Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/3f1f2e-5c52-4fb0-b538-17366ff96379/1/afGmtIBLtqOFSkThBp8lcmdBeAU.mft
File: afGmtIBLtqOFSkThBp8lcmdBeAU.mft (raw, json)
Hash identifier: W6owWc3iQbuPdBmLhCUQJkV1LedzmV4MqxtslAC8G3o=
Subject key identifier: D5:B2:3E:89:DB:62:E1:98:8A:EB:97:03:CD:15:92:A2:49:A3:C1:A3
Authority key identifier: 69:F1:A6:B4:80:4B:B6:A3:85:4A:44:E1:06:9F:25:72:67:41:78:05
Certificate issuer: /CN=69f1a6b4804bb6a3854a44e1069f257267417805
Certificate serial: 0199FBEABB9BACA2650DCD0F727C2CBFBFE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/afGmtIBLtqOFSkThBp8lcmdBeAU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/3f1f2e-5c52-4fb0-b538-17366ff96379/1/afGmtIBLtqOFSkThBp8lcmdBeAU.mft
Manifest number: 04B8
Signing time: Sun 19 Oct 2025 10:01:28 +0000
Manifest this update: Sun 19 Oct 2025 10:01:28 +0000
Manifest next update: Mon 20 Oct 2025 10:01:28 +0000
Files and hashes: 1: Skkt9qCmFcjyoJKLbWcw_zW-zv4.roa (hash: oMEM2PX5h0QQNYCkDuZtaf8uG3ceVoU4JnbpV2MwKWM=)
2: afGmtIBLtqOFSkThBp8lcmdBeAU.crl (hash: fm0dLzajzvFhWzqlUbNmn4ZIEim7cbBHLaqQmU/pzC8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/3f1f2e-5c52-4fb0-b538-17366ff96379/1/afGmtIBLtqOFSkThBp8lcmdBeAU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/3f1f2e-5c52-4fb0-b538-17366ff96379/1/afGmtIBLtqOFSkThBp8lcmdBeAU.mft
rsync://rpki.ripe.net/repository/DEFAULT/afGmtIBLtqOFSkThBp8lcmdBeAU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:bb:9b:ac:a2:65:0d:cd:0f:72:7c:2c:bf:bf:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69f1a6b4804bb6a3854a44e1069f257267417805
Validity
Not Before: Oct 19 10:01:28 2025 GMT
Not After : Oct 20 10:01:28 2025 GMT
Subject: CN=d5b23e89db62e1988aeb9703cd1592a249a3c1a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:9e:11:c3:04:48:c0:b3:d1:c4:be:37:4a:34:
be:c3:cd:29:7f:44:e5:29:73:97:27:82:6f:9e:42:
60:08:c1:11:36:9b:50:8d:9e:55:bb:4f:41:07:81:
dd:07:12:40:2d:91:8d:a4:27:d3:01:fc:40:5f:ac:
5a:1a:68:e8:85:30:eb:40:0c:6d:cd:0a:19:3d:9e:
ec:7e:49:e9:55:5f:ff:fd:e9:9f:55:53:97:96:85:
0f:c8:fd:6f:78:1e:cb:f7:bc:b9:69:58:2d:8b:d0:
bb:e5:ca:16:30:d3:12:25:c5:4f:b0:24:48:46:50:
cf:95:21:c3:db:78:c0:a0:27:8d:dd:fb:be:f7:7d:
5e:53:b9:af:c0:4d:f2:43:4a:ae:7a:8f:4c:fa:49:
cc:d7:a2:8d:f5:ca:b6:a0:bf:29:92:2d:c1:ca:57:
44:84:46:38:64:dc:18:7e:e8:3e:79:51:01:24:0c:
3e:7d:4d:47:e2:4c:75:80:36:a3:8d:04:2e:32:89:
c8:ae:33:e9:4d:0d:11:2b:d1:5f:35:c9:bb:21:b6:
c6:90:b3:e1:49:a7:30:17:3e:86:9b:0c:42:af:fd:
96:ef:1b:39:c2:02:c3:77:07:44:dc:41:46:d0:6c:
72:cb:20:f3:12:ca:83:2c:d0:04:09:fb:33:fc:b0:
14:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:B2:3E:89:DB:62:E1:98:8A:EB:97:03:CD:15:92:A2:49:A3:C1:A3
X509v3 Authority Key Identifier:
