Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/6a3f35-35b8-49e0-9f44-b818faecb717/1/1-k5AU1miExcI_AJDjUclaOLANHA.mft
File: 1-k5AU1miExcI_AJDjUclaOLANHA.mft (raw, json)
Hash identifier: /IwtAqRTcThLxR0RPxZoa1hJzfOLJU77ZRGR3GMesqY=
Subject key identifier: 2B:93:83:E9:87:D6:91:07:4E:B8:73:22:48:1D:35:28:F0:F5:C0:94
Authority key identifier: FA:4E:40:53:59:A2:13:17:08:FC:02:43:8D:47:25:68:E2:C0:34:70
Certificate issuer: /CN=fa4e405359a2131708fc02438d472568e2c03470
Certificate serial: 019A142963A379721218276988B3741E075D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-k5AU1miExcI_AJDjUclaOLANHA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/6a3f35-35b8-49e0-9f44-b818faecb717/1/1-k5AU1miExcI_AJDjUclaOLANHA.mft
Manifest number: 0B1A
Signing time: Fri 24 Oct 2025 03:00:47 +0000
Manifest this update: Fri 24 Oct 2025 03:00:47 +0000
Manifest next update: Sat 25 Oct 2025 03:00:47 +0000
Files and hashes: 1: 1-k5AU1miExcI_AJDjUclaOLANHA.crl (hash: OW32n4Dw8mhLzz/CiT/oXzwcrp5YzZeGT7DKoOKj0Ys=)
2: NeBz797_B5ESEnGcmvd7nUsUi1U.roa (hash: JbBjirkyCazFybALAaB9Vxb1oZwyg2E4gTHpGuD81y4=)
3: bgZI8eq8qLB9cRKsLzzVy6IhfPw.roa (hash: n1uW0Jj8dPeSPuQyP7lT/OB/Y/KhKi4od2gGB+1AWD8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/6a3f35-35b8-49e0-9f44-b818faecb717/1/1-k5AU1miExcI_AJDjUclaOLANHA.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/6a3f35-35b8-49e0-9f44-b818faecb717/1/1-k5AU1miExcI_AJDjUclaOLANHA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-k5AU1miExcI_AJDjUclaOLANHA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Oct 2025 03:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:14:29:63:a3:79:72:12:18:27:69:88:b3:74:1e:07:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa4e405359a2131708fc02438d472568e2c03470
Validity
Not Before: Oct 24 03:00:47 2025 GMT
Not After : Oct 25 03:00:47 2025 GMT
Subject: CN=2b9383e987d691074eb87322481d3528f0f5c094
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:64:c7:f5:c1:b1:13:ca:b1:8f:04:97:2e:f3:
13:3d:d7:f2:3d:0d:bc:98:5f:16:b0:4e:bf:69:26:
74:e7:97:7a:d6:c0:eb:c3:b6:7b:46:81:9a:d3:61:
59:4c:8a:e1:04:c9:88:e4:2a:67:c3:c1:48:f9:58:
9b:7f:68:83:9c:11:09:a0:69:80:8a:fd:6a:19:55:
6c:3c:bf:a7:45:52:17:bd:c9:cb:81:47:c4:10:aa:
d5:9b:11:09:d0:10:e8:51:8e:b8:a2:fa:da:34:d1:
c3:96:b7:ec:8a:1d:21:cb:8e:6f:fc:04:04:fc:97:
01:61:a0:8e:a1:6c:a9:f2:a5:e6:ce:f2:c9:b2:30:
ca:e4:0b:5b:77:d0:45:44:b8:80:f8:8e:0d:5e:bd:
76:91:c3:6d:a6:50:bd:82:f1:91:63:3f:7e:63:d8:
d7:3b:24:29:84:fb:4e:80:6d:38:db:29:db:58:d4:
3b:ce:8d:fa:9c:4a:b0:cf:77:03:98:98:1f:bc:7e:
71:8c:10:10:4e:3e:f7:58:df:3f:01:ae:c5:7c:49:
d9:f8:29:f6:76:f8:e8:34:88:4f:9f:0b:72:50:7a:
32:e5:c4:88:1a:43:ea:44:f2:49:24:e0:4b:79:63:
54:e9:a7:54:bd:40:8f:f9:4c:81:f4:c2:93:3d:e5:
e5:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:93:83:E9:87:D6:91:07:4E:B8:73:22:48:1D:35:28:F0:F5:C0:94
X509v3 Authority Key Identifier:
keyid:FA:4E:40:53:59:A2:13:17:08:FC:02:43:8D:47:25:68:E2:C0:34:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-k5AU1miExcI_AJDjUclaOLANHA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/6a3f35-35b8-49e0-9f44-b818faecb717/1/1-k5AU1miExcI_AJDjUclaOLANHA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/6a3f35-35b8-49e0-9f44-b818faecb717/1/1-k5AU1miExcI_AJDjUclaOLANHA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:5d:8d:3a:23:56:50:34:7a:99:1a:d5:b7:10:f6:92:14:55:
a3:26:77:80:16:21:6a:cc:ba:4c:99:16:3e:fd:34:77:cf:29:
b1:b5:16:39:44:86:1e:d6:f8:22:ae:21:07:e9:d6:32:fd:0d:
37:9d:0c:88:bf:9f:ee:54:56:26:c9:05:8d:ef:87:bf:6f:37:
90:2c:12:8c:0a:c1:07:0b:f7:b3:ff:8b:71:14:21:a4:38:19:
5b:9d:c3:9a:0e:62:fb:90:25:5e:a9:37:79:be:50:a9:0b:5d:
26:c9:bc:d7:eb:1a:18:55:6e:b3:19:96:dd:b6:3e:0d:28:ff:
50:1b:ac:6f:da:2c:c1:a6:40:20:d7:9f:de:33:9f:33:e6:7c:
4b:54:cd:49:14:36:06:16:d8:2e:bc:6c:31:2a:18:46:8b:12:
82:f1:06:28:99:20:d5:5d:e2:2d:cd:83:fc:8f:6b:66:77:2b:
25:12:6a:18:53:5a:0b:92:d3:78:fb:ae:86:c7:b1:c0:32:98:
ef:65:d8:94:49:8c:14:e7:57:3b:c2:90:34:9b:1e:76:f2:aa:
87:28:80:cc:54:80:33:b8:1d:2d:06:e2:f8:e4:a3:8c:e6:4c:
26:a5:95:7c:f2:c8:f0:67:d3:9a:f4:f1:22:9a:dc:a0:2c:64:
bf:84:a1:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 24 11:45:36 2025 by rpki-client