Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/fdad8c-9ed3-4f01-b107-7486c0582f2a/1/afjrNm_GyKCb-xQPFQX57GddQuQ.mft
File: afjrNm_GyKCb-xQPFQX57GddQuQ.mft (raw, json)
Hash identifier: ru7goA97rDEGHm3WhXLGfqmUxyz4iZ9leD5kN/r66wg=
Subject key identifier: B3:B0:ED:5F:11:2F:FC:19:8F:B4:4A:5A:6E:CB:52:7E:82:B4:0A:EE
Authority key identifier: 69:F8:EB:36:6F:C6:C8:A0:9B:FB:14:0F:15:05:F9:EC:67:5D:42:E4
Certificate issuer: /CN=69f8eb366fc6c8a09bfb140f1505f9ec675d42e4
Certificate serial: 0198D473D9D1FC6DB2C63C2005C13A53F162
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/afjrNm_GyKCb-xQPFQX57GddQuQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/fdad8c-9ed3-4f01-b107-7486c0582f2a/1/afjrNm_GyKCb-xQPFQX57GddQuQ.mft
Manifest number: 091D
Signing time: Sat 23 Aug 2025 01:03:38 +0000
Manifest this update: Sat 23 Aug 2025 01:03:38 +0000
Manifest next update: Sun 24 Aug 2025 01:03:38 +0000
Files and hashes: 1: afjrNm_GyKCb-xQPFQX57GddQuQ.crl (hash: /37ZXdWRT3pdrOrPlA43zeq0tYtx+gM2EbBqUqv0S4I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/fdad8c-9ed3-4f01-b107-7486c0582f2a/1/afjrNm_GyKCb-xQPFQX57GddQuQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/fdad8c-9ed3-4f01-b107-7486c0582f2a/1/afjrNm_GyKCb-xQPFQX57GddQuQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/afjrNm_GyKCb-xQPFQX57GddQuQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:d9:d1:fc:6d:b2:c6:3c:20:05:c1:3a:53:f1:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69f8eb366fc6c8a09bfb140f1505f9ec675d42e4
Validity
Not Before: Aug 23 01:03:38 2025 GMT
Not After : Aug 24 01:03:38 2025 GMT
Subject: CN=b3b0ed5f112ffc198fb44a5a6ecb527e82b40aee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:36:cd:d5:17:99:ba:e4:00:7c:a3:37:02:43:
c5:c1:43:d0:a1:f4:77:93:14:8c:bc:03:3a:9f:e2:
2f:3b:30:eb:1c:fb:50:bf:d6:f6:de:39:bf:60:5c:
25:67:01:9c:f6:50:d9:cd:75:bd:a5:df:85:dc:6f:
fb:75:bc:fb:4d:d8:e7:40:c1:73:f0:3a:7c:44:14:
d8:bf:dd:2f:4b:74:67:7a:8e:40:2d:0d:ca:d7:4f:
16:53:51:bc:2d:1f:8d:b9:43:88:92:0f:f6:69:66:
69:60:6e:26:81:3c:55:b1:7a:b2:87:79:93:b1:ca:
16:47:05:d1:3b:0d:e1:a2:93:9d:68:f2:90:fc:fc:
6c:c2:ca:bb:a1:72:09:fa:e6:e9:0f:42:88:9a:7a:
b1:c9:28:00:b8:5d:3e:bd:45:b9:9b:56:2f:13:d4:
d0:dc:88:c1:33:e4:22:c0:a9:28:82:5c:ab:70:81:
8c:47:61:90:83:be:f6:bb:61:ff:4d:29:1a:ae:be:
ba:0c:65:a7:e8:24:dd:52:93:5c:c9:9a:df:d2:45:
1e:cb:9e:59:3e:0c:c5:e2:4a:3e:43:3f:07:1d:9a:
23:bd:3c:90:9d:95:18:8d:43:11:5c:d3:4b:f5:d9:
57:ca:ee:2a:17:d1:36:8c:34:1b:9b:6c:2f:8b:62:
46:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:B0:ED:5F:11:2F:FC:19:8F:B4:4A:5A:6E:CB:52:7E:82:B4:0A:EE
X509v3 Authority Key Identifier:
keyid:69:F8:EB:36:6F:C6:C8:A0:9B:FB:14:0F:15:05:F9:EC:67:5D:42:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/afjrNm_GyKCb-xQPFQX57GddQuQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/fdad8c-9ed3-4f01-b107-7486c0582f2a/1/afjrNm_GyKCb-xQPFQX57GddQuQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/fdad8c-9ed3-4f01-b107-7486c0582f2a/1/afjrNm_GyKCb-xQPFQX57GddQuQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:c7:99:02:48:ad:83:a3:9d:68:6a:99:a8:ef:e3:6b:b1:26:
e1:05:ad:20:55:26:d6:b2:27:15:c7:2c:05:75:62:c8:9b:bd:
a7:97:58:90:1c:e4:11:47:61:26:76:52:72:2c:a6:ad:50:97:
5f:40:f4:d9:d0:e9:a2:19:b8:10:ab:30:2d:50:10:ba:58:ae:
db:1b:b6:cd:a2:f1:76:24:fe:7e:97:21:a4:80:f6:db:a9:ed:
d2:73:e5:33:d4:e2:e8:13:93:fd:5a:f6:4a:4c:53:e7:ed:cf:
92:7d:39:a8:43:b7:aa:1d:c5:73:27:67:24:9f:33:ff:c5:4f:
4f:b7:a9:24:43:f8:4f:e0:38:66:f7:d8:fa:95:e4:13:51:49:
4d:15:0f:81:22:f6:fc:29:1c:85:20:6e:41:8d:2e:a5:52:46:
d0:e1:9a:fe:d6:db:7a:a8:ab:b2:00:6e:ea:57:0c:21:06:ac:
78:84:bd:30:a2:80:65:ab:6e:02:47:72:1d:fe:c6:70:aa:ae:
96:e9:9f:1d:00:2c:ed:ff:9b:c4:54:4a:1e:68:27:24:c8:8a:
9a:e7:81:5b:ee:2e:12:0c:e8:c2:42:60:3d:dc:ae:3d:d5:c9:
60:8f:5d:58:bc:84:c1:6d:9c:a9:aa:87:e6:87:6c:06:75:e2:
88:fb:89:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:16:58 2025 by rpki-client