Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/e99954-c00f-4014-8e71-8aee2bf89b91/1/afY2pbazoordg_l0Rtewg7lMPa4.mft
File: afY2pbazoordg_l0Rtewg7lMPa4.mft (raw, json)
Hash identifier: pgME653JkGWiqP8ETVrLPY1XFmHSm8ogyj26VtIni0s=
Subject key identifier: F9:E9:AC:89:91:21:CF:D1:34:0C:39:43:42:0D:01:5A:82:82:37:E6
Authority key identifier: 69:F6:36:A5:B6:B3:A2:8A:DD:83:F9:74:46:D7:B0:83:B9:4C:3D:AE
Certificate issuer: /CN=69f636a5b6b3a28add83f97446d7b083b94c3dae
Certificate serial: 0198D5F1B9020949393EB43C805A582C80BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/afY2pbazoordg_l0Rtewg7lMPa4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/e99954-c00f-4014-8e71-8aee2bf89b91/1/afY2pbazoordg_l0Rtewg7lMPa4.mft
Manifest number: 0619
Signing time: Sat 23 Aug 2025 08:00:45 +0000
Manifest this update: Sat 23 Aug 2025 08:00:45 +0000
Manifest next update: Sun 24 Aug 2025 08:00:45 +0000
Files and hashes: 1: Uq41S_TL-4cdbHQOXq-81k1Y6B0.roa (hash: imvcawPVkLTN2rqi9GrM6dLepGLRmW6IgQsJl3oa4vo=)
2: afY2pbazoordg_l0Rtewg7lMPa4.crl (hash: oqxA3kXYZAgXZAXKmGaFNo5zeHmAfACQz8purvjEVt8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/e99954-c00f-4014-8e71-8aee2bf89b91/1/afY2pbazoordg_l0Rtewg7lMPa4.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/e99954-c00f-4014-8e71-8aee2bf89b91/1/afY2pbazoordg_l0Rtewg7lMPa4.mft
rsync://rpki.ripe.net/repository/DEFAULT/afY2pbazoordg_l0Rtewg7lMPa4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:b9:02:09:49:39:3e:b4:3c:80:5a:58:2c:80:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69f636a5b6b3a28add83f97446d7b083b94c3dae
Validity
Not Before: Aug 23 08:00:45 2025 GMT
Not After : Aug 24 08:00:45 2025 GMT
Subject: CN=f9e9ac899121cfd1340c3943420d015a828237e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:8f:3a:3d:cb:bd:5a:a6:ea:21:d0:17:4a:87:
76:d9:06:48:ea:4e:cb:85:68:51:eb:2c:aa:cf:18:
1c:33:42:b2:9a:d8:d2:07:40:a6:9c:05:77:83:ae:
42:6a:e9:e6:62:f6:f1:11:85:af:b3:5c:f8:32:84:
8f:bd:d1:73:c7:c4:8c:98:39:3c:55:39:2b:99:87:
e2:cd:a6:e9:1b:7e:9b:fc:72:1f:8f:1e:31:45:4a:
89:39:a8:7e:b7:4d:5c:68:b8:f1:56:be:aa:26:d1:
65:18:02:ea:63:0d:50:0b:ea:40:67:f8:69:99:12:
34:3f:08:30:d7:db:4e:e4:2e:cd:6f:8c:eb:86:78:
5d:30:b9:f0:56:d1:e9:1e:de:58:bd:80:8b:83:5f:
63:bb:b7:b5:b2:47:bf:d7:45:4b:3e:79:11:0e:8b:
44:4d:1d:97:a5:84:7f:85:c7:66:2d:40:4e:9d:62:
b4:d8:da:aa:31:12:08:4b:62:b3:41:50:5f:71:8c:
06:ae:aa:e6:71:9f:c5:48:f2:ba:fd:80:d4:dd:02:
6d:ed:20:ad:2a:bf:31:ed:14:a6:07:80:5e:9a:b0:
e5:ff:67:43:22:27:75:6c:29:96:47:45:19:85:a0:
c8:f0:d4:00:6b:6d:31:5d:1e:0a:ef:9a:c6:d2:fe:
64:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:E9:AC:89:91:21:CF:D1:34:0C:39:43:42:0D:01:5A:82:82:37:E6
X509v3 Authority Key Identifier:
keyid:69:F6:36:A5:B6:B3:A2:8A:DD:83:F9:74:46:D7:B0:83:B9:4C:3D:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/afY2pbazoordg_l0Rtewg7lMPa4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/e99954-c00f-4014-8e71-8aee2bf89b91/1/afY2pbazoordg_l0Rtewg7lMPa4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/e99954-c00f-4014-8e71-8aee2bf89b91/1/afY2pbazoordg_l0Rtewg7lMPa4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:92:09:6b:1d:80:62:39:97:71:bb:e2:c7:71:a3:bd:11:03:
4a:e0:bd:20:ad:78:85:93:4d:e9:0e:15:1a:35:6a:65:51:ea:
c4:a5:ba:5e:29:73:25:40:48:84:1a:88:35:83:26:de:1e:a9:
d7:96:31:10:a4:50:7b:6a:b0:72:71:f1:91:6b:af:5b:15:fc:
13:a0:f5:a8:3e:02:cd:27:6c:cf:e5:ea:aa:ea:1a:7c:94:69:
8e:05:3d:00:58:fc:e9:9e:22:9d:1e:f4:f1:38:ff:ba:47:2c:
45:14:cb:5f:c3:6d:5c:55:a7:e0:e8:05:05:31:99:36:1a:6d:
53:6b:b8:c8:b7:9d:b1:fb:72:10:b3:b7:5a:7a:da:19:a2:8d:
2e:fd:82:00:18:00:8a:6f:66:68:a0:6a:ad:f8:5a:85:a3:e2:
a8:a2:61:e8:d2:00:1c:8f:81:55:5f:82:a4:99:2d:54:28:3c:
e9:c2:97:06:a0:50:90:ae:68:b1:d8:ed:1e:9f:85:d9:90:1a:
c5:20:83:fe:7a:5f:45:5e:f7:6e:80:6a:6c:75:b7:45:b6:e2:
8f:ed:d1:9b:a8:13:04:3a:ca:89:ab:d3:fd:46:64:8d:eb:91:
fc:e0:f3:eb:1b:e7:7b:87:af:0c:64:09:7f:43:69:e1:f5:4b:
a2:b2:75:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:36:47 2025 by rpki-client