Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/0ee558-f08c-42ca-a953-53828f43fea0/1/Af6IJc4pEV7HHNzPw1XYGjX9fow.mft
File: Af6IJc4pEV7HHNzPw1XYGjX9fow.mft (raw, json)
Hash identifier: 5ohbIRhevHedN+L7IqZ2IXI593ID3Ju8B1K8LthY1f4=
Subject key identifier: D2:92:D9:9C:F3:8B:7F:89:10:59:67:6C:A2:32:17:92:DE:73:AD:D9
Authority key identifier: 01:FE:88:25:CE:29:11:5E:C7:1C:DC:CF:C3:55:D8:1A:35:FD:7E:8C
Certificate issuer: /CN=01fe8825ce29115ec71cdccfc355d81a35fd7e8c
Certificate serial: 0197B7EA535BAB90474CFED578709F1F5BB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Af6IJc4pEV7HHNzPw1XYGjX9fow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/0ee558-f08c-42ca-a953-53828f43fea0/1/Af6IJc4pEV7HHNzPw1XYGjX9fow.mft
Manifest number: 032E
Signing time: Sat 28 Jun 2025 19:01:16 +0000
Manifest this update: Sat 28 Jun 2025 19:01:16 +0000
Manifest next update: Sun 29 Jun 2025 19:01:16 +0000
Files and hashes: 1: Af6IJc4pEV7HHNzPw1XYGjX9fow.crl (hash: Mke/s7XcdSq0KUhBpxvVciGaeXEzV3vIbaHdcPoZOOE=)
2: Ju6K_k5aEz6SqSZhNuewgFZ6Tpc.roa (hash: eSc+nFa0PsPsCuhZ0NSVf3t+L8KNOuXb5VC0gk1mWnU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/0ee558-f08c-42ca-a953-53828f43fea0/1/Af6IJc4pEV7HHNzPw1XYGjX9fow.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/0ee558-f08c-42ca-a953-53828f43fea0/1/Af6IJc4pEV7HHNzPw1XYGjX9fow.mft
rsync://rpki.ripe.net/repository/DEFAULT/Af6IJc4pEV7HHNzPw1XYGjX9fow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:53:5b:ab:90:47:4c:fe:d5:78:70:9f:1f:5b:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01fe8825ce29115ec71cdccfc355d81a35fd7e8c
Validity
Not Before: Jun 28 19:01:16 2025 GMT
Not After : Jun 29 19:01:16 2025 GMT
Subject: CN=d292d99cf38b7f891059676ca2321792de73add9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:1e:b2:2b:e5:d8:d3:0a:a4:06:a3:69:11:b3:
64:24:7d:e1:3a:18:e4:d2:eb:21:14:51:b1:fa:f6:
36:58:12:e1:66:97:72:08:da:5d:08:57:29:c8:88:
5f:14:80:05:91:8a:c4:3b:1e:f8:fa:35:55:ed:35:
e0:44:d7:1e:56:02:2e:45:1d:40:42:56:31:ab:e7:
c6:b0:59:b8:9d:11:6d:b1:aa:26:db:07:3a:ca:c5:
8c:9e:bd:b8:bf:7e:4b:d2:c2:c4:e3:a8:d7:47:74:
d8:bf:c6:b7:97:76:35:68:3f:ae:c0:6a:76:ef:d4:
8d:a2:9b:26:1e:b8:e7:c0:93:a4:2d:4d:69:e7:ac:
e8:14:4d:e5:87:7d:0d:98:3f:3d:13:72:8a:5b:f3:
fa:44:97:b9:dd:d4:bc:e8:d1:bd:48:be:c0:22:71:
7e:57:1f:5a:32:1f:2b:81:55:2c:3e:a5:be:d7:b7:
51:02:44:0d:9d:85:d0:7e:69:19:65:91:f7:84:14:
45:6a:ab:d4:18:07:79:c9:f9:39:e2:c0:5a:02:ac:
7b:8f:72:58:2d:f8:7b:c7:e5:22:ee:fd:f1:47:1d:
01:3b:69:fa:d6:c7:56:66:51:fa:3b:63:d8:34:a3:
0a:3c:a0:e7:7c:ee:7a:84:e9:72:29:9b:8f:da:cd:
50:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:92:D9:9C:F3:8B:7F:89:10:59:67:6C:A2:32:17:92:DE:73:AD:D9
X509v3 Authority Key Identifier:
keyid:01:FE:88:25:CE:29:11:5E:C7:1C:DC:CF:C3:55:D8:1A:35:FD:7E:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Af6IJc4pEV7HHNzPw1XYGjX9fow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/0ee558-f08c-42ca-a953-53828f43fea0/1/Af6IJc4pEV7HHNzPw1XYGjX9fow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/0ee558-f08c-42ca-a953-53828f43fea0/1/Af6IJc4pEV7HHNzPw1XYGjX9fow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:e8:9d:47:a9:65:82:1a:c0:1a:08:b0:3e:e0:5d:d1:73:87:
94:1d:15:69:df:44:a4:8c:01:60:35:23:b4:a6:b8:75:db:3c:
b6:5e:47:5a:71:a7:b0:3b:06:1a:90:3e:45:92:97:e2:ce:bd:
c4:60:6b:5c:32:fb:c2:79:13:25:c5:ca:bd:4d:0f:da:3b:1a:
ee:a7:63:bc:5f:0c:58:54:ff:90:ba:a8:52:75:08:e5:15:3e:
bf:f8:2b:a5:de:df:11:08:ff:36:86:e3:a1:f6:b6:ca:f9:41:
ea:eb:22:45:f9:e1:bb:07:75:d2:01:51:ef:ff:9e:66:0e:3c:
34:88:d8:25:3f:ee:41:df:5a:54:c0:24:82:71:46:66:8c:b7:
03:a9:49:6c:88:a6:2b:ed:d7:c0:27:a6:a8:5f:00:13:47:f3:
50:85:72:a6:ad:c7:ac:82:e4:a9:db:08:8c:0b:e0:32:7e:79:
f8:e6:4f:0c:b3:49:30:4e:17:9c:30:0d:86:42:6d:50:e9:a5:
cc:38:1c:2d:3e:ad:f7:03:6b:6e:cc:68:39:d3:ab:d1:ca:38:
f3:0a:06:5b:31:60:4d:c1:e9:a2:50:bc:f3:26:b3:73:39:33:
8b:ca:25:42:f5:18:e3:d3:a5:cf:42:7c:2c:dd:1d:56:80:66:
59:b6:7b:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:46:49 2025 by rpki-client