Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/bfd37c-cb12-4a9c-8f5d-4021265c39b0/1/r4AZhMw48KT8Wv4a3qtoDBuJ6Vs.mft
File: r4AZhMw48KT8Wv4a3qtoDBuJ6Vs.mft (raw, json)
Hash identifier: S7e7R/51oUQmYdKbBjukZwnuae8HUei339Hh3ciqqAg=
Subject key identifier: D5:F3:9E:CB:08:ED:B5:F1:66:FF:D5:6B:26:80:6E:05:73:29:39:78
Authority key identifier: AF:80:19:84:CC:38:F0:A4:FC:5A:FE:1A:DE:AB:68:0C:1B:89:E9:5B
Certificate issuer: /CN=af801984cc38f0a4fc5afe1adeab680c1b89e95b
Certificate serial: 0199FEB4A9E13790773F2819FAF4DF88EFAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r4AZhMw48KT8Wv4a3qtoDBuJ6Vs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/bfd37c-cb12-4a9c-8f5d-4021265c39b0/1/r4AZhMw48KT8Wv4a3qtoDBuJ6Vs.mft
Manifest number: 174E
Signing time: Sun 19 Oct 2025 23:01:16 +0000
Manifest this update: Sun 19 Oct 2025 23:01:16 +0000
Manifest next update: Mon 20 Oct 2025 23:01:16 +0000
Files and hashes: 1: 2I1GOWHl_sNg202ZkVSHIZVcDhI.roa (hash: hTizmDrUVZJ/qWZQ7WDFRMG/AOudB/C+8jSAoVtPrlA=)
2: r4AZhMw48KT8Wv4a3qtoDBuJ6Vs.crl (hash: WQldp5cQ5JrFBawB980xFnGqcuSd9875wvO+ETbeeHc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/bfd37c-cb12-4a9c-8f5d-4021265c39b0/1/r4AZhMw48KT8Wv4a3qtoDBuJ6Vs.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/bfd37c-cb12-4a9c-8f5d-4021265c39b0/1/r4AZhMw48KT8Wv4a3qtoDBuJ6Vs.mft
rsync://rpki.ripe.net/repository/DEFAULT/r4AZhMw48KT8Wv4a3qtoDBuJ6Vs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:b4:a9:e1:37:90:77:3f:28:19:fa:f4:df:88:ef:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af801984cc38f0a4fc5afe1adeab680c1b89e95b
Validity
Not Before: Oct 19 23:01:16 2025 GMT
Not After : Oct 20 23:01:16 2025 GMT
Subject: CN=d5f39ecb08edb5f166ffd56b26806e0573293978
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:07:14:ec:d9:23:2a:b3:34:0d:e0:d4:a1:9b:
d6:8b:80:89:e0:f8:b8:df:dc:f5:c9:ec:eb:24:cc:
3c:54:64:37:a0:d7:fc:60:af:ac:e4:f3:22:f6:af:
f2:eb:18:f8:2c:46:30:d4:48:59:5e:3a:00:04:24:
c2:b0:92:91:35:b9:2d:f3:bd:f6:42:a4:4f:1a:c8:
bd:09:09:53:e3:75:d6:01:3f:a2:33:a2:39:b0:c0:
9f:29:9b:b6:8f:20:1a:5f:7d:4d:a1:01:13:4e:41:
14:8a:3b:e7:d8:33:e0:d6:4b:db:e2:0b:5e:f0:a3:
5a:ab:e9:74:86:26:e6:0a:fc:26:90:3a:fe:fe:45:
d1:c6:cf:24:f1:72:6d:1d:e5:b3:10:db:e5:a6:37:
85:08:95:c2:c7:0b:37:5b:81:a8:05:cf:67:5a:7f:
a8:3b:3d:dc:9c:d2:44:4e:48:c8:74:c5:c8:11:e6:
ba:24:50:ed:09:f2:b7:72:12:73:16:f0:9a:ad:7b:
32:d2:73:01:7a:f9:b5:82:a9:10:6a:34:0c:61:f0:
35:61:ec:e5:f9:f8:95:02:15:2f:c9:a9:25:37:8f:
0a:b7:d0:2e:3b:2e:3f:34:14:ce:33:23:75:e2:c1:
04:fb:bf:59:35:07:51:fc:b5:cb:32:a2:a4:d0:d4:
4a:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:F3:9E:CB:08:ED:B5:F1:66:FF:D5:6B:26:80:6E:05:73:29:39:78
X509v3 Authority Key Identifier:
keyid:AF:80:19:84:CC:38:F0:A4:FC:5A:FE:1A:DE:AB:68:0C:1B:89:E9:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r4AZhMw48KT8Wv4a3qtoDBuJ6Vs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bfd37c-cb12-4a9c-8f5d-4021265c39b0/1/r4AZhMw48KT8Wv4a3qtoDBuJ6Vs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bfd37c-cb12-4a9c-8f5d-4021265c39b0/1/r4AZhMw48KT8Wv4a3qtoDBuJ6Vs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:f2:29:59:ea:55:b9:83:7a:c4:6f:49:97:89:9c:11:74:1e:
79:71:52:ba:4d:60:48:9c:3e:e9:2d:3e:1a:d6:2e:e4:29:7b:
c2:3b:97:39:d0:08:62:cb:c1:1c:38:b0:65:3f:7f:aa:dd:01:
d7:7b:3f:7b:e3:fd:6f:74:eb:7b:bc:74:29:db:4d:7c:dd:44:
0e:bf:00:17:c1:2b:e2:9c:f9:0e:3f:fc:b5:89:4f:ef:39:38:
d7:e6:75:9f:32:bb:b9:51:a5:7c:93:36:ba:84:99:ae:24:11:
91:1d:f7:9f:23:8c:7b:c9:dc:8c:c0:b8:a6:84:4e:2e:02:17:
79:86:de:d1:fa:db:36:86:82:b0:25:32:6e:56:f8:b6:16:74:
33:12:07:86:f9:61:42:a5:a5:f4:47:a8:6c:d1:80:8f:a3:88:
91:73:83:cb:fa:71:4c:6e:15:de:51:9b:18:26:31:75:6b:f5:
cf:f8:9a:fe:99:86:f0:20:e5:1f:5d:a3:d5:1c:4c:84:ff:29:
89:3a:a6:c9:2e:42:9a:a8:5d:21:06:ee:9a:ab:cb:42:0a:9c:
b9:c2:fe:cb:bb:27:3f:e7:f9:26:b9:95:1c:08:dc:da:1b:d9:
7d:32:34:42:2a:25:28:fc:ac:42:a8:f3:53:48:c4:25:31:c5:
84:8e:da:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:28:44 2025 by rpki-client