Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/97f917-93f8-405c-9d55-a3c061d8be91/1/Afq489H7PSo1xPZ6SPb2CD6rpXU.mft
File: Afq489H7PSo1xPZ6SPb2CD6rpXU.mft (raw, json)
Hash identifier: G9cRoWceXcTsqO++BLL3+MifluM4e3qDm4cIg1yzUwA=
Subject key identifier: 56:7B:92:DC:01:93:95:FC:A1:96:5F:ED:EF:70:FF:32:B3:B8:AB:74
Authority key identifier: 01:FA:B8:F3:D1:FB:3D:2A:35:C4:F6:7A:48:F6:F6:08:3E:AB:A5:75
Certificate issuer: /CN=01fab8f3d1fb3d2a35c4f67a48f6f6083eaba575
Certificate serial: 019A7226312E4FC88BC1B5BEA154A16E3992
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Afq489H7PSo1xPZ6SPb2CD6rpXU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/97f917-93f8-405c-9d55-a3c061d8be91/1/Afq489H7PSo1xPZ6SPb2CD6rpXU.mft
Manifest number: 0700
Signing time: Tue 11 Nov 2025 09:01:36 +0000
Manifest this update: Tue 11 Nov 2025 09:01:36 +0000
Manifest next update: Wed 12 Nov 2025 09:01:36 +0000
Files and hashes: 1: Afq489H7PSo1xPZ6SPb2CD6rpXU.crl (hash: oN4O9vZ3IjNfWpMLJasLVLFiwMOCISBtvOVt2pKOsxY=)
2: RCG29GRzXNkfnM3mAc2fQgzDKKo.roa (hash: VMJ45tdoRBW32E+FWz6jKq995VHfDQKLmdI/8SmUIrw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/97f917-93f8-405c-9d55-a3c061d8be91/1/Afq489H7PSo1xPZ6SPb2CD6rpXU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/97f917-93f8-405c-9d55-a3c061d8be91/1/Afq489H7PSo1xPZ6SPb2CD6rpXU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Afq489H7PSo1xPZ6SPb2CD6rpXU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:31:2e:4f:c8:8b:c1:b5:be:a1:54:a1:6e:39:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01fab8f3d1fb3d2a35c4f67a48f6f6083eaba575
Validity
Not Before: Nov 11 09:01:36 2025 GMT
Not After : Nov 12 09:01:36 2025 GMT
Subject: CN=567b92dc019395fca1965fedef70ff32b3b8ab74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d8:12:d5:a9:38:22:06:a7:a2:ae:fa:4e:1d:
05:fe:9a:60:15:38:bd:e0:e7:19:40:e4:4d:e8:cc:
7f:e8:59:6d:ed:be:60:3c:9f:15:f5:14:b4:e3:02:
06:3b:97:d2:07:96:46:1c:59:83:a3:c4:1d:4a:ef:
26:28:4c:91:7b:8f:3d:63:55:16:d0:cf:fa:a7:13:
01:ed:ef:81:35:ed:3a:05:ae:81:ab:80:85:c3:ec:
b5:16:f2:e9:d1:bc:a3:a4:56:62:8b:35:a7:a4:90:
c1:75:12:f5:e6:e3:e5:b5:cd:bc:f8:24:50:b8:b1:
5a:6c:01:f5:e8:ad:77:a9:dc:dc:c9:b1:92:3d:18:
22:d0:a8:93:a8:0f:10:50:ec:52:2e:f9:ab:74:41:
af:a3:7b:14:48:21:16:68:5b:8d:a7:96:f8:c8:23:
d2:f6:be:65:6d:f8:1f:5f:f9:f6:03:49:67:95:2f:
25:d4:21:6d:7f:01:54:51:b5:09:be:6e:a1:e2:8e:
18:ed:b8:33:90:57:70:2c:f0:c3:bd:37:84:58:c4:
52:a4:57:3d:e7:03:42:54:49:a9:09:96:30:21:7c:
4d:f6:a0:31:df:34:2a:f9:f8:a9:84:fe:6c:d6:72:
90:2b:13:31:fb:45:1f:2c:0b:f9:0f:de:dd:36:09:
cb:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:7B:92:DC:01:93:95:FC:A1:96:5F:ED:EF:70:FF:32:B3:B8:AB:74
X509v3 Authority Key Identifier:
