Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/953a61-3349-47bf-a12b-e4c69334142c/1/afM-l5tD6I0OXsp5h5R9sh73yrk.mft
File: afM-l5tD6I0OXsp5h5R9sh73yrk.mft (raw, json)
Hash identifier: 3d31AklMG+zFXoPtoaWogO9T7BAVC5zDKvT/eMfBR9A=
Subject key identifier: C0:1F:7E:F1:53:A1:7F:1B:99:56:06:5F:B2:59:D3:FF:DF:81:37:3A
Authority key identifier: 69:F3:3E:97:9B:43:E8:8D:0E:5E:CA:79:87:94:7D:B2:1E:F7:CA:B9
Certificate issuer: /CN=69f33e979b43e88d0e5eca7987947db21ef7cab9
Certificate serial: 01977F0CCD1C5A374FABA1AC19383F514268
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/afM-l5tD6I0OXsp5h5R9sh73yrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/953a61-3349-47bf-a12b-e4c69334142c/1/afM-l5tD6I0OXsp5h5R9sh73yrk.mft
Manifest number: 0451
Signing time: Tue 17 Jun 2025 18:00:34 +0000
Manifest this update: Tue 17 Jun 2025 18:00:34 +0000
Manifest next update: Wed 18 Jun 2025 18:00:34 +0000
Files and hashes: 1: afM-l5tD6I0OXsp5h5R9sh73yrk.crl (hash: m70uJ6z5I0WFXQYzt9DB0ZGesLBSjYU/fy+LYtAkn5I=)
2: rjuN-ZTOCGAomaycIkzHFBIupdk.roa (hash: mpitT9m9PBhweeULsMgo7mL5tvByadSSpZctsThk9Hg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/953a61-3349-47bf-a12b-e4c69334142c/1/afM-l5tD6I0OXsp5h5R9sh73yrk.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/953a61-3349-47bf-a12b-e4c69334142c/1/afM-l5tD6I0OXsp5h5R9sh73yrk.mft
rsync://rpki.ripe.net/repository/DEFAULT/afM-l5tD6I0OXsp5h5R9sh73yrk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 13:26:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7f:0c:cd:1c:5a:37:4f:ab:a1:ac:19:38:3f:51:42:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69f33e979b43e88d0e5eca7987947db21ef7cab9
Validity
Not Before: Jun 17 18:00:34 2025 GMT
Not After : Jun 18 18:00:34 2025 GMT
Subject: CN=c01f7ef153a17f1b9956065fb259d3ffdf81373a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:77:6f:71:42:49:37:78:5e:e5:86:47:3c:73:
07:03:96:7b:eb:72:ea:ce:29:94:49:bf:0c:c1:5e:
f2:be:cb:8c:03:5b:14:d0:a3:f9:30:09:09:f5:ca:
1e:91:0f:6f:e5:ba:7d:fc:3d:cc:76:f1:2d:49:f1:
a6:72:a9:34:84:77:b2:d2:d5:89:d9:6f:7e:2d:46:
9c:61:22:84:bd:51:18:73:b1:59:68:b7:39:90:06:
b1:e0:36:2e:69:8f:53:15:6f:33:88:68:19:6a:56:
34:26:3c:84:8c:63:a1:45:4b:61:27:0e:4d:f0:91:
c5:09:65:3a:bd:43:de:51:25:0a:d8:a5:31:b2:9e:
4e:19:6a:b0:bd:f4:67:ef:22:ea:36:f2:0a:34:e7:
62:e8:36:bd:bd:12:13:de:e0:40:82:c0:fd:39:74:
1a:15:af:ff:4b:f3:a9:2c:55:89:1f:1b:6a:4a:a7:
14:83:b9:01:cf:c9:35:2d:01:39:5e:a2:1b:9f:05:
52:56:ab:ae:74:d9:57:42:8f:b8:f7:d1:af:cd:a7:
9f:10:1f:be:e6:96:f4:a0:2e:0c:2e:87:63:81:51:
1c:ca:f7:e3:31:6d:85:64:ac:9f:6a:ba:3a:3f:f0:
da:a1:49:ac:28:32:1f:97:b5:25:e5:86:a1:a0:ca:
b7:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:1F:7E:F1:53:A1:7F:1B:99:56:06:5F:B2:59:D3:FF:DF:81:37:3A
X509v3 Authority Key Identifier:
keyid:69:F3:3E:97:9B:43:E8:8D:0E:5E:CA:79:87:94:7D:B2:1E:F7:CA:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/afM-l5tD6I0OXsp5h5R9sh73yrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/953a61-3349-47bf-a12b-e4c69334142c/1/afM-l5tD6I0OXsp5h5R9sh73yrk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/953a61-3349-47bf-a12b-e4c69334142c/1/afM-l5tD6I0OXsp5h5R9sh73yrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:55:8d:72:cc:6c:b7:3d:77:4b:55:3f:69:7d:76:0e:b0:71:
75:de:a8:bc:a8:9a:b9:6f:48:1b:e4:73:52:dc:c0:f3:06:40:
72:aa:0f:f6:52:ce:6a:ad:1e:23:23:d0:5f:d8:5b:9d:17:d0:
1e:a2:74:a0:de:f1:4e:3c:9a:06:21:50:54:2e:3d:79:cc:a9:
0b:ff:df:3e:0d:09:5b:74:7d:ec:2d:cd:6e:84:8b:42:ae:4d:
a1:89:6a:88:63:db:c1:b1:a2:55:2c:28:4d:77:fd:e7:d8:cb:
08:d2:0b:7a:02:3a:2c:72:ed:23:71:fd:bb:4b:a3:ff:6a:54:
ee:bf:dc:4f:9f:d2:33:e8:7c:f3:53:b7:f8:68:92:aa:25:1d:
ad:47:ec:ba:d5:c7:3b:ef:27:b5:27:c6:3a:de:a5:d4:d5:b0:
fb:d4:50:2f:6c:0c:04:e6:78:cf:5f:29:51:cd:c5:00:06:66:
f7:8d:9d:a4:ec:6f:fa:52:11:ec:35:a3:bb:14:71:40:3b:63:
ab:5a:b6:16:22:d1:04:5b:59:4b:90:18:23:82:49:1f:41:8b:
b4:ff:7c:9d:9a:01:ef:68:a8:32:3e:7a:35:e1:54:04:47:8b:
88:d4:8c:47:f5:c0:fa:21:50:96:8d:ce:24:87:27:6a:00:56:
c7:ce:1f:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 23:45:30 2025 by rpki-client