-k5AU1miExcI_AJDjUclaOLANHA.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/6a3f35-35b8-49e0-9f44-b818faecb717/1/1-k5AU1miExcI_AJDjUclaOLANHA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-k5AU1miExcI_AJDjUclaOLANHA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 11:14:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:1e:e6:c5:79:37:55:c6:6f:7e:92:af:5b:af:a9:42:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa4e405359a2131708fc02438d472568e2c03470
Validity
Not Before: Sep 6 12:01:04 2025 GMT
Not After : Sep 7 12:01:04 2025 GMT
Subject: CN=c16c20054e46b2da96118e367d6a15a9f66cfb2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b3:de:08:f6:44:f7:da:97:1e:d6:2b:96:28:
54:dc:92:dd:52:e8:df:ad:69:db:53:ca:96:ac:ca:
3a:77:6e:d7:92:02:05:31:33:d7:ff:aa:a6:dd:7f:
f1:95:78:34:cc:ca:a2:61:9c:b0:c0:9e:36:6a:fe:
e8:c6:34:e7:37:28:88:46:00:3f:13:8f:81:a1:69:
7b:d4:8b:a7:bd:01:d3:4a:2e:1d:d3:78:5c:d1:c6:
15:7a:f2:e7:f1:0d:2e:58:d0:0f:ad:62:d6:bf:6a:
2c:8f:11:b3:f6:11:5e:97:8b:40:70:60:a1:f9:8e:
df:4e:ba:61:9a:13:94:1f:47:81:33:80:ee:da:dc:
bf:3f:21:bb:e5:be:99:02:03:77:d5:34:c6:ed:64:
7f:15:4a:10:0a:b4:cd:70:a4:48:26:18:fb:0f:e3:
9a:97:40:3d:f0:87:fc:04:1d:89:b4:38:60:03:73:
50:1d:d2:bc:2e:b8:e7:21:73:10:d1:53:19:78:c0:
5c:70:e7:75:ac:7c:01:41:c8:cf:86:40:9c:9b:f5:
84:b0:08:6c:33:83:b0:4f:4f:08:94:80:d3:19:2f:
3a:07:33:21:92:52:e6:a3:89:db:da:76:d1:c3:46:
8d:df:19:d4:20:48:95:45:01:48:20:ed:11:8c:4e:
79:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:6C:20:05:4E:46:B2:DA:96:11:8E:36:7D:6A:15:A9:F6:6C:FB:2C
X509v3 Authority Key Identifier:
keyid:FA:4E:40:53:59:A2:13:17:08:FC:02:43:8D:47:25:68:E2:C0:34:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-k5AU1miExcI_AJDjUclaOLANHA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/6a3f35-35b8-49e0-9f44-b818faecb717/1/1-k5AU1miExcI_AJDjUclaOLANHA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/6a3f35-35b8-49e0-9f44-b818faecb717/1/1-k5AU1miExcI_AJDjUclaOLANHA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:83:82:83:6e:0a:19:fb:0b:62:36:eb:fe:5c:ae:c9:e4:c9:
86:c1:ce:b5:3e:0e:17:27:22:61:7c:dc:b3:95:64:5d:2d:af:
ed:1d:08:11:16:68:ff:55:bc:27:6d:d6:4a:3a:a0:be:bd:35:
34:81:4b:de:a6:9e:f3:4f:43:f0:af:b1:a4:0e:fa:35:fc:a1:
03:74:00:49:b1:f9:88:d3:39:45:82:c0:f1:08:12:bf:47:ff:
0d:7a:f0:70:ba:49:eb:1a:93:5c:b6:9f:34:51:59:83:8c:79:
2d:52:e5:ea:5f:14:60:a4:3f:ec:d1:4d:94:78:9c:76:3d:8a:
48:87:57:9b:59:05:7e:75:2d:0a:a2:80:36:6f:c9:4f:8f:b5:
db:5f:78:72:e4:e5:b7:16:6a:64:44:a4:2f:0f:c6:c5:ce:06:
9f:9b:19:f6:c6:19:59:5c:2e:25:f0:92:e0:2b:06:56:9f:6f:
93:b0:5b:08:c8:9e:d3:c2:9f:e3:4f:a9:11:e4:33:e8:f0:30:
2e:2a:e0:c2:3d:24:15:a9:f3:2e:bd:8b:65:e6:4c:62:cb:45:
7b:a1:e6:44:36:cf:b2:a3:07:72:14:ad:9e:75:8f:6c:0c:2c:
5b:bd:9e:2a:d5:24:27:ec:3f:04:22:48:9d:ee:68:01:96:22:
92:c7:bc:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 16:01:14 2025 by rpki-client