Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/ccf777-9465-4a2e-8112-71d8b8850853/1/af3-gkn5Q6q60Ygfylg2YTpqZ7w.mft
File: af3-gkn5Q6q60Ygfylg2YTpqZ7w.mft (raw, json)
Hash identifier: xOu3vZaxfl0pt2oyMcyuJbCKBd7zvWoRD0o01BBLGwU=
Subject key identifier: 88:3D:E9:55:B6:E4:39:8B:AC:DC:F6:27:72:17:2B:3D:4E:DC:5E:EA
Authority key identifier: 69:FD:FE:82:49:F9:43:AA:BA:D1:88:1F:CA:58:36:61:3A:6A:67:BC
Certificate issuer: /CN=69fdfe8249f943aabad1881fca5836613a6a67bc
Certificate serial: 0198499C1BA13877AD6F93CB0DD2D32447A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/af3-gkn5Q6q60Ygfylg2YTpqZ7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/ccf777-9465-4a2e-8112-71d8b8850853/1/af3-gkn5Q6q60Ygfylg2YTpqZ7w.mft
Manifest number: 1601
Signing time: Sun 27 Jul 2025 02:00:24 +0000
Manifest this update: Sun 27 Jul 2025 02:00:24 +0000
Manifest next update: Mon 28 Jul 2025 02:00:24 +0000
Files and hashes: 1: Ceo-HVPoWV3_2SxJvVUz90MzCXU.roa (hash: hrbJxLsRN5MK/3GlRfITM4zehXoSXHDnVzwmbM92S3A=)
2: af3-gkn5Q6q60Ygfylg2YTpqZ7w.crl (hash: FJw9qN8wVeqy5DKfmcNQVb7ykqkfKTp64ByuK5AxXpA=)
3: u-uD5eJkyZwHdvCGzRD30UcsPdQ.roa (hash: 972IpaBLO7W9fM3TeJorAGTATEI6lVsjC4rz1G6aPgA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/ccf777-9465-4a2e-8112-71d8b8850853/1/af3-gkn5Q6q60Ygfylg2YTpqZ7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/ccf777-9465-4a2e-8112-71d8b8850853/1/af3-gkn5Q6q60Ygfylg2YTpqZ7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/af3-gkn5Q6q60Ygfylg2YTpqZ7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:9c:1b:a1:38:77:ad:6f:93:cb:0d:d2:d3:24:47:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69fdfe8249f943aabad1881fca5836613a6a67bc
Validity
Not Before: Jul 27 02:00:24 2025 GMT
Not After : Jul 28 02:00:24 2025 GMT
Subject: CN=883de955b6e4398bacdcf62772172b3d4edc5eea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:f2:bc:1c:e3:5b:21:eb:a8:6b:3b:56:1b:98:
e5:bd:ab:a4:9f:ee:d1:b4:45:2c:74:b3:33:d6:c9:
e3:83:27:2f:3e:f1:f3:70:65:11:ec:46:f6:e5:9d:
e3:e0:d4:af:bb:6a:86:fe:45:10:8c:7d:4f:c1:f2:
a5:cf:85:2e:6e:4c:03:83:df:af:2c:27:5c:5c:9b:
2e:f0:c3:55:06:9e:51:ce:39:b5:42:d1:e0:29:47:
c4:92:2f:c7:68:82:24:e3:57:c5:ce:00:d3:eb:88:
d7:cb:22:8b:57:d1:a6:b9:e4:fa:42:5e:ce:23:cf:
17:07:d6:3d:d3:76:c0:49:34:f3:8b:19:77:32:be:
e9:fa:bd:02:bc:27:43:81:de:a9:c3:1e:a3:72:2f:
65:00:3b:c0:e5:b7:83:d5:5f:78:f4:4c:70:59:b3:
c2:5e:05:0a:4e:8d:08:e4:49:46:2c:4b:12:81:f3:
02:2c:52:dd:c4:9e:53:36:48:a1:92:76:4e:5a:20:
dc:38:cb:33:b8:42:e5:87:42:a0:d8:94:d1:84:9f:
86:8e:a0:d1:81:73:2f:13:d8:b9:f2:45:37:0e:8c:
f4:31:65:c8:68:94:3e:6f:75:38:6f:88:b3:a8:81:
9d:9d:cd:aa:24:c4:6f:6a:9f:4d:a4:22:ca:ff:04:
e9:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:3D:E9:55:B6:E4:39:8B:AC:DC:F6:27:72:17:2B:3D:4E:DC:5E:EA
X509v3 Authority Key Identifier:
keyid:69:FD:FE:82:49:F9:43:AA:BA:D1:88:1F:CA:58:36:61:3A:6A:67:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/af3-gkn5Q6q60Ygfylg2YTpqZ7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/ccf777-9465-4a2e-8112-71d8b8850853/1/af3-gkn5Q6q60Ygfylg2YTpqZ7w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/ccf777-9465-4a2e-8112-71d8b8850853/1/af3-gkn5Q6q60Ygfylg2YTpqZ7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:35:6a:71:76:31:c9:fa:86:9b:7c:d8:d6:2a:6b:82:68:fc:
05:d8:5c:4d:c9:5f:bb:01:3c:74:0b:5e:d5:47:fc:84:34:59:
48:20:cd:71:75:5c:cb:62:7f:e2:20:34:f2:d0:c3:da:45:69:
dc:8a:b5:ee:57:cd:f8:8c:99:a5:fe:5f:34:a9:84:d0:3e:4a:
b2:89:6d:9d:8e:cd:95:a0:9f:be:3c:fb:59:d1:c5:f8:39:ac:
57:18:73:4b:df:c4:8e:01:d5:81:80:73:a7:da:7f:df:8d:3d:
26:a6:9d:4a:84:25:a8:8c:ed:62:d9:97:85:a2:13:b1:22:cd:
ff:5e:b0:a2:ee:cf:76:94:f8:30:ed:b8:1b:15:26:50:6a:df:
47:55:95:5c:a8:5c:d1:b7:d7:c7:cf:4f:9b:81:c0:40:8e:30:
4d:69:77:9c:2a:79:89:fe:24:7b:c0:26:06:6a:01:b4:3e:b0:
68:56:21:67:13:98:e5:94:4b:03:9b:b5:5b:35:7d:5c:f6:c5:
ac:c7:ed:81:d7:27:3e:6e:ae:e3:bc:b6:b8:80:76:3f:d7:db:
98:95:19:23:7a:d1:41:05:f5:96:21:d1:ee:ea:dd:af:9e:77:
39:c9:45:79:9a:d1:dd:97:79:b2:0d:c1:59:f0:eb:5b:32:2e:
c0:60:34:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:22:02 2025 by rpki-client