Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/c68ae4-9724-4975-8bd4-c8700a14761b/1/_AfGtW7x8jmwKO9CN1oqF2W8CLg.mft
File: _AfGtW7x8jmwKO9CN1oqF2W8CLg.mft (raw, json)
Hash identifier: VA3clb0w4oQhhWoqcOcNER0+xzCZtDGzq9l2qJhyVXo=
Subject key identifier: B0:83:D0:F0:AB:EE:AB:BB:47:11:4A:28:66:5B:58:CE:A5:E7:FB:1A
Authority key identifier: FC:07:C6:B5:6E:F1:F2:39:B0:28:EF:42:37:5A:2A:17:65:BC:08:B8
Certificate issuer: /CN=fc07c6b56ef1f239b028ef42375a2a1765bc08b8
Certificate serial: 0197B6A088C930D2DD65297105C839BC3B02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_AfGtW7x8jmwKO9CN1oqF2W8CLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/c68ae4-9724-4975-8bd4-c8700a14761b/1/_AfGtW7x8jmwKO9CN1oqF2W8CLg.mft
Manifest number: 0F6F
Signing time: Sat 28 Jun 2025 13:01:03 +0000
Manifest this update: Sat 28 Jun 2025 13:01:03 +0000
Manifest next update: Sun 29 Jun 2025 13:01:03 +0000
Files and hashes: 1: TvMim_aEtrCLLOp0ZZIFYAVC2o4.roa (hash: /xE4OxOvjCCoCUdeNOdzw/FvM+bpWmIZ3XvVFCX7TVc=)
2: _AfGtW7x8jmwKO9CN1oqF2W8CLg.crl (hash: 9sgBtd39d7IMcTlTcvGxA1qR+bQfHgqmRu3aZgxkt30=)
3: qi04sQ8qQVwMXdQXve2GNvg8f-0.roa (hash: fLJ+x7i0b6ZT7hHF332I64JRm3fDb0LUQmOcJ/RhLx4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/c68ae4-9724-4975-8bd4-c8700a14761b/1/_AfGtW7x8jmwKO9CN1oqF2W8CLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/c68ae4-9724-4975-8bd4-c8700a14761b/1/_AfGtW7x8jmwKO9CN1oqF2W8CLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/_AfGtW7x8jmwKO9CN1oqF2W8CLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:88:c9:30:d2:dd:65:29:71:05:c8:39:bc:3b:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc07c6b56ef1f239b028ef42375a2a1765bc08b8
Validity
Not Before: Jun 28 13:01:03 2025 GMT
Not After : Jun 29 13:01:03 2025 GMT
Subject: CN=b083d0f0abeeabbb47114a28665b58cea5e7fb1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:5e:fc:50:00:40:d3:93:12:a4:11:d1:3f:29:
61:85:cf:48:83:ba:ea:11:94:03:37:4e:56:4a:3a:
76:16:1b:8d:89:55:62:95:e3:ac:1b:08:81:07:b2:
3e:dc:34:e7:3b:96:fb:d0:21:d2:cd:8b:a6:47:26:
b7:59:8d:1f:aa:d0:23:bd:23:f9:f3:1c:e2:7a:b9:
9e:08:b2:58:13:46:c4:92:25:9c:89:a8:ad:38:29:
70:0b:c0:91:90:db:6b:88:16:96:72:f8:72:14:4b:
b4:51:44:7a:39:19:4d:73:23:e6:a5:76:91:aa:cf:
f4:59:83:56:17:ef:02:6b:05:a0:8a:1c:64:86:03:
a1:c3:21:17:74:42:76:e3:2c:43:7f:85:6b:cd:fe:
c4:b4:f7:44:f0:f0:2d:03:da:03:74:62:82:1c:8d:
98:84:65:3b:6e:2b:c2:a3:07:8a:84:90:d4:c5:60:
8a:56:77:66:cd:86:0d:0d:d3:c7:47:e5:d9:78:68:
50:8d:99:18:c5:d9:ef:00:9b:10:ed:bc:9e:b9:68:
c9:74:0f:2e:c4:76:40:ad:dd:cc:e7:db:a1:8c:f9:
13:d4:82:40:66:21:c9:13:63:83:86:90:67:cd:f8:
c6:5f:a0:5b:54:d7:d2:a0:86:dd:c9:1c:66:04:cc:
ad:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:83:D0:F0:AB:EE:AB:BB:47:11:4A:28:66:5B:58:CE:A5:E7:FB:1A
X509v3 Authority Key Identifier:
keyid:FC:07:C6:B5:6E:F1:F2:39:B0:28:EF:42:37:5A:2A:17:65:BC:08:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_AfGtW7x8jmwKO9CN1oqF2W8CLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/c68ae4-9724-4975-8bd4-c8700a14761b/1/_AfGtW7x8jmwKO9CN1oqF2W8CLg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/c68ae4-9724-4975-8bd4-c8700a14761b/1/_AfGtW7x8jmwKO9CN1oqF2W8CLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:93:4d:4c:2a:9c:4a:d8:0d:96:63:e5:ff:9c:44:b9:0d:0b:
27:a5:2a:2f:ab:73:56:19:5b:3c:07:42:8d:2f:d6:4b:67:d9:
10:e5:ca:2a:31:98:66:ad:0f:39:35:44:80:f3:fb:e0:59:ce:
6d:69:b5:8d:75:61:8c:6e:6e:39:ac:22:96:b5:ea:1e:cb:8a:
0e:9e:c1:c2:bd:03:f8:a2:1a:1a:4d:92:18:b4:23:90:d1:04:
63:a4:46:d5:c1:25:42:18:97:b9:05:7e:d2:1a:6f:51:5a:ad:
31:44:72:d6:4b:ce:43:66:b0:8b:e7:dc:97:85:d4:54:51:89:
06:2e:ec:d6:3d:56:50:c7:bb:7f:2d:43:ec:e9:47:07:6b:47:
8f:bf:bb:f1:e9:8e:02:46:2c:ca:7f:2d:09:34:54:1e:4f:a1:
ca:7e:3c:42:f5:4f:55:60:0b:af:de:23:74:63:b6:44:29:0b:
97:9a:4f:12:f3:f2:d9:24:29:5b:fd:ce:38:f4:0e:68:a2:dd:
a7:a3:87:4e:88:40:af:ba:b6:35:80:af:e4:92:f1:15:34:d6:
df:0d:30:c5:7c:fe:a1:3a:75:67:a1:57:13:4a:a6:d2:55:55:
02:e3:a2:36:74:a6:07:df:d2:a1:93:60:04:3c:f0:29:8a:1b:
87:32:e0:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:36:02 2025 by rpki-client