Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/ab9fa6-a906-4ac4-ac0c-6389220b26c6/1/afAHCvh31rmGswe5vATvGcRAQz0.mft
File: afAHCvh31rmGswe5vATvGcRAQz0.mft (raw, json)
Hash identifier: F6KwvDMGv+/u7xGuGt0Tt/Kap8WOQdXN4XWd7rUM/SE=
Subject key identifier: AA:45:01:6B:61:10:88:7C:0A:A5:F9:23:CB:42:03:7D:E4:80:A0:54
Authority key identifier: 69:F0:07:0A:F8:77:D6:B9:86:B3:07:B9:BC:04:EF:19:C4:40:43:3D
Certificate issuer: /CN=69f0070af877d6b986b307b9bc04ef19c440433d
Certificate serial: 01983DD05C1D1977F5F16FCE1F723F313DB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/afAHCvh31rmGswe5vATvGcRAQz0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/ab9fa6-a906-4ac4-ac0c-6389220b26c6/1/afAHCvh31rmGswe5vATvGcRAQz0.mft
Manifest number: 082F
Signing time: Thu 24 Jul 2025 19:02:01 +0000
Manifest this update: Thu 24 Jul 2025 19:02:01 +0000
Manifest next update: Fri 25 Jul 2025 19:02:01 +0000
Files and hashes: 1: 5m0E4hrlymj_oPq4RutDZTBvpFc.roa (hash: D3u2GpmWvvHTn4HOSLwFPi92ntWCyeD4rYP1qp5He0g=)
2: afAHCvh31rmGswe5vATvGcRAQz0.crl (hash: CGponEa7O+KUWcM0yd2ylhVM5LA4PYuNn6fEGimTMrU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/ab9fa6-a906-4ac4-ac0c-6389220b26c6/1/afAHCvh31rmGswe5vATvGcRAQz0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/ab9fa6-a906-4ac4-ac0c-6389220b26c6/1/afAHCvh31rmGswe5vATvGcRAQz0.mft
rsync://rpki.ripe.net/repository/DEFAULT/afAHCvh31rmGswe5vATvGcRAQz0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Jul 2025 19:02:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:3d:d0:5c:1d:19:77:f5:f1:6f:ce:1f:72:3f:31:3d:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69f0070af877d6b986b307b9bc04ef19c440433d
Validity
Not Before: Jul 24 19:02:01 2025 GMT
Not After : Jul 25 19:02:01 2025 GMT
Subject: CN=aa45016b6110887c0aa5f923cb42037de480a054
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:5b:bc:e7:9b:a1:9c:17:52:37:3e:58:e1:dd:
4c:ef:5a:1d:1d:d4:8b:0e:9a:cf:1f:bb:86:47:1e:
86:e8:59:91:4b:e4:bc:95:32:ab:0a:52:ab:53:9c:
7d:4c:de:40:2b:79:67:27:25:ee:bf:4e:6d:11:39:
a5:87:1b:ed:e2:b3:24:59:5e:7f:41:8c:b5:93:3e:
13:58:77:f7:cc:f5:90:1f:26:b4:b5:cd:c8:ff:98:
4c:53:8b:72:a6:f0:63:67:60:e0:35:15:fc:cd:ab:
0c:dd:9d:35:a9:66:eb:21:77:09:53:80:5d:3c:c9:
d9:1d:bb:4d:b3:5f:74:d5:d1:a7:f6:ab:cc:22:3d:
63:d1:e2:6a:1c:40:e0:e9:1e:04:ec:60:af:5b:60:
73:59:11:c6:b6:9b:66:2a:49:88:1d:8d:eb:e4:dd:
de:c3:fb:03:13:53:ec:1c:03:63:10:2d:bd:c8:89:
1c:fe:37:a3:3d:ad:ed:0a:03:83:83:31:f5:9a:b5:
4d:da:10:55:4e:a8:14:08:79:7d:77:4f:85:5a:46:
68:31:4c:d4:88:7c:9f:ac:bb:13:5a:b5:1e:02:0a:
4e:3b:0d:04:bf:0f:55:2a:ba:54:bd:aa:04:e9:fc:
ee:92:3e:e2:b7:2c:4e:d0:04:5b:e8:df:d8:b1:53:
ae:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:45:01:6B:61:10:88:7C:0A:A5:F9:23:CB:42:03:7D:E4:80:A0:54
X509v3 Authority Key Identifier:
keyid:69:F0:07:0A:F8:77:D6:B9:86:B3:07:B9:BC:04:EF:19:C4:40:43:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/afAHCvh31rmGswe5vATvGcRAQz0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ab9fa6-a906-4ac4-ac0c-6389220b26c6/1/afAHCvh31rmGswe5vATvGcRAQz0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ab9fa6-a906-4ac4-ac0c-6389220b26c6/1/afAHCvh31rmGswe5vATvGcRAQz0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:5a:0b:39:e4:a6:ce:81:c8:69:ec:4e:a6:b0:31:fd:e1:a0:
9c:07:e4:b7:a9:3b:6d:71:d7:01:1c:bd:af:00:25:d6:02:b6:
16:82:30:80:8a:15:9d:ff:7c:d2:5e:b0:5e:3c:25:fc:ac:e4:
32:ff:25:cb:6a:5e:6f:87:85:32:5e:f9:d2:03:16:e8:12:7f:
41:ab:30:07:6e:a8:e6:fa:b2:39:b6:a5:6e:e5:be:a3:51:26:
69:37:3f:c0:bb:e0:eb:0c:12:06:51:f0:3b:a0:7d:f4:52:ee:
7d:03:f0:29:cc:f0:5e:fe:48:84:38:5f:e0:3b:47:00:bb:e5:
62:be:97:e0:45:d0:bb:4f:59:35:7f:dd:e4:59:cf:cb:99:17:
42:c6:60:c6:22:ee:68:aa:b3:bb:4f:a1:6d:ea:9b:fd:3f:15:
1f:f1:f1:3b:27:54:09:87:1a:77:37:d4:00:b6:f1:49:3b:73:
57:2c:1b:16:86:cf:5b:79:49:0b:e7:fd:55:e3:58:ce:f7:79:
5a:67:ec:31:7b:7c:81:50:3f:c3:b3:f1:80:2b:68:b9:07:06:
83:98:af:0e:26:e5:20:ed:64:79:b4:bc:88:ec:20:77:a9:87:
74:10:2c:86:d9:43:f6:c8:19:71:99:01:d8:70:e3:c6:63:5d:
f8:80:df:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 00:52:56 2025 by rpki-client