Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/97f917-93f8-405c-9d55-a3c061d8be91/1/Afq489H7PSo1xPZ6SPb2CD6rpXU.mft
File: Afq489H7PSo1xPZ6SPb2CD6rpXU.mft (raw, json)
Hash identifier: WxWyUGHhnIRBMLjd5PI+oEr8prRL9o7ySSg+ePGwav8=
Subject key identifier: E8:05:B3:8F:25:AC:1F:16:1D:41:71:65:00:6D:7C:8A:A2:62:29:B2
Authority key identifier: 01:FA:B8:F3:D1:FB:3D:2A:35:C4:F6:7A:48:F6:F6:08:3E:AB:A5:75
Certificate issuer: /CN=01fab8f3d1fb3d2a35c4f67a48f6f6083eaba575
Certificate serial: 019A0411A9A9A9755E240AF89B93BF8D09F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Afq489H7PSo1xPZ6SPb2CD6rpXU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/97f917-93f8-405c-9d55-a3c061d8be91/1/Afq489H7PSo1xPZ6SPb2CD6rpXU.mft
Manifest number: 06C7
Signing time: Tue 21 Oct 2025 00:00:57 +0000
Manifest this update: Tue 21 Oct 2025 00:00:57 +0000
Manifest next update: Wed 22 Oct 2025 00:00:57 +0000
Files and hashes: 1: Afq489H7PSo1xPZ6SPb2CD6rpXU.crl (hash: RdVL+rY1MA/KqV5X7sbJ/PVnE2GZLz9hBwG/UqyMF9M=)
2: RCG29GRzXNkfnM3mAc2fQgzDKKo.roa (hash: VMJ45tdoRBW32E+FWz6jKq995VHfDQKLmdI/8SmUIrw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/97f917-93f8-405c-9d55-a3c061d8be91/1/Afq489H7PSo1xPZ6SPb2CD6rpXU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/97f917-93f8-405c-9d55-a3c061d8be91/1/Afq489H7PSo1xPZ6SPb2CD6rpXU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Afq489H7PSo1xPZ6SPb2CD6rpXU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Oct 2025 00:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:04:11:a9:a9:a9:75:5e:24:0a:f8:9b:93:bf:8d:09:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01fab8f3d1fb3d2a35c4f67a48f6f6083eaba575
Validity
Not Before: Oct 21 00:00:57 2025 GMT
Not After : Oct 22 00:00:57 2025 GMT
Subject: CN=e805b38f25ac1f161d417165006d7c8aa26229b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:dc:a4:b6:3f:4c:8b:68:6d:d4:fe:e1:86:17:
03:6b:3d:59:ed:b6:09:e6:71:ba:5c:61:68:2a:a1:
58:93:8c:53:6a:58:74:37:6f:db:82:37:c8:31:f9:
1a:29:c7:2e:84:c2:9f:ac:41:be:43:82:b0:ff:ef:
d6:d3:8a:28:98:67:29:82:7c:cd:cb:a9:a6:d1:3a:
28:b8:51:1a:ed:39:e1:6c:2f:02:03:c4:a7:3d:31:
92:ba:f6:ab:52:73:7d:a5:43:92:77:34:fc:e9:8f:
eb:56:5b:78:8e:53:a0:68:d1:ae:7e:e1:f7:8d:3d:
5f:37:58:70:8c:86:f7:00:8c:17:28:0d:14:8c:bd:
e9:12:d1:f1:4d:5a:c9:e2:4b:49:2f:e1:27:1b:d1:
25:dd:7f:86:f9:20:eb:82:a7:4a:61:b5:98:8a:5d:
e9:e6:60:21:f8:87:05:40:1e:e3:4a:14:db:65:d7:
5e:1b:5e:f7:3e:7a:68:e8:03:29:43:c7:d1:09:f5:
a3:14:fc:f1:54:b5:d7:71:6e:83:0d:2d:21:00:ec:
63:cb:5c:67:2d:40:7d:4d:c4:37:27:3d:39:9c:ce:
ec:50:b6:de:aa:ed:fa:01:64:54:fe:ce:35:62:71:
e6:49:5f:eb:a0:05:0f:a2:f1:1f:8c:a9:c6:41:f5:
5b:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:05:B3:8F:25:AC:1F:16:1D:41:71:65:00:6D:7C:8A:A2:62:29:B2
X509v3 Authority Key Identifier:
keyid:01:FA:B8:F3:D1:FB:3D:2A:35:C4:F6:7A:48:F6:F6:08:3E:AB:A5:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Afq489H7PSo1xPZ6SPb2CD6rpXU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/97f917-93f8-405c-9d55-a3c061d8be91/1/Afq489H7PSo1xPZ6SPb2CD6rpXU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/97f917-93f8-405c-9d55-a3c061d8be91/1/Afq489H7PSo1xPZ6SPb2CD6rpXU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:e7:41:59:7d:3e:43:a7:92:4c:1b:6b:9f:ca:99:5f:db:81:
54:01:69:29:bc:e9:17:96:d1:2d:cf:be:fe:c3:a3:d2:83:ac:
84:a9:2c:41:fb:d4:6d:30:c6:e5:08:e9:8c:72:24:4d:04:b3:
32:bf:3b:ec:84:67:f3:9e:6f:a6:f3:4b:5e:53:7c:58:7c:c2:
2f:ad:d2:03:8c:f8:86:dc:4a:9d:34:9d:b4:09:18:4f:f9:a9:
60:10:dc:dd:8a:8f:2b:0d:39:95:74:59:08:bc:4c:94:23:cb:
f7:b3:48:e2:28:a1:25:d9:af:14:f2:83:d1:6b:4f:95:29:8e:
18:8c:db:34:9f:4f:ca:f8:9f:c4:40:73:ec:8c:38:12:6c:af:
e2:9c:69:e3:92:16:b6:c6:3e:fb:0e:81:af:11:2f:e6:ee:4e:
93:12:27:7b:45:fe:16:5b:8a:47:b9:3b:7a:82:26:12:7a:0b:
23:8e:6b:05:1c:7d:a1:c5:f4:53:8e:1c:33:11:22:d6:c6:e9:
6d:94:e3:44:7d:c6:29:7c:8a:18:44:5c:24:3f:46:e8:3a:6b:
4f:a0:a7:4c:b8:a8:09:52:ea:d3:dc:ce:07:ee:60:b5:6c:be:
13:87:d6:33:74:d5:33:bb:5a:d8:d4:f5:19:c7:81:31:18:63:
e2:18:0a:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 09:48:27 2025 by rpki-client