Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/afef12-1f08-4b46-947b-ca0c62621098/1/alf_6CKzunvBlNt6c0yF787y8oM.mft
File: alf_6CKzunvBlNt6c0yF787y8oM.mft (raw, json)
Hash identifier: pHTkqO3q0tgkl9OR1UQSMU75JgUCtY8u0ogdd0bWGfc=
Subject key identifier: F4:2D:69:C4:60:94:6B:7A:E4:D9:FF:F6:8F:39:23:69:99:95:16:D4
Authority key identifier: 6A:57:FF:E8:22:B3:BA:7B:C1:94:DB:7A:73:4C:85:EF:CE:F2:F2:83
Certificate issuer: /CN=6a57ffe822b3ba7bc194db7a734c85efcef2f283
Certificate serial: 019A4EF48DECF03A9710B50EB43418710F2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/alf_6CKzunvBlNt6c0yF787y8oM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/afef12-1f08-4b46-947b-ca0c62621098/1/alf_6CKzunvBlNt6c0yF787y8oM.mft
Manifest number: 1713
Signing time: Tue 04 Nov 2025 13:00:41 +0000
Manifest this update: Tue 04 Nov 2025 13:00:41 +0000
Manifest next update: Wed 05 Nov 2025 13:00:41 +0000
Files and hashes: 1: 4nbbIZPE7lMynVknJC-6stUmoYo.roa (hash: j8BrMo86KajZwqeXtKcHjPQkuBi3fCjbsGPaJU48EAA=)
2: KXS37zwUpIo1ryCxG4GcBojyrcE.roa (hash: jZ636Vtrfs1Ry9c+xpsKefK7jn+U3VnqrKq2F6BHDmE=)
3: ZQvLYup8OHe_oJI54VuyEp5WGRw.roa (hash: p+1Wk/c4dUehu4W1pVV/qIM6o7TtIGJD1wdgYmq/1aA=)
4: afa9sH973MF_a6T8rkTlgAGHY44.roa (hash: lhKLVMPsfwQTy1zJyXyEQaU5ystLh/ZAF7RCu/NRIio=)
5: alf_6CKzunvBlNt6c0yF787y8oM.crl (hash: 7YnZOYz6rFesglZVfdEKu7BZxmeW6omeLNtnrSuWg+I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/afef12-1f08-4b46-947b-ca0c62621098/1/alf_6CKzunvBlNt6c0yF787y8oM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/afef12-1f08-4b46-947b-ca0c62621098/1/alf_6CKzunvBlNt6c0yF787y8oM.mft
rsync://rpki.ripe.net/repository/DEFAULT/alf_6CKzunvBlNt6c0yF787y8oM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:8d:ec:f0:3a:97:10:b5:0e:b4:34:18:71:0f:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a57ffe822b3ba7bc194db7a734c85efcef2f283
Validity
Not Before: Nov 4 13:00:41 2025 GMT
Not After : Nov 5 13:00:41 2025 GMT
Subject: CN=f42d69c460946b7ae4d9fff68f392369999516d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:d3:9b:a2:03:6f:01:55:1d:7f:26:d2:65:36:
6e:a7:0d:99:24:ba:ae:54:75:5b:76:19:ff:6a:f5:
e2:4f:90:23:e3:b4:5c:86:93:7f:cb:28:13:64:fd:
4a:c4:d3:d3:6f:46:63:5f:f4:be:7b:9f:79:79:c6:
df:b7:db:8f:98:88:ba:7a:50:ca:b6:cf:d4:1b:16:
ad:eb:27:03:e4:2c:77:e4:43:46:53:95:b7:fb:68:
fd:61:a4:17:ee:0f:9d:ec:f6:6d:68:2b:fe:92:9c:
7a:cb:18:18:84:e8:20:48:4f:64:5e:a5:40:a8:6c:
11:31:7d:39:76:90:5b:11:6b:7b:d8:58:a1:4d:75:
7e:c5:8c:74:3b:58:37:bd:ea:87:c4:2f:c9:e9:88:
44:2a:5b:24:4c:4e:0f:18:63:61:4f:b1:9e:80:93:
d8:05:f3:d7:89:40:47:c0:2c:fe:cf:80:8c:cb:35:
4c:cc:4c:a5:9f:b0:b8:c6:59:04:fe:b3:56:d4:5f:
07:e8:01:65:19:44:b9:8b:e4:70:e0:98:d1:a5:68:
5c:85:57:28:04:5f:a5:2f:d0:3e:39:d5:d9:ed:3b:
e7:2f:ed:03:42:dc:b9:f5:8d:ea:c7:08:61:3f:7a:
92:52:0c:37:a5:49:52:3f:96:f0:28:97:8d:d6:5b:
e3:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:2D:69:C4:60:94:6B:7A:E4:D9:FF:F6:8F:39:23:69:99:95:16:D4
X509v3 Authority Key Identifier:
keyid:6A:57:FF:E8:22:B3:BA:7B:C1:94:DB:7A:73:4C:85:EF:CE:F2:F2:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/alf_6CKzunvBlNt6c0yF787y8oM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/afef12-1f08-4b46-947b-ca0c62621098/1/alf_6CKzunvBlNt6c0yF787y8oM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/afef12-1f08-4b46-947b-ca0c62621098/1/alf_6CKzunvBlNt6c0yF787y8oM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:b3:ef:7d:fb:99:d8:b9:1d:2a:f5:ac:78:77:08:4b:8f:ef:
8c:4f:76:0f:4b:8d:a7:5e:12:db:e7:5a:c9:ba:48:25:20:18:
80:78:df:b1:80:d9:71:ef:6b:ff:51:6d:84:97:be:fb:24:7a:
d0:93:9d:9a:77:f0:7e:6f:35:19:54:ee:39:a5:b2:4c:e4:89:
6c:5f:93:cc:2d:64:46:0b:d8:7a:44:9f:68:4e:89:74:9e:55:
97:c8:c6:2b:96:03:bc:8f:4a:00:25:b8:e2:0a:89:ec:16:8d:
f0:fc:0b:55:5b:b0:23:37:5c:0b:b7:2f:6e:87:82:f4:a6:fb:
3e:35:f6:f9:f1:ed:c6:78:4a:b6:5f:b4:ab:9e:14:fc:67:4e:
83:2b:f0:43:dd:58:19:2c:d1:cb:86:c9:f6:99:93:35:c2:65:
c3:97:ce:dc:2b:22:aa:19:6b:ca:51:05:e2:ae:22:6c:6d:82:
26:f9:7c:4f:75:00:e8:17:26:c5:c9:f8:05:8d:de:54:9e:f2:
77:24:30:cd:c3:48:5b:99:d9:13:bd:0e:00:f8:ad:07:27:72:
51:4f:cf:86:51:e3:e0:d1:66:fe:b4:97:3d:84:94:7c:7b:76:
f4:93:e7:55:e3:ef:a0:76:93:b7:02:d8:e2:c2:da:ed:f4:3a:
a5:d0:15:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:00:59 2025 by rpki-client