Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/733174-edd6-4b42-b011-98058100a648/1/1-6AFO2ikOY_VLwev3WrTEJ_e1LQ.mft
File: 1-6AFO2ikOY_VLwev3WrTEJ_e1LQ.mft (raw, json)
Hash identifier: NYtmiBK93+jxwHzZCbxQ39C9DBRrzBPdCPqwNr1JhEA=
Subject key identifier: 64:5D:3B:8E:11:CE:0E:30:4C:D9:7A:1D:EA:48:2F:5D:1E:3F:81:77
Authority key identifier: FB:A0:05:3B:68:A4:39:8F:D5:2F:07:AF:DD:6A:D3:10:9F:DE:D4:B4
Certificate issuer: /CN=fba0053b68a4398fd52f07afdd6ad3109fded4b4
Certificate serial: 019A28F9AEB2C61B95A835E21B0BFD632556
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-6AFO2ikOY_VLwev3WrTEJ_e1LQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/733174-edd6-4b42-b011-98058100a648/1/1-6AFO2ikOY_VLwev3WrTEJ_e1LQ.mft
Manifest number: 138C
Signing time: Tue 28 Oct 2025 04:00:43 +0000
Manifest this update: Tue 28 Oct 2025 04:00:43 +0000
Manifest next update: Wed 29 Oct 2025 04:00:43 +0000
Files and hashes: 1: 1-6AFO2ikOY_VLwev3WrTEJ_e1LQ.crl (hash: 1lUCjpZowZqDXStZra/mPEp+Bx9oADlq4s7Fy4rMEGI=)
2: ZyGucPSPOyM0P5b_DaUXvuzWUOE.roa (hash: ztfMzzwOj8VE7vTZ4CVj6RjRwBwxtzf26mpD1v7zIUo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/733174-edd6-4b42-b011-98058100a648/1/1-6AFO2ikOY_VLwev3WrTEJ_e1LQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/733174-edd6-4b42-b011-98058100a648/1/1-6AFO2ikOY_VLwev3WrTEJ_e1LQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-6AFO2ikOY_VLwev3WrTEJ_e1LQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 00:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:28:f9:ae:b2:c6:1b:95:a8:35:e2:1b:0b:fd:63:25:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fba0053b68a4398fd52f07afdd6ad3109fded4b4
Validity
Not Before: Oct 28 04:00:43 2025 GMT
Not After : Oct 29 04:00:43 2025 GMT
Subject: CN=645d3b8e11ce0e304cd97a1dea482f5d1e3f8177
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:4c:78:bd:47:d9:2b:90:f7:7d:5e:9d:dd:9c:
44:e5:a5:42:29:d5:fb:1f:57:07:f2:c4:ce:af:3e:
f5:ec:2c:84:05:9b:72:65:65:7b:0e:97:e2:dc:db:
e9:22:93:e7:f8:1a:f5:d8:a3:cf:08:e3:c7:51:5e:
1a:ba:8c:3d:14:46:92:d7:f8:6d:de:88:61:05:2d:
a6:36:dd:62:a5:e3:34:25:8d:71:eb:70:f8:ba:1e:
a2:e6:b8:55:67:64:5a:c7:63:01:a1:49:df:38:96:
87:cf:10:7e:5f:6d:dc:6e:ca:b6:9b:c6:46:96:39:
db:45:9e:12:c0:f4:25:c2:63:5f:dc:58:62:01:0c:
f6:93:a0:4b:b2:ad:e7:8f:20:86:02:8c:e7:98:35:
df:34:23:cf:9b:99:50:1b:0d:bb:76:af:0b:87:88:
6a:d8:36:21:20:75:bc:3e:ef:9b:3b:3e:9e:e9:7d:
88:fe:ad:ec:31:13:e3:5c:eb:51:9e:54:f1:46:47:
42:f0:65:05:fe:92:23:bc:dd:07:3a:e3:d6:29:4b:
ca:96:40:30:74:c3:f9:91:60:b4:2d:28:71:b1:a8:
f8:2b:18:45:66:63:ea:c6:77:46:12:81:f9:c8:b1:
d2:f6:93:b6:b2:65:76:a5:ba:df:46:1f:cb:7d:ec:
21:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:5D:3B:8E:11:CE:0E:30:4C:D9:7A:1D:EA:48:2F:5D:1E:3F:81:77
X509v3 Authority Key Identifier:
keyid:FB:A0:05:3B:68:A4:39:8F:D5:2F:07:AF:DD:6A:D3:10:9F:DE:D4:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-6AFO2ikOY_VLwev3WrTEJ_e1LQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/733174-edd6-4b42-b011-98058100a648/1/1-6AFO2ikOY_VLwev3WrTEJ_e1LQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/733174-edd6-4b42-b011-98058100a648/1/1-6AFO2ikOY_VLwev3WrTEJ_e1LQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:94:7f:2f:79:40:49:33:cc:10:40:c3:e3:07:41:f1:71:b0:
17:d0:ae:27:be:29:68:fe:93:5e:75:fe:69:fe:50:b9:fa:17:
98:3c:da:c4:5a:e2:78:dc:71:1b:53:fa:07:55:5f:3f:a2:11:
ff:75:01:73:23:89:ab:02:05:23:e7:a1:69:c1:63:1e:6e:96:
46:06:0f:b8:d7:86:41:03:30:3b:41:1f:47:af:2f:3a:38:7f:
dd:03:6b:ef:f9:de:c7:7a:01:b7:8d:65:ff:18:d9:6a:fe:24:
94:b2:f8:89:43:a9:7b:46:3c:d3:f6:f0:c5:94:42:80:82:00:
88:b3:fd:d6:cf:74:66:f6:da:de:6b:7c:90:30:ef:d0:31:78:
ab:46:ed:1f:c5:d9:4e:68:0f:c4:d3:69:c8:0b:9b:7b:0c:e6:
1e:f4:4c:7b:5d:16:85:96:0e:89:a5:6e:71:e7:32:b2:f7:c5:
a9:99:24:95:30:21:72:e1:7a:2a:c5:ff:e6:2a:a2:a8:83:cb:
f8:30:85:f8:42:35:23:58:08:a1:c3:c4:4b:3a:3b:11:84:0a:
6c:3f:15:fc:75:4a:89:0f:2c:07:42:1a:13:a4:6a:1f:d5:5a:
86:71:0f:c7:83:0a:d0:f5:53:0c:7d:c6:fb:1f:e7:58:ae:1c:
15:71:78:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 06:40:32 2025 by rpki-client