Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/68239f-09a3-4108-89ba-eee50dd9193c/1/AF8NRLIh9LEcidtolp-Xw8cVSQY.mft
File: AF8NRLIh9LEcidtolp-Xw8cVSQY.mft (raw, json)
Hash identifier: M18cIfHpCv7X9Q50BW3MNiljTIGQ9mfHgBTaUzvbymI=
Subject key identifier: E3:79:56:84:F9:ED:8E:5D:ED:A8:6C:F6:FE:98:5E:4E:6B:8D:D3:04
Authority key identifier: 00:5F:0D:44:B2:21:F4:B1:1C:89:DB:68:96:9F:97:C3:C7:15:49:06
Certificate issuer: /CN=005f0d44b221f4b11c89db68969f97c3c7154906
Certificate serial: 0198D4E02D3D4B06878F8173B1228438FAF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AF8NRLIh9LEcidtolp-Xw8cVSQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/68239f-09a3-4108-89ba-eee50dd9193c/1/AF8NRLIh9LEcidtolp-Xw8cVSQY.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 03:01:57 +0000
Manifest this update: Sat 23 Aug 2025 03:01:57 +0000
Manifest next update: Sun 24 Aug 2025 03:01:57 +0000
Files and hashes: 1: AF8NRLIh9LEcidtolp-Xw8cVSQY.crl (hash: mIShNocEYdWT77ZJZLXNK4+guHZSkFadwfgnmbWhhwE=)
2: YU4fCfmpK-fuEOwSolTjGJvHl-Q.roa (hash: jEvy+I1e+1GaLBXiJtzyH21Rx3ZNEpokSAtj3mt7uI4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/68239f-09a3-4108-89ba-eee50dd9193c/1/AF8NRLIh9LEcidtolp-Xw8cVSQY.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/68239f-09a3-4108-89ba-eee50dd9193c/1/AF8NRLIh9LEcidtolp-Xw8cVSQY.mft
rsync://rpki.ripe.net/repository/DEFAULT/AF8NRLIh9LEcidtolp-Xw8cVSQY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:2d:3d:4b:06:87:8f:81:73:b1:22:84:38:fa:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=005f0d44b221f4b11c89db68969f97c3c7154906
Validity
Not Before: Aug 23 03:01:57 2025 GMT
Not After : Aug 24 03:01:57 2025 GMT
Subject: CN=e3795684f9ed8e5deda86cf6fe985e4e6b8dd304
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:dc:17:19:bd:d7:a4:bc:c1:ac:dc:50:cf:a0:
d4:e6:f4:e8:c8:f3:7b:84:28:d7:34:4d:01:ef:f8:
c0:f6:80:79:e8:fd:25:da:69:2e:02:47:20:44:9e:
69:e4:9b:ba:ef:e1:56:8d:04:d3:08:33:60:04:cf:
a5:fe:99:21:67:d5:9d:3a:af:df:aa:38:0f:8d:07:
a7:69:51:db:bb:92:32:fc:3d:c0:36:9d:29:21:9c:
8c:2c:98:97:a2:85:5f:42:7d:87:57:22:98:6b:71:
ba:72:e4:28:ca:1b:07:8a:0b:19:17:aa:9a:9a:d4:
dd:63:a9:b6:c4:1c:4c:92:5e:c9:bc:80:cb:b9:2f:
d7:f6:28:16:51:b8:fb:d8:55:27:39:46:46:aa:26:
c7:15:90:d9:fe:f0:30:f2:23:83:4c:68:37:67:4a:
39:d9:31:d4:25:73:e3:db:2b:39:a7:21:55:66:cf:
aa:cc:fd:55:72:e2:a9:18:e2:96:d2:45:14:43:12:
39:30:3e:8d:62:09:0d:34:11:be:63:2e:bd:c6:0e:
21:c4:ca:2d:8c:de:fb:34:66:c5:19:91:47:93:06:
af:da:2b:3d:97:89:48:84:ae:27:b6:bd:41:0f:da:
a8:84:39:b2:a5:fa:22:15:c9:37:7a:e6:49:7d:b9:
73:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:79:56:84:F9:ED:8E:5D:ED:A8:6C:F6:FE:98:5E:4E:6B:8D:D3:04
X509v3 Authority Key Identifier:
