Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/953a61-3349-47bf-a12b-e4c69334142c/1/afM-l5tD6I0OXsp5h5R9sh73yrk.mft
File: afM-l5tD6I0OXsp5h5R9sh73yrk.mft (raw, json)
Hash identifier: lLiPhOu+f07vEOeV5M4WvuadyGcVtJKnEobZWBvvy+0=
Subject key identifier: 23:86:4F:34:BB:33:02:8A:08:9C:75:A4:48:FA:3C:73:E0:53:62:D8
Authority key identifier: 69:F3:3E:97:9B:43:E8:8D:0E:5E:CA:79:87:94:7D:B2:1E:F7:CA:B9
Certificate issuer: /CN=69f33e979b43e88d0e5eca7987947db21ef7cab9
Certificate serial: 0198D6CDD20F91F10C35CB867A31D99A157B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/afM-l5tD6I0OXsp5h5R9sh73yrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/953a61-3349-47bf-a12b-e4c69334142c/1/afM-l5tD6I0OXsp5h5R9sh73yrk.mft
Manifest number: 0503
Signing time: Sat 23 Aug 2025 12:01:09 +0000
Manifest this update: Sat 23 Aug 2025 12:01:09 +0000
Manifest next update: Sun 24 Aug 2025 12:01:09 +0000
Files and hashes: 1: afM-l5tD6I0OXsp5h5R9sh73yrk.crl (hash: s9EZdxYm8tLmRJTt7kYGWU9x5fHqtQvAwuyM0pOpvxM=)
2: rjuN-ZTOCGAomaycIkzHFBIupdk.roa (hash: mpitT9m9PBhweeULsMgo7mL5tvByadSSpZctsThk9Hg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/953a61-3349-47bf-a12b-e4c69334142c/1/afM-l5tD6I0OXsp5h5R9sh73yrk.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/953a61-3349-47bf-a12b-e4c69334142c/1/afM-l5tD6I0OXsp5h5R9sh73yrk.mft
rsync://rpki.ripe.net/repository/DEFAULT/afM-l5tD6I0OXsp5h5R9sh73yrk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:d2:0f:91:f1:0c:35:cb:86:7a:31:d9:9a:15:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69f33e979b43e88d0e5eca7987947db21ef7cab9
Validity
Not Before: Aug 23 12:01:09 2025 GMT
Not After : Aug 24 12:01:09 2025 GMT
Subject: CN=23864f34bb33028a089c75a448fa3c73e05362d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:70:e2:0c:cf:fc:b7:a4:03:cb:35:53:99:50:
85:b8:fa:c1:6f:79:d2:e9:fb:e3:60:7d:91:ff:36:
b1:c1:f4:f0:4c:60:50:7f:55:d2:17:c1:8a:9e:53:
ff:95:53:d7:69:c8:10:8f:1d:8c:29:c9:cc:fd:76:
d3:d8:2e:29:26:20:e6:29:f7:e4:9f:08:18:b1:64:
f9:00:bd:43:8f:a7:54:4b:38:a3:f9:9d:81:9b:8a:
b3:64:d0:a4:13:bd:96:c7:a4:99:3c:ce:cc:13:8e:
07:e4:06:5b:49:af:f2:71:ab:41:3b:ed:26:f5:dc:
28:0f:6c:3b:8f:1c:00:e1:fa:8f:7b:08:c5:b6:f4:
87:a6:1a:3c:e1:c6:de:b4:2b:a1:7f:14:20:4d:7c:
8a:ac:45:59:7f:b5:63:e9:38:94:80:1e:3c:3c:bc:
0b:49:83:2d:9e:89:89:f5:71:c0:a8:f0:a8:82:01:
28:d1:60:d8:65:be:64:fb:8c:04:b9:df:f7:f2:d7:
80:a8:35:a1:4c:df:98:6a:00:79:d2:96:0d:17:0b:
46:47:e1:37:dc:93:d5:02:1a:e6:68:7c:32:60:e4:
cd:dd:93:ac:b7:c4:f8:49:94:9e:de:e3:46:04:d6:
02:65:fe:61:bd:77:4d:4c:97:ba:c9:51:12:fd:fc:
59:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:86:4F:34:BB:33:02:8A:08:9C:75:A4:48:FA:3C:73:E0:53:62:D8
X509v3 Authority Key Identifier:
keyid:69:F3:3E:97:9B:43:E8:8D:0E:5E:CA:79:87:94:7D:B2:1E:F7:CA:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/afM-l5tD6I0OXsp5h5R9sh73yrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/953a61-3349-47bf-a12b-e4c69334142c/1/afM-l5tD6I0OXsp5h5R9sh73yrk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/953a61-3349-47bf-a12b-e4c69334142c/1/afM-l5tD6I0OXsp5h5R9sh73yrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:42:99:42:10:c4:19:ee:36:14:2c:88:1f:a9:e3:e5:e7:eb:
fe:4d:5e:ee:f5:5f:ce:b8:a9:36:eb:db:1e:11:29:b0:3c:7b:
3e:e2:2e:a6:0c:f8:9b:62:4e:58:90:d5:06:a4:52:ea:8a:6f:
a2:93:9a:f7:d1:b3:9e:02:65:5e:94:ae:11:86:4a:2d:7e:21:
72:02:ea:ba:c4:09:5e:96:42:61:29:dc:86:f9:1f:02:91:3e:
b9:88:00:8e:87:18:ba:eb:b6:b7:d0:39:f9:35:e0:f1:59:39:
c7:76:b1:37:5b:5b:d4:10:70:ff:fd:90:ce:a9:e9:be:4e:60:
c8:0e:97:5c:a2:3c:c8:62:77:0d:60:f3:4d:4b:69:c6:06:31:
6e:a0:5b:76:38:29:e8:84:0d:13:97:82:15:9f:7e:2a:19:59:
11:fb:d8:eb:eb:93:9f:6e:81:d3:cf:44:9c:00:c7:bc:d0:e4:
48:5b:61:95:a6:fa:67:53:d1:c4:7d:4d:a3:5e:2d:1a:e3:b7:
de:77:77:dc:d6:de:00:f1:64:ab:c9:16:21:b0:c3:e6:65:55:
4f:bb:9b:3f:b1:6f:25:3c:12:ed:13:78:b6:c4:5e:24:a3:90:
a5:a9:c9:80:6e:3b:0b:ca:8b:2c:5a:7c:fb:b1:51:d1:aa:cc:
35:53:b5:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:04:38 2025 by rpki-client