Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/bfd37c-cb12-4a9c-8f5d-4021265c39b0/1/r4AZhMw48KT8Wv4a3qtoDBuJ6Vs.mft
File: r4AZhMw48KT8Wv4a3qtoDBuJ6Vs.mft (raw, json)
Hash identifier: R3wtgSl9AH9NuyaLcemLadG/px4wxGM6YAp4rV+B6jg=
Subject key identifier: 96:C6:AD:32:26:BD:3E:8A:72:B1:8D:53:C7:C8:C9:4C:AF:D3:F4:B9
Authority key identifier: AF:80:19:84:CC:38:F0:A4:FC:5A:FE:1A:DE:AB:68:0C:1B:89:E9:5B
Certificate issuer: /CN=af801984cc38f0a4fc5afe1adeab680c1b89e95b
Certificate serial: 01993725E2C9A2BE122632466B662C40AEB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r4AZhMw48KT8Wv4a3qtoDBuJ6Vs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/bfd37c-cb12-4a9c-8f5d-4021265c39b0/1/r4AZhMw48KT8Wv4a3qtoDBuJ6Vs.mft
Manifest number: 16E6
Signing time: Thu 11 Sep 2025 05:00:53 +0000
Manifest this update: Thu 11 Sep 2025 05:00:53 +0000
Manifest next update: Fri 12 Sep 2025 05:00:53 +0000
Files and hashes: 1: DFT3C1ESd3ECdCvnig1o1yFhj2o.roa (hash: jS0AoKDTzYr3flNicW2QJ9hQ40CKAmrksBy5pTz4mbk=)
2: r4AZhMw48KT8Wv4a3qtoDBuJ6Vs.crl (hash: xKcqxNsgMIR2U58IjRxKIVUnq0peZC7oaDECSW8p1HE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/bfd37c-cb12-4a9c-8f5d-4021265c39b0/1/r4AZhMw48KT8Wv4a3qtoDBuJ6Vs.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/bfd37c-cb12-4a9c-8f5d-4021265c39b0/1/r4AZhMw48KT8Wv4a3qtoDBuJ6Vs.mft
rsync://rpki.ripe.net/repository/DEFAULT/r4AZhMw48KT8Wv4a3qtoDBuJ6Vs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 05:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:37:25:e2:c9:a2:be:12:26:32:46:6b:66:2c:40:ae:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af801984cc38f0a4fc5afe1adeab680c1b89e95b
Validity
Not Before: Sep 11 05:00:53 2025 GMT
Not After : Sep 12 05:00:53 2025 GMT
Subject: CN=96c6ad3226bd3e8a72b18d53c7c8c94cafd3f4b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:14:aa:2c:9d:cf:50:5d:65:7d:b8:a0:09:0a:
b5:16:13:81:04:11:9e:a5:98:60:24:6a:30:19:74:
ea:4f:fd:8f:7f:92:78:33:36:f3:56:7c:0e:2d:ad:
a5:99:9c:1f:76:72:f7:95:53:3a:53:bf:06:e9:87:
a8:3f:57:32:02:d3:6f:43:6c:c2:48:99:5a:fd:a0:
74:ff:cf:d7:77:85:77:cc:fa:9d:30:8a:02:93:d3:
0a:ea:69:28:fc:d6:c3:99:2d:fc:cf:16:7a:35:fb:
ee:6e:aa:fd:42:8d:a8:b2:3a:90:f7:a7:fa:f5:e3:
d4:7e:62:0b:ad:4f:9f:2f:88:61:1f:d7:86:e0:87:
2b:f7:69:6d:93:0f:9a:9f:a0:55:9c:76:71:f0:34:
c8:64:d7:40:80:a0:ca:73:9e:82:05:35:ab:a0:92:
69:99:42:8a:42:13:0b:34:17:01:96:1f:02:1b:22:
e4:6a:b1:c1:7d:a5:28:1b:78:d3:8b:7f:7c:a9:08:
be:b2:a2:33:2d:99:ee:11:79:e6:89:5e:65:26:de:
ae:a6:f6:45:60:ea:a1:58:45:87:5f:5b:91:f8:d2:
fc:6e:3b:e9:00:7d:10:73:0b:fa:22:70:1f:d3:d9:
c3:71:f6:76:7e:a8:db:cf:f7:63:8e:bb:b3:bb:56:
98:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:C6:AD:32:26:BD:3E:8A:72:B1:8D:53:C7:C8:C9:4C:AF:D3:F4:B9
X509v3 Authority Key Identifier:
keyid:AF:80:19:84:CC:38:F0:A4:FC:5A:FE:1A:DE:AB:68:0C:1B:89:E9:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r4AZhMw48KT8Wv4a3qtoDBuJ6Vs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bfd37c-cb12-4a9c-8f5d-4021265c39b0/1/r4AZhMw48KT8Wv4a3qtoDBuJ6Vs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bfd37c-cb12-4a9c-8f5d-4021265c39b0/1/r4AZhMw48KT8Wv4a3qtoDBuJ6Vs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:b1:77:b7:cf:c7:8b:3f:1a:ef:4d:2a:95:f4:3e:52:11:17:
00:28:6f:c2:23:af:9f:65:12:5d:a0:63:97:02:9c:d2:d8:75:
bc:89:92:a0:2d:fe:63:72:5c:e9:8a:d5:90:3f:b1:37:db:bd:
5e:eb:8d:da:6f:f9:f3:20:a0:c7:c2:85:70:0a:b0:9c:1d:a6:
4e:88:81:dd:a7:c5:d1:d9:d3:52:75:bb:05:38:3f:8a:a0:a0:
9d:6f:50:3a:53:c8:5e:30:f1:56:e2:4e:92:fe:a7:b2:c9:c3:
b8:35:1d:3f:57:89:2f:6a:05:95:f7:bd:ba:6c:69:03:1c:09:
c8:17:ed:60:25:13:7d:c3:61:f6:ef:6b:2e:b8:4c:bc:3f:18:
f5:0e:15:d5:7e:45:ce:6c:5c:fd:34:be:86:19:2f:d5:aa:2e:
e3:3f:e3:63:1e:aa:d0:67:79:21:bb:d6:67:b3:b5:5a:5b:fb:
ae:0e:76:14:9b:b5:ba:9f:f4:d7:25:94:b7:37:d7:4d:4f:10:
32:04:6f:b5:38:90:6c:ec:58:f2:7a:28:eb:bb:00:b6:11:1e:
dc:10:f8:57:9c:c7:b5:c4:ca:82:0d:56:a8:e6:24:8c:5e:7a:
c2:ec:51:bb:2d:60:c1:c6:5f:22:fc:61:4d:a2:4f:05:61:d5:
85:f2:27:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 10:04:15 2025 by rpki-client