Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/c68ae4-9724-4975-8bd4-c8700a14761b/1/_AfGtW7x8jmwKO9CN1oqF2W8CLg.mft
File: _AfGtW7x8jmwKO9CN1oqF2W8CLg.mft (raw, json)
Hash identifier: JI8cM4D5Lkry+SbfA1Wuz9snW4WTFcNX5ljfYgCZ23g=
Subject key identifier: 33:7E:FC:06:7A:04:80:3F:49:29:DD:69:6C:17:8C:97:86:23:F4:EE
Authority key identifier: FC:07:C6:B5:6E:F1:F2:39:B0:28:EF:42:37:5A:2A:17:65:BC:08:B8
Certificate issuer: /CN=fc07c6b56ef1f239b028ef42375a2a1765bc08b8
Certificate serial: 019A71B834E1C3B89613801F5835000AE08E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_AfGtW7x8jmwKO9CN1oqF2W8CLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/c68ae4-9724-4975-8bd4-c8700a14761b/1/_AfGtW7x8jmwKO9CN1oqF2W8CLg.mft
Manifest number: 10D9
Signing time: Tue 11 Nov 2025 07:01:28 +0000
Manifest this update: Tue 11 Nov 2025 07:01:28 +0000
Manifest next update: Wed 12 Nov 2025 07:01:28 +0000
Files and hashes: 1: TvMim_aEtrCLLOp0ZZIFYAVC2o4.roa (hash: /xE4OxOvjCCoCUdeNOdzw/FvM+bpWmIZ3XvVFCX7TVc=)
2: _AfGtW7x8jmwKO9CN1oqF2W8CLg.crl (hash: ZDG5CTwhcSkL6YtLG9He76bMj/1lrGyF2Ut3aqK5gcA=)
3: qi04sQ8qQVwMXdQXve2GNvg8f-0.roa (hash: fLJ+x7i0b6ZT7hHF332I64JRm3fDb0LUQmOcJ/RhLx4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/c68ae4-9724-4975-8bd4-c8700a14761b/1/_AfGtW7x8jmwKO9CN1oqF2W8CLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/c68ae4-9724-4975-8bd4-c8700a14761b/1/_AfGtW7x8jmwKO9CN1oqF2W8CLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/_AfGtW7x8jmwKO9CN1oqF2W8CLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:34:e1:c3:b8:96:13:80:1f:58:35:00:0a:e0:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc07c6b56ef1f239b028ef42375a2a1765bc08b8
Validity
Not Before: Nov 11 07:01:28 2025 GMT
Not After : Nov 12 07:01:28 2025 GMT
Subject: CN=337efc067a04803f4929dd696c178c978623f4ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f9:c1:0b:5f:48:1b:a8:68:47:17:ee:ed:55:
27:6e:06:c8:1b:4a:f4:73:98:d1:cc:57:b3:4d:20:
68:a3:bf:b5:81:68:4c:f4:62:97:b4:f6:e9:af:f7:
03:68:a1:b3:71:3a:9c:67:2b:df:c0:2a:4c:c5:8a:
d6:d6:1b:42:20:3c:b1:a2:6f:c5:1a:73:ba:87:be:
e7:ae:64:28:dd:68:0d:df:88:e6:15:66:4b:b5:aa:
7d:eb:be:0b:cc:4e:fd:25:6a:73:32:e4:ec:d9:99:
db:29:e0:4e:65:84:e3:2d:37:12:0a:bc:1f:e9:e1:
4d:4e:d1:92:18:4a:07:71:f0:24:c9:1b:47:83:b9:
53:f6:14:ea:24:6d:c4:54:95:bf:ac:67:e2:04:64:
6a:96:1d:8e:01:78:0a:61:a2:f1:a4:42:6c:6d:f6:
d3:ef:ca:48:96:99:da:6c:50:9a:ab:52:39:a2:f6:
87:57:2b:1c:c5:bf:45:a9:5c:9f:39:13:f6:e6:2a:
9d:fa:86:c0:ab:58:db:a7:90:99:8a:07:a7:a9:85:
af:d2:89:c4:05:ea:87:09:a5:d3:31:38:da:7f:af:
aa:68:4a:63:3d:8b:d3:4f:3e:05:5a:47:85:27:88:
c4:03:b4:85:2c:e8:98:92:40:79:3d:b2:aa:f9:ce:
93:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:7E:FC:06:7A:04:80:3F:49:29:DD:69:6C:17:8C:97:86:23:F4:EE
X509v3 Authority Key Identifier:
keyid:FC:07:C6:B5:6E:F1:F2:39:B0:28:EF:42:37:5A:2A:17:65:BC:08:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_AfGtW7x8jmwKO9CN1oqF2W8CLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/c68ae4-9724-4975-8bd4-c8700a14761b/1/_AfGtW7x8jmwKO9CN1oqF2W8CLg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/c68ae4-9724-4975-8bd4-c8700a14761b/1/_AfGtW7x8jmwKO9CN1oqF2W8CLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:f0:6f:6a:e7:23:13:0a:dd:ec:29:ce:fb:84:29:c7:cb:e8:
46:a9:e6:17:2f:62:15:f0:9d:b8:76:68:4a:9d:d2:8e:b1:5f:
08:bb:00:c2:d8:b2:c2:20:83:64:55:13:dd:83:4d:e5:b0:92:
77:55:a7:f3:61:34:5f:ec:36:00:db:51:3c:74:7c:92:ff:ac:
75:e9:9f:61:58:70:8b:db:c1:c6:3e:5c:2b:c8:97:60:07:2a:
31:20:2d:68:47:ca:f8:f7:f4:fe:25:65:39:45:fd:de:48:4e:
66:46:96:fe:56:57:20:ca:61:df:87:23:6f:94:c3:a5:98:72:
f9:ca:f6:63:41:1f:5b:19:01:70:a3:59:2a:9b:56:f6:32:6c:
16:34:6e:ef:76:79:ca:18:39:5c:cf:be:94:a7:b4:c2:82:32:
29:74:a3:a9:39:91:4a:b2:17:1a:a7:bc:3c:71:96:7f:6a:24:
00:d0:5a:9f:91:90:73:1b:fb:27:81:1e:7e:90:d5:49:f0:d6:
48:00:79:67:5a:08:1f:13:5d:16:ab:79:a5:98:86:9b:fb:e1:
d2:27:18:97:4f:97:86:17:41:5a:ad:2a:0b:d6:f5:18:1c:4d:
f0:eb:16:fb:53:02:20:c6:29:48:7d:58:ff:74:6b:18:d1:8a:
d9:f3:70:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:36:51 2025 by rpki-client