
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/0ee558-f08c-42ca-a953-53828f43fea0/1/Af6IJc4pEV7HHNzPw1XYGjX9fow.mft
File: Af6IJc4pEV7HHNzPw1XYGjX9fow.mft (raw, json)
Hash identifier: beAaOSbhCSMH4qfy+AhS8EGP4Z/Aj5j3ILTwxV55dhw=
Subject key identifier: CA:4E:40:31:0A:4B:AF:A0:83:E7:49:9A:F7:60:D9:C2:AB:BC:B8:8A
Authority key identifier: 01:FE:88:25:CE:29:11:5E:C7:1C:DC:CF:C3:55:D8:1A:35:FD:7E:8C
Certificate issuer: /CN=01fe8825ce29115ec71cdccfc355d81a35fd7e8c
Certificate serial: 0198D5BBB41DD36F8F8C9A2E0591C4993854
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Af6IJc4pEV7HHNzPw1XYGjX9fow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/0ee558-f08c-42ca-a953-53828f43fea0/1/Af6IJc4pEV7HHNzPw1XYGjX9fow.mft
Manifest number: 03C2
Signing time: Sat 23 Aug 2025 07:01:44 +0000
Manifest this update: Sat 23 Aug 2025 07:01:44 +0000
Manifest next update: Sun 24 Aug 2025 07:01:44 +0000
Files and hashes: 1: Af6IJc4pEV7HHNzPw1XYGjX9fow.crl (hash: 0OCMKICcM+XZdrgmEWyGQMHiQZT79z/FJ2iQtBDgyOQ=)
2: Ju6K_k5aEz6SqSZhNuewgFZ6Tpc.roa (hash: eSc+nFa0PsPsCuhZ0NSVf3t+L8KNOuXb5VC0gk1mWnU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/0ee558-f08c-42ca-a953-53828f43fea0/1/Af6IJc4pEV7HHNzPw1XYGjX9fow.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/0ee558-f08c-42ca-a953-53828f43fea0/1/Af6IJc4pEV7HHNzPw1XYGjX9fow.mft
rsync://rpki.ripe.net/repository/DEFAULT/Af6IJc4pEV7HHNzPw1XYGjX9fow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:b4:1d:d3:6f:8f:8c:9a:2e:05:91:c4:99:38:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01fe8825ce29115ec71cdccfc355d81a35fd7e8c
Validity
Not Before: Aug 23 07:01:44 2025 GMT
Not After : Aug 24 07:01:44 2025 GMT
Subject: CN=ca4e40310a4bafa083e7499af760d9c2abbcb88a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:02:5c:b5:f2:ec:cb:af:a3:fe:7a:df:99:69:
55:f5:a0:3b:01:da:1b:c3:38:ce:f6:2d:6d:e0:9e:
fc:1e:59:da:1e:78:d8:66:2a:f0:ab:8c:7c:5d:ed:
da:d6:4d:95:72:a0:3c:6f:6e:6d:55:ac:cf:d8:3e:
74:8f:5f:13:5d:13:79:a6:c4:99:57:73:26:88:ee:
96:80:25:9e:59:e7:0e:f5:af:ba:3d:1c:0d:db:62:
ad:5e:85:89:cf:99:b9:61:36:5b:dd:a2:db:64:46:
95:61:c4:d8:9e:19:da:38:e7:84:f5:fb:dd:92:63:
39:81:19:c4:57:30:f4:92:a4:93:a6:e0:50:ef:e9:
73:95:ff:df:4e:96:6c:f0:c7:08:25:9f:5a:16:68:
ac:55:a3:11:54:22:42:41:29:37:e3:c6:7b:53:cc:
83:b3:ac:c1:ac:0c:a3:cf:86:dc:1d:c5:88:17:2c:
d2:98:5b:5e:e8:e3:45:37:56:af:c2:96:dd:93:1f:
5a:2a:f6:c0:08:e9:4a:29:2f:58:75:86:56:2f:1a:
44:d3:cb:0d:71:86:52:93:f7:0a:6b:cc:61:a8:42:
81:c6:47:9f:a6:75:d2:2b:03:12:7f:a7:ef:f3:71:
ec:cd:74:9b:cf:87:3a:d4:67:09:da:8d:c7:c9:b6:
94:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:4E:40:31:0A:4B:AF:A0:83:E7:49:9A:F7:60:D9:C2:AB:BC:B8:8A
X509v3 Authority Key Identifier:
keyid:01:FE:88:25:CE:29:11:5E:C7:1C:DC:CF:C3:55:D8:1A:35:FD:7E:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Af6IJc4pEV7HHNzPw1XYGjX9fow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/0ee558-f08c-42ca-a953-53828f43fea0/1/Af6IJc4pEV7HHNzPw1XYGjX9fow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/0ee558-f08c-42ca-a953-53828f43fea0/1/Af6IJc4pEV7HHNzPw1XYGjX9fow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:5f:dd:ea:8e:4e:f1:a2:1b:71:64:47:be:8b:41:82:94:06:
74:a3:46:80:45:4c:05:88:83:fd:83:86:77:87:3c:63:8a:cb:
c8:f6:4b:aa:70:e5:ec:25:13:21:75:7f:14:fd:d2:8b:16:fb:
47:99:3b:6a:2a:6a:b7:10:d4:e1:ce:9f:e8:2e:87:64:48:fc:
53:6c:d7:69:5d:75:06:3d:2b:cf:a1:4b:0c:30:19:26:ef:12:
08:f1:5d:14:c5:a3:eb:a8:b0:5c:4f:d7:a9:ac:b3:bb:08:7e:
c6:59:e1:14:d7:36:45:e2:9c:a3:84:80:ce:ca:cb:9a:15:7d:
af:27:78:92:7a:fe:2d:31:53:81:01:84:58:5b:78:54:65:a7:
cd:c7:08:95:33:2b:b7:63:61:48:d8:99:3b:3d:97:a8:16:a7:
54:28:fa:9c:df:a2:08:93:98:45:a3:c5:36:c5:07:4e:b4:71:
3b:4f:a1:04:d5:2a:f6:ed:25:a7:bf:59:45:91:9e:00:6f:2e:
ef:50:19:da:d7:39:3b:f0:3a:20:7e:50:8c:93:69:a1:cd:7b:
24:e5:99:47:1b:04:08:79:a1:13:76:29:11:ea:04:42:34:75:
e5:57:6c:3f:e1:26:75:d0:9d:a3:97:9a:59:35:c2:74:7b:49:
f7:5a:d0:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:02:15 2025 by rpki-client