Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/118e24-742b-4392-8dfa-071518e0573e/1/afc1LQcTViPjP1p-YpJdS6tyL8Y.mft
File: afc1LQcTViPjP1p-YpJdS6tyL8Y.mft (raw, json)
Hash identifier: mtMxWwBruj9mEwON/cvllpdg2OV+1V/0wGkyhDY9EDk=
Subject key identifier: 65:E5:F5:1E:C6:46:56:8E:F1:C3:D8:BE:0A:AC:C4:7C:03:5E:5B:08
Authority key identifier: 69:F7:35:2D:07:13:56:23:E3:3F:5A:7E:62:92:5D:4B:AB:72:2F:C6
Certificate issuer: /CN=69f7352d07135623e33f5a7e62925d4bab722fc6
Certificate serial: 0199FC217E53DC535DA40662D688AE8A9C90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/afc1LQcTViPjP1p-YpJdS6tyL8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/118e24-742b-4392-8dfa-071518e0573e/1/afc1LQcTViPjP1p-YpJdS6tyL8Y.mft
Manifest number: 1063
Signing time: Sun 19 Oct 2025 11:01:17 +0000
Manifest this update: Sun 19 Oct 2025 11:01:17 +0000
Manifest next update: Mon 20 Oct 2025 11:01:17 +0000
Files and hashes: 1: 4_oN5t2VSIOq_-X5g3Ce-QiBlKY.roa (hash: xjVxZUWWNj0H8HPJGRtdhqp5nG1AYywGPAoN+0SYdO8=)
2: afc1LQcTViPjP1p-YpJdS6tyL8Y.crl (hash: UK+V7WLJ5rr8Xe6XKzDN7CUVP/0XljvH262hONFvrlk=)
3: v3SUAtR9QWFlr-gp81uV9PqvwlY.roa (hash: mn3Ww15BCRBB13Jmxz3hObcdL3yCXwDoxW+3UuBjkwM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/118e24-742b-4392-8dfa-071518e0573e/1/afc1LQcTViPjP1p-YpJdS6tyL8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/118e24-742b-4392-8dfa-071518e0573e/1/afc1LQcTViPjP1p-YpJdS6tyL8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/afc1LQcTViPjP1p-YpJdS6tyL8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:7e:53:dc:53:5d:a4:06:62:d6:88:ae:8a:9c:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69f7352d07135623e33f5a7e62925d4bab722fc6
Validity
Not Before: Oct 19 11:01:17 2025 GMT
Not After : Oct 20 11:01:17 2025 GMT
Subject: CN=65e5f51ec646568ef1c3d8be0aacc47c035e5b08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:84:9f:9c:5c:be:76:fb:6a:1c:27:4e:80:35:
db:35:8c:44:ca:bc:97:86:e7:b2:ec:c7:b9:84:e6:
79:e0:f4:36:ee:07:1c:f7:01:34:0a:33:e1:14:82:
c6:5f:d0:d6:79:b7:3c:e2:a3:c6:c1:24:2e:7d:17:
e6:86:13:d4:a1:a9:23:8b:52:7a:1d:57:31:8d:9d:
33:4c:d6:3e:27:6d:34:66:2f:38:e9:8b:dd:36:98:
b9:c3:00:98:a0:eb:db:29:bc:5c:90:f3:cf:21:57:
2c:e5:fc:34:7f:f2:23:b9:d0:f5:c8:a7:e8:4c:04:
30:b2:f8:b1:9b:21:15:08:ce:6b:e2:35:96:21:ce:
03:a5:b7:de:ba:37:93:50:8f:e4:bd:3d:0e:03:48:
83:48:59:67:b4:e4:96:b5:a5:90:21:71:f8:4d:37:
b6:81:49:4a:0f:6b:20:33:a3:bd:38:7e:bd:e9:e6:
c7:0a:69:bb:71:3e:be:c8:40:47:46:b0:68:6c:5e:
e0:40:da:1c:01:b7:e6:ba:41:dd:08:69:cc:00:0f:
cd:9c:20:ff:83:3a:1e:d8:11:44:f0:ee:52:71:d8:
e9:c0:2b:fa:c6:28:64:b2:8f:54:64:5c:7e:86:c9:
45:61:ca:73:57:22:87:c1:4b:c7:67:36:51:3f:57:
18:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:E5:F5:1E:C6:46:56:8E:F1:C3:D8:BE:0A:AC:C4:7C:03:5E:5B:08
X509v3 Authority Key Identifier:
keyid:69:F7:35:2D:07:13:56:23:E3:3F:5A:7E:62:92:5D:4B:AB:72:2F:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/afc1LQcTViPjP1p-YpJdS6tyL8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/118e24-742b-4392-8dfa-071518e0573e/1/afc1LQcTViPjP1p-YpJdS6tyL8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/118e24-742b-4392-8dfa-071518e0573e/1/afc1LQcTViPjP1p-YpJdS6tyL8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:8a:e4:5b:05:fd:fd:3b:c3:41:d0:fc:ee:c0:19:d9:c1:ef:
fe:65:f8:8c:5b:09:21:ba:96:f7:9a:5a:f0:ac:43:d9:80:5a:
0a:65:81:d6:9f:4f:98:a9:ff:20:7e:d1:01:87:d5:ab:96:f0:
e3:24:80:08:66:cd:eb:ca:cd:7a:3a:bb:42:68:19:c1:48:94:
34:f7:24:73:12:4e:59:c1:40:50:b6:d4:f2:61:db:7c:48:ff:
d2:8a:5d:ff:74:dc:5f:42:d5:13:96:9c:9b:41:eb:13:e8:b8:
fe:8f:84:28:f0:32:30:60:c3:00:87:a1:3c:67:96:96:25:2f:
4a:41:08:52:9d:3b:bc:07:a5:ae:7c:10:9b:f1:74:c5:11:0c:
d7:09:2b:53:37:6e:17:46:8c:3e:48:fc:17:74:f5:d7:e9:c9:
de:70:e3:65:7f:6d:d4:be:2d:f0:28:9e:cd:13:d1:a5:12:52:
e6:35:d0:1d:38:27:4e:d2:bc:6a:51:b5:cd:90:1e:53:66:46:
af:82:ee:ad:ad:4a:8a:bf:68:92:f3:a6:d3:1a:1e:a7:c6:21:
82:e9:b0:5a:e9:56:48:ff:fb:08:0b:60:6b:ab:d7:26:c9:2d:
68:64:7b:be:48:a1:0c:32:01:2a:76:ed:54:12:8a:ed:a8:06:
a0:13:ea:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:06:45 2025 by rpki-client