Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8417a0-0777-446e-97e1-353b3a633ada/1/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.mft
File: AfPvPg6pWpdVN9XCXZPLdq9ocjQ.mft (raw, json)
Hash identifier: zmU4p722caSfW8F34jKzhR0vLFC84SVDgFuXpNiHPE0=
Subject key identifier: A7:BE:C8:A4:27:EB:CC:7B:05:84:AD:CE:75:55:C6:15:D4:D2:30:1C
Authority key identifier: 01:F3:EF:3E:0E:A9:5A:97:55:37:D5:C2:5D:93:CB:76:AF:68:72:34
Certificate issuer: /CN=01f3ef3e0ea95a975537d5c25d93cb76af687234
Certificate serial: 0199FE7E06120629CFE7FE37B650520E4F15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8417a0-0777-446e-97e1-353b3a633ada/1/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.mft
Manifest number: 1704
Signing time: Sun 19 Oct 2025 22:01:35 +0000
Manifest this update: Sun 19 Oct 2025 22:01:35 +0000
Manifest next update: Mon 20 Oct 2025 22:01:35 +0000
Files and hashes: 1: 42hpqWqY72USafsvfiD_518D4aY.roa (hash: XyqSHkNb93lXjMdBQV3tT6d41VyHCZFCyukyVX/G7/A=)
2: AfPvPg6pWpdVN9XCXZPLdq9ocjQ.crl (hash: wbnv/AYSTEfbp28sLzHzD9ZUaVM1bAkA+0ZaNDMKyuI=)
3: B_3pca4XmmEyoD7_YWQ5xsaTGlA.roa (hash: n5M6+Js+wLuWN3HaqVwvyZeizy4tawLMu5EBkNvd9Nw=)
4: GNcGFP48VRO_QOUxz3CvJSh90oA.roa (hash: 9T1HgBLEzXKt2GaC2y8FBctN+punw/ln3V52HLktRUQ=)
5: JOvZJvxVCIjogtIv-LfIwpT-8XY.roa (hash: IRDQFzfaDrUN19oYWZOku8P+RpACtFrOm+7KAJXqJUs=)
6: g9Hs1uIFeelsIxcu9-JFATbg5r0.roa (hash: i1uLdd6dy3tsCAr6HgKPaDpJNpr4x+g5kpnEdrNnrzs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/8417a0-0777-446e-97e1-353b3a633ada/1/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/8417a0-0777-446e-97e1-353b3a633ada/1/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:7e:06:12:06:29:cf:e7:fe:37:b6:50:52:0e:4f:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01f3ef3e0ea95a975537d5c25d93cb76af687234
Validity
Not Before: Oct 19 22:01:35 2025 GMT
Not After : Oct 20 22:01:35 2025 GMT
Subject: CN=a7bec8a427ebcc7b0584adce7555c615d4d2301c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:3a:b5:c6:8e:f2:be:63:52:f4:dc:8f:0b:cb:
20:dc:d6:67:75:ac:e3:4b:33:ef:40:ff:d9:65:be:
0a:c1:c1:5e:81:3c:31:03:d3:62:97:aa:a5:be:23:
5d:72:fa:a1:d7:8f:1c:ff:e7:4e:a6:c7:01:2b:ae:
ba:e5:64:68:3e:38:e6:d8:d2:c6:d2:f7:ba:44:ff:
5e:76:0d:25:3e:db:3a:10:67:e0:ac:54:f7:3f:8d:
73:40:36:23:5f:cb:50:a5:66:fd:0e:da:8d:e0:01:
45:77:c2:e5:df:cc:82:2e:6e:99:89:19:6e:70:30:
42:53:9b:66:aa:cd:e4:09:96:49:fc:fa:be:59:62:
c9:7c:eb:dc:af:be:70:d8:1f:29:30:bd:52:5e:17:
81:21:d0:c7:ab:a1:f9:26:1a:30:6e:cc:4f:37:9c:
1a:c9:7f:5e:13:9d:c4:94:bb:f4:a0:81:e4:2f:32:
fb:48:20:5f:bb:c4:2e:e1:3a:51:65:87:7e:82:ca:
6a:74:fc:1a:c6:89:50:99:6e:ea:ed:44:e2:1b:c9:
e9:6a:88:66:5a:bd:da:7e:f8:91:da:b4:4c:5b:ba:
30:37:a3:a3:48:c1:02:4c:e7:ad:60:8a:0e:b6:cb:
6a:3e:2a:85:89:04:80:c9:39:ab:00:f1:24:ac:29:
da:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:BE:C8:A4:27:EB:CC:7B:05:84:AD:CE:75:55:C6:15:D4:D2:30:1C
X509v3 Authority Key Identifier:
keyid:01:F3:EF:3E:0E:A9:5A:97:55:37:D5:C2:5D:93:CB:76:AF:68:72:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8417a0-0777-446e-97e1-353b3a633ada/1/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8417a0-0777-446e-97e1-353b3a633ada/1/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:48:fd:1c:20:36:c3:0c:2e:4e:62:ab:14:aa:e1:94:f6:51:
a9:5e:7c:e5:71:ca:0a:e5:9a:fb:6c:eb:b9:bc:f4:73:0c:f9:
c1:ae:31:25:19:17:5c:44:cd:79:83:4e:7c:e4:42:c3:e3:b1:
bc:f7:f3:48:2a:10:9f:70:a6:db:b8:7d:ea:4e:b5:a9:e5:2e:
93:81:78:78:26:8f:d2:7d:c0:55:9e:0c:d7:f5:ab:42:5d:74:
04:53:f0:02:5a:e3:52:31:10:6d:84:d3:35:71:95:05:ef:8b:
43:e6:b6:3e:1e:a7:71:f3:1d:d3:67:53:4b:c7:23:45:a9:c0:
2e:b1:ff:f5:4e:a9:32:9e:50:12:00:03:6e:ba:ac:d3:a8:df:
3a:45:35:38:54:8d:ad:56:50:07:8f:05:99:e0:72:8c:b4:9f:
15:97:4c:38:8f:dc:75:ff:eb:de:43:32:cd:b3:36:ed:d1:00:
1c:dc:af:5b:f6:7c:3c:d6:99:76:54:38:db:bf:7a:59:2f:a6:
a1:50:b6:05:52:bf:41:fb:9b:64:05:2e:25:5d:88:a9:73:9d:
f4:85:e7:3e:71:2a:8e:a9:1d:1f:5f:b8:da:ee:27:13:60:ab:
1f:39:71:ce:36:f1:91:a1:e5:4f:32:70:44:ef:92:b9:08:3e:
6a:0d:e6:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:49:28 2025 by rpki-client