Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/c68ae4-9724-4975-8bd4-c8700a14761b/1/_AfGtW7x8jmwKO9CN1oqF2W8CLg.mft
File: _AfGtW7x8jmwKO9CN1oqF2W8CLg.mft (raw, json)
Hash identifier: AyOKV9E5rnLlXgrd+boadI514gn5oOVt1LfZI+Xmk7g=
Subject key identifier: 3F:84:8A:78:D6:03:C6:D3:40:4D:E0:A1:E1:37:23:C2:2D:23:8B:C5
Authority key identifier: FC:07:C6:B5:6E:F1:F2:39:B0:28:EF:42:37:5A:2A:17:65:BC:08:B8
Certificate issuer: /CN=fc07c6b56ef1f239b028ef42375a2a1765bc08b8
Certificate serial: 01983FBEA002F29D6C69E074F07F950E0F64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_AfGtW7x8jmwKO9CN1oqF2W8CLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/c68ae4-9724-4975-8bd4-c8700a14761b/1/_AfGtW7x8jmwKO9CN1oqF2W8CLg.mft
Manifest number: 0FB6
Signing time: Fri 25 Jul 2025 04:01:54 +0000
Manifest this update: Fri 25 Jul 2025 04:01:54 +0000
Manifest next update: Sat 26 Jul 2025 04:01:54 +0000
Files and hashes: 1: TvMim_aEtrCLLOp0ZZIFYAVC2o4.roa (hash: /xE4OxOvjCCoCUdeNOdzw/FvM+bpWmIZ3XvVFCX7TVc=)
2: _AfGtW7x8jmwKO9CN1oqF2W8CLg.crl (hash: 4FplSRr5GIFlqh6pziaoN3qThBPn5Ettwf1mLFau9hc=)
3: qi04sQ8qQVwMXdQXve2GNvg8f-0.roa (hash: fLJ+x7i0b6ZT7hHF332I64JRm3fDb0LUQmOcJ/RhLx4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/c68ae4-9724-4975-8bd4-c8700a14761b/1/_AfGtW7x8jmwKO9CN1oqF2W8CLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/c68ae4-9724-4975-8bd4-c8700a14761b/1/_AfGtW7x8jmwKO9CN1oqF2W8CLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/_AfGtW7x8jmwKO9CN1oqF2W8CLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 04:01:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:3f:be:a0:02:f2:9d:6c:69:e0:74:f0:7f:95:0e:0f:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc07c6b56ef1f239b028ef42375a2a1765bc08b8
Validity
Not Before: Jul 25 04:01:54 2025 GMT
Not After : Jul 26 04:01:54 2025 GMT
Subject: CN=3f848a78d603c6d3404de0a1e13723c22d238bc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b9:f7:dd:b7:4d:2c:75:e2:0d:78:58:b4:d3:
25:7f:a2:ed:ab:08:fb:b6:ec:8c:5e:56:99:ec:f1:
1f:11:b4:4c:78:68:8c:c6:4f:7f:9c:5e:fb:9c:7d:
cc:17:97:aa:89:84:ea:92:dc:de:e5:b0:30:51:4a:
ba:72:e0:e3:fc:8d:e1:60:79:f8:51:ad:44:78:95:
95:3c:9d:36:77:ff:6a:30:36:30:e6:35:ec:fe:43:
9d:23:d4:0d:67:bb:3e:2e:35:26:34:61:30:6b:d6:
4f:d4:23:3e:04:14:d0:41:a1:88:f3:fb:7b:dd:36:
57:61:22:a8:16:6f:81:0f:15:a1:08:b4:9d:6d:7a:
a1:4b:2f:9f:62:8f:4a:34:25:31:77:67:14:1b:c3:
5c:c3:a3:ff:e5:58:9b:1b:95:87:45:fb:b0:38:aa:
0c:15:a2:42:06:7e:a4:b8:6c:db:60:75:28:47:69:
df:66:96:49:51:b4:a1:fa:50:80:1d:8f:8f:81:48:
3d:1b:e8:fb:ae:af:33:44:a9:59:80:79:ca:8b:7d:
cc:61:be:5d:11:ae:95:7e:1b:5c:59:97:4f:27:53:
70:bf:2d:6a:c3:ae:45:0c:f5:4c:a0:1c:3f:8e:90:
f2:ce:8f:3f:e3:d9:9d:ec:04:38:49:94:98:61:3a:
82:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:84:8A:78:D6:03:C6:D3:40:4D:E0:A1:E1:37:23:C2:2D:23:8B:C5
X509v3 Authority Key Identifier:
keyid:FC:07:C6:B5:6E:F1:F2:39:B0:28:EF:42:37:5A:2A:17:65:BC:08:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_AfGtW7x8jmwKO9CN1oqF2W8CLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/c68ae4-9724-4975-8bd4-c8700a14761b/1/_AfGtW7x8jmwKO9CN1oqF2W8CLg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/c68ae4-9724-4975-8bd4-c8700a14761b/1/_AfGtW7x8jmwKO9CN1oqF2W8CLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:b6:e3:93:dc:79:49:48:74:cf:74:4b:a7:78:64:ea:d9:32:
e2:38:6d:7f:b8:ac:71:8c:3e:af:b3:75:1e:6a:e7:15:27:57:
0c:14:85:c3:4d:a9:29:55:2e:6a:68:d7:6c:7d:5e:18:24:f9:
e0:e6:55:42:a4:9a:8d:b8:fc:ad:00:2e:66:97:cb:e6:69:00:
18:05:c4:ab:4d:6b:de:01:bf:f7:09:51:ba:51:f4:8d:6a:1b:
ae:68:83:dc:7d:5f:1b:be:e5:82:7d:c6:04:62:4f:f4:6d:29:
69:4f:04:37:05:90:94:0f:34:8a:22:fb:09:d8:39:04:27:91:
48:2e:00:ed:b1:12:60:36:58:0c:08:76:91:31:a4:f9:f9:98:
88:b5:0c:e7:10:45:d9:9d:6a:8f:81:85:67:16:fe:ac:85:b3:
d7:40:74:7c:e3:16:e4:10:ab:0e:2d:d2:36:e0:a9:cd:6c:eb:
7a:2c:cb:a9:b9:4f:7f:a3:48:b2:3d:8b:60:7f:0a:86:6f:59:
c8:91:b6:dd:c0:f0:b3:5f:4c:6c:c8:ca:81:06:3e:86:ce:0a:
91:0b:5d:29:dd:3a:1f:59:76:8a:9d:2d:6c:42:e0:83:30:80:
e2:ff:d8:76:e0:2d:dc:8d:49:6f:5f:56:0a:43:c1:55:dd:95:
14:13:a8:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 12:45:45 2025 by rpki-client