keyid:69:F1:A6:B4:80:4B:B6:A3:85:4A:44:E1:06:9F:25:72:67:41:78:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/afGmtIBLtqOFSkThBp8lcmdBeAU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/3f1f2e-5c52-4fb0-b538-17366ff96379/1/afGmtIBLtqOFSkThBp8lcmdBeAU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/3f1f2e-5c52-4fb0-b538-17366ff96379/1/afGmtIBLtqOFSkThBp8lcmdBeAU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:5a:0a:e4:19:83:f8:d4:36:0a:a3:cf:23:ca:86:47:39:0c:
e7:33:79:72:22:c1:dd:19:fd:eb:9a:0b:a9:9f:dd:12:32:88:
0c:a6:92:ee:9a:7c:8d:17:e2:0d:df:82:4c:5a:e6:92:4f:00:
0c:ed:72:48:8d:24:3e:76:72:48:51:70:e6:8f:19:e5:3f:d3:
3e:5c:fe:bb:92:92:a0:dd:ca:03:31:9a:6d:87:d8:a9:36:8b:
b3:ca:3b:f6:09:16:dc:7d:d1:37:41:3f:ff:6b:a1:60:53:0c:
59:c2:17:16:34:21:7c:ca:3b:f7:70:01:a4:db:a4:75:23:f9:
41:29:9c:0b:fc:b0:fc:d3:b0:41:18:3a:b5:b8:01:3d:4c:46:
67:63:74:e9:3c:4d:f0:3e:e1:af:4a:5d:32:5e:a1:34:d7:0d:
6f:54:17:1e:47:cb:30:c7:38:51:b8:bb:87:a9:bf:d6:23:b8:
4d:57:9a:00:95:ff:71:12:9a:9a:50:49:71:af:1a:f9:75:d9:
b2:5e:e0:26:09:7c:5b:aa:64:d6:e7:1e:22:fd:00:f3:78:d7:
39:5b:00:18:83:c7:2b:4a:cd:f8:53:6c:b8:b6:04:28:bb:28:
2f:29:4d:4c:ce:99:bc:c6:5c:02:b6:52:3a:88:89:a5:ca:14:
7f:f1:17:f3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn76rubrKJlDc0Pcnwsv7/oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5ZjFhNmI0ODA0YmI2YTM4NTRhNDRlMTA2OWYyNTcyNjc0
MTc4MDUwHhcNMjUxMDE5MTAwMTI4WhcNMjUxMDIwMTAwMTI4WjAzMTEwLwYDVQQD
EyhkNWIyM2U4OWRiNjJlMTk4OGFlYjk3MDNjZDE1OTJhMjQ5YTNjMWEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvp4RwwRIwLPRxL43SjS+w80pf0Tl
KXOXJ4JvnkJgCMERNptQjZ5Vu09BB4HdBxJALZGNpCfTAfxAX6xaGmjohTDrQAxt
zQoZPZ7sfknpVV///emfVVOXloUPyP1veB7L97y5aVgti9C75coWMNMSJcVPsCRI
RlDPlSHD23jAoCeN3fu+931eU7mvwE3yQ0queo9M+knM16KN9cq2oL8pki3ByldE
hEY4ZNwYfug+eVEBJAw+fU1H4kx1gDajjQQuMonIrjPpTQ0RK9FfNcm7IbbGkLPh
SacwFz6GmwxCr/2W7xs5wgLDdwdE3EFG0GxyyyDzEsqDLNAECfsz/LAUnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNWyPonbYuGYiuuXA80VkqJJo8GjMB8GA1UdIwQY
MBaAFGnxprSAS7ajhUpE4QafJXJnQXgFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWZHbXRJQkx0cU9GU2tUaEJwOGxjbWRCZUFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi8zZjFmMmUtNWM1Mi00ZmIwLWI1Mzgt
MTczNjZmZjk2Mzc5LzEvYWZHbXRJQkx0cU9GU2tUaEJwOGxjbWRCZUFVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi8zZjFmMmUtNWM1Mi00ZmIwLWI1MzgtMTczNjZmZjk2Mzc5
LzEvYWZHbXRJQkx0cU9GU2tUaEJwOGxjbWRCZUFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACFoK5BmD
+NQ2CqPPI8qGRzkM5zN5ciLB3Rn965oLqZ/dEjKIDKaS7pp8jRfiDd+CTFrmkk8A
DO1ySI0kPnZySFFw5o8Z5T/TPlz+u5KSoN3KAzGabYfYqTaLs8o79gkW3H3RN0E/
/2uhYFMMWcIXFjQhfMo793ABpNukdSP5QSmcC/yw/NOwQRg6tbgBPUxGZ2N06TxN
8D7hr0pdMl6hNNcNb1QXHkfLMMc4Ubi7h6m/1iO4TVeaAJX/cRKamlBJca8a+XXZ
sl7gJgl8W6pk1uceIv0A83jXOVsAGIPHK0rN+FNsuLYEKLsoLylNTM6ZvMZcArZS
OoiJpcoUf/EX8w==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:06:04 2025 by rpki-client