Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8417a0-0777-446e-97e1-353b3a633ada/1/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.mft
File: AfPvPg6pWpdVN9XCXZPLdq9ocjQ.mft (raw, json)
Hash identifier: jupoM4JTggtrtK1XvHf/Tr7wpBoiXY2Wf3MwDpuA1Sk=
Subject key identifier: AD:4C:DF:FC:10:EC:8C:B7:D8:AC:94:0A:02:A4:03:1D:BD:2E:BD:36
Authority key identifier: 01:F3:EF:3E:0E:A9:5A:97:55:37:D5:C2:5D:93:CB:76:AF:68:72:34
Certificate issuer: /CN=01f3ef3e0ea95a975537d5c25d93cb76af687234
Certificate serial: 019A0FDED8D18D3CC45EF56C88D4063110E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8417a0-0777-446e-97e1-353b3a633ada/1/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.mft
Manifest number: 170D
Signing time: Thu 23 Oct 2025 07:00:53 +0000
Manifest this update: Thu 23 Oct 2025 07:00:53 +0000
Manifest next update: Fri 24 Oct 2025 07:00:53 +0000
Files and hashes: 1: 42hpqWqY72USafsvfiD_518D4aY.roa (hash: XyqSHkNb93lXjMdBQV3tT6d41VyHCZFCyukyVX/G7/A=)
2: AfPvPg6pWpdVN9XCXZPLdq9ocjQ.crl (hash: dVNpnwAJqd7yOJ691XKBiC1zdtJi0oVa3LX7PmvYw5w=)
3: B_3pca4XmmEyoD7_YWQ5xsaTGlA.roa (hash: n5M6+Js+wLuWN3HaqVwvyZeizy4tawLMu5EBkNvd9Nw=)
4: GNcGFP48VRO_QOUxz3CvJSh90oA.roa (hash: 9T1HgBLEzXKt2GaC2y8FBctN+punw/ln3V52HLktRUQ=)
5: JOvZJvxVCIjogtIv-LfIwpT-8XY.roa (hash: IRDQFzfaDrUN19oYWZOku8P+RpACtFrOm+7KAJXqJUs=)
6: g9Hs1uIFeelsIxcu9-JFATbg5r0.roa (hash: i1uLdd6dy3tsCAr6HgKPaDpJNpr4x+g5kpnEdrNnrzs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/8417a0-0777-446e-97e1-353b3a633ada/1/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/8417a0-0777-446e-97e1-353b3a633ada/1/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Oct 2025 07:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0f:de:d8:d1:8d:3c:c4:5e:f5:6c:88:d4:06:31:10:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01f3ef3e0ea95a975537d5c25d93cb76af687234
Validity
Not Before: Oct 23 07:00:53 2025 GMT
Not After : Oct 24 07:00:53 2025 GMT
Subject: CN=ad4cdffc10ec8cb7d8ac940a02a4031dbd2ebd36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d9:53:b4:26:e4:2c:38:72:6e:04:b5:1d:e5:
5c:38:8f:da:ab:93:c8:53:e7:f3:67:40:e9:f0:bf:
c2:cf:91:17:97:70:3c:30:61:02:db:e9:b5:5b:77:
56:9b:dc:ec:24:26:17:cc:a9:62:fc:a4:8e:53:83:
d7:cc:1e:a4:ce:78:77:34:1a:41:d0:98:a7:e4:1c:
4c:ef:32:6d:81:57:35:e7:0d:a2:fa:56:f6:67:9c:
c7:83:73:ac:a7:a0:4e:de:63:93:3f:22:83:f8:31:
b2:52:5b:ad:d0:c5:0b:a5:84:21:c3:04:65:df:a0:
4c:a3:bd:c2:20:6f:42:bd:d3:22:da:04:cc:01:37:
da:46:fc:1e:d5:f0:fa:50:9b:cd:33:d5:57:34:3e:
c8:f6:03:23:cd:e7:9a:59:08:3d:ad:3b:a6:2a:26:
6e:c1:9a:66:c0:0a:eb:7a:16:38:cf:7d:12:20:6d:
f8:c1:2b:0d:3e:2c:e7:3a:75:33:30:c2:f9:a0:a0:
7a:43:69:75:1d:22:7e:34:dd:36:b1:e9:c1:6a:45:
9f:5b:a3:9a:c4:17:f2:f7:5a:18:9d:be:43:46:39:
9d:3c:77:31:d4:0c:1f:13:8e:15:f3:b9:e5:95:ba:
8c:35:b8:62:27:ec:b6:68:86:4b:90:a7:73:00:86:
77:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:4C:DF:FC:10:EC:8C:B7:D8:AC:94:0A:02:A4:03:1D:BD:2E:BD:36
X509v3 Authority Key Identifier:
keyid:01:F3:EF:3E:0E:A9:5A:97:55:37:D5:C2:5D:93:CB:76:AF:68:72:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8417a0-0777-446e-97e1-353b3a633ada/1/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8417a0-0777-446e-97e1-353b3a633ada/1/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:b2:22:e1:78:2b:1b:f2:4d:02:70:00:37:68:ce:1f:ba:d6:
0e:f1:67:0c:3c:76:43:d5:f2:8a:9f:71:be:9c:f6:8e:29:a2:
b0:b0:71:ef:d6:f6:eb:6d:43:f2:24:b3:80:de:f8:db:0d:14:
c6:74:20:d1:2d:27:f5:31:81:cf:20:3a:cc:1a:2a:7d:ca:38:
65:29:d6:ca:57:35:67:92:bb:fc:9b:04:8b:e3:b5:96:1e:f8:
ae:0a:51:1c:3e:af:10:59:45:8b:65:8f:11:f4:c3:13:94:ec:
19:3a:84:bc:ed:e1:99:97:77:ea:59:ea:0d:4d:15:b5:ae:46:
2c:13:44:5a:44:d9:6a:98:dc:fd:09:80:ea:fb:24:77:1a:14:
28:6e:9a:60:f5:f4:a7:1b:f9:2b:9f:36:3d:28:e4:37:fb:9c:
7b:a1:51:7a:2e:c1:39:f3:4c:67:3d:9d:59:97:c2:db:9f:77:
3c:52:39:33:39:b6:ad:0d:b5:b5:73:08:cb:65:88:06:51:81:
b1:e8:4b:2b:2a:6d:c8:46:be:bf:91:00:48:5a:1a:80:14:77:
54:f6:eb:b8:50:15:6d:8d:90:47:41:b0:50:f6:4b:69:8e:36:
e6:8f:ce:94:57:37:44:71:ee:49:96:3e:be:cd:8d:c3:f7:50:
1a:e0:bc:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 23 13:04:28 2025 by rpki-client