Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/c06536-01aa-4e39-89b6-b58704f28591/1/afURWpSbKIPEzDxJX_uJk97Z2F0.mft
File: afURWpSbKIPEzDxJX_uJk97Z2F0.mft (raw, json)
Hash identifier: 1tFsvckdrBqKTr011s3gCCTbSgd02r6SQHuy+nS18kU=
Subject key identifier: 23:BB:E7:92:6B:0A:8D:0C:F4:51:37:10:D8:55:EB:8F:09:F9:46:9F
Authority key identifier: 69:F5:11:5A:94:9B:28:83:C4:CC:3C:49:5F:FB:89:93:DE:D9:D8:5D
Certificate issuer: /CN=69f5115a949b2883c4cc3c495ffb8993ded9d85d
Certificate serial: 019827109EB17239CEB1BAFD32BB7A86AC76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/afURWpSbKIPEzDxJX_uJk97Z2F0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/c06536-01aa-4e39-89b6-b58704f28591/1/afURWpSbKIPEzDxJX_uJk97Z2F0.mft
Manifest number: 0D
Signing time: Sun 20 Jul 2025 09:00:57 +0000
Manifest this update: Sun 20 Jul 2025 09:00:57 +0000
Manifest next update: Mon 21 Jul 2025 09:00:57 +0000
Files and hashes: 1: 4BZY4KShEUmhrY8s7jFk_wJEp5k.roa (hash: UlyxYtAIHY75kSHD+hMXhTJxJxd+/SUaiDAFT6/piUg=)
2: afURWpSbKIPEzDxJX_uJk97Z2F0.crl (hash: qAwHXpTtdYe4Prp5I2pP8xMjOiFSkOslp2QUZgIla5I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/c06536-01aa-4e39-89b6-b58704f28591/1/afURWpSbKIPEzDxJX_uJk97Z2F0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/c06536-01aa-4e39-89b6-b58704f28591/1/afURWpSbKIPEzDxJX_uJk97Z2F0.mft
rsync://rpki.ripe.net/repository/DEFAULT/afURWpSbKIPEzDxJX_uJk97Z2F0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 06:21:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:27:10:9e:b1:72:39:ce:b1:ba:fd:32:bb:7a:86:ac:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69f5115a949b2883c4cc3c495ffb8993ded9d85d
Validity
Not Before: Jul 20 09:00:57 2025 GMT
Not After : Jul 21 09:00:57 2025 GMT
Subject: CN=23bbe7926b0a8d0cf4513710d855eb8f09f9469f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:4a:9d:3f:94:7a:1f:b9:76:9e:bc:0a:2f:5f:
99:37:f4:67:68:5d:59:9c:5d:b1:0b:ee:48:5c:4d:
8f:4f:cc:44:06:d0:f8:60:04:d3:83:64:ee:73:cb:
ae:45:7c:c7:ce:73:f5:fd:b8:78:41:b5:7f:85:c3:
12:38:d3:1d:09:07:d0:17:ba:73:05:91:cf:ab:f9:
8f:21:f3:83:2e:c6:8f:26:3f:cc:9b:16:52:0b:f1:
e3:cc:e4:e9:a8:84:8d:33:23:7c:c7:ac:b9:09:3b:
74:88:dc:25:bc:98:df:c8:5d:0d:14:e2:5d:0e:b7:
9c:13:ac:9f:5f:b4:ba:92:fd:bb:2c:88:05:e3:e3:
19:a6:23:b6:c2:ba:21:65:3c:0c:7f:99:74:22:97:
9a:46:d6:93:35:c7:56:1f:13:be:77:f1:9b:8c:e0:
fb:cc:d6:38:b3:90:23:82:c0:dc:d7:dc:e9:f8:84:
0b:58:dc:c7:5b:8d:15:0f:2d:b6:28:55:af:be:8e:
dd:12:21:28:c8:01:60:09:9b:55:d1:53:4c:60:38:
df:b7:13:00:bc:ec:07:82:64:6a:56:c1:69:bf:d3:
5a:50:ad:5e:ba:62:9a:dc:f9:77:0b:ef:d2:74:47:
96:7d:92:3f:c8:93:48:45:46:56:78:f6:d6:9b:88:
d3:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:BB:E7:92:6B:0A:8D:0C:F4:51:37:10:D8:55:EB:8F:09:F9:46:9F
X509v3 Authority Key Identifier:
