Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/cc0692-cc99-4545-bc50-eaf3ddb0a1bb/1/1-14u6ugu75tlf-J5UmcmECD5RMk.mft
File: 1-14u6ugu75tlf-J5UmcmECD5RMk.mft (raw, json)
Hash identifier: VnDeDTlOexcvII6nVsPqbefZy2NX9pGgx1XhTgVMQ20=
Subject key identifier: A6:64:93:0A:F6:47:F7:19:B5:CE:95:83:F2:97:EC:3F:1C:FC:E6:47
Authority key identifier: FB:5E:2E:EA:E8:2E:EF:9B:65:7F:E2:79:52:67:26:10:20:F9:44:C9
Certificate issuer: /CN=fb5e2eeae82eef9b657fe2795267261020f944c9
Certificate serial: 019935A5821DE25AB794F0FBEB207269AA9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-14u6ugu75tlf-J5UmcmECD5RMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/cc0692-cc99-4545-bc50-eaf3ddb0a1bb/1/1-14u6ugu75tlf-J5UmcmECD5RMk.mft
Manifest number: 0205
Signing time: Wed 10 Sep 2025 22:01:02 +0000
Manifest this update: Wed 10 Sep 2025 22:01:02 +0000
Manifest next update: Thu 11 Sep 2025 22:01:02 +0000
Files and hashes: 1: 1-14u6ugu75tlf-J5UmcmECD5RMk.crl (hash: fhfZHbG8VrfI2fV8x5XNjQR4S+kCxPdoaBIdU0er9BA=)
2: Dr_PQO2BPHoa4Gl0AZtI905-d-M.roa (hash: +sFVK8H7AnsXd5rUe7kR0o92ssiFNiEpWCKNsSev/NE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/cc0692-cc99-4545-bc50-eaf3ddb0a1bb/1/1-14u6ugu75tlf-J5UmcmECD5RMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/cc0692-cc99-4545-bc50-eaf3ddb0a1bb/1/1-14u6ugu75tlf-J5UmcmECD5RMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-14u6ugu75tlf-J5UmcmECD5RMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 20:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:35:a5:82:1d:e2:5a:b7:94:f0:fb:eb:20:72:69:aa:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb5e2eeae82eef9b657fe2795267261020f944c9
Validity
Not Before: Sep 10 22:01:02 2025 GMT
Not After : Sep 11 22:01:02 2025 GMT
Subject: CN=a664930af647f719b5ce9583f297ec3f1cfce647
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:fd:84:e7:81:4d:2a:0c:9b:5a:5c:bd:fd:f2:
57:bd:53:e8:f6:ce:83:9d:16:ad:89:e8:be:a1:00:
31:ed:ca:d6:59:c7:57:e3:f7:b4:5d:3c:76:d8:e2:
fe:94:30:dc:cc:89:5a:98:ae:e0:3e:10:a9:67:06:
ee:86:72:82:d6:6a:99:b3:b2:3d:f1:b4:0e:4a:07:
64:c4:93:f6:80:b5:8a:0d:5b:d0:47:36:5a:1e:0b:
da:1b:b0:dd:53:5f:f4:9a:fa:ee:1e:bd:5d:82:18:
87:8f:32:50:7e:fc:1a:08:d9:ee:31:07:5f:ad:1a:
36:dc:71:7b:93:39:16:f4:66:db:e7:ca:03:04:5b:
05:1a:f2:d6:1e:3b:f9:78:0f:a7:47:a2:45:c4:3f:
36:33:a5:a9:25:6f:20:c8:6f:7f:ce:6a:99:af:16:
a4:78:ec:69:a2:8f:29:ba:eb:b7:39:8a:ca:7d:7c:
2b:62:41:84:35:bd:00:dd:03:b0:46:d2:3e:be:03:
72:f3:8c:00:0a:bf:7b:29:2f:90:18:50:54:12:1f:
db:21:25:ac:d3:6e:5c:00:69:51:f2:7d:81:3b:e5:
ca:45:14:01:d7:e0:29:95:31:a7:a7:19:58:2b:b5:
96:33:dc:b8:35:48:df:c7:90:f0:9b:e1:c7:24:69:
b9:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:64:93:0A:F6:47:F7:19:B5:CE:95:83:F2:97:EC:3F:1C:FC:E6:47
X509v3 Authority Key Identifier:
keyid:FB:5E:2E:EA:E8:2E:EF:9B:65:7F:E2:79:52:67:26:10:20:F9:44:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-14u6ugu75tlf-J5UmcmECD5RMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/cc0692-cc99-4545-bc50-eaf3ddb0a1bb/1/1-14u6ugu75tlf-J5UmcmECD5RMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/cc0692-cc99-4545-bc50-eaf3ddb0a1bb/1/1-14u6ugu75tlf-J5UmcmECD5RMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:db:a5:87:39:08:fd:26:bd:0c:e2:44:d3:ba:6e:e0:52:c4:
e4:e1:7f:3d:af:a7:0c:b5:c2:32:06:42:38:34:2a:c7:80:b2:
7c:30:72:73:c8:94:99:91:8e:cb:8e:98:3c:c3:73:59:e4:c3:
da:00:3c:0c:20:34:a0:8f:b7:3b:0b:ad:4d:67:dc:7e:f9:9e:
f4:bb:bc:5f:b5:b4:cb:27:40:36:05:86:2a:a9:b9:ce:72:02:
52:e0:55:a5:70:30:7e:5a:62:68:54:9e:49:f0:a3:65:42:a4:
7c:e6:08:fe:b4:d5:31:cc:cb:77:9c:f8:02:1e:b7:31:61:f0:
14:bd:45:1e:10:d0:6f:8e:81:86:64:43:ee:7d:b4:8d:fc:8b:
d9:08:fb:a3:61:72:d2:96:25:66:ad:dd:4b:68:33:ee:56:e5:
4d:31:95:88:8c:62:6a:e1:43:9b:06:cc:4e:8b:67:db:d6:5f:
58:3d:4d:92:b5:f1:14:aa:34:f8:3c:aa:97:8a:7e:e4:20:2d:
01:67:9e:3f:1a:6f:c4:96:a5:03:e1:e0:aa:1a:e0:fa:14:e4:
2b:b5:d3:b9:81:9f:af:89:07:cb:17:f2:2e:15:ba:15:5c:33:
f0:12:b5:0e:33:cd:e6:62:c6:af:d0:e9:81:4b:2c:33:55:f6:
d1:43:ba:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 06:13:04 2025 by rpki-client