Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/3f1f2e-5c52-4fb0-b538-17366ff96379/1/afGmtIBLtqOFSkThBp8lcmdBeAU.mft
File: afGmtIBLtqOFSkThBp8lcmdBeAU.mft (raw, json)
Hash identifier: kNOGJ67/6ryYVmj38ydQXhgHHW8NXY5k4bPn8xGo+So=
Subject key identifier: 39:AB:2E:24:C8:17:F4:16:2A:E2:25:02:5F:F8:9D:70:DB:D1:05:4A
Authority key identifier: 69:F1:A6:B4:80:4B:B6:A3:85:4A:44:E1:06:9F:25:72:67:41:78:05
Certificate issuer: /CN=69f1a6b4804bb6a3854a44e1069f257267417805
Certificate serial: 019A71B7AA98EA4AAA3EC3B5E6E0CEF9A6E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/afGmtIBLtqOFSkThBp8lcmdBeAU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/3f1f2e-5c52-4fb0-b538-17366ff96379/1/afGmtIBLtqOFSkThBp8lcmdBeAU.mft
Manifest number: 04F5
Signing time: Tue 11 Nov 2025 07:00:53 +0000
Manifest this update: Tue 11 Nov 2025 07:00:53 +0000
Manifest next update: Wed 12 Nov 2025 07:00:53 +0000
Files and hashes: 1: Skkt9qCmFcjyoJKLbWcw_zW-zv4.roa (hash: oMEM2PX5h0QQNYCkDuZtaf8uG3ceVoU4JnbpV2MwKWM=)
2: afGmtIBLtqOFSkThBp8lcmdBeAU.crl (hash: 6jrqe5KV+Zgu+tWxf3/N5T7TmjgCba/NE/7lxZuSN9w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/3f1f2e-5c52-4fb0-b538-17366ff96379/1/afGmtIBLtqOFSkThBp8lcmdBeAU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/3f1f2e-5c52-4fb0-b538-17366ff96379/1/afGmtIBLtqOFSkThBp8lcmdBeAU.mft
rsync://rpki.ripe.net/repository/DEFAULT/afGmtIBLtqOFSkThBp8lcmdBeAU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:aa:98:ea:4a:aa:3e:c3:b5:e6:e0:ce:f9:a6:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69f1a6b4804bb6a3854a44e1069f257267417805
Validity
Not Before: Nov 11 07:00:53 2025 GMT
Not After : Nov 12 07:00:53 2025 GMT
Subject: CN=39ab2e24c817f4162ae225025ff89d70dbd1054a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:4d:4a:f4:9f:3f:ce:fe:93:9f:0e:44:fc:1f:
3b:0a:41:e1:6d:14:dc:87:31:0d:12:64:c5:ec:fb:
ee:8a:4d:06:5d:86:01:90:66:93:72:e1:0f:63:f1:
4c:f2:18:91:e0:23:28:d5:74:a4:eb:d9:03:f6:09:
4f:85:ea:08:f4:37:24:a0:64:2a:45:25:09:1e:59:
8a:44:56:35:a9:a9:12:b6:a4:93:07:94:21:57:93:
24:e3:92:c7:6a:6e:2b:e9:d5:cd:94:2d:e4:97:32:
64:73:19:59:88:f8:85:a6:33:71:ac:ec:1f:d1:f6:
cd:cf:48:1a:7b:ca:5b:d7:be:00:4c:c7:97:fa:cb:
55:8e:82:12:29:19:b4:94:ee:94:42:b9:c6:ed:61:
64:6c:6c:89:eb:4f:68:fe:48:df:0e:e5:d2:f1:1e:
84:fd:a5:3b:ea:3a:58:1e:d7:20:07:b6:44:04:c3:
0d:2f:ea:a7:1a:aa:15:33:1f:95:3e:bd:77:8b:e1:
1a:2f:8b:ac:30:83:6a:cb:6f:76:aa:2c:bf:74:45:
1a:40:bd:96:51:b7:a0:b7:15:78:9b:53:fb:4a:9a:
86:93:df:82:36:01:19:35:c2:c0:4f:4a:15:90:d4:
fc:af:93:82:e1:1c:1f:ba:18:51:52:17:09:62:9f:
39:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:AB:2E:24:C8:17:F4:16:2A:E2:25:02:5F:F8:9D:70:DB:D1:05:4A
X509v3 Authority Key Identifier:
keyid:69:F1:A6:B4:80:4B:B6:A3:85:4A:44:E1:06:9F:25:72:67:41:78:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/afGmtIBLtqOFSkThBp8lcmdBeAU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/3f1f2e-5c52-4fb0-b538-17366ff96379/1/afGmtIBLtqOFSkThBp8lcmdBeAU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/3f1f2e-5c52-4fb0-b538-17366ff96379/1/afGmtIBLtqOFSkThBp8lcmdBeAU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:c3:5d:de:1c:40:51:f3:9a:75:3e:72:d3:34:71:7f:0c:e2:
7c:d2:5c:27:f3:ad:62:1f:a7:21:43:4b:c4:40:47:07:34:78:
ce:7c:b7:14:62:55:72:d1:21:ad:5b:bf:8e:57:33:ad:bf:c3:
e2:9e:c8:4a:06:53:03:a3:13:c9:78:a8:7e:0e:ad:b1:4a:1a:
0c:5d:08:03:e4:c4:bf:7b:cf:0b:bf:4b:c1:14:27:5c:a1:ed:
00:f0:6a:3e:c4:a8:19:b9:bd:66:c6:57:f3:6a:97:b9:80:72:
1e:d7:61:ae:53:58:d2:c3:22:95:23:7f:c1:53:2d:b9:54:e6:
2c:7e:fe:98:12:61:8a:2e:00:2c:73:d4:c7:f5:48:04:80:97:
e8:06:bb:47:89:e7:94:e9:8a:d5:a0:de:b4:5f:35:bf:77:bd:
de:68:d0:a7:87:d2:34:76:43:27:4d:fe:92:bb:d4:ed:b1:67:
28:0e:c6:16:ed:e6:69:c5:cd:24:87:13:bc:ff:19:c5:fa:0c:
31:57:08:e9:cf:1a:3e:95:a5:7d:54:c0:b4:55:b6:e4:c5:79:
c9:fa:78:d5:56:26:99:aa:97:86:09:df:a8:e2:43:42:6e:28:
79:dc:90:f2:76:d9:b9:21:f3:bf:ce:a5:f2:0d:1e:f0:bc:11:
30:70:32:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:45:25 2025 by rpki-client