Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/68239f-09a3-4108-89ba-eee50dd9193c/1/AF8NRLIh9LEcidtolp-Xw8cVSQY.mft
File: AF8NRLIh9LEcidtolp-Xw8cVSQY.mft (raw, json)
Hash identifier: 6QMvc+I4z6B/EkPGJoF3wnGAIiFpRPCjV88/5NhQl9I=
Subject key identifier: 66:71:B9:6F:2A:E6:FC:52:AB:F3:7F:71:9D:5F:9C:93:6D:A4:3C:12
Authority key identifier: 00:5F:0D:44:B2:21:F4:B1:1C:89:DB:68:96:9F:97:C3:C7:15:49:06
Certificate issuer: /CN=005f0d44b221f4b11c89db68969f97c3c7154906
Certificate serial: 019A0035382B3AE0819152C9CFB5D7B14F68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AF8NRLIh9LEcidtolp-Xw8cVSQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/68239f-09a3-4108-89ba-eee50dd9193c/1/AF8NRLIh9LEcidtolp-Xw8cVSQY.mft
Manifest number: 16E4
Signing time: Mon 20 Oct 2025 06:01:18 +0000
Manifest this update: Mon 20 Oct 2025 06:01:18 +0000
Manifest next update: Tue 21 Oct 2025 06:01:18 +0000
Files and hashes: 1: AF8NRLIh9LEcidtolp-Xw8cVSQY.crl (hash: +idWNdZIUqU8A4iKHjVZpOODrrhRh2IlyiU6nOxn2Ns=)
2: YU4fCfmpK-fuEOwSolTjGJvHl-Q.roa (hash: jEvy+I1e+1GaLBXiJtzyH21Rx3ZNEpokSAtj3mt7uI4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/68239f-09a3-4108-89ba-eee50dd9193c/1/AF8NRLIh9LEcidtolp-Xw8cVSQY.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/68239f-09a3-4108-89ba-eee50dd9193c/1/AF8NRLIh9LEcidtolp-Xw8cVSQY.mft
rsync://rpki.ripe.net/repository/DEFAULT/AF8NRLIh9LEcidtolp-Xw8cVSQY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:35:38:2b:3a:e0:81:91:52:c9:cf:b5:d7:b1:4f:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=005f0d44b221f4b11c89db68969f97c3c7154906
Validity
Not Before: Oct 20 06:01:18 2025 GMT
Not After : Oct 21 06:01:18 2025 GMT
Subject: CN=6671b96f2ae6fc52abf37f719d5f9c936da43c12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:5e:20:00:c8:6d:d0:7f:8b:36:db:df:b5:11:
28:b1:c6:49:8d:b7:41:4c:85:d0:49:22:cb:80:7a:
2d:61:97:d4:48:72:8b:42:11:51:a1:25:40:97:a9:
ff:51:c2:d4:f7:f3:b3:e3:ad:37:94:ab:09:14:2e:
b2:68:bc:23:c5:95:66:f4:6e:1b:9d:9f:01:04:4b:
69:cd:4f:5d:82:d9:e6:67:d8:7f:a8:01:e6:42:8c:
ed:3d:48:7c:37:2c:e7:e2:67:84:09:c4:6c:08:08:
35:8e:55:28:a0:fb:88:c9:77:b1:a6:4f:77:84:35:
45:cc:19:74:bb:e9:eb:d6:79:17:dc:aa:82:b2:5b:
e6:c4:e5:68:5a:ca:aa:89:ea:12:1c:a1:ad:7a:37:
55:74:3d:76:35:39:e9:6d:6c:51:da:9d:4c:cc:55:
91:05:63:93:93:d8:72:84:62:c1:6f:aa:c0:b9:7b:
a3:58:a5:dd:ff:3c:94:b9:65:a9:4a:8b:10:35:98:
28:0c:32:6f:72:a6:27:80:5a:6a:15:b7:0d:83:70:
14:0e:3e:ee:0c:8a:2a:0e:53:ba:95:0b:c1:4b:76:
4a:0f:54:3d:d2:cd:d4:df:c1:2c:f0:1b:61:d7:a3:
db:b8:33:2e:78:09:d5:d1:73:22:de:16:df:59:f1:
4f:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:71:B9:6F:2A:E6:FC:52:AB:F3:7F:71:9D:5F:9C:93:6D:A4:3C:12
X509v3 Authority Key Identifier:
keyid:00:5F:0D:44:B2:21:F4:B1:1C:89:DB:68:96:9F:97:C3:C7:15:49:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AF8NRLIh9LEcidtolp-Xw8cVSQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/68239f-09a3-4108-89ba-eee50dd9193c/1/AF8NRLIh9LEcidtolp-Xw8cVSQY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/68239f-09a3-4108-89ba-eee50dd9193c/1/AF8NRLIh9LEcidtolp-Xw8cVSQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:1c:1f:86:b4:18:2c:7e:37:5c:56:c8:7e:14:61:d0:69:5a:
ba:6e:b3:fc:6e:25:dc:03:7d:e5:c3:22:2f:cf:69:63:27:2b:
db:6e:69:3b:e2:eb:91:76:b2:d9:7b:7d:c3:12:6d:9a:54:b5:
2f:6c:11:b8:fe:2e:76:c4:d9:67:92:cb:31:7f:68:aa:0f:af:
88:0f:df:5c:09:c4:20:c5:bf:54:f0:75:f0:2f:2c:58:d9:96:
07:1d:7e:93:e3:0a:58:d9:0b:13:f5:2b:e9:1d:3f:9b:a9:f8:
97:24:f2:ed:c7:1f:5f:9b:b0:73:cb:bc:2e:7e:52:1b:f6:a5:
29:37:4b:4f:f3:90:37:03:37:b9:23:bc:1b:d8:ba:5d:a7:38:
d7:77:bd:e7:4f:a6:63:0d:97:16:56:74:76:33:d6:44:51:ad:
2b:db:37:8a:af:be:bd:c0:51:a5:cf:27:c6:14:7b:df:75:12:
39:b1:a3:01:50:8f:e5:92:b2:70:83:9c:13:80:64:c3:b6:8e:
90:e8:91:a0:3c:02:cc:f4:71:ae:62:89:e6:85:3e:17:1b:bd:
69:33:6f:2e:bf:4c:28:51:73:3e:0d:41:d7:c2:82:ce:ee:22:
30:01:f1:21:b7:b0:6c:8b:b6:36:ba:b4:ed:1b:4e:d7:0f:12:
96:5e:e0:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:50:05 2025 by rpki-client