
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/a1923f-26d7-44be-a2be-03cbdb8ff960/1/AfZJudBUYiex1GJsIIHk09qFDv4.mft
File: AfZJudBUYiex1GJsIIHk09qFDv4.mft (raw, json)
Hash identifier: VjxslEaTHaNlA08ahZ1SGpeZWWAEekZ0/iISC/PcG0Y=
Subject key identifier: 6C:ED:61:97:DC:C7:D8:58:0B:8E:35:6C:E9:4D:83:10:C3:BD:04:20
Authority key identifier: 01:F6:49:B9:D0:54:62:27:B1:D4:62:6C:20:81:E4:D3:DA:85:0E:FE
Certificate issuer: /CN=01f649b9d0546227b1d4626c2081e4d3da850efe
Certificate serial: 019879E47E7465D952868323CFFAC1869512
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AfZJudBUYiex1GJsIIHk09qFDv4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/a1923f-26d7-44be-a2be-03cbdb8ff960/1/AfZJudBUYiex1GJsIIHk09qFDv4.mft
Manifest number: 1303
Signing time: Tue 05 Aug 2025 11:01:14 +0000
Manifest this update: Tue 05 Aug 2025 11:01:14 +0000
Manifest next update: Wed 06 Aug 2025 11:01:14 +0000
Files and hashes: 1: AfZJudBUYiex1GJsIIHk09qFDv4.crl (hash: 9Et2Iroe0TOrgMoaFOSsQYCiZXdB6CkopAjN5ledUzo=)
2: bjnOU2JwIyBhG3a2k5FUAWGDatE.roa (hash: qBdlY6EWSQACgnafmgz/gnCk4zq1L3YPmsFgf+M1bHo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/a1923f-26d7-44be-a2be-03cbdb8ff960/1/AfZJudBUYiex1GJsIIHk09qFDv4.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/a1923f-26d7-44be-a2be-03cbdb8ff960/1/AfZJudBUYiex1GJsIIHk09qFDv4.mft
rsync://rpki.ripe.net/repository/DEFAULT/AfZJudBUYiex1GJsIIHk09qFDv4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 11:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:79:e4:7e:74:65:d9:52:86:83:23:cf:fa:c1:86:95:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01f649b9d0546227b1d4626c2081e4d3da850efe
Validity
Not Before: Aug 5 11:01:14 2025 GMT
Not After : Aug 6 11:01:14 2025 GMT
Subject: CN=6ced6197dcc7d8580b8e356ce94d8310c3bd0420
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:65:f2:a2:05:a0:76:96:64:56:e7:a8:f8:c4:
7f:b3:72:72:90:24:13:96:a8:ca:08:2f:97:18:38:
35:ee:4b:4d:67:79:75:97:9c:2c:90:0d:6d:5d:da:
dd:be:29:08:82:57:0b:98:49:06:68:71:35:11:2c:
49:35:3c:97:0e:50:b2:78:09:d4:68:13:9e:fb:e3:
8e:8d:7c:a9:e0:42:d3:b0:38:74:4e:12:7a:b6:9b:
bd:94:5f:4b:a7:c0:e6:50:67:1d:18:fe:02:02:b0:
6f:cb:a2:bd:15:05:b6:eb:40:54:94:8a:16:e2:a7:
9d:eb:4a:b7:44:74:ab:a4:5e:97:a8:39:ad:26:46:
37:59:44:26:3b:2a:26:50:a2:b7:9f:ff:c0:43:a2:
39:7c:9b:3e:50:2f:d5:20:1c:ad:d5:2b:ec:a4:f4:
e3:34:d4:81:c8:41:0c:f8:cf:cb:d1:75:0c:60:65:
31:a1:09:e9:c5:34:5b:cd:a1:63:00:77:c4:f9:f3:
2c:3a:d6:5b:96:99:8c:4b:84:7d:76:44:4f:39:c0:
b7:93:cd:a7:8d:3e:af:a3:46:ba:d2:d3:f0:5c:fe:
f7:12:1b:a7:ba:8e:4d:ac:9a:58:5e:e2:ab:4a:2a:
08:89:3c:e9:4c:90:45:d1:c1:c3:6a:43:1b:be:97:
45:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:ED:61:97:DC:C7:D8:58:0B:8E:35:6C:E9:4D:83:10:C3:BD:04:20
X509v3 Authority Key Identifier:
keyid:01:F6:49:B9:D0:54:62:27:B1:D4:62:6C:20:81:E4:D3:DA:85:0E:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AfZJudBUYiex1GJsIIHk09qFDv4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/a1923f-26d7-44be-a2be-03cbdb8ff960/1/AfZJudBUYiex1GJsIIHk09qFDv4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/a1923f-26d7-44be-a2be-03cbdb8ff960/1/AfZJudBUYiex1GJsIIHk09qFDv4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:f1:fa:07:39:52:23:0c:51:36:e5:f2:9b:99:38:ee:bf:e8:
52:07:e1:18:f1:b5:47:0b:0b:48:85:fa:a8:30:c1:3f:9e:6c:
b6:cc:d3:86:ce:ba:6e:f6:3f:89:a0:85:71:3c:59:4e:7d:53:
72:a3:1f:6c:07:53:7e:0e:82:66:91:44:52:76:a1:d1:4e:43:
9d:e4:7e:55:a1:9a:06:25:14:81:b4:a9:93:42:69:e6:cb:db:
7d:d5:be:e5:05:d0:19:d9:6a:25:6a:79:75:d3:7f:9b:8e:e4:
ac:b9:a7:42:8d:3c:5f:e4:8b:15:f2:9a:42:40:b1:b9:6b:a2:
ab:f1:71:c2:8c:e1:e9:75:44:74:cf:85:d1:12:54:4d:a4:4e:
18:86:c8:53:a5:a6:a4:73:a1:58:87:ec:7b:bb:3c:c6:d0:32:
09:8b:7c:f3:ab:d8:f2:e8:94:b0:f1:91:a9:e9:08:61:a1:84:
0e:58:ac:df:29:82:57:a4:6b:a9:2b:9d:d1:67:af:62:7b:ce:
8e:4a:a3:ee:37:d4:7a:db:a3:4f:1d:88:c6:bb:62:c9:0d:b0:
0d:f5:d3:9f:a7:17:4b:a9:46:b5:2a:92:9c:98:ae:f6:b9:a6:
e1:a7:bb:ad:bf:98:36:cf:b6:25:9d:11:b4:80:84:05:42:13:
e6:e6:d4:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 16:42:58 2025 by rpki-client