Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/68239f-09a3-4108-89ba-eee50dd9193c/1/AF8NRLIh9LEcidtolp-Xw8cVSQY.mft
File: AF8NRLIh9LEcidtolp-Xw8cVSQY.mft (raw, json)
Hash identifier: tDsEzjrAcax0ueeQxCEC9oXARPUNKeqoEqQS/SwYYWw=
Subject key identifier: 97:D4:90:47:17:9A:69:47:60:39:FD:43:E7:3F:3E:73:7C:92:51:80
Authority key identifier: 00:5F:0D:44:B2:21:F4:B1:1C:89:DB:68:96:9F:97:C3:C7:15:49:06
Certificate issuer: /CN=005f0d44b221f4b11c89db68969f97c3c7154906
Certificate serial: 019849D315189C20674226264138124B1117
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AF8NRLIh9LEcidtolp-Xw8cVSQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/68239f-09a3-4108-89ba-eee50dd9193c/1/AF8NRLIh9LEcidtolp-Xw8cVSQY.mft
Manifest number: 1601
Signing time: Sun 27 Jul 2025 03:00:26 +0000
Manifest this update: Sun 27 Jul 2025 03:00:26 +0000
Manifest next update: Mon 28 Jul 2025 03:00:26 +0000
Files and hashes: 1: AF8NRLIh9LEcidtolp-Xw8cVSQY.crl (hash: gXEGbYRjBmMNXhuUz0wSbTOMcNuGiFEjWUyYJ7Zsk1c=)
2: YU4fCfmpK-fuEOwSolTjGJvHl-Q.roa (hash: jEvy+I1e+1GaLBXiJtzyH21Rx3ZNEpokSAtj3mt7uI4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/68239f-09a3-4108-89ba-eee50dd9193c/1/AF8NRLIh9LEcidtolp-Xw8cVSQY.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/68239f-09a3-4108-89ba-eee50dd9193c/1/AF8NRLIh9LEcidtolp-Xw8cVSQY.mft
rsync://rpki.ripe.net/repository/DEFAULT/AF8NRLIh9LEcidtolp-Xw8cVSQY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 03:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:15:18:9c:20:67:42:26:26:41:38:12:4b:11:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=005f0d44b221f4b11c89db68969f97c3c7154906
Validity
Not Before: Jul 27 03:00:26 2025 GMT
Not After : Jul 28 03:00:26 2025 GMT
Subject: CN=97d49047179a69476039fd43e73f3e737c925180
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:b7:27:f7:3b:65:a0:c1:2f:ec:69:06:0d:04:
79:0b:42:0d:0c:a5:89:82:e0:90:49:e7:73:c8:f1:
c9:3a:3e:cb:d3:a5:55:16:41:1b:b1:1e:df:6f:13:
70:ce:6a:45:a2:44:4d:30:14:d0:5c:30:34:c2:a3:
e6:e4:e0:0c:8c:8b:f1:85:1e:8b:59:22:de:62:93:
e0:05:47:84:49:90:f5:03:94:be:a4:6d:81:cf:c5:
ab:bf:61:a6:59:27:b9:be:f8:da:74:0a:c2:a3:9e:
25:90:8a:1d:3e:02:8c:25:18:00:c5:66:42:ca:1c:
a0:98:19:c1:2d:76:03:e1:ba:c0:7b:e0:49:d0:e6:
7d:2b:78:4a:78:80:ce:4e:d3:06:2d:be:a7:c7:68:
58:83:89:e5:40:d5:6d:c9:95:39:3f:8b:99:4e:85:
bc:e6:74:9e:b0:2d:fa:a6:9f:4e:d9:41:f4:7e:9a:
53:4b:ae:29:80:99:22:9b:5a:54:27:67:ef:30:a6:
ce:d5:00:ad:ac:5f:00:a0:b5:f4:98:17:ef:bf:ca:
10:cd:a8:66:be:80:c4:7d:11:af:e4:6c:6f:33:15:
87:5b:dc:8e:f1:ea:61:dd:75:3d:af:8d:de:6f:e5:
b6:84:e0:c0:f2:a9:66:79:02:5c:d2:09:cb:bb:f6:
35:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:D4:90:47:17:9A:69:47:60:39:FD:43:E7:3F:3E:73:7C:92:51:80
X509v3 Authority Key Identifier:
keyid:00:5F:0D:44:B2:21:F4:B1:1C:89:DB:68:96:9F:97:C3:C7:15:49:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AF8NRLIh9LEcidtolp-Xw8cVSQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/68239f-09a3-4108-89ba-eee50dd9193c/1/AF8NRLIh9LEcidtolp-Xw8cVSQY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/68239f-09a3-4108-89ba-eee50dd9193c/1/AF8NRLIh9LEcidtolp-Xw8cVSQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:6f:d7:72:ca:b8:40:2b:f4:ea:64:9b:a4:5b:05:48:94:7e:
3a:97:5a:a9:25:c4:71:0e:e1:47:69:4f:bf:e3:f9:4a:59:f5:
ee:25:55:ff:c7:e5:d9:a8:11:30:22:63:7f:84:11:69:04:ed:
75:62:10:5a:fd:14:2b:b1:ac:78:8f:28:3f:6f:ee:13:c7:62:
f9:a0:08:20:6e:14:69:b9:98:80:e9:a9:88:8b:3f:83:76:1f:
97:40:de:ae:61:62:68:7b:40:d5:3c:f7:58:f4:6f:b3:2e:af:
34:09:2d:90:84:36:74:ca:4b:e6:45:56:82:46:e2:b8:3c:5b:
96:75:50:91:e2:60:cd:4c:57:79:98:f1:7f:3d:f5:4d:6f:86:
ef:41:a6:10:12:b3:a1:52:76:3a:08:82:c1:a4:03:61:e4:09:
9a:6f:76:b6:d9:dd:22:61:ec:54:0a:76:6c:56:5e:2b:76:fa:
8e:d3:94:7c:61:dc:4e:50:0e:75:e7:49:91:00:11:e1:97:a2:
f0:7b:7d:04:88:ea:f9:53:5a:80:66:39:30:ff:87:57:14:a5:
c4:56:6c:af:b4:30:de:61:85:c9:eb:7f:0a:7a:d4:95:da:98:
36:b5:4c:bc:14:44:11:8d:cd:49:f3:c5:2f:f1:3e:8b:a6:59:
5d:91:02:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:18:45 2025 by rpki-client