
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/6a3f35-35b8-49e0-9f44-b818faecb717/1/1-k5AU1miExcI_AJDjUclaOLANHA.mft
File: 1-k5AU1miExcI_AJDjUclaOLANHA.mft (raw, json)
Hash identifier: ecdp31/2iaBAUgNxZ+m32gPqbWCD26CTTcnwRoY9/Cg=
Subject key identifier: 7F:F7:93:35:B3:87:D5:61:4E:71:F9:A8:0E:6B:72:67:81:E8:B3:87
Authority key identifier: FA:4E:40:53:59:A2:13:17:08:FC:02:43:8D:47:25:68:E2:C0:34:70
Certificate issuer: /CN=fa4e405359a2131708fc02438d472568e2c03470
Certificate serial: 01987CAE95C42F692CDB97BF82D1C69F8D40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-k5AU1miExcI_AJDjUclaOLANHA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/6a3f35-35b8-49e0-9f44-b818faecb717/1/1-k5AU1miExcI_AJDjUclaOLANHA.mft
Manifest number: 0A47
Signing time: Wed 06 Aug 2025 00:01:12 +0000
Manifest this update: Wed 06 Aug 2025 00:01:12 +0000
Manifest next update: Thu 07 Aug 2025 00:01:12 +0000
Files and hashes: 1: 1-k5AU1miExcI_AJDjUclaOLANHA.crl (hash: lJ+KbxVV4TOHIucyz6HHsikFB/aOu2Apio4bkrcHugM=)
2: NeBz797_B5ESEnGcmvd7nUsUi1U.roa (hash: JbBjirkyCazFybALAaB9Vxb1oZwyg2E4gTHpGuD81y4=)
3: bgZI8eq8qLB9cRKsLzzVy6IhfPw.roa (hash: n1uW0Jj8dPeSPuQyP7lT/OB/Y/KhKi4od2gGB+1AWD8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/6a3f35-35b8-49e0-9f44-b818faecb717/1/1-k5AU1miExcI_AJDjUclaOLANHA.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/6a3f35-35b8-49e0-9f44-b818faecb717/1/1-k5AU1miExcI_AJDjUclaOLANHA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-k5AU1miExcI_AJDjUclaOLANHA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:ae:95:c4:2f:69:2c:db:97:bf:82:d1:c6:9f:8d:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa4e405359a2131708fc02438d472568e2c03470
Validity
Not Before: Aug 6 00:01:12 2025 GMT
Not After : Aug 7 00:01:12 2025 GMT
Subject: CN=7ff79335b387d5614e71f9a80e6b726781e8b387
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:d6:14:75:8d:fe:0f:0b:d6:d1:80:5c:e2:a3:
39:22:64:55:f7:7e:ec:99:51:39:b6:bd:52:b2:c9:
f8:53:79:f1:6f:5d:29:7a:8d:c4:b2:ae:79:07:6b:
6d:1a:7a:f5:0e:74:9f:9d:94:77:59:70:38:4b:40:
e4:9f:76:f8:67:25:9c:1f:1d:99:a4:49:20:05:bb:
16:67:28:6e:2c:25:ae:31:a4:7a:b0:2d:e0:d0:e6:
c8:3b:d6:53:ce:f3:4e:b0:c5:15:9e:4f:13:af:44:
1e:44:75:4f:bf:2a:06:9d:60:5e:ed:4f:d7:67:ba:
c4:9f:dd:c3:9a:97:9e:69:37:66:f0:a7:ce:1a:67:
8a:56:15:ae:8c:b1:f1:b2:24:55:ee:54:22:b7:74:
d8:12:f2:30:31:7f:f5:ef:07:69:e1:59:75:d9:92:
00:b3:e6:c1:df:c7:80:d7:3d:e3:53:e9:01:43:73:
d8:52:6a:4d:cb:a1:ea:da:ab:3e:fe:d6:ce:76:71:
85:7a:07:a5:26:3c:bf:24:2a:71:a2:32:79:e2:a0:
43:48:59:55:16:5a:78:85:28:a5:9f:27:cc:95:d3:
65:af:6f:47:02:9e:be:f2:38:76:6e:91:e1:0e:87:
2a:9d:8d:f7:1c:96:53:31:c3:bd:aa:5b:f2:56:9d:
33:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:F7:93:35:B3:87:D5:61:4E:71:F9:A8:0E:6B:72:67:81:E8:B3:87
X509v3 Authority Key Identifier:
keyid:FA:4E:40:53:59:A2:13:17:08:FC:02:43:8D:47:25:68:E2:C0:34:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-k5AU1miExcI_AJDjUclaOLANHA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/6a3f35-35b8-49e0-9f44-b818faecb717/1/1-k5AU1miExcI_AJDjUclaOLANHA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/6a3f35-35b8-49e0-9f44-b818faecb717/1/1-k5AU1miExcI_AJDjUclaOLANHA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:4e:d3:b2:c2:9f:12:c5:c9:54:dd:e5:85:46:38:68:4a:86:
e2:d7:b1:f7:2a:40:3b:d7:53:52:26:cc:b7:10:db:6b:c5:29:
61:59:79:12:85:79:16:37:99:2f:26:14:ec:d7:c8:14:4a:9f:
2b:69:bd:e8:eb:cc:7b:e5:60:2a:ef:a9:ea:d7:10:d1:a9:d2:
c0:06:57:1c:3f:8b:73:75:58:d7:44:ef:d4:cb:cf:1c:e4:2b:
5f:0e:e0:ac:ef:e0:f3:d7:7c:a3:1c:11:1d:c2:45:e2:3c:bf:
40:b2:55:bd:fb:81:40:b7:f8:d9:a7:c4:37:37:3c:be:c3:b9:
30:4d:6d:fb:fa:d0:48:e8:40:26:ed:ad:25:01:cf:a3:23:8e:
df:af:6b:61:c1:0e:54:86:15:b0:a0:85:b6:8e:3b:e0:69:ef:
b7:5b:b5:fe:99:aa:ce:7d:e5:69:90:4c:51:6a:69:b2:61:6c:
03:f8:8e:6c:bb:92:1a:a2:fc:79:9d:70:9e:4c:58:da:ef:71:
0f:9d:05:58:c4:0f:95:26:86:b8:4c:f9:5f:49:b0:7f:5e:47:
d6:67:ac:22:b4:50:41:0f:bd:c7:0c:8f:78:e8:7e:6c:03:60:
9a:ea:1d:8e:96:a0:fd:d0:52:57:4a:6b:21:c3:45:6d:e8:66:
64:db:16:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:19:41 2025 by rpki-client