Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/953a61-3349-47bf-a12b-e4c69334142c/1/afM-l5tD6I0OXsp5h5R9sh73yrk.mft
File: afM-l5tD6I0OXsp5h5R9sh73yrk.mft (raw, json)
Hash identifier: WwTQv0T1+mAH8x6tAYHhh4rOBIm7v6hKjF3CZJ9zMyA=
Subject key identifier: 4D:7E:41:49:E4:FD:DE:D4:29:22:FD:AB:1C:30:FC:7F:00:8D:6B:5D
Authority key identifier: 69:F3:3E:97:9B:43:E8:8D:0E:5E:CA:79:87:94:7D:B2:1E:F7:CA:B9
Certificate issuer: /CN=69f33e979b43e88d0e5eca7987947db21ef7cab9
Certificate serial: 019A51505BFBDB1865BDC05902E50E97C5D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/afM-l5tD6I0OXsp5h5R9sh73yrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/953a61-3349-47bf-a12b-e4c69334142c/1/afM-l5tD6I0OXsp5h5R9sh73yrk.mft
Manifest number: 05C7
Signing time: Wed 05 Nov 2025 00:00:12 +0000
Manifest this update: Wed 05 Nov 2025 00:00:12 +0000
Manifest next update: Thu 06 Nov 2025 00:00:12 +0000
Files and hashes: 1: afM-l5tD6I0OXsp5h5R9sh73yrk.crl (hash: 5/bpucz2Z+NQ7pt/O2qr4su0frlx/hBkvxCpH0/dNyc=)
2: rjuN-ZTOCGAomaycIkzHFBIupdk.roa (hash: mpitT9m9PBhweeULsMgo7mL5tvByadSSpZctsThk9Hg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/953a61-3349-47bf-a12b-e4c69334142c/1/afM-l5tD6I0OXsp5h5R9sh73yrk.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/953a61-3349-47bf-a12b-e4c69334142c/1/afM-l5tD6I0OXsp5h5R9sh73yrk.mft
rsync://rpki.ripe.net/repository/DEFAULT/afM-l5tD6I0OXsp5h5R9sh73yrk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:50:5b:fb:db:18:65:bd:c0:59:02:e5:0e:97:c5:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69f33e979b43e88d0e5eca7987947db21ef7cab9
Validity
Not Before: Nov 5 00:00:12 2025 GMT
Not After : Nov 6 00:00:12 2025 GMT
Subject: CN=4d7e4149e4fdded42922fdab1c30fc7f008d6b5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:3d:45:0f:70:aa:22:0c:91:3d:c2:d0:6b:78:
85:79:e4:41:d4:ad:1e:4e:be:68:12:3a:22:6b:38:
a8:3a:5a:02:eb:af:9c:75:52:1d:77:d2:ff:25:9e:
28:61:eb:ac:50:11:20:4b:cd:62:ca:03:b4:70:9b:
e8:0a:e2:b3:fa:c4:62:e0:d4:42:6f:2c:62:a7:32:
a3:db:9b:41:39:88:2d:fb:52:01:eb:ee:7e:a9:69:
e7:0e:60:02:06:f7:ac:7a:f8:d6:bc:8f:ac:d6:c9:
6f:fd:a8:46:a2:60:40:00:3e:0e:97:5f:97:48:91:
ed:34:0c:4a:98:24:84:70:d5:43:66:a9:c9:7c:28:
d2:29:09:90:e1:f3:77:18:ee:c3:e5:cc:18:02:48:
62:bb:74:36:ad:0e:72:25:05:28:9f:1e:ec:d1:58:
ed:42:f8:1f:16:46:a9:99:a3:cc:e4:e3:88:c9:ee:
a7:9f:22:bf:eb:93:6a:ad:7f:cd:6c:77:52:68:8a:
ef:f4:d9:f3:75:e5:1d:95:64:32:bf:a9:e1:a9:b7:
3e:bc:81:b4:0b:09:55:c9:3b:4e:dc:8a:e7:6a:88:
2a:b0:9c:27:a5:0b:95:5c:83:e3:2d:1e:b8:35:2b:
50:c2:48:cb:48:e2:4c:cd:06:71:58:3e:bd:c3:17:
84:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:7E:41:49:E4:FD:DE:D4:29:22:FD:AB:1C:30:FC:7F:00:8D:6B:5D
X509v3 Authority Key Identifier:
keyid:69:F3:3E:97:9B:43:E8:8D:0E:5E:CA:79:87:94:7D:B2:1E:F7:CA:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/afM-l5tD6I0OXsp5h5R9sh73yrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/953a61-3349-47bf-a12b-e4c69334142c/1/afM-l5tD6I0OXsp5h5R9sh73yrk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/953a61-3349-47bf-a12b-e4c69334142c/1/afM-l5tD6I0OXsp5h5R9sh73yrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:79:c2:a1:44:a9:bd:4b:24:8b:61:01:c7:6e:02:8f:7c:54:
6b:9a:47:df:6c:81:d2:1b:ca:cb:d0:99:31:43:ef:96:7d:86:
a7:ad:be:2c:ea:2b:f9:14:bd:22:17:c9:22:8b:f4:e2:82:e3:
1a:58:0e:d8:08:3d:1a:a2:2d:98:eb:82:34:7f:58:92:a3:bf:
e1:f5:2c:ee:a5:d6:3f:7c:46:b5:c6:60:63:93:91:34:6b:ff:
91:9e:bf:c5:ab:16:48:d2:12:f6:9a:1f:7c:32:ba:5b:ba:dc:
32:c6:93:5f:79:ed:52:99:8b:42:03:ec:9f:a3:1b:fc:4b:fb:
04:c6:a3:8e:f3:4c:4f:55:ae:cc:29:65:f6:09:48:86:15:50:
ca:4d:3d:fb:0a:a1:3b:ad:31:d7:9a:a9:ef:41:1e:1e:38:40:
fe:c7:62:39:c8:0b:8f:3c:3c:9f:b9:9f:f0:b0:75:ab:0f:30:
a0:98:fd:b2:4f:98:0a:67:61:11:df:f1:d8:03:8a:9b:73:61:
0c:ed:aa:54:29:34:4f:48:b0:ff:55:4a:2b:88:9d:5f:ae:f3:
83:b1:7c:75:c5:f1:5d:af:6b:bc:b2:f2:16:f5:0d:09:70:7d:
27:1f:11:38:23:d6:96:7b:48:98:46:1f:b3:3d:55:9c:7c:fc:
1d:04:dc:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:58:23 2025 by rpki-client