Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/0ee558-f08c-42ca-a953-53828f43fea0/1/Af6IJc4pEV7HHNzPw1XYGjX9fow.mft
File: Af6IJc4pEV7HHNzPw1XYGjX9fow.mft (raw, json)
Hash identifier: GSXPqt0FqzrMf548iBpEwL6i+u7PZIaJEFFrNATKyeQ=
Subject key identifier: 52:70:44:55:50:75:1D:C0:47:A5:C8:90:D9:FC:81:39:DD:05:AD:71
Authority key identifier: 01:FE:88:25:CE:29:11:5E:C7:1C:DC:CF:C3:55:D8:1A:35:FD:7E:8C
Certificate issuer: /CN=01fe8825ce29115ec71cdccfc355d81a35fd7e8c
Certificate serial: 0199FD34177D37C314C13C6A5B199ECB6FFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Af6IJc4pEV7HHNzPw1XYGjX9fow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/0ee558-f08c-42ca-a953-53828f43fea0/1/Af6IJc4pEV7HHNzPw1XYGjX9fow.mft
Manifest number: 045B
Signing time: Sun 19 Oct 2025 16:01:13 +0000
Manifest this update: Sun 19 Oct 2025 16:01:13 +0000
Manifest next update: Mon 20 Oct 2025 16:01:13 +0000
Files and hashes: 1: Af6IJc4pEV7HHNzPw1XYGjX9fow.crl (hash: 2Y3ANNdjLhlKxyxg3XBRA0WNyO4R3S26bUwd7tsyoAA=)
2: Ju6K_k5aEz6SqSZhNuewgFZ6Tpc.roa (hash: eSc+nFa0PsPsCuhZ0NSVf3t+L8KNOuXb5VC0gk1mWnU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/0ee558-f08c-42ca-a953-53828f43fea0/1/Af6IJc4pEV7HHNzPw1XYGjX9fow.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/0ee558-f08c-42ca-a953-53828f43fea0/1/Af6IJc4pEV7HHNzPw1XYGjX9fow.mft
rsync://rpki.ripe.net/repository/DEFAULT/Af6IJc4pEV7HHNzPw1XYGjX9fow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:17:7d:37:c3:14:c1:3c:6a:5b:19:9e:cb:6f:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01fe8825ce29115ec71cdccfc355d81a35fd7e8c
Validity
Not Before: Oct 19 16:01:13 2025 GMT
Not After : Oct 20 16:01:13 2025 GMT
Subject: CN=5270445550751dc047a5c890d9fc8139dd05ad71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:c1:81:24:6d:b8:8e:67:37:25:f4:da:96:7b:
ab:af:97:68:78:4a:ac:be:4d:d6:3f:3c:50:db:7d:
54:73:b2:26:53:8f:e2:81:fe:2b:2b:10:dc:43:e8:
3f:09:e4:3c:16:03:7c:ce:d6:61:34:55:3f:a4:08:
a2:13:15:be:66:dd:f1:0f:8b:ce:a7:01:02:9b:1f:
0f:28:20:1b:b7:b3:02:2d:3d:7b:ee:a9:7b:30:80:
7f:ed:f9:e3:9a:61:7d:3b:10:ab:ef:06:da:47:31:
61:c0:15:d2:5f:af:ba:ba:bf:89:eb:8e:19:31:b0:
dc:2d:31:07:04:f0:28:f3:3f:44:ae:95:a5:0a:1e:
72:20:a5:bc:7e:54:d0:2e:34:bf:05:ba:6e:c6:36:
00:42:56:5b:e6:7d:37:8e:3b:87:6d:51:35:6b:f1:
43:48:3f:ec:26:4c:30:37:5f:78:36:6f:a3:66:20:
ba:a4:69:71:8a:0a:8e:f6:8b:18:1e:49:ef:16:b3:
a5:26:a7:ca:65:87:0f:59:db:99:e9:76:56:a4:da:
3c:3b:fd:03:40:93:c3:6e:52:ce:45:b9:a4:d8:9f:
0c:7d:e1:8d:8c:93:2a:e0:53:d5:25:ba:1c:9c:b6:
12:da:d3:9b:4e:43:5f:f3:42:d5:12:7d:33:62:47:
69:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:70:44:55:50:75:1D:C0:47:A5:C8:90:D9:FC:81:39:DD:05:AD:71
X509v3 Authority Key Identifier:
keyid:01:FE:88:25:CE:29:11:5E:C7:1C:DC:CF:C3:55:D8:1A:35:FD:7E:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Af6IJc4pEV7HHNzPw1XYGjX9fow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/0ee558-f08c-42ca-a953-53828f43fea0/1/Af6IJc4pEV7HHNzPw1XYGjX9fow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/0ee558-f08c-42ca-a953-53828f43fea0/1/Af6IJc4pEV7HHNzPw1XYGjX9fow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:20:75:a8:12:94:3b:23:1f:98:ec:91:ce:fd:f3:f3:e5:9c:
cc:08:ed:9f:d1:09:95:24:1d:f9:b8:b9:b9:b4:b9:04:ca:0b:
bd:88:02:0f:c9:47:75:b6:8c:64:5b:0a:9d:1d:0f:39:65:b1:
4d:08:b7:e5:2f:cf:97:2f:69:67:6a:0d:1d:77:e3:7a:81:50:
d4:24:ff:2f:2a:c3:2a:d4:01:67:6e:93:dd:8e:6c:9b:34:bf:
d4:e9:ce:91:61:7d:93:e5:59:04:02:e5:16:6d:f7:de:da:ac:
4b:09:1b:d7:6d:4a:f7:e4:8e:f9:26:f7:f5:c5:2d:46:9a:b4:
b1:ea:4b:ec:ac:b0:d7:d7:85:16:95:27:09:6b:c2:8b:6e:e6:
bd:40:2b:c5:e2:ed:a8:3c:c0:8c:c7:a6:4f:06:a3:61:c9:85:
12:a4:7f:f2:19:05:79:33:00:dd:47:d8:9b:7a:2d:28:7d:17:
e9:60:b6:89:84:11:9b:d9:de:f5:08:4f:0b:55:bb:be:5c:1d:
7a:cc:54:5e:85:de:a1:a9:b0:ca:a6:ff:4c:99:f4:b7:ab:86:
a2:24:ad:b3:0c:89:7d:52:a8:bd:96:c6:81:b1:04:24:ee:cd:
bc:09:d8:2a:5e:64:48:57:99:17:c9:87:c3:dd:89:18:dd:a9:
5e:9d:bc:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:05:23 2025 by rpki-client