Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/953a61-3349-47bf-a12b-e4c69334142c/1/afM-l5tD6I0OXsp5h5R9sh73yrk.mft
File: afM-l5tD6I0OXsp5h5R9sh73yrk.mft (raw, json)
Hash identifier: +aXwDOSyuPE77cI7Z3vavOlICCiDmEncxpsj1cmLK5k=
Subject key identifier: D0:39:22:09:35:E2:72:D9:DF:95:A9:7C:9C:01:11:1A:16:F5:52:BF
Authority key identifier: 69:F3:3E:97:9B:43:E8:8D:0E:5E:CA:79:87:94:7D:B2:1E:F7:CA:B9
Certificate issuer: /CN=69f33e979b43e88d0e5eca7987947db21ef7cab9
Certificate serial: 019849D3BA61DE629F4C35F132DB80AA994D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/afM-l5tD6I0OXsp5h5R9sh73yrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/953a61-3349-47bf-a12b-e4c69334142c/1/afM-l5tD6I0OXsp5h5R9sh73yrk.mft
Manifest number: 04BA
Signing time: Sun 27 Jul 2025 03:01:09 +0000
Manifest this update: Sun 27 Jul 2025 03:01:09 +0000
Manifest next update: Mon 28 Jul 2025 03:01:09 +0000
Files and hashes: 1: afM-l5tD6I0OXsp5h5R9sh73yrk.crl (hash: f88Vjs5K/9zLhSxvcyQ42m1MbHAh3auSjvEYtc3lGV4=)
2: rjuN-ZTOCGAomaycIkzHFBIupdk.roa (hash: mpitT9m9PBhweeULsMgo7mL5tvByadSSpZctsThk9Hg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/953a61-3349-47bf-a12b-e4c69334142c/1/afM-l5tD6I0OXsp5h5R9sh73yrk.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/953a61-3349-47bf-a12b-e4c69334142c/1/afM-l5tD6I0OXsp5h5R9sh73yrk.mft
rsync://rpki.ripe.net/repository/DEFAULT/afM-l5tD6I0OXsp5h5R9sh73yrk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 03:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:ba:61:de:62:9f:4c:35:f1:32:db:80:aa:99:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69f33e979b43e88d0e5eca7987947db21ef7cab9
Validity
Not Before: Jul 27 03:01:09 2025 GMT
Not After : Jul 28 03:01:09 2025 GMT
Subject: CN=d039220935e272d9df95a97c9c01111a16f552bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:8b:a9:b5:0b:03:54:62:38:fc:32:ea:f5:6f:
6c:5a:93:c4:b8:65:86:f4:55:ee:de:6d:6f:e8:58:
49:1a:11:22:0a:a5:dc:07:ed:bb:e6:10:14:90:9c:
19:bb:d1:7b:6f:f0:b0:1e:74:ee:6c:a1:6f:b2:72:
91:83:fd:e6:3a:ac:fe:54:77:00:60:e6:83:3b:02:
e2:62:f8:43:a2:c4:52:07:67:ab:32:8d:b9:99:a8:
5c:95:f0:d5:41:ed:e0:de:57:7a:63:75:1a:7f:b4:
e3:ce:7d:ed:7c:50:65:86:e7:99:b8:44:e0:5f:3d:
07:4e:77:6e:0d:a3:8a:11:82:45:8f:52:59:bb:46:
bd:7e:40:7b:ba:9b:d4:3e:b0:4d:e2:8b:1f:fc:b6:
c9:35:f2:ec:5f:02:2a:8a:4b:76:ff:68:a7:70:38:
c5:b2:21:08:48:23:d8:ee:e1:0e:f8:a5:94:ce:3c:
d5:72:f0:f1:9a:f7:b9:ed:c1:89:a7:73:d9:ad:01:
96:67:70:ac:71:22:9c:b0:0d:53:7f:bc:57:89:25:
90:cf:5c:72:4e:e9:e6:a0:c9:55:dd:bf:63:66:72:
ad:97:8c:cc:9f:76:00:e7:78:4e:05:c0:22:9c:f6:
05:50:5d:94:08:71:be:42:99:df:dd:34:54:42:9e:
d1:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:39:22:09:35:E2:72:D9:DF:95:A9:7C:9C:01:11:1A:16:F5:52:BF
X509v3 Authority Key Identifier:
keyid:69:F3:3E:97:9B:43:E8:8D:0E:5E:CA:79:87:94:7D:B2:1E:F7:CA:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/afM-l5tD6I0OXsp5h5R9sh73yrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/953a61-3349-47bf-a12b-e4c69334142c/1/afM-l5tD6I0OXsp5h5R9sh73yrk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/953a61-3349-47bf-a12b-e4c69334142c/1/afM-l5tD6I0OXsp5h5R9sh73yrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:49:dd:c9:02:ad:d9:46:7e:5c:70:33:7b:58:1e:72:35:a4:
90:c0:2b:90:75:e7:f2:6b:46:3f:77:44:0a:3c:87:cf:58:2e:
43:c7:d6:2b:72:52:eb:3c:dc:8d:ab:a4:30:be:eb:33:64:f2:
21:d2:e2:16:a3:07:1e:1b:99:a3:24:60:b8:22:a8:5f:ed:d4:
3f:1f:bd:fe:89:68:0c:8e:e1:07:67:30:dd:a7:61:4e:e6:b1:
43:8c:fc:c2:95:43:1f:9f:45:b7:d3:3b:a2:e0:63:1d:b5:89:
97:4e:bc:cd:34:a0:ed:51:4b:9b:ea:67:87:0f:0a:c4:9d:96:
22:35:f3:39:20:f8:12:22:8b:10:92:e7:b8:43:76:f9:27:57:
a0:05:b8:32:dc:05:bf:90:df:67:17:e5:ed:30:81:c0:c0:e4:
d7:85:3e:ad:fd:50:3a:95:de:3d:82:ec:ec:ab:a9:cb:e4:7e:
50:d9:27:82:8a:4a:b9:eb:bf:ec:c8:d3:0d:7d:62:d4:65:60:
c9:e4:59:d5:a2:83:ce:eb:53:c3:46:8f:36:b0:dc:b4:87:8d:
b6:41:dd:b2:2f:69:f6:57:d3:b6:3b:c5:01:4d:37:f0:8d:a3:
3d:35:5c:0b:8b:93:2b:11:24:d8:19:11:dd:b7:09:71:fb:df:
d2:53:c2:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:41:00 2025 by rpki-client