keyid:01:FA:B8:F3:D1:FB:3D:2A:35:C4:F6:7A:48:F6:F6:08:3E:AB:A5:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Afq489H7PSo1xPZ6SPb2CD6rpXU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/97f917-93f8-405c-9d55-a3c061d8be91/1/Afq489H7PSo1xPZ6SPb2CD6rpXU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/97f917-93f8-405c-9d55-a3c061d8be91/1/Afq489H7PSo1xPZ6SPb2CD6rpXU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:32:f1:26:5e:35:96:fe:32:b3:00:7c:2d:5e:38:a6:1c:7d:
c1:d7:a7:88:b1:84:27:c5:ed:33:8a:75:59:56:6f:8a:f0:c1:
64:40:8f:71:af:20:fd:bc:25:f7:bf:b4:8c:7a:81:99:94:3a:
7c:fa:88:f6:38:96:8f:5d:6a:4b:c6:ce:27:b5:c1:1f:a6:b4:
a0:7f:15:2c:1f:11:9c:26:c8:57:fe:71:fa:d4:57:22:c7:12:
d5:04:6d:73:9b:31:11:92:1a:69:e7:1b:b4:83:14:e3:14:6b:
6e:e5:37:1b:21:42:34:0f:47:2a:3c:b2:c3:23:70:e6:33:91:
cc:78:4f:ca:41:cb:14:c5:e6:71:3b:84:af:e9:64:5d:29:fe:
8f:fb:09:e5:f7:d7:cf:1e:9f:5a:43:56:e5:da:d6:ad:29:6f:
b4:86:78:0c:83:6d:e9:7e:38:6c:3a:dc:61:b6:01:e9:88:58:
f8:ed:d6:64:b8:d9:d9:d4:70:17:47:0f:f0:80:1c:50:c5:8a:
79:ee:6d:73:3b:be:de:f1:f3:63:8e:1b:f6:5e:44:55:a8:5e:
65:69:2f:07:2c:c4:d9:2a:51:04:60:96:a8:0b:2b:96:0a:88:
28:0c:d8:5f:c0:4b:b5:cf:c0:d4:fc:dd:e9:df:3c:a1:e7:bc:
80:0f:52:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyJjEuT8iLwbW+oVShbjmSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxZmFiOGYzZDFmYjNkMmEzNWM0ZjY3YTQ4ZjZmNjA4M2Vh
YmE1NzUwHhcNMjUxMTExMDkwMTM2WhcNMjUxMTEyMDkwMTM2WjAzMTEwLwYDVQQD
Eyg1NjdiOTJkYzAxOTM5NWZjYTE5NjVmZWRlZjcwZmYzMmIzYjhhYjc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsNgS1ak4Iganoq76Th0F/ppgFTi9
4OcZQORN6Mx/6Flt7b5gPJ8V9RS04wIGO5fSB5ZGHFmDo8QdSu8mKEyRe489Y1UW
0M/6pxMB7e+BNe06Ba6Bq4CFw+y1FvLp0byjpFZiizWnpJDBdRL15uPltc28+CRQ
uLFabAH16K13qdzcybGSPRgi0KiTqA8QUOxSLvmrdEGvo3sUSCEWaFuNp5b4yCPS
9r5lbfgfX/n2A0lnlS8l1CFtfwFUUbUJvm6h4o4Y7bgzkFdwLPDDvTeEWMRSpFc9
5wNCVEmpCZYwIXxN9qAx3zQq+fiphP5s1nKQKxMx+0UfLAv5D97dNgnL0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFZ7ktwBk5X8oZZf7e9w/zKzuKt0MB8GA1UdIwQY
MBaAFAH6uPPR+z0qNcT2ekj29gg+q6V1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQWZxNDg5SDdQU28xeFBaNlNQYjJDRDZycFhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy85N2Y5MTctOTNmOC00MDVjLTlkNTUt
YTNjMDYxZDhiZTkxLzEvQWZxNDg5SDdQU28xeFBaNlNQYjJDRDZycFhVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy85N2Y5MTctOTNmOC00MDVjLTlkNTUtYTNjMDYxZDhiZTkx
LzEvQWZxNDg5SDdQU28xeFBaNlNQYjJDRDZycFhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATjLxJl41
lv4yswB8LV44phx9wdeniLGEJ8XtM4p1WVZvivDBZECPca8g/bwl97+0jHqBmZQ6
fPqI9jiWj11qS8bOJ7XBH6a0oH8VLB8RnCbIV/5x+tRXIscS1QRtc5sxEZIaaecb
tIMU4xRrbuU3GyFCNA9HKjyywyNw5jORzHhPykHLFMXmcTuEr+lkXSn+j/sJ5ffX
zx6fWkNW5drWrSlvtIZ4DINt6X44bDrcYbYB6YhY+O3WZLjZ2dRwF0cP8IAcUMWK
ee5tczu+3vHzY44b9l5EVaheZWkvByzE2SpRBGCWqAsrlgqIKAzYX8BLtc/A1Pzd
6d88oee8gA9SdQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 15:45:50 2025 by rpki-client