Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/fdad8c-9ed3-4f01-b107-7486c0582f2a/1/afjrNm_GyKCb-xQPFQX57GddQuQ.mft
File: afjrNm_GyKCb-xQPFQX57GddQuQ.mft (raw, json)
Hash identifier: s2CWd1MF2p6QfH3t6bN6rsnEYBAwCaReCIFApKlK2ng=
Subject key identifier: F3:C0:A0:94:50:5B:7F:B7:40:EC:82:13:51:7B:04:9B:6C:C6:4A:4F
Authority key identifier: 69:F8:EB:36:6F:C6:C8:A0:9B:FB:14:0F:15:05:F9:EC:67:5D:42:E4
Certificate issuer: /CN=69f8eb366fc6c8a09bfb140f1505f9ec675d42e4
Certificate serial: 0199FBEC0568EFC470FC55C41A0E3B2D0ED9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/afjrNm_GyKCb-xQPFQX57GddQuQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/fdad8c-9ed3-4f01-b107-7486c0582f2a/1/afjrNm_GyKCb-xQPFQX57GddQuQ.mft
Manifest number: 09B6
Signing time: Sun 19 Oct 2025 10:02:52 +0000
Manifest this update: Sun 19 Oct 2025 10:02:52 +0000
Manifest next update: Mon 20 Oct 2025 10:02:52 +0000
Files and hashes: 1: afjrNm_GyKCb-xQPFQX57GddQuQ.crl (hash: bm7b01hwr1RMhWqLPYbgRkXAeSyVmJ0G1PfIIBigkDI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/fdad8c-9ed3-4f01-b107-7486c0582f2a/1/afjrNm_GyKCb-xQPFQX57GddQuQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/fdad8c-9ed3-4f01-b107-7486c0582f2a/1/afjrNm_GyKCb-xQPFQX57GddQuQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/afjrNm_GyKCb-xQPFQX57GddQuQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ec:05:68:ef:c4:70:fc:55:c4:1a:0e:3b:2d:0e:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69f8eb366fc6c8a09bfb140f1505f9ec675d42e4
Validity
Not Before: Oct 19 10:02:52 2025 GMT
Not After : Oct 20 10:02:52 2025 GMT
Subject: CN=f3c0a094505b7fb740ec8213517b049b6cc64a4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:de:2c:53:f4:f5:67:f1:56:0d:ce:9b:85:de:
5f:4e:0c:7b:3c:d3:fe:cf:cc:76:a3:29:6e:d4:9c:
0d:7c:f7:09:1f:d9:1b:9b:ed:80:6e:c1:31:90:70:
4e:34:05:1d:c3:0b:2e:39:ad:fd:3e:40:23:e4:bc:
8b:4c:56:fc:92:b7:31:71:5b:3a:f4:2a:1b:3c:ed:
72:6c:69:a5:c6:79:8b:5f:3b:a7:dc:75:62:57:ba:
a8:9d:91:a4:e0:6e:a7:3a:f3:17:45:50:e6:65:f0:
2f:2a:e6:f9:17:32:2c:1f:03:4e:9b:d9:d8:16:34:
83:30:80:d9:46:ff:46:b5:7e:68:fd:48:e9:24:8b:
fc:25:cc:58:fd:6b:f1:38:3a:6d:16:39:39:d4:6e:
bf:7a:4a:cf:06:86:a5:24:be:f4:57:fe:5a:66:27:
ed:b3:c0:4c:10:e2:75:1c:80:f5:5d:df:1f:7f:dd:
d0:65:4a:13:86:8f:b8:bd:40:d6:eb:fa:a9:8d:ac:
d9:8d:66:74:de:ba:d4:88:65:c2:71:e2:c2:76:3c:
76:0d:ae:20:fc:ae:f3:a1:40:70:41:bd:e1:52:16:
57:8b:63:95:21:e0:19:29:2a:17:f1:53:a4:d9:b1:
ee:aa:d9:30:1f:ae:1d:c0:05:3b:f9:5f:29:27:b7:
b4:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:C0:A0:94:50:5B:7F:B7:40:EC:82:13:51:7B:04:9B:6C:C6:4A:4F
X509v3 Authority Key Identifier:
keyid:69:F8:EB:36:6F:C6:C8:A0:9B:FB:14:0F:15:05:F9:EC:67:5D:42:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/afjrNm_GyKCb-xQPFQX57GddQuQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/fdad8c-9ed3-4f01-b107-7486c0582f2a/1/afjrNm_GyKCb-xQPFQX57GddQuQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/fdad8c-9ed3-4f01-b107-7486c0582f2a/1/afjrNm_GyKCb-xQPFQX57GddQuQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:d6:23:f3:b4:1b:f0:bf:07:03:d2:96:07:5f:83:2d:eb:82:
d6:7c:ac:e6:97:41:27:4b:24:68:38:6e:f7:2e:ee:21:21:c0:
6b:c2:f0:77:02:c7:34:41:7e:fa:76:82:a0:27:fa:0d:98:b8:
03:a8:37:00:ea:a9:c3:74:6d:15:c5:ce:0e:ec:a4:c5:0a:65:
07:2f:ed:dd:1f:1a:68:2e:07:02:c1:85:e5:dc:12:43:11:47:
b0:27:30:eb:84:01:43:a9:e5:98:99:c2:20:63:2b:9e:5e:90:
ba:1d:a0:ec:a2:ea:38:24:8b:3d:ff:87:bf:e0:cf:b6:e1:4a:
7e:fe:fd:55:8e:c0:29:10:1e:38:7a:e1:a9:c9:77:bc:f2:ae:
66:48:2f:ad:38:b3:45:07:a8:73:3c:4b:e6:da:1f:9d:d5:a7:
f9:fe:dc:b2:90:81:16:b7:35:13:ef:11:58:96:04:67:4e:b3:
a7:ee:19:b5:c5:1d:b0:63:ea:7e:d7:b2:e2:b8:eb:49:32:c7:
0b:dd:2d:b2:0b:47:8e:c5:f4:3f:1d:ba:3c:0f:51:fe:50:25:
e2:b3:02:c8:7f:c5:7f:04:c0:1c:50:89:6f:c4:10:8b:2c:d5:
f6:ed:40:2d:f6:b2:d2:2d:5d:3d:2e:0a:fd:53:ee:96:e1:37:
fe:2a:c7:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:07:05 2025 by rpki-client