Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/0ee558-f08c-42ca-a953-53828f43fea0/1/Af6IJc4pEV7HHNzPw1XYGjX9fow.mft
File: Af6IJc4pEV7HHNzPw1XYGjX9fow.mft (raw, json)
Hash identifier: AA98XhoHQmMwZeZGhOORlHWdWxa/e5c/ZKn7hw2/HL8=
Subject key identifier: AF:E9:1C:92:C7:B4:B4:89:12:87:8C:CC:E0:8D:DD:CE:09:33:23:D5
Authority key identifier: 01:FE:88:25:CE:29:11:5E:C7:1C:DC:CF:C3:55:D8:1A:35:FD:7E:8C
Certificate issuer: /CN=01fe8825ce29115ec71cdccfc355d81a35fd7e8c
Certificate serial: 019A7112F6D09B39B90B2858697912120127
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Af6IJc4pEV7HHNzPw1XYGjX9fow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/0ee558-f08c-42ca-a953-53828f43fea0/1/Af6IJc4pEV7HHNzPw1XYGjX9fow.mft
Manifest number: 0497
Signing time: Tue 11 Nov 2025 04:00:59 +0000
Manifest this update: Tue 11 Nov 2025 04:00:59 +0000
Manifest next update: Wed 12 Nov 2025 04:00:59 +0000
Files and hashes: 1: Af6IJc4pEV7HHNzPw1XYGjX9fow.crl (hash: xJ4PIylv35f9E76LB6qDMxqCbzDmruJTb0UlVGWyfXo=)
2: Ju6K_k5aEz6SqSZhNuewgFZ6Tpc.roa (hash: eSc+nFa0PsPsCuhZ0NSVf3t+L8KNOuXb5VC0gk1mWnU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/0ee558-f08c-42ca-a953-53828f43fea0/1/Af6IJc4pEV7HHNzPw1XYGjX9fow.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/0ee558-f08c-42ca-a953-53828f43fea0/1/Af6IJc4pEV7HHNzPw1XYGjX9fow.mft
rsync://rpki.ripe.net/repository/DEFAULT/Af6IJc4pEV7HHNzPw1XYGjX9fow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:f6:d0:9b:39:b9:0b:28:58:69:79:12:12:01:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01fe8825ce29115ec71cdccfc355d81a35fd7e8c
Validity
Not Before: Nov 11 04:00:59 2025 GMT
Not After : Nov 12 04:00:59 2025 GMT
Subject: CN=afe91c92c7b4b48912878ccce08dddce093323d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:41:30:77:39:73:cc:bf:3f:20:cb:6e:9e:28:
3b:0d:55:71:66:f1:b1:25:e9:2a:bd:05:da:13:63:
27:71:69:e0:db:38:42:99:4b:21:02:e1:37:77:3b:
75:b8:13:18:7e:c1:46:7a:cb:0e:b6:6f:01:37:6d:
2a:15:f9:6a:ff:29:72:e6:5a:3a:4d:10:41:93:a4:
14:98:10:02:aa:33:b2:d4:4e:68:7f:a3:38:27:f8:
f4:5e:9d:a9:13:b4:17:59:0b:39:6e:40:2b:2f:02:
cd:93:64:f5:8f:21:3d:89:da:11:de:33:b7:14:29:
fe:8a:47:ac:27:e8:08:c0:ff:01:3f:35:60:59:30:
fd:8b:30:9b:82:c1:af:dc:68:3b:ee:67:1a:1a:5a:
08:01:9f:59:1e:46:39:2e:2e:49:b8:5a:6c:d8:10:
2f:59:6d:36:91:8f:16:88:3f:02:c6:a3:4d:1a:34:
1f:36:ef:f3:bf:f2:66:92:38:87:68:7e:87:21:fb:
28:d0:72:72:b0:80:9f:ef:4c:e1:da:7c:c6:14:15:
73:ef:e4:65:62:75:5d:90:d7:c7:8c:ae:82:a4:4e:
aa:44:7b:b8:cd:c1:43:d3:86:a2:78:cc:de:80:c3:
93:62:45:40:71:df:f1:8c:6f:10:d2:3d:f0:7e:dc:
45:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:E9:1C:92:C7:B4:B4:89:12:87:8C:CC:E0:8D:DD:CE:09:33:23:D5
X509v3 Authority Key Identifier:
keyid:01:FE:88:25:CE:29:11:5E:C7:1C:DC:CF:C3:55:D8:1A:35:FD:7E:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Af6IJc4pEV7HHNzPw1XYGjX9fow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/0ee558-f08c-42ca-a953-53828f43fea0/1/Af6IJc4pEV7HHNzPw1XYGjX9fow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/0ee558-f08c-42ca-a953-53828f43fea0/1/Af6IJc4pEV7HHNzPw1XYGjX9fow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:29:87:51:b2:0b:6e:29:a9:4a:a0:91:f5:94:5b:f2:be:f6:
73:12:b5:14:5a:0e:2f:22:04:1c:b5:0f:71:61:c5:58:08:27:
7a:04:98:e8:76:e9:de:17:09:32:f4:d7:7d:5b:fc:56:f5:96:
94:2a:06:5d:66:8f:b6:da:fb:58:eb:76:d2:f5:55:2f:d7:77:
4b:f1:12:9f:94:f4:e5:55:77:19:9e:b0:57:94:1b:97:d2:73:
d4:34:77:e1:c5:26:14:04:45:03:30:4a:29:20:e4:70:1f:22:
7c:31:43:70:81:e2:c5:f4:8c:40:96:16:dc:82:4b:bc:16:b3:
72:49:96:e3:74:8c:14:9e:ac:c8:a5:e8:3f:81:6a:4b:e3:76:
b6:71:0f:87:17:b5:d5:cf:56:59:68:ff:a2:9d:ce:57:85:ef:
77:16:11:6d:7a:64:23:1f:d9:56:a2:33:7f:03:d3:94:ba:97:
67:f0:6e:04:f2:4b:58:7b:4e:bb:7b:dd:60:99:df:97:fa:a2:
8e:23:d7:4b:19:50:e8:3a:55:b5:e6:1b:8d:c1:40:5e:ff:9f:
3a:09:36:ca:9c:fe:65:a0:69:c1:57:eb:ac:d8:ff:27:e1:be:
ed:cb:07:0c:10:b3:c0:d2:6c:c3:36:8e:74:b0:9e:78:1b:46:
81:9b:79:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:45:08 2025 by rpki-client