Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/c06536-01aa-4e39-89b6-b58704f28591/1/afURWpSbKIPEzDxJX_uJk97Z2F0.mft
File: afURWpSbKIPEzDxJX_uJk97Z2F0.mft (raw, json)
Hash identifier: YibKhl1PxZWh53MDWSIrrePzZOc+zPLJiWbEf4M6YG8=
Subject key identifier: 84:B8:71:60:77:64:FD:13:40:DF:46:F8:81:44:F1:CB:5C:70:E1:47
Authority key identifier: 69:F5:11:5A:94:9B:28:83:C4:CC:3C:49:5F:FB:89:93:DE:D9:D8:5D
Certificate issuer: /CN=69f5115a949b2883c4cc3c495ffb8993ded9d85d
Certificate serial: 0199240D6CC21F330BA71FBA4E33E0DD75B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/afURWpSbKIPEzDxJX_uJk97Z2F0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/c06536-01aa-4e39-89b6-b58704f28591/1/afURWpSbKIPEzDxJX_uJk97Z2F0.mft
Manifest number: 90
Signing time: Sun 07 Sep 2025 12:01:23 +0000
Manifest this update: Sun 07 Sep 2025 12:01:23 +0000
Manifest next update: Mon 08 Sep 2025 12:01:23 +0000
Files and hashes: 1: 4BZY4KShEUmhrY8s7jFk_wJEp5k.roa (hash: UlyxYtAIHY75kSHD+hMXhTJxJxd+/SUaiDAFT6/piUg=)
2: afURWpSbKIPEzDxJX_uJk97Z2F0.crl (hash: OvTruNwuBTYhV5rOkH8PvoB6ItBEPD0EEvswRaFjjAc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/c06536-01aa-4e39-89b6-b58704f28591/1/afURWpSbKIPEzDxJX_uJk97Z2F0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/c06536-01aa-4e39-89b6-b58704f28591/1/afURWpSbKIPEzDxJX_uJk97Z2F0.mft
rsync://rpki.ripe.net/repository/DEFAULT/afURWpSbKIPEzDxJX_uJk97Z2F0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:24:0d:6c:c2:1f:33:0b:a7:1f:ba:4e:33:e0:dd:75:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69f5115a949b2883c4cc3c495ffb8993ded9d85d
Validity
Not Before: Sep 7 12:01:23 2025 GMT
Not After : Sep 8 12:01:23 2025 GMT
Subject: CN=84b871607764fd1340df46f88144f1cb5c70e147
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:45:f7:9a:5f:b9:e5:15:31:2e:0b:ca:ce:eb:
c5:bf:71:e2:5a:fa:1a:14:13:a7:c1:37:78:e0:83:
6e:ac:1e:85:c1:38:5c:71:dd:ac:89:16:7b:6b:76:
6a:6a:f8:88:84:f1:78:ab:6d:19:fc:11:63:30:b8:
3e:0a:87:83:2a:21:67:b3:5c:4e:3e:cf:31:f7:62:
df:8f:f0:e1:94:2f:be:ee:26:da:3d:09:30:d1:c5:
de:85:c2:9c:dc:2a:41:ee:63:cf:d3:cf:75:ad:64:
9c:ec:d8:b3:62:a2:07:5c:e0:e9:f7:72:35:5e:a6:
f5:93:f0:ed:72:18:dc:12:9a:de:51:d9:d6:1d:e1:
e9:5e:76:41:85:8b:16:91:a5:63:f7:83:d1:24:92:
d9:de:56:2e:32:c4:24:a8:2c:bc:45:06:34:9e:7d:
27:fb:c8:1d:04:c1:6e:fd:0c:da:61:1b:11:8e:4c:
e9:13:03:a9:84:4d:2d:3b:2c:22:6e:71:4e:11:d7:
3a:75:93:81:37:72:dc:72:c8:28:44:f4:d9:59:62:
c5:9f:b5:6d:8e:38:fb:2f:00:11:04:4c:49:7a:42:
a2:ff:e7:bb:b9:02:b0:a3:d2:2f:34:9f:8f:81:bb:
f0:ef:d0:89:2a:85:63:52:57:1a:be:9f:5b:9b:c0:
91:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:B8:71:60:77:64:FD:13:40:DF:46:F8:81:44:F1:CB:5C:70:E1:47
X509v3 Authority Key Identifier:
