Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/c68ae4-9724-4975-8bd4-c8700a14761b/1/_AfGtW7x8jmwKO9CN1oqF2W8CLg.mft
File: _AfGtW7x8jmwKO9CN1oqF2W8CLg.mft (raw, json)
Hash identifier: i0c2wQILhsz0hMTFN6pU/LgVkOrWft3AJl6RPXlUaHk=
Subject key identifier: AB:90:22:94:64:A7:D2:F7:76:AB:82:3B:ED:BD:E4:CA:48:A1:D5:3B
Authority key identifier: FC:07:C6:B5:6E:F1:F2:39:B0:28:EF:42:37:5A:2A:17:65:BC:08:B8
Certificate issuer: /CN=fc07c6b56ef1f239b028ef42375a2a1765bc08b8
Certificate serial: 0199FBEC45E326C00D29E79DFF91D47BB810
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_AfGtW7x8jmwKO9CN1oqF2W8CLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/c68ae4-9724-4975-8bd4-c8700a14761b/1/_AfGtW7x8jmwKO9CN1oqF2W8CLg.mft
Manifest number: 109C
Signing time: Sun 19 Oct 2025 10:03:09 +0000
Manifest this update: Sun 19 Oct 2025 10:03:09 +0000
Manifest next update: Mon 20 Oct 2025 10:03:09 +0000
Files and hashes: 1: TvMim_aEtrCLLOp0ZZIFYAVC2o4.roa (hash: /xE4OxOvjCCoCUdeNOdzw/FvM+bpWmIZ3XvVFCX7TVc=)
2: _AfGtW7x8jmwKO9CN1oqF2W8CLg.crl (hash: 6yW4BdxhC4tuv/Mxzk9rixShyt3PEa2q3EYetXYiQuU=)
3: qi04sQ8qQVwMXdQXve2GNvg8f-0.roa (hash: fLJ+x7i0b6ZT7hHF332I64JRm3fDb0LUQmOcJ/RhLx4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/c68ae4-9724-4975-8bd4-c8700a14761b/1/_AfGtW7x8jmwKO9CN1oqF2W8CLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/c68ae4-9724-4975-8bd4-c8700a14761b/1/_AfGtW7x8jmwKO9CN1oqF2W8CLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/_AfGtW7x8jmwKO9CN1oqF2W8CLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ec:45:e3:26:c0:0d:29:e7:9d:ff:91:d4:7b:b8:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc07c6b56ef1f239b028ef42375a2a1765bc08b8
Validity
Not Before: Oct 19 10:03:09 2025 GMT
Not After : Oct 20 10:03:09 2025 GMT
Subject: CN=ab90229464a7d2f776ab823bedbde4ca48a1d53b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:50:22:41:fc:5b:50:15:d2:23:2a:c5:4c:8f:
0e:f0:ab:b6:af:85:32:b6:2f:0e:ad:0c:c2:31:28:
a6:aa:a3:73:a5:bd:28:85:cb:8f:4a:fa:4b:e9:a1:
7a:fb:3b:db:65:19:ba:e2:92:60:c4:2b:18:82:9d:
70:59:f8:0e:96:05:6f:f3:af:64:45:00:fb:cc:0f:
e9:df:36:fb:fa:78:f7:54:ed:94:6f:af:de:6e:9a:
48:2d:a7:54:52:57:aa:98:ec:ea:15:78:8a:b5:f4:
7d:da:d8:fd:a0:43:0d:08:68:97:b8:24:cd:8e:0a:
6c:2f:a1:04:8c:17:23:85:2b:2d:e2:24:aa:b2:23:
da:5b:15:83:a3:de:ea:8b:c8:3f:f0:9c:22:4d:11:
ce:7d:07:89:3d:6e:fe:88:89:1c:32:f5:e9:3c:d9:
a6:1a:78:01:0e:d1:ec:d3:1d:28:81:59:b4:fb:30:
86:62:3d:80:f4:93:7c:be:da:59:a1:32:81:81:4e:
6f:c7:ef:46:f7:d5:03:0d:42:a0:38:c7:06:4f:0f:
95:b7:75:f9:4c:2b:38:fb:51:a8:c6:94:45:95:70:
fc:70:e8:a8:ed:66:47:51:f9:d3:d3:f2:ca:b1:2e:
a9:b5:cf:ef:5a:38:61:5b:c4:43:a3:2c:3c:50:2b:
ab:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:90:22:94:64:A7:D2:F7:76:AB:82:3B:ED:BD:E4:CA:48:A1:D5:3B
X509v3 Authority Key Identifier:
