Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/118e24-742b-4392-8dfa-071518e0573e/1/afc1LQcTViPjP1p-YpJdS6tyL8Y.mft
File: afc1LQcTViPjP1p-YpJdS6tyL8Y.mft (raw, json)
Hash identifier: u1yDb2xymbBG1gNMsM0bNIC/9/01dQgBFl3z3/Hpns4=
Subject key identifier: EB:CB:54:AA:14:E2:A4:F4:03:64:F7:EB:EB:E0:37:BB:74:05:E2:0A
Authority key identifier: 69:F7:35:2D:07:13:56:23:E3:3F:5A:7E:62:92:5D:4B:AB:72:2F:C6
Certificate issuer: /CN=69f7352d07135623e33f5a7e62925d4bab722fc6
Certificate serial: 019A4F2B5D2D70159F0D184E2B0F2D9EFF8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/afc1LQcTViPjP1p-YpJdS6tyL8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/118e24-742b-4392-8dfa-071518e0573e/1/afc1LQcTViPjP1p-YpJdS6tyL8Y.mft
Manifest number: 108E
Signing time: Tue 04 Nov 2025 14:00:33 +0000
Manifest this update: Tue 04 Nov 2025 14:00:33 +0000
Manifest next update: Wed 05 Nov 2025 14:00:33 +0000
Files and hashes: 1: 4_oN5t2VSIOq_-X5g3Ce-QiBlKY.roa (hash: xjVxZUWWNj0H8HPJGRtdhqp5nG1AYywGPAoN+0SYdO8=)
2: afc1LQcTViPjP1p-YpJdS6tyL8Y.crl (hash: 7LNf3SWY7qgmKb2bGwQwMumzDJTPDOyE9J6XLoLFeLQ=)
3: v3SUAtR9QWFlr-gp81uV9PqvwlY.roa (hash: mn3Ww15BCRBB13Jmxz3hObcdL3yCXwDoxW+3UuBjkwM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/118e24-742b-4392-8dfa-071518e0573e/1/afc1LQcTViPjP1p-YpJdS6tyL8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/118e24-742b-4392-8dfa-071518e0573e/1/afc1LQcTViPjP1p-YpJdS6tyL8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/afc1LQcTViPjP1p-YpJdS6tyL8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2b:5d:2d:70:15:9f:0d:18:4e:2b:0f:2d:9e:ff:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69f7352d07135623e33f5a7e62925d4bab722fc6
Validity
Not Before: Nov 4 14:00:33 2025 GMT
Not After : Nov 5 14:00:33 2025 GMT
Subject: CN=ebcb54aa14e2a4f40364f7ebebe037bb7405e20a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e0:51:63:a7:cb:b3:bf:2a:51:12:85:08:32:
63:b3:c1:4e:37:e8:60:a4:5e:19:f6:0f:0c:8c:54:
1e:ae:43:ad:50:0a:10:e0:0b:ce:e8:a5:e3:a7:11:
ad:2c:d9:7f:81:eb:56:7f:66:1e:05:57:1b:98:80:
ea:54:68:da:de:5f:d1:a6:f1:ad:6a:b3:d5:a1:85:
1b:a8:eb:8c:7f:fc:54:00:b0:ea:75:4a:76:fd:be:
a8:4b:58:14:11:ab:bb:f2:c9:d2:4b:19:64:93:6f:
e7:56:ca:17:36:19:e2:4b:f6:fd:82:fa:8c:42:bb:
ab:4f:09:be:a4:dd:b0:01:8b:77:9b:0b:e6:68:70:
ae:74:85:64:d9:f0:6f:cb:5c:81:bd:60:19:5e:c4:
64:40:41:b8:ac:d1:ec:93:db:c7:d9:ec:7b:a3:bd:
da:64:18:ec:04:a5:20:b8:80:56:35:16:6d:3e:a8:
cc:83:4d:b5:dc:df:03:d7:73:9c:5d:87:9f:72:f2:
58:1c:93:b0:2e:0d:21:84:2c:d3:03:c8:a4:a0:06:
68:8c:1f:b5:f5:4d:15:d5:79:47:02:62:6f:8c:72:
f7:fc:7c:4c:2a:25:20:10:f7:bd:d9:61:ab:05:22:
a5:e0:26:67:0b:e1:8c:ee:a7:21:43:bc:b8:b2:46:
37:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:CB:54:AA:14:E2:A4:F4:03:64:F7:EB:EB:E0:37:BB:74:05:E2:0A
X509v3 Authority Key Identifier:
