Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/c68ae4-9724-4975-8bd4-c8700a14761b/1/_AfGtW7x8jmwKO9CN1oqF2W8CLg.mft
File: _AfGtW7x8jmwKO9CN1oqF2W8CLg.mft (raw, json)
Hash identifier: 1bDR6q8Mydorv1kuyOqE0ckpFGjIU6t989ED/YaGmZc=
Subject key identifier: 58:88:97:B8:37:17:DB:30:DB:CE:2E:F6:C8:46:0C:8D:49:CC:1C:80
Authority key identifier: FC:07:C6:B5:6E:F1:F2:39:B0:28:EF:42:37:5A:2A:17:65:BC:08:B8
Certificate issuer: /CN=fc07c6b56ef1f239b028ef42375a2a1765bc08b8
Certificate serial: 0198D660805AED0699948CF8EF3AD68555B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_AfGtW7x8jmwKO9CN1oqF2W8CLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/c68ae4-9724-4975-8bd4-c8700a14761b/1/_AfGtW7x8jmwKO9CN1oqF2W8CLg.mft
Manifest number: 1004
Signing time: Sat 23 Aug 2025 10:01:45 +0000
Manifest this update: Sat 23 Aug 2025 10:01:45 +0000
Manifest next update: Sun 24 Aug 2025 10:01:45 +0000
Files and hashes: 1: TvMim_aEtrCLLOp0ZZIFYAVC2o4.roa (hash: /xE4OxOvjCCoCUdeNOdzw/FvM+bpWmIZ3XvVFCX7TVc=)
2: _AfGtW7x8jmwKO9CN1oqF2W8CLg.crl (hash: si/uk13ygO1HvRrhKg9S54+JE8ljHrl0fIYRi9XbfZg=)
3: qi04sQ8qQVwMXdQXve2GNvg8f-0.roa (hash: fLJ+x7i0b6ZT7hHF332I64JRm3fDb0LUQmOcJ/RhLx4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/c68ae4-9724-4975-8bd4-c8700a14761b/1/_AfGtW7x8jmwKO9CN1oqF2W8CLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/c68ae4-9724-4975-8bd4-c8700a14761b/1/_AfGtW7x8jmwKO9CN1oqF2W8CLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/_AfGtW7x8jmwKO9CN1oqF2W8CLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:80:5a:ed:06:99:94:8c:f8:ef:3a:d6:85:55:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc07c6b56ef1f239b028ef42375a2a1765bc08b8
Validity
Not Before: Aug 23 10:01:45 2025 GMT
Not After : Aug 24 10:01:45 2025 GMT
Subject: CN=588897b83717db30dbce2ef6c8460c8d49cc1c80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:f0:9f:67:42:e4:e2:a8:f6:de:a2:43:4e:a6:
1d:3f:5e:be:df:0e:dd:cc:27:4b:d4:a1:96:bd:0e:
3e:51:15:1b:80:cb:5b:7d:de:62:72:9c:30:b7:f9:
7f:fa:a1:b2:a4:51:41:f1:6e:20:01:43:1c:03:f4:
2e:3f:ab:70:9e:99:00:3d:dc:58:f1:8e:8d:32:85:
7a:bc:01:cb:e9:ad:40:4d:70:2e:d2:8b:7b:d0:84:
a1:2b:67:45:9c:27:d6:22:7f:15:8b:4b:55:ee:af:
1e:78:d0:45:ec:8e:ba:6b:fe:5c:73:0d:c6:8d:c3:
89:e1:26:4a:39:ed:11:0b:3b:dc:93:ac:bb:87:ff:
54:9d:89:c9:33:3d:1f:26:d6:32:39:9c:f1:c3:98:
aa:da:8a:55:c8:26:34:74:ae:c2:c7:17:cc:11:25:
60:db:16:a5:8f:00:8e:c6:1c:f2:9d:fb:47:35:57:
1a:8c:c6:8d:eb:83:b1:49:46:23:3e:3b:95:80:dd:
d0:25:b7:32:b2:15:de:ea:a1:c9:6c:8a:7c:8c:c0:
c4:0e:12:01:18:7b:01:bc:6c:b4:58:a0:bb:4f:4d:
d6:05:20:11:0b:b6:a2:76:06:a6:78:1b:f3:10:b2:
25:f4:ad:b5:29:1f:b2:61:c7:bd:d1:eb:31:37:8a:
7e:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:88:97:B8:37:17:DB:30:DB:CE:2E:F6:C8:46:0C:8D:49:CC:1C:80
X509v3 Authority Key Identifier:
keyid:FC:07:C6:B5:6E:F1:F2:39:B0:28:EF:42:37:5A:2A:17:65:BC:08:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_AfGtW7x8jmwKO9CN1oqF2W8CLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/c68ae4-9724-4975-8bd4-c8700a14761b/1/_AfGtW7x8jmwKO9CN1oqF2W8CLg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/c68ae4-9724-4975-8bd4-c8700a14761b/1/_AfGtW7x8jmwKO9CN1oqF2W8CLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:5f:1b:30:2e:95:af:36:31:54:da:6c:a1:bb:f9:24:72:68:
d5:59:d8:31:35:09:2b:4d:c2:18:9d:1f:34:66:70:b4:49:06:
f9:61:27:3d:03:6c:a5:a4:7e:06:7e:2b:2d:2e:7a:2e:5f:4f:
bf:66:a1:8f:9d:82:63:94:b6:eb:22:66:89:17:0e:8a:49:e4:
62:11:92:24:f1:3c:ba:6a:5f:f0:52:b6:9b:13:98:64:04:83:
6e:b6:aa:ad:9a:bc:d7:1d:92:87:8b:a0:1d:3a:2a:1b:bc:24:
76:ce:d5:a1:63:db:1d:d9:81:9b:4d:ae:c1:75:eb:36:87:03:
30:83:f7:7e:ee:fe:04:ec:1e:bc:a4:59:e5:2f:d9:ee:e4:a9:
6d:9d:eb:21:d8:f5:43:55:59:6f:12:30:26:72:7f:e9:e5:61:
5c:90:9a:6a:a8:18:12:d3:4d:3f:8d:50:b8:12:4d:f5:6c:c1:
19:5c:d2:c1:e4:45:b4:50:67:06:00:90:76:a3:2b:16:19:fb:
5f:3b:71:af:ac:17:46:05:8e:1b:f1:58:b7:14:9a:51:60:61:
5e:56:32:8e:c6:73:87:a8:11:97:15:69:6f:29:78:30:54:98:
bc:e3:49:c1:f4:b1:38:f9:04:cc:cf:48:80:87:f9:25:61:e9:
4c:68:51:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:28:02 2025 by rpki-client