Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/6a3f35-35b8-49e0-9f44-b818faecb717/1/1-k5AU1miExcI_AJDjUclaOLANHA.mft
File: 1-k5AU1miExcI_AJDjUclaOLANHA.mft (raw, json)
Hash identifier: 967bTLmzTqmn1EtOofi+Qn39/DZhbj9sp/ixPIzG+wc=
Subject key identifier: 0C:B2:D8:C1:12:5C:ED:A2:93:B9:73:18:E5:65:26:84:FD:75:97:BE
Authority key identifier: FA:4E:40:53:59:A2:13:17:08:FC:02:43:8D:47:25:68:E2:C0:34:70
Certificate issuer: /CN=fa4e405359a2131708fc02438d472568e2c03470
Certificate serial: 019747B0D7D6CD24D16ED49626F8B3FBB939
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-k5AU1miExcI_AJDjUclaOLANHA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/6a3f35-35b8-49e0-9f44-b818faecb717/1/1-k5AU1miExcI_AJDjUclaOLANHA.mft
Manifest number: 09A7
Signing time: Sat 07 Jun 2025 00:01:01 +0000
Manifest this update: Sat 07 Jun 2025 00:01:01 +0000
Manifest next update: Sun 08 Jun 2025 00:01:01 +0000
Files and hashes: 1: 1-k5AU1miExcI_AJDjUclaOLANHA.crl (hash: 6YtlnZ8jCtuL6uDmo1QmL5cNaphJfazsEeoLh+Wnq9g=)
2: NeBz797_B5ESEnGcmvd7nUsUi1U.roa (hash: JbBjirkyCazFybALAaB9Vxb1oZwyg2E4gTHpGuD81y4=)
3: bgZI8eq8qLB9cRKsLzzVy6IhfPw.roa (hash: n1uW0Jj8dPeSPuQyP7lT/OB/Y/KhKi4od2gGB+1AWD8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/6a3f35-35b8-49e0-9f44-b818faecb717/1/1-k5AU1miExcI_AJDjUclaOLANHA.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/6a3f35-35b8-49e0-9f44-b818faecb717/1/1-k5AU1miExcI_AJDjUclaOLANHA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-k5AU1miExcI_AJDjUclaOLANHA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:b0:d7:d6:cd:24:d1:6e:d4:96:26:f8:b3:fb:b9:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa4e405359a2131708fc02438d472568e2c03470
Validity
Not Before: Jun 7 00:01:01 2025 GMT
Not After : Jun 8 00:01:01 2025 GMT
Subject: CN=0cb2d8c1125ceda293b97318e5652684fd7597be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ac:18:04:33:1b:a8:72:42:50:6e:81:23:1b:
d6:dd:95:7f:c7:77:92:c7:b4:75:ad:fa:cc:d3:f6:
87:e4:32:62:ac:00:32:40:33:e2:f2:3a:b8:25:c2:
80:d9:ef:a5:c0:4a:f5:1d:d9:4f:05:86:f7:a8:61:
8b:ff:2a:32:b3:e3:e7:9e:e2:3c:9c:2a:f7:56:e0:
76:90:c2:17:70:ba:0e:70:12:21:b8:34:c0:09:6c:
55:ae:70:d1:44:be:04:b3:bd:f4:a6:2c:64:08:d3:
d8:5a:0b:87:ee:c3:fa:1a:34:d2:7a:05:b0:48:c2:
eb:11:cd:f4:8f:59:f2:a2:57:5b:bd:63:14:ed:64:
a0:2d:fc:37:3d:4c:81:e8:0b:b1:f7:6e:07:01:cb:
46:bb:0a:43:60:a6:9d:67:e5:69:23:ff:a4:f8:96:
ca:a6:ae:0d:44:e4:08:53:38:c6:5f:15:ad:8f:3c:
03:9b:ce:d4:f9:24:fd:48:53:ad:d4:06:c6:7d:26:
ba:0d:ac:1f:f9:a6:9b:97:f2:04:68:ff:97:7d:9c:
ff:6e:b0:1c:ce:1d:b9:7a:10:e9:c7:28:ce:8e:61:
68:f1:8b:11:9a:8e:f5:70:b5:73:3f:c9:d8:65:85:
d3:da:5d:2f:2d:65:d4:c9:a4:5a:8c:2e:9c:b4:92:
a2:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:B2:D8:C1:12:5C:ED:A2:93:B9:73:18:E5:65:26:84:FD:75:97:BE
X509v3 Authority Key Identifier:
keyid:FA:4E:40:53:59:A2:13:17:08:FC:02:43:8D:47:25:68:E2:C0:34:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-k5AU1miExcI_AJDjUclaOLANHA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/6a3f35-35b8-49e0-9f44-b818faecb717/1/1-k5AU1miExcI_AJDjUclaOLANHA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/6a3f35-35b8-49e0-9f44-b818faecb717/1/1-k5AU1miExcI_AJDjUclaOLANHA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:3f:00:01:ff:2e:c9:3c:13:1a:95:31:94:d1:03:f8:b9:55:
1a:98:30:10:09:c6:09:6c:5b:36:1b:e8:01:8a:06:9d:9f:ce:
0f:a0:e6:49:2a:27:39:f5:d0:c8:0c:0d:5d:ab:8b:24:5b:9f:
8d:e0:11:a8:5c:3f:6f:95:6f:dc:8d:9c:0b:9b:78:9e:9d:f2:
b9:2d:f9:6a:48:59:ac:0c:6a:83:a0:42:c4:d4:a8:00:a6:e8:
3c:e5:22:74:fa:15:f3:99:10:94:ca:17:b3:ad:1c:ff:8e:ad:
4b:1b:ab:f3:77:c0:54:03:6c:21:6c:06:51:b7:3b:bd:82:09:
7f:1b:8f:e9:93:20:cb:73:c8:05:e7:e1:be:0d:49:0b:15:bf:
3e:db:3b:8b:c5:4c:62:ca:32:b0:39:8e:f6:13:40:83:8f:3b:
35:27:71:51:cb:b4:09:96:0f:da:64:5d:66:57:f6:1a:24:11:
bf:b6:8c:76:3f:3e:32:7a:02:50:9e:66:cf:38:a7:22:9d:22:
49:26:3b:7b:7b:96:4d:7a:d4:d3:21:d9:1e:e3:13:a0:29:64:
8a:e7:35:67:1e:40:a0:b2:78:0f:7a:83:1f:cd:54:b9:5c:9c:
77:84:8b:20:3a:8a:27:a3:2c:24:a4:32:6d:84:94:68:a9:dd:
16:11:a0:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 05:59:02 2025 by rpki-client