keyid:69:F7:35:2D:07:13:56:23:E3:3F:5A:7E:62:92:5D:4B:AB:72:2F:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/afc1LQcTViPjP1p-YpJdS6tyL8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/118e24-742b-4392-8dfa-071518e0573e/1/afc1LQcTViPjP1p-YpJdS6tyL8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/118e24-742b-4392-8dfa-071518e0573e/1/afc1LQcTViPjP1p-YpJdS6tyL8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:5c:1f:80:ee:4f:87:b0:40:d6:e6:ec:a9:36:a1:b0:cf:ff:
68:0c:a7:ec:d0:75:30:7b:d6:16:62:9e:11:a4:f4:d8:1e:1d:
5a:12:e8:11:c9:47:13:fe:72:e3:54:fb:c4:fa:fc:38:9e:2b:
d7:30:db:66:87:ee:b6:1f:b0:c2:6e:59:cc:9d:8e:ef:e6:93:
93:9a:94:d9:e9:3b:b3:5c:e9:7d:8b:a2:41:55:da:cb:c6:41:
5b:1f:56:fd:b6:31:7f:8b:21:d7:37:ac:d2:87:b1:92:25:29:
53:20:2c:6d:5c:44:6f:92:8f:96:f1:91:4d:4b:b3:fa:f0:bc:
58:d3:e7:12:55:5a:8e:52:23:8e:7b:2e:0b:c3:80:b7:98:4d:
22:43:fe:fa:c2:31:49:73:c3:75:28:28:95:18:88:b4:ae:20:
dc:5a:c5:f2:f6:e8:e2:a1:2e:b2:9a:e0:bb:69:53:af:2f:17:
63:5f:22:13:39:6c:1c:60:6c:ef:a0:5d:a9:eb:86:21:05:1f:
1d:c0:d8:d0:01:61:7d:a2:90:de:4f:8a:ae:d8:39:42:67:b2:
2e:f4:ed:41:98:be:fa:da:59:aa:98:ab:be:6b:d2:b3:0d:25:
6f:ae:b9:1e:ed:ed:a1:6d:23:ae:e7:67:fe:3a:bc:2f:d2:1c:
4c:42:2a:d5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPK10tcBWfDRhOKw8tnv+OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5ZjczNTJkMDcxMzU2MjNlMzNmNWE3ZTYyOTI1ZDRiYWI3
MjJmYzYwHhcNMjUxMTA0MTQwMDMzWhcNMjUxMTA1MTQwMDMzWjAzMTEwLwYDVQQD
EyhlYmNiNTRhYTE0ZTJhNGY0MDM2NGY3ZWJlYmUwMzdiYjc0MDVlMjBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtOBRY6fLs78qURKFCDJjs8FON+hg
pF4Z9g8MjFQerkOtUAoQ4AvO6KXjpxGtLNl/getWf2YeBVcbmIDqVGja3l/RpvGt
arPVoYUbqOuMf/xUALDqdUp2/b6oS1gUEau78snSSxlkk2/nVsoXNhniS/b9gvqM
QrurTwm+pN2wAYt3mwvmaHCudIVk2fBvy1yBvWAZXsRkQEG4rNHsk9vH2ex7o73a
ZBjsBKUguIBWNRZtPqjMg0213N8D13OcXYefcvJYHJOwLg0hhCzTA8ikoAZojB+1
9U0V1XlHAmJvjHL3/HxMKiUgEPe92WGrBSKl4CZnC+GM7qchQ7y4skY3LwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOvLVKoU4qT0A2T36+vgN7t0BeIKMB8GA1UdIwQY
MBaAFGn3NS0HE1Yj4z9afmKSXUurci/GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWZjMUxRY1RWaVBqUDFwLVlwSmRTNnR5TDhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8xMThlMjQtNzQyYi00MzkyLThkZmEt
MDcxNTE4ZTA1NzNlLzEvYWZjMUxRY1RWaVBqUDFwLVlwSmRTNnR5TDhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC8xMThlMjQtNzQyYi00MzkyLThkZmEtMDcxNTE4ZTA1NzNl
LzEvYWZjMUxRY1RWaVBqUDFwLVlwSmRTNnR5TDhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArFwfgO5P
h7BA1ubsqTahsM//aAyn7NB1MHvWFmKeEaT02B4dWhLoEclHE/5y41T7xPr8OJ4r
1zDbZofuth+wwm5ZzJ2O7+aTk5qU2ek7s1zpfYuiQVXay8ZBWx9W/bYxf4sh1zes
0oexkiUpUyAsbVxEb5KPlvGRTUuz+vC8WNPnElVajlIjjnsuC8OAt5hNIkP++sIx
SXPDdSgolRiItK4g3FrF8vbo4qEusprgu2lTry8XY18iEzlsHGBs76BdqeuGIQUf
HcDY0AFhfaKQ3k+Krtg5QmeyLvTtQZi++tpZqpirvmvSsw0lb665Hu3toW0jrudn
/jq8L9IcTEIq1Q==
-----END CERTIFICATE-----
Generated at Tue Nov 4 18:35:35 2025 by rpki-client