Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/a1923f-26d7-44be-a2be-03cbdb8ff960/1/AfZJudBUYiex1GJsIIHk09qFDv4.mft
File: AfZJudBUYiex1GJsIIHk09qFDv4.mft (raw, json)
Hash identifier: ciKt3t6Dk5XVSmwgSj0D1MSHkZIEfZSxkinZ1v0hi4k=
Subject key identifier: 98:4D:0F:8F:DE:63:B2:CC:0A:31:3C:86:5D:47:B1:FF:E1:EA:4A:BA
Authority key identifier: 01:F6:49:B9:D0:54:62:27:B1:D4:62:6C:20:81:E4:D3:DA:85:0E:FE
Certificate issuer: /CN=01f649b9d0546227b1d4626c2081e4d3da850efe
Certificate serial: 019A1EE3C94FDCFE664BD3BDD9530A690367
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AfZJudBUYiex1GJsIIHk09qFDv4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/a1923f-26d7-44be-a2be-03cbdb8ff960/1/AfZJudBUYiex1GJsIIHk09qFDv4.mft
Manifest number: 13DD
Signing time: Sun 26 Oct 2025 05:00:35 +0000
Manifest this update: Sun 26 Oct 2025 05:00:35 +0000
Manifest next update: Mon 27 Oct 2025 05:00:35 +0000
Files and hashes: 1: AfZJudBUYiex1GJsIIHk09qFDv4.crl (hash: i+gM5anaKIz22GlXkKqEZPq89i4p20NCRR8lgoM5RSc=)
2: bjnOU2JwIyBhG3a2k5FUAWGDatE.roa (hash: qBdlY6EWSQACgnafmgz/gnCk4zq1L3YPmsFgf+M1bHo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/a1923f-26d7-44be-a2be-03cbdb8ff960/1/AfZJudBUYiex1GJsIIHk09qFDv4.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/a1923f-26d7-44be-a2be-03cbdb8ff960/1/AfZJudBUYiex1GJsIIHk09qFDv4.mft
rsync://rpki.ripe.net/repository/DEFAULT/AfZJudBUYiex1GJsIIHk09qFDv4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 03:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1e:e3:c9:4f:dc:fe:66:4b:d3:bd:d9:53:0a:69:03:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01f649b9d0546227b1d4626c2081e4d3da850efe
Validity
Not Before: Oct 26 05:00:35 2025 GMT
Not After : Oct 27 05:00:35 2025 GMT
Subject: CN=984d0f8fde63b2cc0a313c865d47b1ffe1ea4aba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:c8:6e:b2:00:01:11:31:1a:18:8a:24:2f:da:
dc:32:47:20:e4:64:e4:12:16:73:dc:87:13:37:d9:
ba:b3:d3:77:76:b6:79:17:c0:08:37:68:70:58:08:
7b:dc:2a:f8:00:ec:9c:a7:22:29:70:ca:d9:9f:22:
44:36:97:73:8b:53:6a:23:d5:1c:96:e0:1b:e8:92:
8b:b7:c1:64:47:0c:1c:f1:9c:07:47:36:f5:58:f6:
f3:7c:23:14:f9:c2:42:e8:c1:a2:47:e5:59:b9:d1:
29:bd:56:aa:25:de:4c:88:da:13:b4:7c:67:ef:d2:
f5:8e:a7:59:12:1f:a4:30:bb:3a:fc:8e:f7:33:0e:
b5:1c:2e:a7:24:b3:82:cf:cd:c5:83:eb:f2:5b:df:
5b:4b:94:6b:76:f9:c7:6f:7f:30:d9:39:d8:04:48:
fe:cc:3b:a2:60:02:f1:00:1f:e9:e9:41:4f:77:a5:
a5:8c:bf:13:b5:a4:31:1f:cf:62:03:af:a9:23:52:
a5:7a:95:3d:bc:9f:59:c8:9b:e3:49:23:4d:29:59:
c8:fc:0d:69:5b:5f:bf:2b:ce:f9:13:e5:17:06:b1:
81:87:19:f6:4a:a7:fe:1a:68:dc:e6:2e:68:f4:c6:
ab:74:96:60:07:09:03:e0:46:c7:1c:6f:64:ab:c8:
60:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:4D:0F:8F:DE:63:B2:CC:0A:31:3C:86:5D:47:B1:FF:E1:EA:4A:BA
X509v3 Authority Key Identifier:
keyid:01:F6:49:B9:D0:54:62:27:B1:D4:62:6C:20:81:E4:D3:DA:85:0E:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AfZJudBUYiex1GJsIIHk09qFDv4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/a1923f-26d7-44be-a2be-03cbdb8ff960/1/AfZJudBUYiex1GJsIIHk09qFDv4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/a1923f-26d7-44be-a2be-03cbdb8ff960/1/AfZJudBUYiex1GJsIIHk09qFDv4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:ff:47:f6:24:54:75:d4:bf:71:5b:e1:a2:8a:69:0f:06:2c:
77:f4:61:5b:c6:d2:85:95:d7:f4:d1:ac:46:da:04:02:b9:b8:
48:8b:e3:ac:ef:cf:33:46:21:2a:8e:90:62:d1:0c:6e:ce:02:
82:25:71:46:ef:81:3c:d8:99:d0:55:83:ca:78:b7:e6:d4:c2:
73:60:27:8e:34:56:44:4c:e0:df:b8:ab:25:d0:b5:cf:06:77:
61:91:7e:c3:a7:6d:48:7a:aa:fe:6a:ff:a1:77:1c:c5:31:be:
ca:16:c8:ca:c6:b2:22:4b:37:51:d0:76:15:d8:eb:92:c7:41:
49:eb:5a:6a:c4:09:4c:47:c4:3d:5d:1d:dc:c8:10:2f:55:fb:
f3:0a:3a:5f:aa:32:9a:90:02:af:82:14:da:87:a3:e6:bb:05:
00:c4:28:13:e7:da:bd:a9:5e:09:47:d6:e7:5c:bb:a6:f6:22:
c5:17:68:70:ba:34:0c:32:e2:7a:2f:7a:f6:a1:5e:16:7d:70:
f1:5d:1e:7b:1a:c9:4b:22:aa:15:60:74:25:1c:b9:0f:81:77:
7b:4c:7a:24:4e:28:87:0f:8f:ff:c6:b8:bb:db:10:be:10:74:
41:30:8a:72:28:67:cd:7a:65:0e:5c:ec:77:7a:18:ff:5e:68:
84:ef:8c:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 06:32:45 2025 by rpki-client