Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/733174-edd6-4b42-b011-98058100a648/1/1-6AFO2ikOY_VLwev3WrTEJ_e1LQ.mft
File: 1-6AFO2ikOY_VLwev3WrTEJ_e1LQ.mft (raw, json)
Hash identifier: QyapwNU1BBjwB6X2Z43L8sXCqTGg19Yst1hcS6hQ3vg=
Subject key identifier: 69:60:9B:B9:25:2F:D7:3A:4D:BC:8A:31:90:71:4C:21:D8:6F:93:06
Authority key identifier: FB:A0:05:3B:68:A4:39:8F:D5:2F:07:AF:DD:6A:D3:10:9F:DE:D4:B4
Certificate issuer: /CN=fba0053b68a4398fd52f07afdd6ad3109fded4b4
Certificate serial: 01985B6C3CBDF3D95D968BF0721272D5B06C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-6AFO2ikOY_VLwev3WrTEJ_e1LQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/733174-edd6-4b42-b011-98058100a648/1/1-6AFO2ikOY_VLwev3WrTEJ_e1LQ.mft
Manifest number: 129D
Signing time: Wed 30 Jul 2025 13:01:16 +0000
Manifest this update: Wed 30 Jul 2025 13:01:16 +0000
Manifest next update: Thu 31 Jul 2025 13:01:16 +0000
Files and hashes: 1: 1-6AFO2ikOY_VLwev3WrTEJ_e1LQ.crl (hash: 1LGc+yaHbvtjBIeDYbTLuyZg2d42FnbY3xg7g1ICQUo=)
2: ZyGucPSPOyM0P5b_DaUXvuzWUOE.roa (hash: ztfMzzwOj8VE7vTZ4CVj6RjRwBwxtzf26mpD1v7zIUo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/733174-edd6-4b42-b011-98058100a648/1/1-6AFO2ikOY_VLwev3WrTEJ_e1LQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/733174-edd6-4b42-b011-98058100a648/1/1-6AFO2ikOY_VLwev3WrTEJ_e1LQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-6AFO2ikOY_VLwev3WrTEJ_e1LQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 31 Jul 2025 13:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:5b:6c:3c:bd:f3:d9:5d:96:8b:f0:72:12:72:d5:b0:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fba0053b68a4398fd52f07afdd6ad3109fded4b4
Validity
Not Before: Jul 30 13:01:16 2025 GMT
Not After : Jul 31 13:01:16 2025 GMT
Subject: CN=69609bb9252fd73a4dbc8a3190714c21d86f9306
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:f2:21:35:89:fa:24:70:a7:71:49:a8:f4:a4:
91:e4:fb:87:e0:d4:bb:07:6f:1a:e3:79:14:f9:be:
d5:1e:99:da:95:24:58:f0:f5:28:a9:ff:3b:da:b6:
5e:c2:b1:9f:e8:20:cc:0b:8c:38:d0:fa:36:61:4a:
3d:03:0e:b5:13:30:61:e5:22:15:66:cf:e9:81:e2:
3a:ed:09:05:4e:4d:f4:dc:de:11:48:af:a4:22:58:
35:ed:c5:02:8f:d3:f3:c1:cf:b3:a2:0e:7b:22:48:
8c:af:26:56:1b:ca:76:52:69:c2:29:18:02:06:53:
da:b9:16:83:07:e3:b8:e5:57:51:e6:69:3e:06:38:
0d:36:99:31:0e:ff:9e:4a:ef:a3:0a:8f:21:d0:16:
93:0e:5e:89:aa:2a:ad:ac:2b:b6:a3:a8:3d:73:08:
e3:1b:b3:f4:73:99:e2:5b:1b:8e:12:45:9e:5d:71:
3f:d1:6a:c6:d7:27:e5:bb:a0:f6:1c:a4:0b:71:90:
9f:9c:1b:37:72:2e:9f:6b:6b:0d:e0:c6:6e:b6:e9:
77:76:b9:14:c7:97:b2:10:7f:b6:42:dd:08:92:36:
23:4a:c1:54:39:c5:19:c8:8f:8d:38:d8:eb:57:17:
de:4d:16:bc:c3:f8:e6:be:91:12:e7:18:b0:ed:70:
09:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:60:9B:B9:25:2F:D7:3A:4D:BC:8A:31:90:71:4C:21:D8:6F:93:06
X509v3 Authority Key Identifier:
keyid:FB:A0:05:3B:68:A4:39:8F:D5:2F:07:AF:DD:6A:D3:10:9F:DE:D4:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-6AFO2ikOY_VLwev3WrTEJ_e1LQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/733174-edd6-4b42-b011-98058100a648/1/1-6AFO2ikOY_VLwev3WrTEJ_e1LQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/733174-edd6-4b42-b011-98058100a648/1/1-6AFO2ikOY_VLwev3WrTEJ_e1LQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:f8:d0:aa:8b:6a:f3:f0:97:d8:87:9e:f7:e7:41:92:53:6e:
23:34:5b:80:57:ec:fc:e1:11:04:19:97:f2:0f:b2:1a:97:18:
83:d3:75:30:d0:82:24:75:ab:b3:1c:55:44:07:8b:eb:65:d9:
e4:55:2b:a3:db:6f:dc:bd:7b:72:da:d6:6f:e4:6c:46:74:8d:
76:60:57:22:2d:75:e7:2e:4e:90:28:b7:bb:9c:74:0f:8b:42:
1e:47:fe:39:77:8c:99:ae:3a:57:c8:8a:44:43:23:ee:f9:cb:
c7:bc:5c:fa:c4:ad:df:2b:eb:21:b9:af:88:31:f6:fc:9b:61:
f6:77:03:5e:2a:d6:ac:09:08:3a:c9:a8:8e:53:52:7d:9f:4c:
46:ed:af:69:90:b6:0e:5f:d2:ac:bc:5b:b8:28:ab:0d:43:28:
1b:cb:10:d2:31:54:74:62:4d:25:41:3d:b2:43:94:9c:82:b2:
04:4f:a9:a5:9c:bb:20:36:d4:37:58:45:4e:11:32:ac:39:44:
7a:a5:a9:ca:93:1f:e2:5d:8c:52:6d:4b:bd:41:43:c0:72:dd:
e0:a2:8b:e9:c7:fd:f2:67:98:40:a3:55:5b:cb:26:ce:0b:97:
f9:71:53:e6:58:5d:e2:2a:7e:c8:9f:f7:e4:89:fa:75:ee:a9:
e8:9e:99:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 18:46:16 2025 by rpki-client