Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/a1923f-26d7-44be-a2be-03cbdb8ff960/1/AfZJudBUYiex1GJsIIHk09qFDv4.mft
File: AfZJudBUYiex1GJsIIHk09qFDv4.mft (raw, json)
Hash identifier: OARBwTxmyGLhs9TLUfcKPT5KTgXRpV8DZrBuPEJYydg=
Subject key identifier: 22:B3:C4:8B:03:A2:B5:F4:14:86:D1:31:6E:A9:BA:F7:E2:CE:D8:DD
Authority key identifier: 01:F6:49:B9:D0:54:62:27:B1:D4:62:6C:20:81:E4:D3:DA:85:0E:FE
Certificate issuer: /CN=01f649b9d0546227b1d4626c2081e4d3da850efe
Certificate serial: 0198D6985A1933DEF6B150B81A40102D6AAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AfZJudBUYiex1GJsIIHk09qFDv4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/a1923f-26d7-44be-a2be-03cbdb8ff960/1/AfZJudBUYiex1GJsIIHk09qFDv4.mft
Manifest number: 1333
Signing time: Sat 23 Aug 2025 11:02:45 +0000
Manifest this update: Sat 23 Aug 2025 11:02:45 +0000
Manifest next update: Sun 24 Aug 2025 11:02:45 +0000
Files and hashes: 1: AfZJudBUYiex1GJsIIHk09qFDv4.crl (hash: 2tpdcESS0LojIFflEuB9yaKEX6rOsx74VI9hmslisqQ=)
2: bjnOU2JwIyBhG3a2k5FUAWGDatE.roa (hash: qBdlY6EWSQACgnafmgz/gnCk4zq1L3YPmsFgf+M1bHo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/a1923f-26d7-44be-a2be-03cbdb8ff960/1/AfZJudBUYiex1GJsIIHk09qFDv4.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/a1923f-26d7-44be-a2be-03cbdb8ff960/1/AfZJudBUYiex1GJsIIHk09qFDv4.mft
rsync://rpki.ripe.net/repository/DEFAULT/AfZJudBUYiex1GJsIIHk09qFDv4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 11:02:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:5a:19:33:de:f6:b1:50:b8:1a:40:10:2d:6a:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01f649b9d0546227b1d4626c2081e4d3da850efe
Validity
Not Before: Aug 23 11:02:45 2025 GMT
Not After : Aug 24 11:02:45 2025 GMT
Subject: CN=22b3c48b03a2b5f41486d1316ea9baf7e2ced8dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e0:a5:21:64:96:76:23:13:ba:ee:ae:a4:0a:
6e:fa:0f:ca:de:dc:2f:de:a7:d7:a8:62:3d:04:ff:
28:4a:a2:7a:c3:ae:89:1f:34:ab:9b:76:0f:f0:b5:
7b:22:65:67:0d:51:c3:4d:5f:0c:da:cc:19:8f:fc:
03:00:24:e5:61:9b:23:63:ab:3a:84:1b:60:6b:92:
ae:3b:92:be:d7:5e:9b:41:2b:a6:fc:2c:1b:6d:e1:
6f:7d:b5:40:f0:fc:6d:80:2c:8e:34:29:8a:f6:bc:
cd:92:d4:18:57:b2:13:cb:9d:74:29:97:4f:df:7b:
dd:c8:cf:18:68:a6:04:48:ea:a1:cd:dd:4f:c5:ea:
8d:6a:8e:da:20:08:52:4e:8e:08:be:bc:26:1b:34:
c4:01:c5:5c:91:33:0d:48:40:02:47:58:c1:22:15:
09:12:76:00:27:86:e2:bc:ba:f4:45:57:0d:c9:e9:
95:b2:e9:5e:9c:25:bf:33:28:5b:a4:72:d5:c3:62:
0d:41:db:7d:45:ed:a3:2f:d8:42:96:a1:e4:22:4e:
29:74:11:e2:5d:fd:7c:cd:ba:d6:67:d7:5f:d3:78:
90:3a:c1:8d:d5:a2:2a:41:bf:96:a5:02:30:27:e4:
7f:a9:c2:ac:0b:2a:8d:97:9e:33:ea:3d:e1:74:14:
b5:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:B3:C4:8B:03:A2:B5:F4:14:86:D1:31:6E:A9:BA:F7:E2:CE:D8:DD
X509v3 Authority Key Identifier:
keyid:01:F6:49:B9:D0:54:62:27:B1:D4:62:6C:20:81:E4:D3:DA:85:0E:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AfZJudBUYiex1GJsIIHk09qFDv4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/a1923f-26d7-44be-a2be-03cbdb8ff960/1/AfZJudBUYiex1GJsIIHk09qFDv4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/a1923f-26d7-44be-a2be-03cbdb8ff960/1/AfZJudBUYiex1GJsIIHk09qFDv4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:db:9c:c0:37:9f:d6:58:11:e3:01:86:c5:7c:63:ed:e4:e1:
c0:f6:9b:80:7a:2a:af:21:60:55:6f:f2:f5:64:e0:73:d9:e5:
b6:fa:96:ad:f1:53:c0:59:ea:5f:64:c4:c0:b0:e1:3c:c1:e4:
62:49:a3:53:19:c8:68:df:74:4f:ee:f4:e9:4d:54:75:d6:c8:
48:b5:6a:09:6a:1a:cd:ba:ad:f5:f2:4d:50:ef:bf:e6:41:f2:
dc:c3:6b:c9:be:a9:fc:f5:ca:7e:c3:d3:02:21:a6:25:c1:64:
f0:f2:f7:3d:50:2a:9c:fb:8d:45:fe:47:3c:13:d1:a7:58:b5:
2a:87:a0:f5:24:3a:f1:19:41:ba:40:f6:fa:aa:3e:90:26:14:
f6:bc:13:97:95:21:9b:f0:20:41:da:ee:48:64:a2:73:90:99:
ee:4e:80:e0:9c:a8:a5:8b:ba:fa:e7:2d:48:bd:62:6d:19:e2:
16:cb:7c:0f:04:2d:7d:82:05:a1:a5:bd:4c:cf:ac:50:b5:8b:
2c:0d:fa:e4:87:18:34:bf:66:aa:6e:de:65:76:e7:58:81:65:
f1:29:4e:59:30:9f:35:f5:7c:57:81:7a:b0:4b:25:3b:3f:51:
13:52:5e:99:d5:c2:21:57:91:2b:36:12:b1:17:e9:93:f4:08:
96:f1:7c:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:06:39 2025 by rpki-client