Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/6a3f35-35b8-49e0-9f44-b818faecb717/1/1-k5AU1miExcI_AJDjUclaOLANHA.mft
File: 1-k5AU1miExcI_AJDjUclaOLANHA.mft (raw, json)
Hash identifier: Xai68qLCeiVYrIPFwOOkbqPJG95FkWBctawrWQr1O6g=
Subject key identifier: 05:60:97:A5:78:01:9E:4C:55:B9:B8:02:9F:F9:F0:CC:7F:99:86:9C
Authority key identifier: FA:4E:40:53:59:A2:13:17:08:FC:02:43:8D:47:25:68:E2:C0:34:70
Certificate issuer: /CN=fa4e405359a2131708fc02438d472568e2c03470
Certificate serial: 01976884E82FC6DCA7162B5C386799F06D75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-k5AU1miExcI_AJDjUclaOLANHA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/6a3f35-35b8-49e0-9f44-b818faecb717/1/1-k5AU1miExcI_AJDjUclaOLANHA.mft
Manifest number: 09B8
Signing time: Fri 13 Jun 2025 09:00:30 +0000
Manifest this update: Fri 13 Jun 2025 09:00:30 +0000
Manifest next update: Sat 14 Jun 2025 09:00:30 +0000
Files and hashes: 1: 1-k5AU1miExcI_AJDjUclaOLANHA.crl (hash: NHKSHYoheFJOYnIr4//lQVFV/lNrw8ZEOJE9hY5KFQ0=)
2: NeBz797_B5ESEnGcmvd7nUsUi1U.roa (hash: JbBjirkyCazFybALAaB9Vxb1oZwyg2E4gTHpGuD81y4=)
3: bgZI8eq8qLB9cRKsLzzVy6IhfPw.roa (hash: n1uW0Jj8dPeSPuQyP7lT/OB/Y/KhKi4od2gGB+1AWD8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/6a3f35-35b8-49e0-9f44-b818faecb717/1/1-k5AU1miExcI_AJDjUclaOLANHA.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/6a3f35-35b8-49e0-9f44-b818faecb717/1/1-k5AU1miExcI_AJDjUclaOLANHA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-k5AU1miExcI_AJDjUclaOLANHA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 09:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:84:e8:2f:c6:dc:a7:16:2b:5c:38:67:99:f0:6d:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa4e405359a2131708fc02438d472568e2c03470
Validity
Not Before: Jun 13 09:00:30 2025 GMT
Not After : Jun 14 09:00:30 2025 GMT
Subject: CN=056097a578019e4c55b9b8029ff9f0cc7f99869c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:4d:94:d5:c6:bf:41:5b:09:a4:75:d8:5e:73:
f0:75:43:79:21:81:62:c9:73:d5:80:b8:fb:a4:a6:
b4:75:87:2b:2b:7f:71:c1:e3:d8:de:23:04:66:31:
a1:4b:ab:5e:f1:69:41:35:09:76:bb:80:28:40:8c:
1b:8a:c9:6c:bb:ef:84:b6:f4:fe:09:4f:d4:ee:08:
43:a2:9e:17:71:fc:d1:4c:4d:61:13:69:eb:db:62:
82:70:21:f7:33:0a:b9:0d:ce:11:d1:00:6b:93:75:
fa:c3:0c:d7:8d:d3:77:85:43:2d:f7:cc:7f:59:e0:
f9:7c:33:ed:21:2e:85:ea:81:26:9b:96:84:cc:e0:
3a:7a:88:93:13:4d:a4:8e:ef:56:6f:a4:ad:b1:af:
4f:7d:b9:6c:4b:63:51:c4:0e:ac:34:c7:28:07:62:
33:39:66:36:85:dd:ed:6d:7c:f1:7b:d4:da:a4:09:
a8:6d:57:a8:e9:c6:15:d6:b9:09:ca:17:a6:9f:35:
d9:5e:6c:de:9b:b0:a8:80:1b:c7:ae:d8:4c:fa:be:
68:3b:0c:1b:aa:83:45:4d:d1:37:10:84:67:81:ff:
5f:75:0c:c4:b3:b0:10:1b:5d:e6:1d:3b:80:3f:c8:
68:0f:c9:29:e9:ea:49:5f:95:04:6d:7e:82:17:f6:
0f:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:60:97:A5:78:01:9E:4C:55:B9:B8:02:9F:F9:F0:CC:7F:99:86:9C
X509v3 Authority Key Identifier:
keyid:FA:4E:40:53:59:A2:13:17:08:FC:02:43:8D:47:25:68:E2:C0:34:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-k5AU1miExcI_AJDjUclaOLANHA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/6a3f35-35b8-49e0-9f44-b818faecb717/1/1-k5AU1miExcI_AJDjUclaOLANHA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/6a3f35-35b8-49e0-9f44-b818faecb717/1/1-k5AU1miExcI_AJDjUclaOLANHA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:3c:fa:52:fd:cc:17:7a:ff:5b:b2:fe:eb:e7:ed:84:61:3d:
81:aa:aa:53:52:a8:7e:be:21:16:ad:6c:19:31:df:1a:20:9c:
d9:59:f2:e8:b2:5a:15:88:85:4c:58:f8:59:44:3a:05:e3:25:
e7:d4:4e:fe:f8:68:d2:1e:ba:0b:23:68:93:ee:72:e4:77:fc:
55:ac:e7:2f:88:ec:a2:b9:1f:5a:9f:e0:0c:9e:3e:6c:ca:3f:
6a:98:98:71:45:e4:27:8f:3d:88:03:80:8f:87:f6:c3:42:93:
79:9a:bf:33:e8:23:82:5f:50:b5:d1:e1:0e:38:dc:86:23:c0:
ca:d4:d0:45:82:18:ae:b7:65:17:8c:8f:e6:54:e6:0a:1c:4e:
e0:1e:fd:56:81:38:61:79:4a:3e:6e:41:82:f6:44:21:bd:6f:
75:d6:85:d8:1f:fa:21:66:4c:38:2e:83:33:c7:bd:d3:f1:d5:
9e:09:6c:56:cf:53:26:b6:8d:e6:b2:7a:b4:5f:d6:67:82:2a:
e1:61:aa:fc:7d:89:bb:67:e9:a5:fa:38:92:15:3e:e5:89:a3:
46:0f:d8:b8:48:00:4d:2f:4d:cc:f7:ad:83:04:40:29:a5:a1:
78:95:7d:4a:dc:91:89:96:e3:bb:2d:7a:b8:08:68:db:f9:80:
14:b9:a6:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:29:41 2025 by rpki-client