Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/97f917-93f8-405c-9d55-a3c061d8be91/1/Afq489H7PSo1xPZ6SPb2CD6rpXU.mft
File: Afq489H7PSo1xPZ6SPb2CD6rpXU.mft (raw, json)
Hash identifier: iOBrUpXvBXs4t4jNwaGEWe6Jo6oD6sdznQSGyccr+kc=
Subject key identifier: 98:09:53:35:0C:43:38:03:0D:1A:1B:0E:D8:3C:CF:0E:A7:1C:11:10
Authority key identifier: 01:FA:B8:F3:D1:FB:3D:2A:35:C4:F6:7A:48:F6:F6:08:3E:AB:A5:75
Certificate issuer: /CN=01fab8f3d1fb3d2a35c4f67a48f6f6083eaba575
Certificate serial: 019A4F6296F2791A1D9950A0549FA3FFA7CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Afq489H7PSo1xPZ6SPb2CD6rpXU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/97f917-93f8-405c-9d55-a3c061d8be91/1/Afq489H7PSo1xPZ6SPb2CD6rpXU.mft
Manifest number: 06EE
Signing time: Tue 04 Nov 2025 15:00:52 +0000
Manifest this update: Tue 04 Nov 2025 15:00:52 +0000
Manifest next update: Wed 05 Nov 2025 15:00:52 +0000
Files and hashes: 1: Afq489H7PSo1xPZ6SPb2CD6rpXU.crl (hash: PqW3jfZZfAJjQfVkuvPE7Zkvdqml8EYq4D3FVLR4Dlk=)
2: RCG29GRzXNkfnM3mAc2fQgzDKKo.roa (hash: VMJ45tdoRBW32E+FWz6jKq995VHfDQKLmdI/8SmUIrw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/97f917-93f8-405c-9d55-a3c061d8be91/1/Afq489H7PSo1xPZ6SPb2CD6rpXU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/97f917-93f8-405c-9d55-a3c061d8be91/1/Afq489H7PSo1xPZ6SPb2CD6rpXU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Afq489H7PSo1xPZ6SPb2CD6rpXU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:96:f2:79:1a:1d:99:50:a0:54:9f:a3:ff:a7:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01fab8f3d1fb3d2a35c4f67a48f6f6083eaba575
Validity
Not Before: Nov 4 15:00:52 2025 GMT
Not After : Nov 5 15:00:52 2025 GMT
Subject: CN=980953350c4338030d1a1b0ed83ccf0ea71c1110
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:3f:89:69:34:3f:0f:59:ab:1d:4e:be:d1:e6:
a9:5b:a7:48:ca:45:22:a5:92:67:2c:b2:35:47:90:
06:32:96:ce:ea:61:17:78:98:c4:28:a6:ea:6e:e1:
45:a8:ad:49:18:a8:a7:a8:da:20:97:23:44:6e:25:
11:69:9e:42:d5:ce:45:52:ea:ad:a4:0e:d0:8b:3c:
4c:40:7f:45:9b:32:60:52:30:1e:bb:7a:9c:69:fb:
59:6d:1f:f1:88:e0:ea:69:30:1b:ff:a7:1c:2e:24:
fe:1d:e5:34:df:ec:a3:8c:6b:dd:1e:07:3f:fe:54:
13:89:f7:17:21:25:32:c3:ec:e2:48:94:74:38:91:
7d:27:07:17:ea:f8:4c:9b:54:c5:c3:d5:f0:e1:8e:
cf:e3:76:b5:b7:41:05:02:f5:19:a5:34:dd:7e:ca:
54:8f:53:13:cc:0d:a7:44:dd:7e:10:73:1a:d2:48:
9c:1a:b6:0b:34:c6:12:b4:a5:66:97:3b:41:03:c2:
72:d5:c9:a8:a2:11:ea:b6:ee:75:de:02:69:fd:32:
92:66:79:cc:9f:8c:2c:e6:f6:5f:af:ce:1e:73:8a:
79:a7:e2:8e:63:1c:05:1d:0b:82:34:54:e4:21:6b:
66:f2:1a:53:50:02:ab:f9:37:8c:f5:1e:22:d8:55:
4e:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:09:53:35:0C:43:38:03:0D:1A:1B:0E:D8:3C:CF:0E:A7:1C:11:10
X509v3 Authority Key Identifier:
keyid:01:FA:B8:F3:D1:FB:3D:2A:35:C4:F6:7A:48:F6:F6:08:3E:AB:A5:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Afq489H7PSo1xPZ6SPb2CD6rpXU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/97f917-93f8-405c-9d55-a3c061d8be91/1/Afq489H7PSo1xPZ6SPb2CD6rpXU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/97f917-93f8-405c-9d55-a3c061d8be91/1/Afq489H7PSo1xPZ6SPb2CD6rpXU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:46:43:1c:d7:83:26:cd:ed:91:3c:a6:5e:8d:c3:f7:81:a5:
82:fa:6f:43:35:06:5b:fd:b1:c8:3f:7b:cf:bb:61:44:a4:a0:
ba:20:37:cb:a8:7a:78:48:dd:fd:df:7f:89:f5:b3:78:bf:02:
d0:e8:55:17:a4:13:da:dd:26:35:30:34:3a:a1:9b:1c:14:0b:
61:62:ad:3e:26:51:11:15:4c:9a:42:dc:ff:42:08:4b:07:df:
ed:cb:c2:2b:2a:e2:60:a2:30:13:4b:e0:55:0e:11:47:f2:5c:
06:9d:73:34:79:fd:a1:71:a3:57:7d:12:24:83:72:d1:35:f0:
4d:87:9d:9e:f6:e8:fd:78:46:50:9c:2f:5a:90:27:ff:59:a1:
c7:87:9c:03:35:84:32:0e:09:95:41:72:c7:c0:28:89:b3:a3:
8b:d1:68:1f:9c:e2:a3:53:60:ee:18:8d:9a:b7:4c:15:12:5b:
0b:0f:39:74:33:41:d2:5b:f9:ef:81:4f:71:b8:7f:94:40:21:
99:16:04:81:d2:4c:f4:c1:87:dc:62:22:e4:c7:2c:66:75:71:
d7:e0:94:c1:6d:fd:65:34:c0:23:a5:20:53:9e:69:7c:64:db:
08:8a:4c:41:7c:ea:c0:6b:71:94:d0:07:ee:cf:06:69:a1:ff:
1d:3b:2c:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:38:52 2025 by rpki-client