keyid:00:5F:0D:44:B2:21:F4:B1:1C:89:DB:68:96:9F:97:C3:C7:15:49:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AF8NRLIh9LEcidtolp-Xw8cVSQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/68239f-09a3-4108-89ba-eee50dd9193c/1/AF8NRLIh9LEcidtolp-Xw8cVSQY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/68239f-09a3-4108-89ba-eee50dd9193c/1/AF8NRLIh9LEcidtolp-Xw8cVSQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:2b:91:2c:99:3f:ee:dc:ca:12:e8:7e:a5:08:90:5d:80:9a:
9e:e6:fe:e1:c5:b1:8c:2b:bd:04:8a:be:85:bc:c0:34:b3:0d:
49:c1:66:3f:e0:69:0e:b5:2e:3d:6b:8a:85:c6:90:59:88:3a:
5e:0d:2d:04:a8:29:70:93:53:1f:a6:5d:d0:b1:8b:c7:b8:84:
c3:82:3e:a7:43:34:61:6e:03:d1:f2:70:80:e3:9a:03:7e:04:
bb:c8:d1:0d:9c:15:dd:17:97:a5:3f:35:e8:e7:a3:e0:7b:05:
57:44:aa:2c:2e:2a:4f:d2:38:f8:16:74:b7:6d:6b:93:6b:26:
c4:2e:7f:df:de:ab:ff:04:84:2f:a0:73:22:90:45:71:f1:a7:
9f:73:11:36:b9:d2:a2:94:c5:c4:68:aa:6a:f5:0b:f7:9a:de:
a9:8b:75:42:65:b4:e4:76:85:47:13:0e:7f:c6:cf:a9:2d:80:
ec:b5:62:1c:1f:47:a8:be:69:c5:dd:b1:00:fb:25:cd:38:32:
ea:9d:a5:a1:10:f5:ec:93:d1:a7:84:c9:be:c1:fe:b9:9d:a9:
c5:83:12:79:09:e3:69:3c:c3:cc:59:be:5c:4d:5b:57:d0:7f:
a9:6a:4b:75:21:d9:0e:ac:c3:7b:3d:6b:2b:41:e9:8c:08:19:
cb:0e:e3:91
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjU4C09SwaHj4FzsSKEOPr0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwNWYwZDQ0YjIyMWY0YjExYzg5ZGI2ODk2OWY5N2MzYzcx
NTQ5MDYwHhcNMjUwODIzMDMwMTU3WhcNMjUwODI0MDMwMTU3WjAzMTEwLwYDVQQD
EyhlMzc5NTY4NGY5ZWQ4ZTVkZWRhODZjZjZmZTk4NWU0ZTZiOGRkMzA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvtwXGb3XpLzBrNxQz6DU5vToyPN7
hCjXNE0B7/jA9oB56P0l2mkuAkcgRJ5p5Ju67+FWjQTTCDNgBM+l/pkhZ9WdOq/f
qjgPjQenaVHbu5Iy/D3ANp0pIZyMLJiXooVfQn2HVyKYa3G6cuQoyhsHigsZF6qa
mtTdY6m2xBxMkl7JvIDLuS/X9igWUbj72FUnOUZGqibHFZDZ/vAw8iODTGg3Z0o5
2THUJXPj2ys5pyFVZs+qzP1VcuKpGOKW0kUUQxI5MD6NYgkNNBG+Yy69xg4hxMot
jN77NGbFGZFHkwav2is9l4lIhK4ntr1BD9qohDmypfoiFck3euZJfblzowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFON5VoT57Y5d7ahs9v6YXk5rjdMEMB8GA1UdIwQY
MBaAFABfDUSyIfSxHInbaJafl8PHFUkGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUY4TlJMSWg5TEVjaWR0b2xwLVh3OGNWU1FZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My82ODIzOWYtMDlhMy00MTA4LTg5YmEt
ZWVlNTBkZDkxOTNjLzEvQUY4TlJMSWg5TEVjaWR0b2xwLVh3OGNWU1FZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My82ODIzOWYtMDlhMy00MTA4LTg5YmEtZWVlNTBkZDkxOTNj
LzEvQUY4TlJMSWg5TEVjaWR0b2xwLVh3OGNWU1FZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEiuRLJk/
7tzKEuh+pQiQXYCanub+4cWxjCu9BIq+hbzANLMNScFmP+BpDrUuPWuKhcaQWYg6
Xg0tBKgpcJNTH6Zd0LGLx7iEw4I+p0M0YW4D0fJwgOOaA34Eu8jRDZwV3ReXpT81
6Oej4HsFV0SqLC4qT9I4+BZ0t21rk2smxC5/396r/wSEL6BzIpBFcfGnn3MRNrnS
opTFxGiqavUL95reqYt1QmW05HaFRxMOf8bPqS2A7LViHB9HqL5pxd2xAPslzTgy
6p2loRD17JPRp4TJvsH+uZ2pxYMSeQnjaTzDzFm+XE1bV9B/qWpLdSHZDqzDez1r
K0HpjAgZyw7jkQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:32:56 2025 by rpki-client