
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/0ee558-f08c-42ca-a953-53828f43fea0/1/Af6IJc4pEV7HHNzPw1XYGjX9fow.mft
File: Af6IJc4pEV7HHNzPw1XYGjX9fow.mft (raw, json)
Hash identifier: dHEYU6Ul14XHYLTXZbuGtwdK2O7mFFjDxALbP7p7xVQ=
Subject key identifier: 2A:52:11:C1:BF:43:AC:6E:AD:F1:81:4F:C1:3A:44:FD:53:96:FD:7B
Authority key identifier: 01:FE:88:25:CE:29:11:5E:C7:1C:DC:CF:C3:55:D8:1A:35:FD:7E:8C
Certificate issuer: /CN=01fe8825ce29115ec71cdccfc355d81a35fd7e8c
Certificate serial: 0198903583C9F089534EE20DE81ABE7F922D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Af6IJc4pEV7HHNzPw1XYGjX9fow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/0ee558-f08c-42ca-a953-53828f43fea0/1/Af6IJc4pEV7HHNzPw1XYGjX9fow.mft
Manifest number: 039E
Signing time: Sat 09 Aug 2025 19:01:22 +0000
Manifest this update: Sat 09 Aug 2025 19:01:22 +0000
Manifest next update: Sun 10 Aug 2025 19:01:22 +0000
Files and hashes: 1: Af6IJc4pEV7HHNzPw1XYGjX9fow.crl (hash: 8otuBcfTXKBhfSo+jpD8g61sKd+JN0XO6NsNn95fSx4=)
2: Ju6K_k5aEz6SqSZhNuewgFZ6Tpc.roa (hash: eSc+nFa0PsPsCuhZ0NSVf3t+L8KNOuXb5VC0gk1mWnU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/0ee558-f08c-42ca-a953-53828f43fea0/1/Af6IJc4pEV7HHNzPw1XYGjX9fow.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/0ee558-f08c-42ca-a953-53828f43fea0/1/Af6IJc4pEV7HHNzPw1XYGjX9fow.mft
rsync://rpki.ripe.net/repository/DEFAULT/Af6IJc4pEV7HHNzPw1XYGjX9fow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:90:35:83:c9:f0:89:53:4e:e2:0d:e8:1a:be:7f:92:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01fe8825ce29115ec71cdccfc355d81a35fd7e8c
Validity
Not Before: Aug 9 19:01:22 2025 GMT
Not After : Aug 10 19:01:22 2025 GMT
Subject: CN=2a5211c1bf43ac6eadf1814fc13a44fd5396fd7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:cc:63:b3:5d:7e:76:9f:8c:1e:b7:aa:4d:6d:
d1:da:a5:c9:8a:b3:67:d5:00:ac:8f:14:b9:ad:96:
9d:97:c5:05:cb:22:dc:ac:c3:16:d3:50:ff:bb:3b:
f7:17:48:9b:f1:b4:ca:0d:f3:29:2b:ac:98:4c:49:
bc:db:72:f9:8a:a7:85:9e:59:8c:93:ac:f8:24:5f:
69:1d:42:ac:51:69:e9:a1:6b:c9:09:f1:ff:ce:24:
c1:5b:d6:0c:e1:11:3f:0b:7c:3f:76:0e:d1:bd:c3:
e3:59:a7:8d:5d:2f:95:9c:33:05:1d:44:e0:ab:43:
98:6f:0e:53:20:3b:04:e2:45:b3:bc:99:ec:bf:1c:
2a:a9:63:f5:ac:86:6e:fe:9f:a6:9a:01:cc:57:85:
fd:cc:58:d6:c5:ab:11:32:ab:75:1f:1f:da:9f:36:
fd:72:4c:95:da:12:33:dd:46:fd:74:d9:3d:e4:e3:
26:51:dc:ff:07:b3:c8:7a:4c:f8:b1:f2:f3:7b:86:
cf:c9:ff:dd:08:2d:fb:05:ae:56:ee:f9:ca:13:57:
b5:08:d5:b6:be:46:ae:e4:b8:95:c5:26:2c:46:55:
89:9d:33:8f:5d:ed:0b:97:f8:61:09:68:b8:5e:0b:
53:f8:89:39:11:c1:f7:69:08:bb:8d:53:91:84:16:
4d:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:52:11:C1:BF:43:AC:6E:AD:F1:81:4F:C1:3A:44:FD:53:96:FD:7B
X509v3 Authority Key Identifier:
