Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/118e24-742b-4392-8dfa-071518e0573e/1/afc1LQcTViPjP1p-YpJdS6tyL8Y.mft
File: afc1LQcTViPjP1p-YpJdS6tyL8Y.mft (raw, json)
Hash identifier: AQN3hGl2A7cIE0oLQBpxVF81rAfxsUslTDkD/oYsUDo=
Subject key identifier: 8B:60:47:2B:A2:34:A4:E8:BF:D3:32:0D:4D:4C:E5:3A:11:4A:E6:B9
Authority key identifier: 69:F7:35:2D:07:13:56:23:E3:3F:5A:7E:62:92:5D:4B:AB:72:2F:C6
Certificate issuer: /CN=69f7352d07135623e33f5a7e62925d4bab722fc6
Certificate serial: 0198D8849AE76B3D3DE47527689132C0BD97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/afc1LQcTViPjP1p-YpJdS6tyL8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/118e24-742b-4392-8dfa-071518e0573e/1/afc1LQcTViPjP1p-YpJdS6tyL8Y.mft
Manifest number: 0FCC
Signing time: Sat 23 Aug 2025 20:00:25 +0000
Manifest this update: Sat 23 Aug 2025 20:00:25 +0000
Manifest next update: Sun 24 Aug 2025 20:00:25 +0000
Files and hashes: 1: 4_oN5t2VSIOq_-X5g3Ce-QiBlKY.roa (hash: xjVxZUWWNj0H8HPJGRtdhqp5nG1AYywGPAoN+0SYdO8=)
2: afc1LQcTViPjP1p-YpJdS6tyL8Y.crl (hash: Au7HJ7LBs54oZhocp5YWJ7rvyixIJMYrob5enAnAbDA=)
3: v3SUAtR9QWFlr-gp81uV9PqvwlY.roa (hash: mn3Ww15BCRBB13Jmxz3hObcdL3yCXwDoxW+3UuBjkwM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/118e24-742b-4392-8dfa-071518e0573e/1/afc1LQcTViPjP1p-YpJdS6tyL8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/118e24-742b-4392-8dfa-071518e0573e/1/afc1LQcTViPjP1p-YpJdS6tyL8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/afc1LQcTViPjP1p-YpJdS6tyL8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d8:84:9a:e7:6b:3d:3d:e4:75:27:68:91:32:c0:bd:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69f7352d07135623e33f5a7e62925d4bab722fc6
Validity
Not Before: Aug 23 20:00:25 2025 GMT
Not After : Aug 24 20:00:25 2025 GMT
Subject: CN=8b60472ba234a4e8bfd3320d4d4ce53a114ae6b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:3c:0a:00:31:e9:c3:7b:40:ad:62:b1:6a:c2:
4b:f4:74:9a:cb:cc:52:46:9b:e7:d6:68:6f:13:77:
2d:89:95:e9:2b:ad:15:61:5c:67:98:1f:df:30:26:
cc:fc:2e:30:14:46:1c:f2:52:f1:58:65:1a:0a:a9:
24:a1:bb:ec:0a:43:eb:a6:95:f5:a6:24:5f:3b:a6:
d7:95:1e:67:b4:7a:ca:d0:f1:6a:dc:ea:52:2d:01:
77:d3:9e:ec:ae:b5:fc:2f:e6:4e:15:b1:b0:aa:a1:
c0:20:ce:0e:65:4a:51:25:0e:2e:a9:42:28:57:a2:
2f:74:2f:07:42:d3:e3:72:78:17:3a:a7:41:61:02:
21:cc:71:31:26:85:a2:04:be:72:f9:9b:7f:73:23:
22:7f:f9:35:2d:ab:1a:5b:23:65:f4:d9:b7:31:cc:
9c:63:b6:85:cb:2b:97:b2:17:f9:2b:dd:41:dc:7f:
26:b4:5e:9d:7e:a3:90:32:39:f6:c7:77:eb:a8:9a:
16:68:09:31:7e:69:03:64:0f:98:62:36:ee:28:76:
69:60:a1:a2:34:7d:4c:23:a6:eb:ac:95:93:bc:4e:
81:e9:ce:14:97:dc:c4:c6:0c:80:9b:37:33:b0:83:
51:be:f0:d8:8f:82:8d:c0:c4:17:0f:41:66:47:fa:
e7:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:60:47:2B:A2:34:A4:E8:BF:D3:32:0D:4D:4C:E5:3A:11:4A:E6:B9
X509v3 Authority Key Identifier:
keyid:69:F7:35:2D:07:13:56:23:E3:3F:5A:7E:62:92:5D:4B:AB:72:2F:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/afc1LQcTViPjP1p-YpJdS6tyL8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/118e24-742b-4392-8dfa-071518e0573e/1/afc1LQcTViPjP1p-YpJdS6tyL8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/118e24-742b-4392-8dfa-071518e0573e/1/afc1LQcTViPjP1p-YpJdS6tyL8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:d2:90:cc:5d:46:30:8e:36:ce:dd:e9:32:ef:47:e7:ad:75:
3c:59:38:b2:be:1d:51:ed:4c:86:08:3c:b1:47:0c:ff:67:ae:
f7:24:e8:29:10:a4:df:8c:72:60:a4:71:0e:84:d4:5c:36:8b:
c9:03:57:d5:3d:4b:3f:d4:b6:2b:d1:44:0b:44:cd:b1:f7:bd:
7a:ba:a9:54:a1:4f:f7:32:ca:c8:ec:74:e5:ac:1b:16:c5:4b:
ad:27:9d:20:07:6b:0e:98:f9:b7:ce:7b:a7:d7:1e:ce:79:c4:
fa:84:c4:80:db:62:2c:9d:77:36:06:97:97:f5:99:2d:d9:7d:
19:51:85:f9:4d:2b:a8:35:3e:9c:de:d4:cf:b0:be:93:9f:98:
05:0a:4d:bc:ce:a9:67:0e:08:06:58:76:f5:ec:fa:eb:57:64:
5b:ae:7d:52:04:5f:4c:74:6f:27:f4:8a:ce:85:d8:42:c1:bb:
97:78:0e:29:40:6c:c5:12:d3:a2:0e:fd:e0:74:5b:7f:ba:08:
29:e8:3f:ac:75:52:d9:ed:a9:9c:d0:9d:e9:a4:d6:b2:12:3b:
14:dc:72:a3:ba:fc:10:64:4a:bc:ef:09:28:c0:3a:4b:8f:84:
d6:43:5a:08:27:d4:f1:8f:08:c2:87:83:55:bf:2f:85:40:c6:
33:e4:db:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:08:54 2025 by rpki-client