Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/a1923f-26d7-44be-a2be-03cbdb8ff960/1/AfZJudBUYiex1GJsIIHk09qFDv4.mft
File: AfZJudBUYiex1GJsIIHk09qFDv4.mft (raw, json)
Hash identifier: 1aS3b1B5iXJb7Ph/qK9lOuhw7RPR6SejCXtgWcMD2RM=
Subject key identifier: A3:89:4A:FE:98:C7:6B:BF:4D:61:C2:9E:D1:9F:20:3D:FA:96:C7:87
Authority key identifier: 01:F6:49:B9:D0:54:62:27:B1:D4:62:6C:20:81:E4:D3:DA:85:0E:FE
Certificate issuer: /CN=01f649b9d0546227b1d4626c2081e4d3da850efe
Certificate serial: 0199FC21B148057C7B9EB9C4D6CD571C28D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AfZJudBUYiex1GJsIIHk09qFDv4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/a1923f-26d7-44be-a2be-03cbdb8ff960/1/AfZJudBUYiex1GJsIIHk09qFDv4.mft
Manifest number: 13CB
Signing time: Sun 19 Oct 2025 11:01:30 +0000
Manifest this update: Sun 19 Oct 2025 11:01:30 +0000
Manifest next update: Mon 20 Oct 2025 11:01:30 +0000
Files and hashes: 1: AfZJudBUYiex1GJsIIHk09qFDv4.crl (hash: FfleYwM9uI6zKm73bonh6cLrt4adw9Ro2ukDIa/IkYY=)
2: bjnOU2JwIyBhG3a2k5FUAWGDatE.roa (hash: qBdlY6EWSQACgnafmgz/gnCk4zq1L3YPmsFgf+M1bHo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/a1923f-26d7-44be-a2be-03cbdb8ff960/1/AfZJudBUYiex1GJsIIHk09qFDv4.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/a1923f-26d7-44be-a2be-03cbdb8ff960/1/AfZJudBUYiex1GJsIIHk09qFDv4.mft
rsync://rpki.ripe.net/repository/DEFAULT/AfZJudBUYiex1GJsIIHk09qFDv4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:b1:48:05:7c:7b:9e:b9:c4:d6:cd:57:1c:28:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01f649b9d0546227b1d4626c2081e4d3da850efe
Validity
Not Before: Oct 19 11:01:30 2025 GMT
Not After : Oct 20 11:01:30 2025 GMT
Subject: CN=a3894afe98c76bbf4d61c29ed19f203dfa96c787
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:8c:22:f6:40:39:54:f5:88:c8:ed:03:98:82:
29:27:b8:b3:cc:6d:fb:df:33:c9:dd:5c:eb:38:aa:
29:cc:6c:ae:70:b1:6b:fa:8f:8b:d7:eb:77:97:d7:
c3:21:1e:71:b0:9d:d7:93:ab:fe:e4:53:1b:a7:30:
f1:59:c9:a6:2e:8e:2b:6d:d2:09:8b:a5:17:e5:c4:
7f:f6:e5:5f:14:4a:41:53:d5:2c:94:d0:42:8d:60:
04:81:0b:33:b5:b8:ef:b6:96:43:40:20:f7:98:7e:
61:61:b2:1c:14:dd:d1:d3:b5:46:28:78:b1:ce:68:
01:42:87:98:0e:db:3a:4d:ca:5f:e8:45:5e:bb:18:
27:64:4f:25:d9:f6:0f:5b:46:a4:0c:05:0e:34:ac:
98:e5:bb:6a:79:ce:ae:35:15:31:a1:36:42:0e:9f:
74:5c:19:9f:c9:97:52:c7:be:c0:1d:bd:d2:ea:4e:
7b:0d:20:4f:79:f9:90:44:6a:26:1f:39:db:58:b7:
db:84:8d:89:05:5e:4e:0e:ab:2e:90:55:3f:01:38:
ee:f6:a8:60:96:7f:76:f3:11:54:97:28:3f:79:04:
61:3f:41:d5:63:56:91:96:4f:86:21:f1:e3:6b:a6:
72:4e:61:8f:46:3d:11:ee:f0:d3:b3:c6:6a:d4:da:
32:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:89:4A:FE:98:C7:6B:BF:4D:61:C2:9E:D1:9F:20:3D:FA:96:C7:87
X509v3 Authority Key Identifier:
keyid:01:F6:49:B9:D0:54:62:27:B1:D4:62:6C:20:81:E4:D3:DA:85:0E:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AfZJudBUYiex1GJsIIHk09qFDv4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/a1923f-26d7-44be-a2be-03cbdb8ff960/1/AfZJudBUYiex1GJsIIHk09qFDv4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/a1923f-26d7-44be-a2be-03cbdb8ff960/1/AfZJudBUYiex1GJsIIHk09qFDv4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:db:8d:1f:1a:5d:87:a5:26:68:42:4f:0e:18:c4:d4:e2:39:
43:72:08:41:e8:3e:86:93:f6:f4:1b:db:dc:00:8e:9c:dd:29:
08:83:ed:92:ca:87:de:f8:bc:ce:95:cd:89:c7:f9:d8:98:7f:
a6:93:c6:08:2d:f3:ce:b5:82:6c:0a:62:31:cc:2c:f8:62:72:
ef:f6:99:d3:ad:c4:fd:18:b5:b4:ca:c0:29:d8:d1:05:9e:0b:
2e:27:48:0e:13:62:52:ae:ce:a7:f4:95:32:4f:d0:c0:32:68:
1b:a5:ab:46:c0:f0:a0:12:9c:2a:30:11:7c:4d:e0:e9:7b:fb:
7f:67:b1:97:06:6b:32:03:87:cb:2e:9a:2c:15:f8:e6:49:8a:
21:74:b1:ee:31:7f:72:7e:91:9d:02:da:d5:28:5e:83:ba:14:
41:45:da:d1:1d:11:42:1a:b0:c3:20:16:3a:5c:74:ad:00:c3:
8b:26:02:75:9f:30:35:e3:b8:85:42:8a:b9:48:35:e4:5d:78:
7b:f3:34:b9:1e:a9:ac:0e:99:28:9a:57:8c:17:70:27:8b:10:
ef:0c:39:bf:22:d8:58:20:d9:1b:6e:b8:0e:2e:11:81:3a:e8:
e4:74:75:28:60:c6:2a:f6:fd:90:55:0a:7c:7b:02:5c:9a:05:
ca:84:b0:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:49:23 2025 by rpki-client