Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/733174-edd6-4b42-b011-98058100a648/1/1-6AFO2ikOY_VLwev3WrTEJ_e1LQ.mft
File: 1-6AFO2ikOY_VLwev3WrTEJ_e1LQ.mft (raw, json)
Hash identifier: gWdEuHCmMAlEMlr+UU+TuyeF9dCsjsdTg+3kt82vbyQ=
Subject key identifier: 3B:C4:EF:C8:C9:F4:9A:62:C8:62:E7:26:2D:11:CA:58:40:41:06:7A
Authority key identifier: FB:A0:05:3B:68:A4:39:8F:D5:2F:07:AF:DD:6A:D3:10:9F:DE:D4:B4
Certificate issuer: /CN=fba0053b68a4398fd52f07afdd6ad3109fded4b4
Certificate serial: 0198D515C0D0C4784F08119FF86A796A575B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-6AFO2ikOY_VLwev3WrTEJ_e1LQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/733174-edd6-4b42-b011-98058100a648/1/1-6AFO2ikOY_VLwev3WrTEJ_e1LQ.mft
Manifest number: 12DC
Signing time: Sat 23 Aug 2025 04:00:29 +0000
Manifest this update: Sat 23 Aug 2025 04:00:29 +0000
Manifest next update: Sun 24 Aug 2025 04:00:29 +0000
Files and hashes: 1: 1-6AFO2ikOY_VLwev3WrTEJ_e1LQ.crl (hash: VCNB8GK8ZORTuwCAQuoLDk1ubV355X0vPqhpP01eG3U=)
2: ZyGucPSPOyM0P5b_DaUXvuzWUOE.roa (hash: ztfMzzwOj8VE7vTZ4CVj6RjRwBwxtzf26mpD1v7zIUo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/733174-edd6-4b42-b011-98058100a648/1/1-6AFO2ikOY_VLwev3WrTEJ_e1LQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/733174-edd6-4b42-b011-98058100a648/1/1-6AFO2ikOY_VLwev3WrTEJ_e1LQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-6AFO2ikOY_VLwev3WrTEJ_e1LQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:c0:d0:c4:78:4f:08:11:9f:f8:6a:79:6a:57:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fba0053b68a4398fd52f07afdd6ad3109fded4b4
Validity
Not Before: Aug 23 04:00:29 2025 GMT
Not After : Aug 24 04:00:29 2025 GMT
Subject: CN=3bc4efc8c9f49a62c862e7262d11ca584041067a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f6:82:f4:cd:b2:d8:6f:0e:6c:9b:df:30:2c:
3d:d8:f7:cc:fe:a0:91:21:10:71:b6:ac:da:24:e5:
c9:83:ba:aa:ea:df:33:b0:90:90:ef:d6:3b:29:d8:
0d:2f:a2:68:11:43:02:f7:29:e4:9c:c0:30:a9:68:
af:8a:43:62:ad:d3:de:cf:65:b8:49:5c:dd:5f:c7:
26:48:81:71:5b:f8:8a:80:dd:35:a4:0a:22:8f:22:
e3:84:fb:26:58:cd:b4:9a:3b:65:76:32:37:04:59:
68:74:04:ae:53:15:91:5e:ba:bd:51:38:93:28:e3:
41:e9:a0:30:0a:f3:12:e2:41:85:4a:d5:ad:b5:4f:
e1:8c:88:5a:e4:f2:b3:04:36:53:bf:e7:83:5e:ce:
c1:a8:45:fc:a8:17:00:3e:b3:c1:64:02:96:bf:a6:
bb:b4:6d:d1:95:b6:32:e5:15:0a:b9:b9:19:bf:5a:
e8:8a:59:a1:ed:72:0e:bd:8e:2a:45:8b:5f:eb:df:
d4:da:d3:56:96:9f:59:52:e3:89:63:84:27:81:7c:
f5:28:7f:b2:ef:b7:a1:4d:da:29:64:3c:29:96:4d:
b3:c7:af:28:77:74:0f:0a:9f:73:50:65:db:58:16:
93:1b:a9:66:32:75:cb:91:cd:90:23:62:9c:2f:a3:
8e:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:C4:EF:C8:C9:F4:9A:62:C8:62:E7:26:2D:11:CA:58:40:41:06:7A
X509v3 Authority Key Identifier:
keyid:FB:A0:05:3B:68:A4:39:8F:D5:2F:07:AF:DD:6A:D3:10:9F:DE:D4:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-6AFO2ikOY_VLwev3WrTEJ_e1LQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/733174-edd6-4b42-b011-98058100a648/1/1-6AFO2ikOY_VLwev3WrTEJ_e1LQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/733174-edd6-4b42-b011-98058100a648/1/1-6AFO2ikOY_VLwev3WrTEJ_e1LQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:13:2b:df:a5:b1:e4:a5:b2:18:e3:a7:9b:99:95:26:01:76:
b9:fe:49:c3:47:ab:8a:40:29:83:8d:16:f4:d4:3b:b9:f8:1a:
41:8b:19:1b:b6:0c:53:ab:85:0c:6f:90:61:f0:bf:72:51:96:
d6:6e:1f:16:b9:8a:b4:d3:e0:bb:09:11:de:c6:18:f9:51:4a:
a8:c4:fb:82:cf:35:e3:72:13:28:6c:a6:4e:44:f8:bb:d6:dc:
10:98:92:28:14:0c:9d:9f:71:6b:e6:d8:99:58:7e:22:57:85:
99:f3:79:2a:8d:71:34:a6:8f:5b:e4:2f:c5:33:89:61:a9:56:
36:d4:c9:3d:ce:9c:77:ce:e4:57:38:3e:c7:0d:15:86:2a:f2:
04:58:b5:bf:58:bf:f7:82:59:46:d1:4a:26:c2:4c:7d:9e:6f:
5a:81:cd:7f:a6:7e:f2:29:7a:87:ed:d1:41:0d:ce:bd:e5:05:
f7:48:ad:91:fb:ce:81:58:c1:1d:5e:31:23:48:9b:94:94:6c:
e6:78:29:7a:ce:10:12:e8:27:f3:5c:ad:45:84:39:4f:05:c4:
05:2a:af:76:9e:ae:b1:11:f7:14:1f:a3:9a:d1:6a:52:f4:b7:
ad:6e:41:b9:ad:17:77:0a:f8:36:19:43:60:cd:08:13:1a:50:
80:b5:9a:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:41:15 2025 by rpki-client