Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/733174-edd6-4b42-b011-98058100a648/1/1-6AFO2ikOY_VLwev3WrTEJ_e1LQ.mft
File: 1-6AFO2ikOY_VLwev3WrTEJ_e1LQ.mft (raw, json)
Hash identifier: lQWpgPc2xqulbcO9Sqs/TMrmiCrQowj8LES/p3K6m/A=
Subject key identifier: F7:E9:74:9E:8E:30:78:4E:0E:92:02:E4:0A:73:F3:D1:6D:59:ED:E9
Authority key identifier: FB:A0:05:3B:68:A4:39:8F:D5:2F:07:AF:DD:6A:D3:10:9F:DE:D4:B4
Certificate issuer: /CN=fba0053b68a4398fd52f07afdd6ad3109fded4b4
Certificate serial: 01988DA2492C381494BDA11194CD2398BC69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-6AFO2ikOY_VLwev3WrTEJ_e1LQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/733174-edd6-4b42-b011-98058100a648/1/1-6AFO2ikOY_VLwev3WrTEJ_e1LQ.mft
Manifest number: 12B7
Signing time: Sat 09 Aug 2025 07:01:19 +0000
Manifest this update: Sat 09 Aug 2025 07:01:19 +0000
Manifest next update: Sun 10 Aug 2025 07:01:19 +0000
Files and hashes: 1: 1-6AFO2ikOY_VLwev3WrTEJ_e1LQ.crl (hash: pczVIl+cwUDJR8LXPBuIlpT0qWpUtjqwG8ZW3aCRLyw=)
2: ZyGucPSPOyM0P5b_DaUXvuzWUOE.roa (hash: ztfMzzwOj8VE7vTZ4CVj6RjRwBwxtzf26mpD1v7zIUo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/733174-edd6-4b42-b011-98058100a648/1/1-6AFO2ikOY_VLwev3WrTEJ_e1LQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/733174-edd6-4b42-b011-98058100a648/1/1-6AFO2ikOY_VLwev3WrTEJ_e1LQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-6AFO2ikOY_VLwev3WrTEJ_e1LQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8d:a2:49:2c:38:14:94:bd:a1:11:94:cd:23:98:bc:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fba0053b68a4398fd52f07afdd6ad3109fded4b4
Validity
Not Before: Aug 9 07:01:19 2025 GMT
Not After : Aug 10 07:01:19 2025 GMT
Subject: CN=f7e9749e8e30784e0e9202e40a73f3d16d59ede9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b3:01:e9:2f:19:f5:d0:2c:c2:0c:87:5c:52:
10:8d:f3:5f:af:d4:91:cc:44:84:75:e1:38:2a:a9:
f2:08:24:a2:8a:0a:00:d0:6f:dd:0a:15:3b:e9:15:
dd:dc:a5:1b:9e:89:16:74:ad:22:e4:54:35:28:aa:
7c:70:d1:e5:7f:82:fc:15:db:69:9a:59:d4:1d:fe:
85:2a:5d:8a:19:0d:85:7c:dd:59:4a:71:38:c5:f8:
a5:d0:db:eb:3e:28:0b:80:2d:f2:a5:ed:f2:7f:79:
2c:b1:8b:eb:79:50:3d:c6:be:87:3f:33:f5:f4:89:
e1:ec:5d:b5:cd:90:7a:ee:1e:b9:b8:d4:1f:d0:c8:
3f:5a:f6:af:ce:33:2e:e3:90:29:d7:1d:bc:9e:0b:
7c:74:b1:4f:19:87:c4:30:16:f0:a8:5d:d3:27:29:
56:a3:29:77:b6:35:96:b8:83:21:a7:42:58:85:c8:
0e:f8:0b:06:1b:7f:6e:d5:03:da:05:f3:3d:52:40:
bf:72:21:0e:18:73:9d:0f:33:8e:a9:39:52:89:cb:
b1:e4:ce:10:2e:b2:6f:dd:b5:0b:90:51:38:d9:33:
d5:5a:58:ce:33:cb:4e:84:f7:9a:d2:88:70:82:65:
50:8e:04:9e:97:dc:5f:69:76:4a:0a:b3:f1:c5:fa:
d1:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:E9:74:9E:8E:30:78:4E:0E:92:02:E4:0A:73:F3:D1:6D:59:ED:E9
X509v3 Authority Key Identifier:
keyid:FB:A0:05:3B:68:A4:39:8F:D5:2F:07:AF:DD:6A:D3:10:9F:DE:D4:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-6AFO2ikOY_VLwev3WrTEJ_e1LQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/733174-edd6-4b42-b011-98058100a648/1/1-6AFO2ikOY_VLwev3WrTEJ_e1LQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/733174-edd6-4b42-b011-98058100a648/1/1-6AFO2ikOY_VLwev3WrTEJ_e1LQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:f7:5e:9f:0e:fa:08:c9:13:1f:00:b3:96:30:70:ae:10:fe:
2d:cd:84:8e:53:83:07:bf:2a:9b:a0:60:7f:2a:c2:b1:6b:5b:
17:68:19:42:44:c2:fd:57:19:35:1d:fb:57:39:f4:2d:e0:12:
25:2d:be:1b:ee:28:0f:d1:fc:4f:88:95:df:c1:67:b3:00:9b:
f6:2b:71:ab:9e:14:32:2c:0b:aa:52:fe:57:f6:71:ac:cf:ce:
37:2d:98:7d:f9:07:24:b2:45:2a:0f:47:a7:58:e6:dd:5d:3f:
3a:fd:d8:c7:f3:b9:8f:6f:63:25:ce:d1:fc:47:1e:cc:b4:7b:
ce:bd:ac:1f:e4:49:71:45:13:b3:23:7a:50:4a:c2:e3:67:ca:
49:d2:b6:56:1a:c7:d4:5d:76:64:c9:ed:82:b3:cf:a8:0a:81:
46:4a:32:37:32:f6:33:50:68:c0:76:45:50:a7:09:e7:b1:71:
36:9f:cf:19:ef:36:ac:52:89:80:b8:52:7b:fa:21:2d:71:c9:
48:9b:69:01:4a:a2:b2:99:75:4f:71:b1:c8:80:ce:9e:56:3c:
09:ba:b3:35:a1:2a:b9:7e:8b:05:7e:28:4f:a8:3c:0d:ec:fc:
2a:c2:66:8b:ed:cf:64:b3:3a:db:18:35:72:b2:dc:32:19:f5:
9f:a0:f4:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 15:16:41 2025 by rpki-client