Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8417a0-0777-446e-97e1-353b3a633ada/1/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.mft
File: AfPvPg6pWpdVN9XCXZPLdq9ocjQ.mft (raw, json)
Hash identifier: Q+CtkU/48S7fuILr735tNsEbz6ZEHZQbcK47DbN2TMw=
Subject key identifier: 29:B9:CA:7F:CE:6E:F1:9B:E7:D6:57:DF:FD:D4:B1:ED:00:71:C2:8C
Authority key identifier: 01:F3:EF:3E:0E:A9:5A:97:55:37:D5:C2:5D:93:CB:76:AF:68:72:34
Certificate issuer: /CN=01f3ef3e0ea95a975537d5c25d93cb76af687234
Certificate serial: 019A006C7DEDB21AF9AF8A59EF225AF06C5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8417a0-0777-446e-97e1-353b3a633ada/1/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.mft
Manifest number: 1705
Signing time: Mon 20 Oct 2025 07:01:41 +0000
Manifest this update: Mon 20 Oct 2025 07:01:41 +0000
Manifest next update: Tue 21 Oct 2025 07:01:41 +0000
Files and hashes: 1: 42hpqWqY72USafsvfiD_518D4aY.roa (hash: XyqSHkNb93lXjMdBQV3tT6d41VyHCZFCyukyVX/G7/A=)
2: AfPvPg6pWpdVN9XCXZPLdq9ocjQ.crl (hash: zZu+ayTF7Ip2TzvccfDNNo5+IbG7/9A0LpSLB37uJvY=)
3: B_3pca4XmmEyoD7_YWQ5xsaTGlA.roa (hash: n5M6+Js+wLuWN3HaqVwvyZeizy4tawLMu5EBkNvd9Nw=)
4: GNcGFP48VRO_QOUxz3CvJSh90oA.roa (hash: 9T1HgBLEzXKt2GaC2y8FBctN+punw/ln3V52HLktRUQ=)
5: JOvZJvxVCIjogtIv-LfIwpT-8XY.roa (hash: IRDQFzfaDrUN19oYWZOku8P+RpACtFrOm+7KAJXqJUs=)
6: g9Hs1uIFeelsIxcu9-JFATbg5r0.roa (hash: i1uLdd6dy3tsCAr6HgKPaDpJNpr4x+g5kpnEdrNnrzs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/8417a0-0777-446e-97e1-353b3a633ada/1/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/8417a0-0777-446e-97e1-353b3a633ada/1/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 07:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:6c:7d:ed:b2:1a:f9:af:8a:59:ef:22:5a:f0:6c:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01f3ef3e0ea95a975537d5c25d93cb76af687234
Validity
Not Before: Oct 20 07:01:41 2025 GMT
Not After : Oct 21 07:01:41 2025 GMT
Subject: CN=29b9ca7fce6ef19be7d657dffdd4b1ed0071c28c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:17:b5:29:63:52:e6:f6:06:91:76:ed:c9:39:
05:0b:bf:15:d4:31:4f:70:db:26:5b:ba:2c:d2:ae:
1d:58:cc:3c:80:4d:63:06:24:7c:da:11:71:a4:08:
1e:22:97:f6:17:6f:bd:8f:e0:f4:97:13:4d:8a:e0:
c7:12:c5:9f:e3:7f:3a:5d:51:65:83:26:8f:02:9d:
a2:2b:0b:09:54:f3:4f:73:a1:42:f7:43:c5:1c:d9:
25:a2:20:19:f0:36:c0:90:0c:55:af:46:f0:b8:3a:
59:7a:ec:76:c4:7a:15:02:5e:50:50:ea:90:7a:aa:
d4:87:f3:f2:f1:af:0c:cd:35:19:3d:1b:3c:9a:a0:
af:91:e6:fe:1d:c0:df:aa:13:3e:b9:23:d5:c1:df:
64:8a:38:b7:54:d2:9e:08:54:fb:dd:5d:2a:90:82:
5a:9d:cc:a9:09:81:48:e5:32:69:90:96:9d:f9:94:
3a:10:01:71:02:f4:79:66:94:a2:2d:c9:22:a6:6b:
6d:69:5d:b2:f7:5a:26:8b:3f:09:94:dc:4d:11:ec:
c7:05:88:78:e3:da:12:16:30:14:67:5f:a0:79:b9:
f4:e4:d5:bd:1d:e4:5f:d2:96:be:aa:e0:38:20:ac:
ca:83:c8:5a:5d:42:bb:fa:bf:fc:2b:70:78:3a:bb:
