Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/4c32b9-f775-4868-923d-dca38d59a158/1/AFetCa6aGpgBInWFGqvmnk4VovQ.mft
File: AFetCa6aGpgBInWFGqvmnk4VovQ.mft (raw, json)
Hash identifier: 9DXiQWjfBOuB9oD9fzJmYxFUKyWhKowHPdRovD/zWjc=
Subject key identifier: 78:49:4D:62:83:27:87:5C:7D:14:D6:AC:32:AE:47:18:BF:FD:D4:C5
Authority key identifier: 00:57:AD:09:AE:9A:1A:98:01:22:75:85:1A:AB:E6:9E:4E:15:A2:F4
Certificate issuer: /CN=0057ad09ae9a1a98012275851aabe69e4e15a2f4
Certificate serial: 0198D47424E6494B747D9F6FE5F598E14101
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AFetCa6aGpgBInWFGqvmnk4VovQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/4c32b9-f775-4868-923d-dca38d59a158/1/AFetCa6aGpgBInWFGqvmnk4VovQ.mft
Manifest number: 0F31
Signing time: Sat 23 Aug 2025 01:03:58 +0000
Manifest this update: Sat 23 Aug 2025 01:03:58 +0000
Manifest next update: Sun 24 Aug 2025 01:03:58 +0000
Files and hashes: 1: AFetCa6aGpgBInWFGqvmnk4VovQ.crl (hash: iTojsbowQQasz2b8pxYBl+3J9Tmr1TwvMY9tAcZcu+0=)
2: uxPm2jgrGB9aUpoVSqtxOrk6oLc.roa (hash: jnz+6TEphg6WeFVMNjeLnKwOXT2+7WslFFXVeACqJbs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/4c32b9-f775-4868-923d-dca38d59a158/1/AFetCa6aGpgBInWFGqvmnk4VovQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/4c32b9-f775-4868-923d-dca38d59a158/1/AFetCa6aGpgBInWFGqvmnk4VovQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/AFetCa6aGpgBInWFGqvmnk4VovQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:03:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:74:24:e6:49:4b:74:7d:9f:6f:e5:f5:98:e1:41:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0057ad09ae9a1a98012275851aabe69e4e15a2f4
Validity
Not Before: Aug 23 01:03:58 2025 GMT
Not After : Aug 24 01:03:58 2025 GMT
Subject: CN=78494d628327875c7d14d6ac32ae4718bffdd4c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ee:1d:4a:a3:57:7b:d4:49:2c:40:b2:1c:16:
a2:9a:b1:7b:6c:ec:b5:64:04:81:58:22:c1:11:1e:
cf:a8:96:92:21:28:44:ea:3b:ea:9e:ba:a8:29:7d:
b4:c8:84:68:e9:dc:6e:fc:32:a4:27:8b:bc:f1:fb:
6a:51:a8:f8:cc:13:6a:53:26:6c:35:c1:80:cd:12:
50:03:c3:af:cd:cb:57:22:d8:91:d3:a7:62:ba:05:
05:30:cb:d3:b0:7c:e8:cc:2f:d3:dd:31:ae:3c:02:
f4:7d:48:f5:48:01:5a:7c:8d:1a:d8:6b:23:d9:e9:
2b:33:14:58:56:95:3d:43:25:f3:a9:da:a1:08:35:
68:1c:d3:d6:2f:29:bd:50:58:e2:f4:7b:2e:be:90:
0a:2c:f0:38:e6:6d:5d:d5:d0:a8:1e:c7:50:8f:5f:
5d:80:94:34:14:6c:b9:01:73:8f:45:f4:a2:95:68:
24:6b:f1:ab:1c:87:72:a8:4f:3a:0b:79:50:2f:f8:
6f:32:48:df:43:64:00:8b:b5:70:97:ca:76:d6:5c:
ca:f0:6b:d0:9d:a0:de:ab:8a:c5:76:26:f5:67:94:
5f:1c:12:8b:a3:00:b9:bf:62:91:d7:1f:d9:1c:49:
e7:c7:89:ce:7d:84:9c:cb:61:e9:6d:e3:43:9b:91:
e8:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:49:4D:62:83:27:87:5C:7D:14:D6:AC:32:AE:47:18:BF:FD:D4:C5
X509v3 Authority Key Identifier:
keyid:00:57:AD:09:AE:9A:1A:98:01:22:75:85:1A:AB:E6:9E:4E:15:A2:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AFetCa6aGpgBInWFGqvmnk4VovQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/4c32b9-f775-4868-923d-dca38d59a158/1/AFetCa6aGpgBInWFGqvmnk4VovQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/4c32b9-f775-4868-923d-dca38d59a158/1/AFetCa6aGpgBInWFGqvmnk4VovQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:ca:3c:a6:cd:66:aa:8d:1e:d6:cb:53:07:c6:7e:2e:83:27:
08:0a:5d:6e:92:99:c2:99:d9:86:3d:29:fb:b4:e5:71:aa:5a:
f9:4b:1a:ca:5a:74:52:79:4f:5c:91:51:e1:7a:e4:f7:07:94:
ef:87:76:67:4a:69:5a:98:6f:4e:27:aa:21:35:96:2b:7c:d9:
14:52:b1:ff:0d:5d:29:77:31:4d:33:41:1c:26:53:72:90:77:
23:b3:54:fe:f1:2a:b3:5e:fb:05:55:c4:71:6f:32:26:50:6f:
5f:a2:1f:ea:d4:53:21:c7:89:bd:75:10:ba:d7:13:4c:cd:2e:
f4:f6:99:5f:91:c1:f2:99:3f:9b:b9:c6:bc:28:0e:3e:55:f8:
6a:f7:8c:94:d7:46:a7:f7:bc:b3:6d:fa:75:d5:7d:33:fe:46:
8f:8e:95:8b:f4:58:21:ba:98:5d:11:ea:2f:40:fe:9e:01:6d:
56:34:8e:3a:e6:ac:95:23:f5:28:ce:79:d4:40:e8:dd:89:31:
55:08:56:24:d4:02:01:cc:9c:09:41:3a:ba:8d:85:2b:d2:bd:
bd:a6:f1:3d:60:7b:e4:10:3e:93:67:7d:c4:00:0e:4a:71:13:
bc:fb:62:7c:1b:87:38:8c:e8:d0:a0:99:93:33:57:d5:d5:de:
e8:10:a7:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:35:07 2025 by rpki-client