Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/4c32b9-f775-4868-923d-dca38d59a158/1/AFetCa6aGpgBInWFGqvmnk4VovQ.mft
File: AFetCa6aGpgBInWFGqvmnk4VovQ.mft (raw, json)
Hash identifier: Wz4jnWoIHjB8Khe3VFeqZAxv6oXf5JGNJUTSMLCOJfE=
Subject key identifier: 1C:7C:CF:3F:66:4F:6A:57:30:7A:64:FF:4F:24:87:03:3D:86:AC:92
Authority key identifier: 00:57:AD:09:AE:9A:1A:98:01:22:75:85:1A:AB:E6:9E:4E:15:A2:F4
Certificate issuer: /CN=0057ad09ae9a1a98012275851aabe69e4e15a2f4
Certificate serial: 0199FBEBEF64322034552995C0D049AC395F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AFetCa6aGpgBInWFGqvmnk4VovQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/4c32b9-f775-4868-923d-dca38d59a158/1/AFetCa6aGpgBInWFGqvmnk4VovQ.mft
Manifest number: 0FCA
Signing time: Sun 19 Oct 2025 10:02:47 +0000
Manifest this update: Sun 19 Oct 2025 10:02:47 +0000
Manifest next update: Mon 20 Oct 2025 10:02:47 +0000
Files and hashes: 1: AFetCa6aGpgBInWFGqvmnk4VovQ.crl (hash: mI0mbWKC8E+y97Faktp8jt0AqE8DIT3Golv892VYrkY=)
2: uxPm2jgrGB9aUpoVSqtxOrk6oLc.roa (hash: jnz+6TEphg6WeFVMNjeLnKwOXT2+7WslFFXVeACqJbs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/4c32b9-f775-4868-923d-dca38d59a158/1/AFetCa6aGpgBInWFGqvmnk4VovQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/4c32b9-f775-4868-923d-dca38d59a158/1/AFetCa6aGpgBInWFGqvmnk4VovQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/AFetCa6aGpgBInWFGqvmnk4VovQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:ef:64:32:20:34:55:29:95:c0:d0:49:ac:39:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0057ad09ae9a1a98012275851aabe69e4e15a2f4
Validity
Not Before: Oct 19 10:02:47 2025 GMT
Not After : Oct 20 10:02:47 2025 GMT
Subject: CN=1c7ccf3f664f6a57307a64ff4f2487033d86ac92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:4b:1a:f8:3e:8d:25:ac:d4:76:db:05:94:c2:
b0:c4:a8:77:fb:32:1b:1c:59:f5:65:04:68:c9:48:
e8:cc:1f:18:e7:6b:63:ae:e7:67:4b:b7:6a:d0:d0:
5d:7b:d1:e4:32:7e:3b:c9:03:69:32:f9:02:1d:7f:
38:97:5d:51:36:0a:4b:ab:08:20:c5:e0:15:65:c4:
df:08:2f:fb:49:d1:87:1e:81:95:4e:fa:f5:dc:33:
80:8b:56:3d:ca:1a:66:f5:52:1e:92:aa:80:aa:10:
70:61:0e:38:52:8d:38:c8:71:a1:f5:42:ed:ac:0f:
be:96:84:72:5a:99:f5:51:e9:a1:e1:3f:3c:6b:3c:
27:fa:4c:c1:0e:f4:4a:55:9c:f3:34:1e:4a:f9:dd:
0f:4a:f1:e2:31:7b:89:38:4f:e5:1b:d2:09:84:e5:
bb:3b:a8:27:a1:91:a2:3b:35:1d:dd:79:7d:45:12:
cf:55:f0:0a:63:27:da:61:77:fe:b6:94:1c:b1:2d:
33:3c:15:6f:01:23:02:1b:b2:95:68:36:58:78:f6:
bf:cf:cf:f7:3d:7c:52:77:31:eb:97:6e:a0:3e:d5:
cd:8a:51:48:5a:13:6e:cf:26:b2:67:51:22:68:aa:
fc:1b:2b:fd:6a:2a:e9:4a:ea:6a:d4:fc:2e:b0:35:
1e:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:7C:CF:3F:66:4F:6A:57:30:7A:64:FF:4F:24:87:03:3D:86:AC:92
X509v3 Authority Key Identifier:
keyid:00:57:AD:09:AE:9A:1A:98:01:22:75:85:1A:AB:E6:9E:4E:15:A2:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AFetCa6aGpgBInWFGqvmnk4VovQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/4c32b9-f775-4868-923d-dca38d59a158/1/AFetCa6aGpgBInWFGqvmnk4VovQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/4c32b9-f775-4868-923d-dca38d59a158/1/AFetCa6aGpgBInWFGqvmnk4VovQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:af:42:c1:5d:b7:d5:51:fd:a3:96:c2:c1:83:66:b1:26:2a:
e3:89:db:23:ec:75:3a:d1:62:96:5e:ae:a5:cc:ef:c2:6c:9a:
59:54:a0:a8:7b:fa:33:7c:23:5a:41:5e:1b:65:15:b1:19:a1:
ea:b1:f1:2c:9b:35:7f:c7:97:cb:9e:bb:d5:6a:ba:b7:90:fe:
e1:d0:c9:74:2e:48:a5:45:9e:0c:fe:70:64:6f:37:9f:ff:87:
2f:45:1a:3d:31:95:24:48:f3:c6:97:67:76:3e:83:09:ef:9b:
13:7b:15:52:ca:7b:e4:4b:62:c4:2d:3c:b5:dd:1f:4b:d2:31:
50:77:d2:25:7b:b1:fc:d5:ab:ba:0a:df:ba:3f:7b:ef:0b:3e:
89:79:70:f0:38:01:ba:28:1c:11:3d:7b:c6:a3:e6:d5:c0:5a:
76:2f:b6:b1:30:f4:d7:08:d8:03:6a:3e:b6:80:06:bf:53:a9:
9a:69:9c:72:81:55:12:14:7d:00:9c:1b:be:e7:8e:2c:3d:26:
b9:14:58:46:48:ef:67:81:57:c8:c8:f4:dc:b9:95:3f:a9:a7:
fd:12:aa:f7:a6:10:ed:0d:50:c1:0f:ce:1e:34:02:2e:df:ac:
c9:f7:d2:95:d4:58:6d:b6:ec:21:bf:7e:d5:ca:55:62:50:1d:
3f:47:bd:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:51:54 2025 by rpki-client