Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/821572-3445-4910-a15c-f4c166c83f88/1/SdAfcM9fTe7ZOowV5JQCnpOr7VU.mft
File: SdAfcM9fTe7ZOowV5JQCnpOr7VU.mft (raw, json)
Hash identifier: v9qyHBBrGfp0vgI187LNdbvguaeTsR/BetGD3w8+SEU=
Subject key identifier: AF:30:74:C4:EB:45:ED:E8:1D:C7:1A:EA:08:F4:3D:59:FB:A2:07:AE
Authority key identifier: 49:D0:1F:70:CF:5F:4D:EE:D9:3A:8C:15:E4:94:02:9E:93:AB:ED:55
Certificate issuer: /CN=49d01f70cf5f4deed93a8c15e494029e93abed55
Certificate serial: 019A4DE199FCA66F01B693BB6877E006B9A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SdAfcM9fTe7ZOowV5JQCnpOr7VU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/821572-3445-4910-a15c-f4c166c83f88/1/SdAfcM9fTe7ZOowV5JQCnpOr7VU.mft
Manifest number: 032F
Signing time: Tue 04 Nov 2025 08:00:21 +0000
Manifest this update: Tue 04 Nov 2025 08:00:21 +0000
Manifest next update: Wed 05 Nov 2025 08:00:21 +0000
Files and hashes: 1: SdAfcM9fTe7ZOowV5JQCnpOr7VU.crl (hash: ssuQP/B/F9/KkqpM/RSZbdb18oppgpq/PQ4WAKn/jyE=)
2: WxZz3Xq4Dubhk-2v4KkyD3DjymY.roa (hash: TcPVaB9byF2mn4BjYUtIE/4fQoQybO53Dwd3vhK7Z5U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/821572-3445-4910-a15c-f4c166c83f88/1/SdAfcM9fTe7ZOowV5JQCnpOr7VU.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/821572-3445-4910-a15c-f4c166c83f88/1/SdAfcM9fTe7ZOowV5JQCnpOr7VU.mft
rsync://rpki.ripe.net/repository/DEFAULT/SdAfcM9fTe7ZOowV5JQCnpOr7VU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:99:fc:a6:6f:01:b6:93:bb:68:77:e0:06:b9:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49d01f70cf5f4deed93a8c15e494029e93abed55
Validity
Not Before: Nov 4 08:00:21 2025 GMT
Not After : Nov 5 08:00:21 2025 GMT
Subject: CN=af3074c4eb45ede81dc71aea08f43d59fba207ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:30:4e:7e:4f:85:7f:1f:33:c7:fb:6e:c7:ee:
1e:c1:5e:0d:1e:4a:0e:9b:13:db:fe:f4:b6:5e:31:
25:d9:dc:cc:23:62:3d:c0:ce:8e:a7:4f:64:74:e3:
8c:9f:e2:55:56:a8:38:28:65:48:75:d8:0a:7f:05:
52:f5:d7:c7:b5:6d:06:29:70:27:1f:e2:46:b0:85:
cf:9e:a4:6d:30:5d:69:93:be:b2:89:15:16:f4:13:
80:58:3c:56:34:99:1d:d5:90:e2:ad:ed:0a:ac:27:
3d:a3:8d:57:47:b9:e7:b0:ca:f8:13:0f:f4:6d:c0:
d7:00:50:6d:51:40:dd:9f:f0:e0:ed:b1:d5:ab:07:
58:ab:ac:09:df:22:38:e5:78:e5:a0:25:90:ed:52:
35:67:9f:3a:60:ec:c3:5b:e1:53:1e:17:09:a1:03:
fa:fc:4c:a5:26:78:34:cf:02:c3:76:a8:6c:b7:0e:
1a:ea:ca:65:67:f6:d8:14:f2:94:da:6e:59:b1:27:
fa:6d:b7:86:de:71:56:cb:0e:13:e8:df:e8:41:f8:
40:64:df:dc:dc:23:1f:a3:e2:bf:4c:8b:1f:e8:6f:
06:3a:73:c7:95:31:8b:a1:0b:7a:3a:a8:1a:2a:57:
2f:17:72:44:7f:b2:30:54:02:65:03:ca:1a:a5:47:
f6:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:30:74:C4:EB:45:ED:E8:1D:C7:1A:EA:08:F4:3D:59:FB:A2:07:AE
X509v3 Authority Key Identifier:
keyid:49:D0:1F:70:CF:5F:4D:EE:D9:3A:8C:15:E4:94:02:9E:93:AB:ED:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SdAfcM9fTe7ZOowV5JQCnpOr7VU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/821572-3445-4910-a15c-f4c166c83f88/1/SdAfcM9fTe7ZOowV5JQCnpOr7VU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/821572-3445-4910-a15c-f4c166c83f88/1/SdAfcM9fTe7ZOowV5JQCnpOr7VU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:de:06:57:bc:03:af:37:42:56:a3:69:9d:56:65:ab:98:f7:
ee:80:f5:bf:c3:87:05:84:7f:0c:c5:fc:c8:f3:0e:3b:dc:8b:
7c:d9:3c:b1:00:05:c6:2b:24:c8:3f:71:c2:4c:9b:2a:7e:fc:
e1:31:91:03:d3:4b:d4:4b:8d:f2:11:fa:22:8c:26:c4:26:62:
48:65:89:0a:71:8d:e6:be:fb:e5:ae:79:22:36:d5:a0:33:98:
eb:e7:0e:f1:5b:95:79:fe:66:74:23:dc:73:24:f8:db:55:c4:
36:c9:c8:27:87:74:05:45:16:90:17:8b:5c:c4:27:1f:43:3c:
79:52:c0:05:ee:f5:16:79:a3:51:4b:99:f5:e9:a6:87:f7:ee:
a4:f9:22:cd:eb:a9:85:69:a7:d5:90:e1:09:0e:5f:50:56:28:
72:06:97:ef:03:77:c3:dd:c5:ea:61:d7:ac:30:00:47:f0:7e:
23:aa:0d:38:0c:c7:78:3c:59:90:e7:68:1c:93:34:c7:3a:8a:
49:e2:01:37:3e:3c:03:ba:cc:91:f6:3c:4f:19:df:b1:3a:51:
a6:e9:da:9b:e9:fe:8e:ec:7b:76:0d:6e:ce:65:80:0a:db:1b:
17:61:9e:e7:62:55:be:0d:17:d0:7d:ea:f9:14:00:c7:03:d2:
2d:0a:0b:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:50:58 2025 by rpki-client