f3:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:B9:CA:7F:CE:6E:F1:9B:E7:D6:57:DF:FD:D4:B1:ED:00:71:C2:8C
X509v3 Authority Key Identifier:
keyid:01:F3:EF:3E:0E:A9:5A:97:55:37:D5:C2:5D:93:CB:76:AF:68:72:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8417a0-0777-446e-97e1-353b3a633ada/1/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8417a0-0777-446e-97e1-353b3a633ada/1/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:e3:92:28:03:d6:92:10:8f:86:f3:e9:63:8f:ae:21:3e:22:
c5:57:fa:30:03:cb:4f:bd:53:75:09:20:ca:1d:af:04:ef:bf:
2f:e7:22:a7:45:46:aa:ee:65:56:83:9d:3a:2b:93:da:30:9e:
cb:00:d1:01:74:77:17:0e:53:c3:7d:51:a8:59:e5:1e:89:70:
af:20:1f:a3:76:bc:0c:b6:f2:6a:cd:de:60:df:61:0f:61:30:
c5:4c:05:fc:65:a3:cd:91:42:75:5a:72:c4:0a:0d:ba:88:53:
3d:f1:dd:0a:ec:e2:55:b7:9c:7e:be:1e:a9:d8:19:66:54:03:
dd:e1:01:da:34:76:cd:ae:23:69:90:45:6c:95:ba:72:69:a1:
86:96:68:a5:9d:00:f0:75:dd:76:30:9d:cd:9f:49:54:76:e4:
d3:d3:10:dc:b3:c6:9b:71:04:ff:42:ab:03:05:e2:b0:dc:31:
fa:ff:35:fd:6b:39:68:b6:4e:b1:f3:7d:45:c7:d3:b5:77:f4:
80:03:2e:e5:01:1e:c0:d8:c2:ef:6e:70:a8:d1:81:ac:8e:99:
6f:f5:9d:c6:24:51:5d:53:60:08:bf:94:13:da:c1:d6:b4:f4:
6d:67:c2:84:b4:f8:e6:e6:3c:b7:cd:5b:a4:c0:ee:81:2f:92:
18:52:c9:64
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoAbH3tshr5r4pZ7yJa8GxdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxZjNlZjNlMGVhOTVhOTc1NTM3ZDVjMjVkOTNjYjc2YWY2
ODcyMzQwHhcNMjUxMDIwMDcwMTQxWhcNMjUxMDIxMDcwMTQxWjAzMTEwLwYDVQQD
EygyOWI5Y2E3ZmNlNmVmMTliZTdkNjU3ZGZmZGQ0YjFlZDAwNzFjMjhjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvRe1KWNS5vYGkXbtyTkFC78V1DFP
cNsmW7os0q4dWMw8gE1jBiR82hFxpAgeIpf2F2+9j+D0lxNNiuDHEsWf4386XVFl
gyaPAp2iKwsJVPNPc6FC90PFHNkloiAZ8DbAkAxVr0bwuDpZeux2xHoVAl5QUOqQ
eqrUh/Py8a8MzTUZPRs8mqCvkeb+HcDfqhM+uSPVwd9kiji3VNKeCFT73V0qkIJa
ncypCYFI5TJpkJad+ZQ6EAFxAvR5ZpSiLckipmttaV2y91omiz8JlNxNEezHBYh4
49oSFjAUZ1+gebn05NW9HeRf0pa+quA4IKzKg8haXUK7+r/8K3B4OrvztQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCm5yn/ObvGb59ZX3/3Use0AccKMMB8GA1UdIwQY
MBaAFAHz7z4OqVqXVTfVwl2Ty3avaHI0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQWZQdlBnNnBXcGRWTjlYQ1haUExkcTlvY2pRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS84NDE3YTAtMDc3Ny00NDZlLTk3ZTEt
MzUzYjNhNjMzYWRhLzEvQWZQdlBnNnBXcGRWTjlYQ1haUExkcTlvY2pRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS84NDE3YTAtMDc3Ny00NDZlLTk3ZTEtMzUzYjNhNjMzYWRh
LzEvQWZQdlBnNnBXcGRWTjlYQ1haUExkcTlvY2pRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArOOSKAPW
khCPhvPpY4+uIT4ixVf6MAPLT71TdQkgyh2vBO+/L+cip0VGqu5lVoOdOiuT2jCe
ywDRAXR3Fw5Tw31RqFnlHolwryAfo3a8DLbyas3eYN9hD2EwxUwF/GWjzZFCdVpy
xAoNuohTPfHdCuziVbecfr4eqdgZZlQD3eEB2jR2za4jaZBFbJW6cmmhhpZopZ0A
8HXddjCdzZ9JVHbk09MQ3LPGm3EE/0KrAwXisNwx+v81/Ws5aLZOsfN9RcfTtXf0
gAMu5QEewNjC725wqNGBrI6Zb/WdxiRRXVNgCL+UE9rB1rT0bWfChLT45uY8t81b
pMDugS+SGFLJZA==
-----END CERTIFICATE-----
Generated at Mon Oct 20 11:35:20 2025 by rpki-client