keyid:01:FE:88:25:CE:29:11:5E:C7:1C:DC:CF:C3:55:D8:1A:35:FD:7E:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Af6IJc4pEV7HHNzPw1XYGjX9fow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/0ee558-f08c-42ca-a953-53828f43fea0/1/Af6IJc4pEV7HHNzPw1XYGjX9fow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/0ee558-f08c-42ca-a953-53828f43fea0/1/Af6IJc4pEV7HHNzPw1XYGjX9fow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:66:30:e0:d2:52:af:b8:df:7c:97:02:b8:6f:da:ad:7f:4e:
b0:b8:31:23:fc:20:36:e8:aa:bb:6d:22:c0:77:33:fc:5e:f7:
87:fc:e7:ea:29:5a:11:82:9e:6f:69:ff:18:61:6e:e3:75:72:
2f:ce:2f:8f:86:7f:f9:f3:95:b8:79:9b:d4:ae:e2:42:bb:16:
64:fc:69:d2:e3:3b:1e:f2:3e:c7:c9:5d:df:24:be:e9:4c:4c:
c4:15:ff:db:ef:85:e0:15:ba:a7:42:86:ca:31:06:4c:ca:21:
52:01:b7:14:76:f3:19:c1:f9:81:30:36:e6:3e:9e:a2:30:27:
28:f9:f0:d9:cb:ab:50:08:96:f1:9c:dc:1d:c2:d5:c3:f5:62:
52:0a:78:49:84:57:d8:b7:cb:a4:5f:55:f5:55:d4:ec:9e:1b:
10:c6:ad:2b:ec:eb:a8:71:32:27:f1:07:cc:e1:a6:b2:36:8b:
1b:25:16:d6:cc:c3:46:ef:b2:bd:bf:a0:fa:2f:af:c2:21:f3:
99:84:5f:04:8f:ce:e8:8a:32:eb:69:2b:19:a5:82:35:5b:dc:
7e:26:37:c3:02:18:e3:88:65:51:f0:be:39:9b:d0:aa:a7:50:
ee:f0:1e:15:52:f5:7e:0e:cc:9a:0c:bc:5a:10:fd:2a:b1:ae:
4c:63:4d:8a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiQNYPJ8IlTTuIN6Bq+f5ItMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxZmU4ODI1Y2UyOTExNWVjNzFjZGNjZmMzNTVkODFhMzVm
ZDdlOGMwHhcNMjUwODA5MTkwMTIyWhcNMjUwODEwMTkwMTIyWjAzMTEwLwYDVQQD
EygyYTUyMTFjMWJmNDNhYzZlYWRmMTgxNGZjMTNhNDRmZDUzOTZmZDdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv8xjs11+dp+MHreqTW3R2qXJirNn
1QCsjxS5rZadl8UFyyLcrMMW01D/uzv3F0ib8bTKDfMpK6yYTEm823L5iqeFnlmM
k6z4JF9pHUKsUWnpoWvJCfH/ziTBW9YM4RE/C3w/dg7RvcPjWaeNXS+VnDMFHUTg
q0OYbw5TIDsE4kWzvJnsvxwqqWP1rIZu/p+mmgHMV4X9zFjWxasRMqt1Hx/anzb9
ckyV2hIz3Ub9dNk95OMmUdz/B7PIekz4sfLze4bPyf/dCC37Ba5W7vnKE1e1CNW2
vkau5LiVxSYsRlWJnTOPXe0Ll/hhCWi4XgtT+Ik5EcH3aQi7jVORhBZNEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCpSEcG/Q6xurfGBT8E6RP1Tlv17MB8GA1UdIwQY
MBaAFAH+iCXOKRFexxzcz8NV2Bo1/X6MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQWY2SUpjNHBFVjdISE56UHcxWFlHalg5Zm93LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC8wZWU1NTgtZjA4Yy00MmNhLWE5NTMt
NTM4MjhmNDNmZWEwLzEvQWY2SUpjNHBFVjdISE56UHcxWFlHalg5Zm93Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC8wZWU1NTgtZjA4Yy00MmNhLWE5NTMtNTM4MjhmNDNmZWEw
LzEvQWY2SUpjNHBFVjdISE56UHcxWFlHalg5Zm93LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJWYw4NJS
r7jffJcCuG/arX9OsLgxI/wgNuiqu20iwHcz/F73h/zn6ilaEYKeb2n/GGFu43Vy
L84vj4Z/+fOVuHmb1K7iQrsWZPxp0uM7HvI+x8ld3yS+6UxMxBX/2++F4BW6p0KG
yjEGTMohUgG3FHbzGcH5gTA25j6eojAnKPnw2curUAiW8ZzcHcLVw/ViUgp4SYRX
2LfLpF9V9VXU7J4bEMatK+zrqHEyJ/EHzOGmsjaLGyUW1szDRu+yvb+g+i+vwiHz
mYRfBI/O6Ioy62krGaWCNVvcfiY3wwIY44hlUfC+OZvQqqdQ7vAeFVL1fg7Mmgy8
WhD9KrGuTGNNig==
-----END CERTIFICATE-----
Generated at Sat Aug 9 22:38:37 2025 by rpki-client