Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/fdad8c-9ed3-4f01-b107-7486c0582f2a/1/afjrNm_GyKCb-xQPFQX57GddQuQ.mft
File: afjrNm_GyKCb-xQPFQX57GddQuQ.mft (raw, json)
Hash identifier: PYCO/1QukwZ0HwwRJgJU0T0EY4JP0+3h+hdHEXv5MTU=
Subject key identifier: C9:6E:00:BB:F5:0D:9B:48:11:24:B5:8A:1D:DD:AD:0F:CF:F2:E1:CD
Authority key identifier: 69:F8:EB:36:6F:C6:C8:A0:9B:FB:14:0F:15:05:F9:EC:67:5D:42:E4
Certificate issuer: /CN=69f8eb366fc6c8a09bfb140f1505f9ec675d42e4
Certificate serial: 0198E1F5FB4C53BAC3B43078C3EAA3EA4262
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/afjrNm_GyKCb-xQPFQX57GddQuQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/fdad8c-9ed3-4f01-b107-7486c0582f2a/1/afjrNm_GyKCb-xQPFQX57GddQuQ.mft
Manifest number: 0924
Signing time: Mon 25 Aug 2025 16:00:50 +0000
Manifest this update: Mon 25 Aug 2025 16:00:50 +0000
Manifest next update: Tue 26 Aug 2025 16:00:50 +0000
Files and hashes: 1: afjrNm_GyKCb-xQPFQX57GddQuQ.crl (hash: mxiRh59R2ZN/X+qvkalXX6DS7hZFPZzoO1Ru2Eunrac=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/fdad8c-9ed3-4f01-b107-7486c0582f2a/1/afjrNm_GyKCb-xQPFQX57GddQuQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/fdad8c-9ed3-4f01-b107-7486c0582f2a/1/afjrNm_GyKCb-xQPFQX57GddQuQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/afjrNm_GyKCb-xQPFQX57GddQuQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Aug 2025 14:16:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:e1:f5:fb:4c:53:ba:c3:b4:30:78:c3:ea:a3:ea:42:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69f8eb366fc6c8a09bfb140f1505f9ec675d42e4
Validity
Not Before: Aug 25 16:00:50 2025 GMT
Not After : Aug 26 16:00:50 2025 GMT
Subject: CN=c96e00bbf50d9b481124b58a1dddad0fcff2e1cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:6a:20:f1:77:51:fa:85:1f:6e:02:3d:ee:82:
57:c7:e7:58:5d:4f:13:65:ae:49:76:3b:b1:75:de:
e0:db:5e:00:01:50:72:ec:53:f3:cc:fe:5a:49:c3:
4f:84:5b:9d:d2:29:ff:a8:ac:73:ad:32:69:67:45:
6d:96:33:95:6c:8a:bc:34:70:49:12:97:7f:68:77:
55:1e:e4:27:04:b2:d2:ca:f2:a6:2f:f6:06:df:e9:
78:77:b3:f9:10:14:05:be:97:ce:b0:ce:0a:bd:31:
81:e5:de:c9:76:88:a0:6b:4c:46:f5:7e:5c:c7:20:
17:04:f6:41:83:48:e1:99:c0:e8:01:08:46:ed:cc:
f2:91:3e:a7:34:11:f2:ef:53:87:20:8d:4b:ae:92:
7d:9a:a1:ee:2c:0e:2d:c4:ca:b6:27:3c:a1:33:29:
b5:1a:66:4e:39:a1:52:f0:e7:4f:45:23:47:8a:fd:
0a:70:44:f4:16:40:f9:e3:a3:f8:2d:97:9b:f9:6a:
86:26:0d:8a:73:41:6e:5a:11:a1:84:24:b0:0a:e5:
f8:bc:99:68:6d:f0:58:8e:e3:52:dd:63:78:6c:b9:
6b:61:7f:9c:d2:67:0e:87:5c:f6:5a:46:0b:f4:0c:
23:d2:6a:c9:2a:87:90:15:9b:65:1b:bf:57:fa:1c:
20:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:6E:00:BB:F5:0D:9B:48:11:24:B5:8A:1D:DD:AD:0F:CF:F2:E1:CD
X509v3 Authority Key Identifier:
keyid:69:F8:EB:36:6F:C6:C8:A0:9B:FB:14:0F:15:05:F9:EC:67:5D:42:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/afjrNm_GyKCb-xQPFQX57GddQuQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/fdad8c-9ed3-4f01-b107-7486c0582f2a/1/afjrNm_GyKCb-xQPFQX57GddQuQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/fdad8c-9ed3-4f01-b107-7486c0582f2a/1/afjrNm_GyKCb-xQPFQX57GddQuQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:ac:db:3e:ed:66:00:ee:d1:22:12:84:de:2b:64:a5:48:eb:
c6:a7:8e:2d:1d:c9:3f:bb:8c:65:e6:d8:16:5b:48:db:6d:f7:
b2:75:bf:8e:b0:a4:95:35:0f:e5:20:68:dc:2f:c9:20:14:34:
0f:59:06:af:e5:f3:3b:dc:c7:df:30:31:f7:4b:6d:74:cb:fc:
d7:fc:ab:57:f0:7e:e6:14:cf:9e:56:cc:f5:05:b2:fd:18:a8:
69:29:a9:c4:c9:cd:55:a9:f4:73:9a:1c:6a:a3:62:65:29:81:
b2:c0:31:ea:cc:a4:65:b9:0e:e5:cf:80:a0:84:1d:54:08:50:
16:f9:c1:b3:0f:73:00:06:26:98:31:b0:a8:38:a7:20:5f:59:
6a:bb:08:fe:5c:f6:32:38:39:29:f9:62:94:90:c4:77:4f:b0:
b8:eb:b7:81:92:e0:9d:12:1f:0e:87:7a:39:76:0b:b9:f2:96:
75:ff:3f:a1:a4:1a:90:7a:8b:61:97:53:01:c5:8f:7f:cf:43:
a8:7c:02:91:87:72:6c:3f:62:b1:64:eb:54:b6:8b:24:77:c5:
3f:49:98:a8:b6:2b:7f:56:34:d8:63:1e:16:27:ff:a5:7a:17:
2e:8a:1d:12:84:4a:f3:cb:3a:ed:de:21:50:a8:06:4e:c2:84:
68:cb:8b:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 26 00:20:16 2025 by rpki-client