Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/419af0-cbd6-4233-b52f-d7484bf9ca2b/1/pa_FQ1_LvjSNK1YBanvHvKzxuGY.mft
File: pa_FQ1_LvjSNK1YBanvHvKzxuGY.mft (raw, json)
Hash identifier: 1DH+1KNVQPf4/tXAqYRwj3E93mKjflRAgZ5dDGeE++s=
Subject key identifier: 3A:AA:F3:E9:C6:1C:BF:FE:2C:CA:9B:FA:29:B9:E8:7B:5F:73:8D:6E
Authority key identifier: A5:AF:C5:43:5F:CB:BE:34:8D:2B:56:01:6A:7B:C7:BC:AC:F1:B8:66
Certificate issuer: /CN=a5afc5435fcbbe348d2b56016a7bc7bcacf1b866
Certificate serial: 0197718899937662756410045D15F8FF17FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pa_FQ1_LvjSNK1YBanvHvKzxuGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/419af0-cbd6-4233-b52f-d7484bf9ca2b/1/pa_FQ1_LvjSNK1YBanvHvKzxuGY.mft
Manifest number: 095D
Signing time: Sun 15 Jun 2025 03:01:06 +0000
Manifest this update: Sun 15 Jun 2025 03:01:06 +0000
Manifest next update: Mon 16 Jun 2025 03:01:06 +0000
Files and hashes: 1: L_XmzwrYuu-3rRY_iMRM0yQHIg4.roa (hash: RmMXdLfBhblx+m1KktkkN/nQ0YOW2Tp0s4LZY86DblA=)
2: pa_FQ1_LvjSNK1YBanvHvKzxuGY.crl (hash: 5qE4axmoYs+GtlmB/Gb+wpl20kASla4QmuIkelb0Csc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/419af0-cbd6-4233-b52f-d7484bf9ca2b/1/pa_FQ1_LvjSNK1YBanvHvKzxuGY.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/419af0-cbd6-4233-b52f-d7484bf9ca2b/1/pa_FQ1_LvjSNK1YBanvHvKzxuGY.mft
rsync://rpki.ripe.net/repository/DEFAULT/pa_FQ1_LvjSNK1YBanvHvKzxuGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 03:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:88:99:93:76:62:75:64:10:04:5d:15:f8:ff:17:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5afc5435fcbbe348d2b56016a7bc7bcacf1b866
Validity
Not Before: Jun 15 03:01:06 2025 GMT
Not After : Jun 16 03:01:06 2025 GMT
Subject: CN=3aaaf3e9c61cbffe2cca9bfa29b9e87b5f738d6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:5e:d7:ea:19:75:e8:44:69:d4:b8:da:14:9b:
76:7c:32:8b:6e:d8:d8:d8:ed:a0:e4:c4:90:0d:25:
ab:c9:27:52:b1:04:80:62:06:67:ad:5d:63:11:13:
0b:3e:75:59:94:72:b1:28:ac:39:27:ef:14:2c:f7:
9c:bf:2b:0b:c6:7e:b1:44:6c:d7:32:c7:07:72:46:
11:2b:68:62:03:39:00:88:92:36:95:0b:4c:7a:cd:
af:47:0f:bb:90:98:67:f8:66:a4:60:37:b3:6c:84:
b4:52:06:b2:94:e1:79:4c:8b:ca:d5:d8:8e:73:9e:
8a:d8:ae:dc:db:b5:de:1b:fb:cf:ae:7f:3d:82:6c:
2a:fa:9c:1f:bd:82:2f:5c:6d:e7:97:2b:56:eb:4a:
81:4e:09:4f:52:58:b8:53:f4:9b:5f:25:1e:6a:25:
d8:2c:ae:82:9e:60:b9:4a:42:16:11:8f:02:10:b1:
7d:fe:41:bd:8d:49:7c:30:f7:be:b4:d7:6f:c2:2d:
19:c5:8c:29:10:e8:58:7e:58:bd:f3:0d:97:c5:f0:
03:76:f3:2d:01:02:9c:9e:97:05:f1:d5:0e:4d:eb:
2f:45:c3:f2:34:55:bf:60:5e:cf:bc:95:b9:a9:ce:
d7:d8:f8:60:96:41:2d:9b:cf:b1:5e:16:ef:4a:3f:
67:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:AA:F3:E9:C6:1C:BF:FE:2C:CA:9B:FA:29:B9:E8:7B:5F:73:8D:6E
X509v3 Authority Key Identifier:
keyid:A5:AF:C5:43:5F:CB:BE:34:8D:2B:56:01:6A:7B:C7:BC:AC:F1:B8:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pa_FQ1_LvjSNK1YBanvHvKzxuGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/419af0-cbd6-4233-b52f-d7484bf9ca2b/1/pa_FQ1_LvjSNK1YBanvHvKzxuGY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/419af0-cbd6-4233-b52f-d7484bf9ca2b/1/pa_FQ1_LvjSNK1YBanvHvKzxuGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:3d:d8:d2:9a:6e:f7:6a:90:b3:c9:3c:38:d2:ba:e7:fc:f9:
05:62:39:55:b7:ef:7e:2b:ac:38:00:ec:28:21:4b:27:f4:08:
c1:23:b2:dc:68:62:88:80:7a:c5:f9:58:1d:88:11:65:0d:95:
f5:3f:7f:5f:7e:48:ca:6b:8a:ca:d1:4e:69:5b:d2:dd:d9:2e:
41:9d:63:7d:22:9a:f7:23:eb:7c:76:b1:c2:f7:21:cd:66:44:
86:63:3b:4a:18:2c:2b:e6:c5:33:1e:1c:07:19:79:56:28:32:
6a:29:cc:a9:c7:79:49:0c:db:b8:67:58:fe:9f:3a:01:5a:88:
8a:a7:f8:cb:9b:78:4f:6f:bc:92:9b:3c:c7:d0:71:b6:75:d3:
40:e4:ef:56:2c:00:36:b7:b1:c2:5e:c3:70:4e:83:c4:b8:88:
ca:c8:f7:3a:24:78:11:c4:71:21:ea:61:47:a9:2d:f7:1c:88:
fb:4f:e2:76:23:67:f4:11:c7:98:bc:d4:d7:8b:c5:c4:77:95:
44:d2:f1:59:61:6c:ab:e0:ab:4f:2b:ae:c8:02:f7:46:02:9f:
35:ca:a7:e1:03:e4:1c:ca:d5:b6:5c:cc:b8:7a:16:67:c9:bf:
9e:e4:e6:cc:39:a4:be:87:ff:7c:56:3a:f4:78:29:c9:be:e7:
50:cc:4f:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 13:01:16 2025 by rpki-client