Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/6a3f35-35b8-49e0-9f44-b818faecb717/1/1-k5AU1miExcI_AJDjUclaOLANHA.mft
File: 1-k5AU1miExcI_AJDjUclaOLANHA.mft (raw, json)
Hash identifier: 2bpTNaQio5F2ShIBHnqe2uPvvXO2o8BvX+bSGJz0Z20=
Subject key identifier: 0D:9A:5B:56:FD:BE:34:2C:38:C2:E2:ED:AC:6B:CC:10:C1:A1:6A:0C
Authority key identifier: FA:4E:40:53:59:A2:13:17:08:FC:02:43:8D:47:25:68:E2:C0:34:70
Certificate issuer: /CN=fa4e405359a2131708fc02438d472568e2c03470
Certificate serial: 0199FB0F2E670764588E01C8CDD80D53E895
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-k5AU1miExcI_AJDjUclaOLANHA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/6a3f35-35b8-49e0-9f44-b818faecb717/1/1-k5AU1miExcI_AJDjUclaOLANHA.mft
Manifest number: 0B0D
Signing time: Sun 19 Oct 2025 06:01:40 +0000
Manifest this update: Sun 19 Oct 2025 06:01:40 +0000
Manifest next update: Mon 20 Oct 2025 06:01:40 +0000
Files and hashes: 1: 1-k5AU1miExcI_AJDjUclaOLANHA.crl (hash: DGwkfybfi/N4iQ/pOwOileNE2AszrOWkQ4v6fswV+I8=)
2: NeBz797_B5ESEnGcmvd7nUsUi1U.roa (hash: JbBjirkyCazFybALAaB9Vxb1oZwyg2E4gTHpGuD81y4=)
3: bgZI8eq8qLB9cRKsLzzVy6IhfPw.roa (hash: n1uW0Jj8dPeSPuQyP7lT/OB/Y/KhKi4od2gGB+1AWD8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/6a3f35-35b8-49e0-9f44-b818faecb717/1/1-k5AU1miExcI_AJDjUclaOLANHA.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/6a3f35-35b8-49e0-9f44-b818faecb717/1/1-k5AU1miExcI_AJDjUclaOLANHA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-k5AU1miExcI_AJDjUclaOLANHA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0f:2e:67:07:64:58:8e:01:c8:cd:d8:0d:53:e8:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa4e405359a2131708fc02438d472568e2c03470
Validity
Not Before: Oct 19 06:01:40 2025 GMT
Not After : Oct 20 06:01:40 2025 GMT
Subject: CN=0d9a5b56fdbe342c38c2e2edac6bcc10c1a16a0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:63:6f:65:d4:a6:43:1f:9f:81:87:ad:8f:19:
5b:50:17:20:e7:3e:69:83:a3:ec:78:66:97:d2:ce:
db:5d:be:f3:a6:97:09:c9:b4:ee:63:fe:b9:97:a1:
51:b6:bd:7d:e5:e6:27:ca:07:33:7b:92:32:de:7b:
36:5d:46:d1:cb:1e:31:61:0c:ae:d1:45:4d:40:a8:
57:cd:9c:67:ad:6d:00:47:b0:f9:ab:e5:a5:d1:b8:
ee:4a:8d:59:4e:51:1e:8f:a2:9c:a0:2d:0f:e9:f4:
5a:28:ff:de:a8:a5:eb:e3:57:8b:93:17:0e:66:bd:
69:87:d0:64:c2:3d:5e:5e:92:76:dd:1c:f7:8c:d6:
94:14:57:0b:e8:a1:46:70:19:53:86:1b:88:07:06:
cf:98:25:41:c6:b2:a3:f7:91:fe:8b:23:ef:83:4b:
52:54:d5:98:b6:e3:5c:f8:19:0a:df:a7:b6:98:74:
05:47:aa:31:19:e5:d0:c0:8a:dc:31:94:6f:f1:72:
fc:a1:da:6e:5a:d1:79:ec:3b:10:af:c9:fd:f1:1d:
d4:0f:3f:e0:d0:d6:2b:de:1a:73:01:ea:83:38:21:
2d:a3:4d:ee:e8:63:1b:6a:44:9c:61:ad:f9:8a:d8:
f0:a4:b0:84:6d:4d:9a:0e:44:93:08:0a:0e:07:fe:
3c:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:9A:5B:56:FD:BE:34:2C:38:C2:E2:ED:AC:6B:CC:10:C1:A1:6A:0C
X509v3 Authority Key Identifier:
keyid:FA:4E:40:53:59:A2:13:17:08:FC:02:43:8D:47:25:68:E2:C0:34:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-k5AU1miExcI_AJDjUclaOLANHA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/6a3f35-35b8-49e0-9f44-b818faecb717/1/1-k5AU1miExcI_AJDjUclaOLANHA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/6a3f35-35b8-49e0-9f44-b818faecb717/1/1-k5AU1miExcI_AJDjUclaOLANHA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:d6:d5:25:35:11:31:5a:5e:5e:e6:f3:60:14:f1:00:09:21:
9e:5d:4b:e4:e1:69:89:9e:21:d2:84:b1:e1:bf:5c:83:fd:c6:
f9:c7:28:2e:74:f2:0a:4a:fd:6c:1f:7b:0a:74:66:02:44:bb:
45:19:79:bc:8a:9b:27:f3:1c:de:29:d3:df:ac:82:53:10:dc:
25:f1:e2:90:85:a7:1c:bc:32:c8:5f:43:4f:a2:73:9f:0b:69:
10:95:d4:a2:77:20:6d:72:1e:49:26:92:e7:f2:61:11:52:6e:
92:a4:85:5e:b1:97:cb:54:14:dd:f4:2c:5c:e3:3f:67:8c:f5:
92:4a:72:5c:98:aa:2d:68:a4:d7:10:f3:7d:75:4e:f5:a5:ab:
5b:6c:30:3d:94:50:ea:e7:b9:bc:b6:64:0f:38:5f:51:08:d9:
e1:83:5a:3f:c9:50:87:3d:fd:82:5e:2d:f3:06:de:b8:2c:1e:
d1:83:a6:c1:4d:23:5d:b2:79:bf:36:7c:f9:76:85:a2:45:2d:
cc:98:1b:b3:bb:b6:c9:4c:c9:47:34:59:fc:9a:12:93:b5:eb:
2e:e9:ea:74:9c:63:86:f6:f7:ff:68:4e:34:fa:07:c3:0d:74:
87:3e:41:fb:de:73:21:c2:0e:7e:ed:ac:b3:eb:ab:c0:b2:38:
35:6f:21:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:11:56 2025 by rpki-client