keyid:69:F5:11:5A:94:9B:28:83:C4:CC:3C:49:5F:FB:89:93:DE:D9:D8:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/afURWpSbKIPEzDxJX_uJk97Z2F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c06536-01aa-4e39-89b6-b58704f28591/1/afURWpSbKIPEzDxJX_uJk97Z2F0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c06536-01aa-4e39-89b6-b58704f28591/1/afURWpSbKIPEzDxJX_uJk97Z2F0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:33:3b:40:4c:58:7a:53:ca:aa:e7:40:27:92:ed:c7:6e:0d:
57:c4:5b:49:12:0a:09:5e:09:e4:d0:f1:a2:68:79:87:81:f2:
28:85:d0:5f:7f:b1:60:be:77:6f:d9:21:48:63:c2:8f:c8:cd:
f6:d9:a2:ac:23:1a:63:e8:81:70:c6:88:c7:ee:75:f8:d5:68:
c1:a8:ec:24:7d:23:c1:71:26:6d:e7:90:89:80:29:f4:9e:b6:
61:93:9d:44:22:bd:f0:31:2d:b3:92:a7:65:bd:4e:d2:2d:2e:
d6:c9:36:7c:ee:0e:d1:18:1b:4a:8b:2f:af:82:10:2a:71:4c:
40:d5:3b:da:0d:6c:c5:53:c1:d5:35:1a:81:8d:d5:0b:02:57:
81:18:4a:d6:11:3a:aa:fb:96:c7:cd:89:e9:5a:b2:ed:f8:ea:
e7:eb:6c:0a:38:ad:dd:d5:a5:42:2c:ee:df:58:d6:b2:8f:fb:
3c:cb:98:56:7e:d5:71:19:95:3d:28:8c:6f:58:1b:f3:a9:0d:
4e:23:02:9f:9f:33:5a:88:25:f9:9b:d3:d7:ff:0c:38:57:71:
1f:22:9e:fe:e1:6b:f2:2d:6c:01:fd:18:e2:a0:12:0f:81:33:
5c:f5:f7:0d:dd:e8:cc:4d:3b:3f:3a:00:84:a8:11:d4:08:38:
f4:a1:72:cc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZgnEJ6xcjnOsbr9Mrt6hqx2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5ZjUxMTVhOTQ5YjI4ODNjNGNjM2M0OTVmZmI4OTkzZGVk
OWQ4NWQwHhcNMjUwNzIwMDkwMDU3WhcNMjUwNzIxMDkwMDU3WjAzMTEwLwYDVQQD
EygyM2JiZTc5MjZiMGE4ZDBjZjQ1MTM3MTBkODU1ZWI4ZjA5Zjk0NjlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh0qdP5R6H7l2nrwKL1+ZN/RnaF1Z
nF2xC+5IXE2PT8xEBtD4YATTg2Tuc8uuRXzHznP1/bh4QbV/hcMSONMdCQfQF7pz
BZHPq/mPIfODLsaPJj/MmxZSC/HjzOTpqISNMyN8x6y5CTt0iNwlvJjfyF0NFOJd
DrecE6yfX7S6kv27LIgF4+MZpiO2wrohZTwMf5l0IpeaRtaTNcdWHxO+d/GbjOD7
zNY4s5AjgsDc19zp+IQLWNzHW40VDy22KFWvvo7dEiEoyAFgCZtV0VNMYDjftxMA
vOwHgmRqVsFpv9NaUK1eumKa3Pl3C+/SdEeWfZI/yJNIRUZWePbWm4jTRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCO755JrCo0M9FE3ENhV648J+UafMB8GA1UdIwQY
MBaAFGn1EVqUmyiDxMw8SV/7iZPe2dhdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWZVUldwU2JLSVBFekR4SlhfdUprOTdaMkYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9jMDY1MzYtMDFhYS00ZTM5LTg5YjYt
YjU4NzA0ZjI4NTkxLzEvYWZVUldwU2JLSVBFekR4SlhfdUprOTdaMkYwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS9jMDY1MzYtMDFhYS00ZTM5LTg5YjYtYjU4NzA0ZjI4NTkx
LzEvYWZVUldwU2JLSVBFekR4SlhfdUprOTdaMkYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGjM7QExY
elPKqudAJ5Ltx24NV8RbSRIKCV4J5NDxomh5h4HyKIXQX3+xYL53b9khSGPCj8jN
9tmirCMaY+iBcMaIx+51+NVowajsJH0jwXEmbeeQiYAp9J62YZOdRCK98DEts5Kn
Zb1O0i0u1sk2fO4O0RgbSosvr4IQKnFMQNU72g1sxVPB1TUagY3VCwJXgRhK1hE6
qvuWx82J6Vqy7fjq5+tsCjit3dWlQizu31jWso/7PMuYVn7VcRmVPSiMb1gb86kN
TiMCn58zWogl+ZvT1/8MOFdxHyKe/uFr8i1sAf0Y4qASD4EzXPX3Dd3ozE07PzoA
hKgR1Ag49KFyzA==
-----END CERTIFICATE-----
Generated at Sun Jul 20 16:20:22 2025 by rpki-client