Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/95fe44-b039-4c93-b975-46ee99a1ee30/1/AFSIJAGwckhkqMzLrq_kLIUkBFY.mft
File: AFSIJAGwckhkqMzLrq_kLIUkBFY.mft (raw, json)
Hash identifier: F98qeEmmOZoiRL+bshSZp+24Ta7JX05WMSYqV7hF0EA=
Subject key identifier: 48:C5:06:0E:54:E9:FF:7F:49:79:63:10:AC:4E:E6:75:8E:4D:1A:A2
Authority key identifier: 00:54:88:24:01:B0:72:48:64:A8:CC:CB:AE:AF:E4:2C:85:24:04:56
Certificate issuer: /CN=0054882401b0724864a8cccbaeafe42c85240456
Certificate serial: 019A0B5D0585E8D6285FECD79253B8ACFB27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AFSIJAGwckhkqMzLrq_kLIUkBFY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/95fe44-b039-4c93-b975-46ee99a1ee30/1/AFSIJAGwckhkqMzLrq_kLIUkBFY.mft
Manifest number: 16EB
Signing time: Wed 22 Oct 2025 10:00:36 +0000
Manifest this update: Wed 22 Oct 2025 10:00:36 +0000
Manifest next update: Thu 23 Oct 2025 10:00:36 +0000
Files and hashes: 1: 0ya4sfz42L60TJ0bcAyUqtENC28.roa (hash: 8fugK/0QqnnO0V3k6nBzfLlx/GUIRpJ1ovogrf7zS2I=)
2: AFSIJAGwckhkqMzLrq_kLIUkBFY.crl (hash: AApOfkeQXqK+r5kFKINsaUldhHSibCamb4RbPd4cAx0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/95fe44-b039-4c93-b975-46ee99a1ee30/1/AFSIJAGwckhkqMzLrq_kLIUkBFY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/95fe44-b039-4c93-b975-46ee99a1ee30/1/AFSIJAGwckhkqMzLrq_kLIUkBFY.mft
rsync://rpki.ripe.net/repository/DEFAULT/AFSIJAGwckhkqMzLrq_kLIUkBFY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0b:5d:05:85:e8:d6:28:5f:ec:d7:92:53:b8:ac:fb:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0054882401b0724864a8cccbaeafe42c85240456
Validity
Not Before: Oct 22 10:00:36 2025 GMT
Not After : Oct 23 10:00:36 2025 GMT
Subject: CN=48c5060e54e9ff7f49796310ac4ee6758e4d1aa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:33:d5:0e:b7:7b:1b:50:9e:a5:94:20:df:39:
be:ca:2f:87:e4:f5:30:0d:05:6e:35:f8:73:33:10:
89:3a:4d:38:6a:76:28:1a:8b:35:db:63:05:d5:b6:
97:fb:d8:dd:76:49:54:e3:55:29:94:72:d3:f3:79:
d4:60:ec:5f:9f:28:8f:7b:93:ac:77:ed:6b:d3:f5:
13:a7:78:8f:17:41:2b:2c:f5:17:96:f0:e0:98:ad:
9d:c4:82:42:7d:e5:31:65:90:6d:6d:3e:ac:a6:2d:
97:4a:69:87:7c:8e:c2:c3:b8:e3:05:d2:f8:55:e7:
89:17:4c:4e:d9:4c:c7:d5:37:f4:7c:c5:57:25:42:
88:60:8a:7e:65:fa:02:6a:4c:a4:b6:8c:a6:1b:d2:
80:24:68:95:6c:81:56:97:11:ba:aa:8f:d1:42:16:
15:d0:78:63:3b:0b:12:55:79:c3:91:34:e0:6a:00:
8f:12:62:4a:0e:ef:61:a7:5f:10:03:0a:e3:5d:c4:
ca:f2:ff:5e:19:69:29:4f:b5:d9:d1:37:38:9c:61:
d4:f2:7a:11:5c:65:cc:6a:b5:13:fa:fc:d0:90:96:
20:ce:bb:42:0d:f6:e9:76:63:ac:29:b9:a7:f3:eb:
6f:b7:64:f6:25:cf:83:b0:35:91:40:6d:fb:f2:ef:
eb:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:C5:06:0E:54:E9:FF:7F:49:79:63:10:AC:4E:E6:75:8E:4D:1A:A2
X509v3 Authority Key Identifier:
keyid:00:54:88:24:01:B0:72:48:64:A8:CC:CB:AE:AF:E4:2C:85:24:04:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AFSIJAGwckhkqMzLrq_kLIUkBFY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/95fe44-b039-4c93-b975-46ee99a1ee30/1/AFSIJAGwckhkqMzLrq_kLIUkBFY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/95fe44-b039-4c93-b975-46ee99a1ee30/1/AFSIJAGwckhkqMzLrq_kLIUkBFY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:35:e2:8e:93:a5:1a:c4:f3:6d:8e:eb:64:42:91:34:6b:68:
60:d1:dd:70:ba:20:8b:b9:14:66:48:89:31:b5:26:a8:ce:56:
35:9c:27:42:93:c2:51:17:aa:7f:b6:04:61:51:d8:9d:dc:c5:
4f:3a:ef:db:21:67:bd:10:9e:25:9f:0b:30:8e:6f:42:6d:7a:
21:ac:76:1e:dc:99:9f:7a:7b:0d:11:8e:d1:bb:66:dd:af:da:
28:d2:e3:c8:56:65:80:f8:bc:e2:e3:dd:ed:4b:59:fd:72:30:
91:93:9b:59:13:8d:5f:73:6c:f6:db:0f:3d:a5:2e:b2:32:ee:
71:db:bc:91:0a:a0:d7:f7:a7:67:84:a3:30:ed:31:61:e5:ad:
36:e7:a0:53:1b:86:ae:a8:24:0e:0e:ad:2e:a1:d2:0c:0e:02:
c1:8b:7e:0b:77:0b:9b:da:1f:8d:2b:2c:f3:ea:c5:89:cd:f0:
48:91:2b:49:89:0e:88:e7:5a:8d:25:4a:69:15:cb:87:b5:34:
b5:b9:73:99:81:63:81:f8:d3:e2:2a:0f:fa:d4:c9:bb:46:37:
b6:e5:ab:fd:c4:4d:89:40:62:1f:6a:6e:0b:8c:20:72:e7:ae:
f6:4b:b2:41:45:21:95:ad:23:c2:e5:4e:b2:8a:f6:c7:ea:30:
6a:f6:a7:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 14:34:56 2025 by rpki-client