keyid:69:F5:11:5A:94:9B:28:83:C4:CC:3C:49:5F:FB:89:93:DE:D9:D8:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/afURWpSbKIPEzDxJX_uJk97Z2F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c06536-01aa-4e39-89b6-b58704f28591/1/afURWpSbKIPEzDxJX_uJk97Z2F0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c06536-01aa-4e39-89b6-b58704f28591/1/afURWpSbKIPEzDxJX_uJk97Z2F0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:77:1e:67:e6:7b:d0:60:7a:76:79:f1:52:2b:d5:8c:9f:52:
1a:75:7d:6f:09:13:4b:a2:e5:19:47:0a:41:30:b4:1b:4e:c9:
5d:28:fa:99:da:5f:e2:15:19:49:6f:e3:d5:b1:ea:ed:21:d9:
65:4c:cd:f0:2d:42:cd:24:89:ab:93:97:dc:e2:2a:76:73:2c:
d5:fd:e0:8a:27:a0:14:fe:95:c0:b2:2b:6f:ac:47:07:1f:7b:
0e:0f:af:5a:40:1c:fd:e1:e8:6c:e8:fb:62:41:29:19:66:e7:
24:e4:36:1b:a5:d7:89:b6:76:25:cc:c9:5b:0b:57:df:10:8e:
db:85:ad:af:c6:72:13:13:86:0f:d8:ef:66:72:d8:6b:31:3e:
5f:3c:fa:78:f5:b7:1f:6b:5e:12:3b:e5:a3:3c:78:1f:4a:99:
b4:94:88:61:4b:b3:90:9f:d4:9a:90:c5:e4:ef:ed:eb:82:c3:
f7:da:b9:91:20:d3:26:55:01:b5:1b:3f:53:af:3f:07:74:9f:
db:b5:15:16:96:8e:46:81:28:50:3b:90:c5:3b:d5:c6:e7:ec:
7d:1b:db:c8:28:49:40:36:37:1e:7b:ce:69:7c:b5:b2:a4:9a:
26:1d:8e:0f:37:f8:9a:1a:4c:65:03:9e:7c:a2:e6:2e:4f:3a:
56:9c:9d:85
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkkDWzCHzMLpx+6TjPg3XWxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5ZjUxMTVhOTQ5YjI4ODNjNGNjM2M0OTVmZmI4OTkzZGVk
OWQ4NWQwHhcNMjUwOTA3MTIwMTIzWhcNMjUwOTA4MTIwMTIzWjAzMTEwLwYDVQQD
Eyg4NGI4NzE2MDc3NjRmZDEzNDBkZjQ2Zjg4MTQ0ZjFjYjVjNzBlMTQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxkX3ml+55RUxLgvKzuvFv3HiWvoa
FBOnwTd44INurB6FwThccd2siRZ7a3ZqaviIhPF4q20Z/BFjMLg+CoeDKiFns1xO
Ps8x92Lfj/DhlC++7ibaPQkw0cXehcKc3CpB7mPP0891rWSc7NizYqIHXODp93I1
Xqb1k/DtchjcEpreUdnWHeHpXnZBhYsWkaVj94PRJJLZ3lYuMsQkqCy8RQY0nn0n
+8gdBMFu/QzaYRsRjkzpEwOphE0tOywibnFOEdc6dZOBN3LccsgoRPTZWWLFn7Vt
jjj7LwARBExJekKi/+e7uQKwo9IvNJ+Pgbvw79CJKoVjUlcavp9bm8CRKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIS4cWB3ZP0TQN9G+IFE8ctccOFHMB8GA1UdIwQY
MBaAFGn1EVqUmyiDxMw8SV/7iZPe2dhdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWZVUldwU2JLSVBFekR4SlhfdUprOTdaMkYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9jMDY1MzYtMDFhYS00ZTM5LTg5YjYt
YjU4NzA0ZjI4NTkxLzEvYWZVUldwU2JLSVBFekR4SlhfdUprOTdaMkYwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS9jMDY1MzYtMDFhYS00ZTM5LTg5YjYtYjU4NzA0ZjI4NTkx
LzEvYWZVUldwU2JLSVBFekR4SlhfdUprOTdaMkYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOHceZ+Z7
0GB6dnnxUivVjJ9SGnV9bwkTS6LlGUcKQTC0G07JXSj6mdpf4hUZSW/j1bHq7SHZ
ZUzN8C1CzSSJq5OX3OIqdnMs1f3giiegFP6VwLIrb6xHBx97Dg+vWkAc/eHobOj7
YkEpGWbnJOQ2G6XXibZ2JczJWwtX3xCO24Wtr8ZyExOGD9jvZnLYazE+Xzz6ePW3
H2teEjvlozx4H0qZtJSIYUuzkJ/UmpDF5O/t64LD99q5kSDTJlUBtRs/U68/B3Sf
27UVFpaORoEoUDuQxTvVxufsfRvbyChJQDY3HnvOaXy1sqSaJh2ODzf4mhpMZQOe
fKLmLk86VpydhQ==
-----END CERTIFICATE-----
Generated at Sun Sep 7 14:47:37 2025 by rpki-client