Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/c68ae4-9724-4975-8bd4-c8700a14761b/1/_AfGtW7x8jmwKO9CN1oqF2W8CLg.mft
File: _AfGtW7x8jmwKO9CN1oqF2W8CLg.mft (raw, json)
Hash identifier: Sg+dVzH57ulCu66pWMJFss8z4JLycS8010tXU4GWRr8=
Subject key identifier: D8:1A:05:64:B5:2B:B2:6A:EC:C5:F5:AE:B3:FE:60:12:F7:68:F1:76
Authority key identifier: FC:07:C6:B5:6E:F1:F2:39:B0:28:EF:42:37:5A:2A:17:65:BC:08:B8
Certificate issuer: /CN=fc07c6b56ef1f239b028ef42375a2a1765bc08b8
Certificate serial: 01987D89EEE14B5B4471A67E46AA5DBF6341
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_AfGtW7x8jmwKO9CN1oqF2W8CLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/c68ae4-9724-4975-8bd4-c8700a14761b/1/_AfGtW7x8jmwKO9CN1oqF2W8CLg.mft
Manifest number: 0FD6
Signing time: Wed 06 Aug 2025 04:00:48 +0000
Manifest this update: Wed 06 Aug 2025 04:00:48 +0000
Manifest next update: Thu 07 Aug 2025 04:00:48 +0000
Files and hashes: 1: TvMim_aEtrCLLOp0ZZIFYAVC2o4.roa (hash: /xE4OxOvjCCoCUdeNOdzw/FvM+bpWmIZ3XvVFCX7TVc=)
2: _AfGtW7x8jmwKO9CN1oqF2W8CLg.crl (hash: 4XJxISDPychPoMAgFzEfY/M15TaACnn6g4XvQVznoWk=)
3: qi04sQ8qQVwMXdQXve2GNvg8f-0.roa (hash: fLJ+x7i0b6ZT7hHF332I64JRm3fDb0LUQmOcJ/RhLx4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/c68ae4-9724-4975-8bd4-c8700a14761b/1/_AfGtW7x8jmwKO9CN1oqF2W8CLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/c68ae4-9724-4975-8bd4-c8700a14761b/1/_AfGtW7x8jmwKO9CN1oqF2W8CLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/_AfGtW7x8jmwKO9CN1oqF2W8CLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:89:ee:e1:4b:5b:44:71:a6:7e:46:aa:5d:bf:63:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc07c6b56ef1f239b028ef42375a2a1765bc08b8
Validity
Not Before: Aug 6 04:00:48 2025 GMT
Not After : Aug 7 04:00:48 2025 GMT
Subject: CN=d81a0564b52bb26aecc5f5aeb3fe6012f768f176
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ad:88:e5:b5:9f:19:4f:0f:c7:75:1b:1a:7f:
92:39:46:ba:58:ca:de:5f:10:96:22:73:f0:cb:d4:
33:5e:34:0c:4a:c8:6c:04:f3:e0:04:33:2e:60:bf:
f8:0e:8a:ed:14:cc:f1:ab:88:64:11:08:f7:df:ec:
ee:7b:70:83:7f:42:87:7e:9e:c6:9b:5b:c9:95:a6:
6f:a1:2a:12:82:39:14:21:3a:2f:fc:48:55:da:b6:
1c:a2:14:d2:86:66:71:64:1f:22:bd:53:a7:d9:b1:
87:ed:1d:08:0a:cb:0d:2a:09:61:53:b7:a4:e4:57:
ed:4e:43:60:57:30:1e:44:ec:ca:f0:ff:cb:5d:52:
42:15:0f:51:d7:37:00:43:08:49:78:a1:99:b3:37:
02:76:43:4b:93:c9:07:d1:cd:b8:5e:fe:10:40:30:
b6:00:8c:b0:5b:7b:fe:bb:d7:1e:16:56:52:bc:fc:
9a:bd:3b:7b:f7:08:ad:e4:38:57:e9:72:26:3c:fe:
8e:e3:fc:96:79:7a:7a:be:7d:2d:56:f9:4f:34:93:
1f:55:2c:a5:5d:49:e7:09:25:3c:13:3d:8b:e3:73:
b6:c5:0f:e4:4b:79:d5:51:2d:82:4e:b9:6f:26:53:
08:56:02:e1:7e:bc:d3:cc:79:01:f6:0b:ea:d4:ef:
8b:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:1A:05:64:B5:2B:B2:6A:EC:C5:F5:AE:B3:FE:60:12:F7:68:F1:76
X509v3 Authority Key Identifier:
keyid:FC:07:C6:B5:6E:F1:F2:39:B0:28:EF:42:37:5A:2A:17:65:BC:08:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_AfGtW7x8jmwKO9CN1oqF2W8CLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/c68ae4-9724-4975-8bd4-c8700a14761b/1/_AfGtW7x8jmwKO9CN1oqF2W8CLg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/c68ae4-9724-4975-8bd4-c8700a14761b/1/_AfGtW7x8jmwKO9CN1oqF2W8CLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:58:35:98:c2:76:8f:5e:d9:91:ef:55:c7:7a:d7:93:3b:0f:
b9:b0:91:ab:44:69:da:28:ce:f2:01:95:69:24:e7:da:32:33:
bc:b5:f3:25:86:d2:02:3d:8a:f6:01:e0:01:2e:af:e3:b5:34:
92:25:63:78:71:49:c4:ea:90:1c:8b:23:30:a0:e7:fb:34:25:
18:5e:c3:d0:61:1d:3d:25:75:36:71:c2:9b:af:ff:c8:b7:75:
7d:de:f9:00:30:7d:72:b8:1d:7c:bf:14:25:49:37:66:73:91:
c7:b9:52:43:70:3f:a5:44:bf:0b:59:29:db:1f:0a:bb:19:a4:
fa:56:20:06:b5:f7:e8:65:4e:77:14:14:29:a5:38:62:c1:a1:
64:67:5d:0f:44:f8:0a:0d:56:f7:55:5f:bb:d8:60:10:5c:72:
2b:68:7a:95:8a:39:ca:c8:2c:1f:67:3a:d9:76:da:c6:6c:b4:
63:ae:f5:31:8c:3e:b3:f8:91:74:57:d5:4f:c2:0a:af:fe:a0:
59:00:81:fd:fd:ce:08:86:84:57:cd:65:cc:8e:43:04:d9:f5:
cf:89:c2:a1:af:8d:3c:28:b0:ce:6f:c7:da:92:62:80:ce:ce:
97:81:85:eb:9b:c6:6a:62:7e:1a:b4:58:27:03:10:9b:85:d8:
45:2b:b7:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 09:43:19 2025 by rpki-client