Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/733174-edd6-4b42-b011-98058100a648/1/1-6AFO2ikOY_VLwev3WrTEJ_e1LQ.mft
File: 1-6AFO2ikOY_VLwev3WrTEJ_e1LQ.mft (raw, json)
Hash identifier: 7J5V3eqGfeg+93QeDGQ4mo7qzZYXW4w0WolZYBkK140=
Subject key identifier: B2:3B:7E:D4:36:66:28:67:AF:77:4C:36:3C:78:67:5F:42:59:7D:56
Authority key identifier: FB:A0:05:3B:68:A4:39:8F:D5:2F:07:AF:DD:6A:D3:10:9F:DE:D4:B4
Certificate issuer: /CN=fba0053b68a4398fd52f07afdd6ad3109fded4b4
Certificate serial: 019A575300D32D23532E0038C5E1AAD24261
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-6AFO2ikOY_VLwev3WrTEJ_e1LQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/733174-edd6-4b42-b011-98058100a648/1/1-6AFO2ikOY_VLwev3WrTEJ_e1LQ.mft
Manifest number: 13A4
Signing time: Thu 06 Nov 2025 04:00:48 +0000
Manifest this update: Thu 06 Nov 2025 04:00:48 +0000
Manifest next update: Fri 07 Nov 2025 04:00:48 +0000
Files and hashes: 1: 1-6AFO2ikOY_VLwev3WrTEJ_e1LQ.crl (hash: vby/LW7HYU5a4rgMcucpbBZpdQc9TyJWo/fXcBrwW9k=)
2: ZyGucPSPOyM0P5b_DaUXvuzWUOE.roa (hash: ztfMzzwOj8VE7vTZ4CVj6RjRwBwxtzf26mpD1v7zIUo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/733174-edd6-4b42-b011-98058100a648/1/1-6AFO2ikOY_VLwev3WrTEJ_e1LQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/733174-edd6-4b42-b011-98058100a648/1/1-6AFO2ikOY_VLwev3WrTEJ_e1LQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-6AFO2ikOY_VLwev3WrTEJ_e1LQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 07 Nov 2025 03:53:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:57:53:00:d3:2d:23:53:2e:00:38:c5:e1:aa:d2:42:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fba0053b68a4398fd52f07afdd6ad3109fded4b4
Validity
Not Before: Nov 6 04:00:48 2025 GMT
Not After : Nov 7 04:00:48 2025 GMT
Subject: CN=b23b7ed436662867af774c363c78675f42597d56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:aa:7e:93:67:a0:e9:d9:86:f9:66:17:6a:d1:
cb:69:8a:c6:88:c5:ba:e9:2b:98:c9:f0:9f:54:3a:
fa:88:31:7a:55:ac:46:e6:57:08:6c:f8:fa:59:de:
8a:a7:d8:84:1e:ab:99:9a:15:71:58:78:af:64:83:
fa:89:b2:af:01:d2:41:72:65:aa:92:df:17:f3:5f:
1c:27:13:94:c1:a0:b9:0b:0e:23:30:d7:1e:a6:fb:
98:ea:ef:18:d9:8a:4c:06:aa:0a:4b:39:85:75:db:
d2:6d:07:93:11:61:40:ca:39:3a:79:22:f2:5f:4d:
25:b9:0e:86:c0:76:37:5b:71:44:ed:0f:e4:1c:a0:
74:62:ab:55:72:f8:dd:fc:27:1e:fa:1b:a5:32:7f:
1b:1d:63:0e:59:b6:aa:ae:a7:b6:52:bb:d5:7e:03:
b2:89:bc:ed:fe:46:46:9c:ca:25:3b:89:f8:53:36:
10:0c:f9:a9:b8:9f:3e:55:f1:5e:e5:a6:0a:fd:f7:
39:1f:ee:03:3d:51:d0:e1:09:34:2e:0c:14:16:23:
eb:cc:3d:e8:6d:e4:b1:71:2d:ce:20:88:89:dd:ac:
18:de:9a:f4:09:d4:01:65:bd:0b:b2:f9:17:6c:0e:
5b:e4:3b:7c:9f:bd:7b:ed:89:1c:86:27:84:31:d9:
3c:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:3B:7E:D4:36:66:28:67:AF:77:4C:36:3C:78:67:5F:42:59:7D:56
X509v3 Authority Key Identifier:
keyid:FB:A0:05:3B:68:A4:39:8F:D5:2F:07:AF:DD:6A:D3:10:9F:DE:D4:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-6AFO2ikOY_VLwev3WrTEJ_e1LQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/733174-edd6-4b42-b011-98058100a648/1/1-6AFO2ikOY_VLwev3WrTEJ_e1LQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/733174-edd6-4b42-b011-98058100a648/1/1-6AFO2ikOY_VLwev3WrTEJ_e1LQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:d3:e3:b9:09:04:a3:3a:00:e0:74:85:82:85:42:fd:6a:36:
2b:0f:4d:9f:c1:fc:cd:38:21:5a:72:7d:78:b8:27:ba:20:9e:
6c:62:c1:1a:da:49:a8:ae:c0:f6:56:2f:3a:0b:e9:00:14:ea:
8d:41:45:62:33:1a:1e:1a:53:9c:99:3e:07:2f:71:6c:ba:2c:
43:27:7b:df:b5:a1:2b:a0:59:b8:0a:a8:0d:b8:6f:af:b5:fc:
96:17:b5:c0:fb:2b:a9:f8:52:89:a8:05:7d:b0:93:65:cc:16:
71:b9:c4:20:fc:30:80:0e:a5:06:a6:b8:b6:93:2c:c0:77:0e:
25:12:9f:40:ca:c5:47:04:8d:0d:f1:0c:c9:de:9d:66:06:e0:
d9:26:70:a7:4e:df:bf:d1:d9:56:4b:3c:9a:13:2d:d0:4c:8f:
b3:b6:55:ba:e7:00:e2:1f:31:e6:7b:5c:56:41:7d:0a:d6:2d:
5d:aa:13:c6:fb:9b:f7:ec:49:59:5d:2f:4b:4d:c1:68:f8:2a:
71:77:3c:99:73:c6:5b:a4:bb:48:2d:38:aa:51:76:18:4a:27:
66:ec:73:a7:f1:23:e4:e3:c4:50:8b:5c:f3:3e:3c:ea:db:2f:
69:cc:4b:66:6f:d9:0d:a4:5d:93:cc:1e:3a:d5:f6:b7:6c:72:
c6:34:ec:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 07:34:23 2025 by rpki-client