Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/fdad8c-9ed3-4f01-b107-7486c0582f2a/1/afjrNm_GyKCb-xQPFQX57GddQuQ.mft
File: afjrNm_GyKCb-xQPFQX57GddQuQ.mft (raw, json)
Hash identifier: FI3TSvckqEDLi9XAPKrTfjDT4lFcgR5BLbipel2+QWs=
Subject key identifier: 7F:BF:0F:F9:86:70:38:93:28:84:BC:D7:CB:FF:17:55:A7:E8:15:05
Authority key identifier: 69:F8:EB:36:6F:C6:C8:A0:9B:FB:14:0F:15:05:F9:EC:67:5D:42:E4
Certificate issuer: /CN=69f8eb366fc6c8a09bfb140f1505f9ec675d42e4
Certificate serial: 019A71B83961038BE3D90F9C1249E72137DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/afjrNm_GyKCb-xQPFQX57GddQuQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/fdad8c-9ed3-4f01-b107-7486c0582f2a/1/afjrNm_GyKCb-xQPFQX57GddQuQ.mft
Manifest number: 09F3
Signing time: Tue 11 Nov 2025 07:01:29 +0000
Manifest this update: Tue 11 Nov 2025 07:01:29 +0000
Manifest next update: Wed 12 Nov 2025 07:01:29 +0000
Files and hashes: 1: afjrNm_GyKCb-xQPFQX57GddQuQ.crl (hash: t01/PrlI/miZr4yLAwXlurl17lilffxBqzRH5vyA3WU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/fdad8c-9ed3-4f01-b107-7486c0582f2a/1/afjrNm_GyKCb-xQPFQX57GddQuQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/fdad8c-9ed3-4f01-b107-7486c0582f2a/1/afjrNm_GyKCb-xQPFQX57GddQuQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/afjrNm_GyKCb-xQPFQX57GddQuQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:39:61:03:8b:e3:d9:0f:9c:12:49:e7:21:37:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69f8eb366fc6c8a09bfb140f1505f9ec675d42e4
Validity
Not Before: Nov 11 07:01:29 2025 GMT
Not After : Nov 12 07:01:29 2025 GMT
Subject: CN=7fbf0ff9867038932884bcd7cbff1755a7e81505
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:fb:76:ff:ae:b5:36:5c:55:38:c1:21:86:70:
db:f8:cb:ca:de:15:7d:09:ef:43:7b:93:09:30:ea:
82:f3:31:1a:bc:7d:97:2c:20:c5:bc:00:c2:66:23:
16:7f:b1:9e:0b:1c:0c:49:83:21:75:42:b6:9f:56:
a3:54:6b:14:82:56:4d:5c:71:0f:cf:fd:1b:e4:37:
6d:22:9a:5a:ae:ba:ef:f9:3f:f2:99:19:97:e4:e0:
24:f3:ac:5e:d7:a2:6b:40:5d:53:64:86:26:64:19:
50:27:0d:ca:2e:07:8f:18:9c:c5:54:d5:06:45:7c:
94:f8:e4:e2:9f:ff:cc:bc:cb:8e:ef:c3:1b:fa:98:
de:f8:2e:98:96:d5:99:d2:47:35:81:97:59:d3:f9:
3a:52:73:91:62:fd:88:3e:3e:56:c1:b0:e5:a1:ce:
9a:63:e2:51:75:eb:05:47:5e:b8:fc:19:b8:34:05:
e9:25:ce:1a:f2:81:8b:27:8f:8e:46:49:0d:7e:44:
9f:5f:56:2c:c3:d7:f3:2d:5f:d0:d1:76:bb:00:e8:
18:69:97:bb:80:c4:ca:4a:a7:28:8b:f4:3d:24:c2:
ea:fb:f2:c9:3f:ff:68:72:39:c8:44:a8:ff:56:d4:
e7:cd:c0:c4:84:63:26:de:91:49:4f:24:0b:c2:79:
da:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:BF:0F:F9:86:70:38:93:28:84:BC:D7:CB:FF:17:55:A7:E8:15:05
X509v3 Authority Key Identifier:
keyid:69:F8:EB:36:6F:C6:C8:A0:9B:FB:14:0F:15:05:F9:EC:67:5D:42:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/afjrNm_GyKCb-xQPFQX57GddQuQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/fdad8c-9ed3-4f01-b107-7486c0582f2a/1/afjrNm_GyKCb-xQPFQX57GddQuQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/fdad8c-9ed3-4f01-b107-7486c0582f2a/1/afjrNm_GyKCb-xQPFQX57GddQuQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:f1:a3:ef:b7:93:2f:ee:79:31:82:91:f1:c3:7b:d3:3c:89:
b6:a4:77:6e:42:71:1a:95:de:e3:4c:28:a3:16:c9:47:4d:f3:
cb:9f:0d:21:3a:4b:3e:ea:2d:0f:82:1d:9a:9b:74:1b:d6:58:
13:a6:d0:86:a2:9c:f6:77:f4:1c:ce:48:16:93:e9:c8:7c:44:
95:50:24:0b:63:8a:7b:57:56:df:d3:7a:3a:43:a9:a8:d9:dc:
fe:e8:3b:e6:4f:ce:7f:93:f3:b7:97:e4:02:72:d8:7a:65:1c:
0b:33:b9:19:1b:02:03:a2:f9:0e:ad:1c:f4:90:93:4a:00:eb:
56:f5:54:c2:18:e3:59:e6:d5:7b:5f:e9:76:aa:4c:67:5b:be:
6e:3a:6c:01:9d:84:1a:a6:e6:19:be:0f:71:19:88:12:3a:09:
5d:93:8c:c8:1f:96:39:99:a2:26:d8:63:bc:7a:b2:3a:32:4b:
56:cd:3f:ac:16:e9:89:a6:f0:70:c5:20:1d:2b:a5:b2:25:fb:
44:57:40:e0:2d:2d:7b:0f:fa:93:dc:a7:d3:98:4a:1a:ff:59:
5e:4c:b4:33:d6:e8:04:e3:36:7b:51:b7:e6:02:96:2d:ba:e8:
c0:0b:71:75:da:76:ec:dc:39:64:7d:87:9d:49:44:2c:67:ad:
2a:c2:7e:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 16:55:51 2025 by rpki-client