Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/0059b5-f637-4265-a3e4-a3b58628060d/1/aFGj_ud-kkFGF3Ej3WdTsG_eJFI.mft
File: aFGj_ud-kkFGF3Ej3WdTsG_eJFI.mft (raw, json)
Hash identifier: SLTiTclaB9DLV/lbMkd0d0rm7dLC3DovTFr4NL9BYg4=
Subject key identifier: 3F:1D:77:26:52:69:B0:16:C9:F3:79:8F:1E:E9:DC:D2:2D:B5:B1:75
Authority key identifier: 68:51:A3:FE:E7:7E:92:41:46:17:71:23:DD:67:53:B0:6F:DE:24:52
Certificate issuer: /CN=6851a3fee77e924146177123dd6753b06fde2452
Certificate serial: 019A530830D50F3691E5E5EEC478F56FE9DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aFGj_ud-kkFGF3Ej3WdTsG_eJFI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/0059b5-f637-4265-a3e4-a3b58628060d/1/aFGj_ud-kkFGF3Ej3WdTsG_eJFI.mft
Manifest number: 16A2
Signing time: Wed 05 Nov 2025 08:00:36 +0000
Manifest this update: Wed 05 Nov 2025 08:00:36 +0000
Manifest next update: Thu 06 Nov 2025 08:00:36 +0000
Files and hashes: 1: aFGj_ud-kkFGF3Ej3WdTsG_eJFI.crl (hash: 5QjXASkgVlt5ajhjDyTuMCsiZQvDDhZK/GPLI3c5lk8=)
2: rFvQ7kKYqXPkmLuwIzu6v_5kUm4.roa (hash: sOutQCKMagct2n7Im9fbDePApSglLVIsuSmVsFlE9uM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/0059b5-f637-4265-a3e4-a3b58628060d/1/aFGj_ud-kkFGF3Ej3WdTsG_eJFI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/0059b5-f637-4265-a3e4-a3b58628060d/1/aFGj_ud-kkFGF3Ej3WdTsG_eJFI.mft
rsync://rpki.ripe.net/repository/DEFAULT/aFGj_ud-kkFGF3Ej3WdTsG_eJFI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:08:30:d5:0f:36:91:e5:e5:ee:c4:78:f5:6f:e9:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6851a3fee77e924146177123dd6753b06fde2452
Validity
Not Before: Nov 5 08:00:36 2025 GMT
Not After : Nov 6 08:00:36 2025 GMT
Subject: CN=3f1d77265269b016c9f3798f1ee9dcd22db5b175
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:84:be:8c:79:63:75:2c:25:e9:3a:a3:31:f5:
33:57:0a:1f:81:c1:13:d8:00:41:15:0d:2a:e6:06:
21:b2:8e:f1:97:fd:71:f5:d2:81:be:f8:4f:26:1e:
d4:c6:b6:55:88:fb:dc:6e:72:e5:ee:3b:23:cc:09:
f0:cc:42:0d:f4:9f:54:97:6c:31:54:8a:35:0f:97:
b0:b9:12:cf:a7:87:1e:f5:d1:69:ec:e2:a2:b7:ee:
62:47:89:ac:a0:5c:9c:52:69:6e:80:2d:5e:5a:2c:
2d:b7:ce:1f:8c:b2:12:d2:39:cb:71:fb:d0:b6:d4:
31:83:6f:b8:78:91:8d:f7:16:dc:68:23:b0:68:2c:
95:fa:85:ec:6c:ed:d3:bc:31:c6:9e:79:99:29:9c:
fa:f5:3d:9f:b7:34:66:6f:9e:11:4b:48:90:de:d9:
0b:8a:45:a4:f7:c5:b6:17:1d:07:26:dd:76:01:4e:
94:fa:bf:71:0e:5c:9c:d9:8c:e3:27:31:33:81:50:
2c:42:07:11:4f:ed:fd:a1:8a:45:89:89:1d:68:75:
3a:46:6a:37:ee:00:32:36:77:9f:82:db:03:5a:95:
d3:b6:31:28:1a:e7:93:11:10:1c:09:e8:65:8c:f5:
48:6e:24:fc:46:03:1a:37:d9:27:04:c3:43:99:83:
f5:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:1D:77:26:52:69:B0:16:C9:F3:79:8F:1E:E9:DC:D2:2D:B5:B1:75
X509v3 Authority Key Identifier:
keyid:68:51:A3:FE:E7:7E:92:41:46:17:71:23:DD:67:53:B0:6F:DE:24:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aFGj_ud-kkFGF3Ej3WdTsG_eJFI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/0059b5-f637-4265-a3e4-a3b58628060d/1/aFGj_ud-kkFGF3Ej3WdTsG_eJFI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/0059b5-f637-4265-a3e4-a3b58628060d/1/aFGj_ud-kkFGF3Ej3WdTsG_eJFI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:b3:f1:c3:69:60:dd:dd:fb:33:b5:55:0f:ae:36:21:03:75:
4c:2a:18:71:4f:39:46:af:0c:0b:fe:49:59:0a:96:3b:dd:ef:
87:e3:6d:66:5a:79:16:1e:cd:f6:d3:ab:8d:ab:48:86:07:8d:
97:51:93:b8:e4:fb:e7:6e:10:d3:d9:26:f9:3e:60:cc:f7:e3:
80:fe:be:ab:87:ef:3c:6a:58:aa:05:53:27:6d:8e:cd:68:dc:
e1:28:cf:ea:c5:d0:2d:b1:0a:a5:c1:3d:68:b7:7b:56:be:7b:
a0:c9:38:67:04:5f:e0:23:84:e1:10:16:a4:20:0e:9c:47:62:
9a:f1:32:cd:91:4b:da:20:af:18:d1:f7:f2:b2:34:39:5d:c7:
17:7a:ac:1f:5d:3f:d3:6c:61:54:e0:0d:cf:4e:ef:11:f5:66:
4c:fe:0f:d0:32:48:93:50:09:64:9e:a3:d7:cb:a7:35:3d:06:
89:77:85:c0:4d:8c:29:24:ee:16:1d:07:1b:fb:e5:8e:c3:da:
e4:06:6b:ab:3c:9c:9e:99:29:56:6f:36:59:9c:26:12:51:e7:
1a:52:9e:df:a1:b0:f0:3f:f2:8d:0f:8a:fe:db:47:1b:b6:96:
cf:73:19:60:8d:7a:51:a4:98:8b:1a:19:21:8b:0f:f2:b2:06:
d9:a9:36:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:35:40 2025 by rpki-client