keyid:FC:07:C6:B5:6E:F1:F2:39:B0:28:EF:42:37:5A:2A:17:65:BC:08:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_AfGtW7x8jmwKO9CN1oqF2W8CLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/c68ae4-9724-4975-8bd4-c8700a14761b/1/_AfGtW7x8jmwKO9CN1oqF2W8CLg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/c68ae4-9724-4975-8bd4-c8700a14761b/1/_AfGtW7x8jmwKO9CN1oqF2W8CLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:e2:a3:f7:a7:f0:e8:69:7e:c2:da:ba:29:26:5a:91:3c:61:
4c:4f:d3:32:1b:13:e8:1a:6c:d3:85:4d:cc:a5:96:77:e9:6f:
82:af:2d:ad:7d:07:1c:73:4c:4f:c9:2b:58:bc:42:07:83:e0:
fa:34:c4:10:42:96:75:f4:2f:c4:7d:4e:39:21:86:39:88:88:
38:f6:4c:8e:7c:b9:a7:43:3e:c2:50:af:63:f1:af:2c:fc:ed:
35:79:d5:51:1e:2c:df:92:34:48:ae:4c:ff:82:77:4d:10:d0:
d3:b9:d4:4b:25:a3:97:33:32:d8:5c:c0:ff:51:21:1f:a8:2b:
d8:00:42:f6:74:74:17:bd:e9:f2:bf:2a:a0:b5:02:e7:d5:2d:
2d:97:41:48:ae:7b:98:a8:d8:8f:88:64:9f:ff:1d:9f:19:33:
79:41:45:9d:3b:ed:12:e1:0e:d5:5c:e7:a2:32:60:6b:59:db:
42:93:90:fd:5d:47:22:b9:eb:90:e4:b2:83:ff:b6:af:bf:e7:
42:e3:e8:e2:8f:56:be:e4:83:5b:b2:87:04:45:84:32:91:9c:
b1:ac:cb:0a:74:11:dd:bd:00:14:15:2e:b8:f6:00:5d:15:6b:
96:56:e0:fc:5d:77:f3:7b:68:f4:f8:2b:09:67:6f:fe:50:5a:
00:63:fb:26
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn77EXjJsANKeed/5HUe7gQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjMDdjNmI1NmVmMWYyMzliMDI4ZWY0MjM3NWEyYTE3NjVi
YzA4YjgwHhcNMjUxMDE5MTAwMzA5WhcNMjUxMDIwMTAwMzA5WjAzMTEwLwYDVQQD
EyhhYjkwMjI5NDY0YTdkMmY3NzZhYjgyM2JlZGJkZTRjYTQ4YTFkNTNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtVAiQfxbUBXSIyrFTI8O8Ku2r4Uy
ti8OrQzCMSimqqNzpb0ohcuPSvpL6aF6+zvbZRm64pJgxCsYgp1wWfgOlgVv869k
RQD7zA/p3zb7+nj3VO2Ub6/ebppILadUUleqmOzqFXiKtfR92tj9oEMNCGiXuCTN
jgpsL6EEjBcjhSst4iSqsiPaWxWDo97qi8g/8JwiTRHOfQeJPW7+iIkcMvXpPNmm
GngBDtHs0x0ogVm0+zCGYj2A9JN8vtpZoTKBgU5vx+9G99UDDUKgOMcGTw+Vt3X5
TCs4+1GoxpRFlXD8cOio7WZHUfnT0/LKsS6ptc/vWjhhW8RDoyw8UCur1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKuQIpRkp9L3dquCO+295MpIodU7MB8GA1UdIwQY
MBaAFPwHxrVu8fI5sCjvQjdaKhdlvAi4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX0FmR3RXN3g4am13S085Q04xb3FGMlc4Q0xnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS9jNjhhZTQtOTcyNC00OTc1LThiZDQt
Yzg3MDBhMTQ3NjFiLzEvX0FmR3RXN3g4am13S085Q04xb3FGMlc4Q0xnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS9jNjhhZTQtOTcyNC00OTc1LThiZDQtYzg3MDBhMTQ3NjFi
LzEvX0FmR3RXN3g4am13S085Q04xb3FGMlc4Q0xnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQeKj96fw
6Gl+wtq6KSZakTxhTE/TMhsT6Bps04VNzKWWd+lvgq8trX0HHHNMT8krWLxCB4Pg
+jTEEEKWdfQvxH1OOSGGOYiIOPZMjny5p0M+wlCvY/GvLPztNXnVUR4s35I0SK5M
/4J3TRDQ07nUSyWjlzMy2FzA/1EhH6gr2ABC9nR0F73p8r8qoLUC59UtLZdBSK57
mKjYj4hkn/8dnxkzeUFFnTvtEuEO1VznojJga1nbQpOQ/V1HIrnrkOSyg/+2r7/n
QuPo4o9WvuSDW7KHBEWEMpGcsazLCnQR3b0AFBUuuPYAXRVrllbg/F1383to9Pgr
CWdv/lBaAGP7Jg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:11:06 2025 by rpki-client