Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/ab9fa6-a906-4ac4-ac0c-6389220b26c6/1/afAHCvh31rmGswe5vATvGcRAQz0.mft
File: afAHCvh31rmGswe5vATvGcRAQz0.mft (raw, json)
Hash identifier: ljfbeG49jj6Qt419UyHdhX/Bf+Tfe38zAisG39kVZ6E=
Subject key identifier: 63:2A:DA:BF:E9:88:D7:0F:CC:38:1F:A8:3C:16:4B:E9:D4:C3:51:40
Authority key identifier: 69:F0:07:0A:F8:77:D6:B9:86:B3:07:B9:BC:04:EF:19:C4:40:43:3D
Certificate issuer: /CN=69f0070af877d6b986b307b9bc04ef19c440433d
Certificate serial: 01988B0FBF1413F21D52E74BF49ED0D73C90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/afAHCvh31rmGswe5vATvGcRAQz0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/ab9fa6-a906-4ac4-ac0c-6389220b26c6/1/afAHCvh31rmGswe5vATvGcRAQz0.mft
Manifest number: 0857
Signing time: Fri 08 Aug 2025 19:02:01 +0000
Manifest this update: Fri 08 Aug 2025 19:02:01 +0000
Manifest next update: Sat 09 Aug 2025 19:02:01 +0000
Files and hashes: 1: 5m0E4hrlymj_oPq4RutDZTBvpFc.roa (hash: D3u2GpmWvvHTn4HOSLwFPi92ntWCyeD4rYP1qp5He0g=)
2: afAHCvh31rmGswe5vATvGcRAQz0.crl (hash: HOWvYOybZL/AiQ+FYIygGLklzXgY2MFUoUC1sHKf3F4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/ab9fa6-a906-4ac4-ac0c-6389220b26c6/1/afAHCvh31rmGswe5vATvGcRAQz0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/ab9fa6-a906-4ac4-ac0c-6389220b26c6/1/afAHCvh31rmGswe5vATvGcRAQz0.mft
rsync://rpki.ripe.net/repository/DEFAULT/afAHCvh31rmGswe5vATvGcRAQz0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 19:02:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:0f:bf:14:13:f2:1d:52:e7:4b:f4:9e:d0:d7:3c:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69f0070af877d6b986b307b9bc04ef19c440433d
Validity
Not Before: Aug 8 19:02:01 2025 GMT
Not After : Aug 9 19:02:01 2025 GMT
Subject: CN=632adabfe988d70fcc381fa83c164be9d4c35140
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:2d:e6:b2:45:a8:36:c6:c2:ec:4c:6e:50:a3:
df:12:a0:b3:4a:2d:2f:e5:77:45:62:94:ec:7f:4b:
c8:b5:9c:eb:4c:38:25:b4:1a:5e:13:25:c4:81:1f:
40:b3:5e:35:f9:76:7f:a8:7f:65:5b:e8:fa:ad:3a:
0d:15:c8:79:4f:bb:4f:57:fb:84:e4:6e:ad:0e:b2:
2c:2e:68:7a:75:79:d6:41:be:6a:12:63:28:ba:a9:
20:7f:31:56:53:17:fe:53:11:dc:84:13:b3:84:62:
22:24:76:1c:24:5f:d2:1d:5f:b1:67:57:95:08:d5:
23:0e:92:5a:6d:b1:a6:6a:54:f9:e1:5d:92:65:2d:
17:5b:54:39:ff:47:e7:8d:8d:02:7a:f5:7f:0f:47:
ca:bf:e5:89:b6:ff:8c:18:9b:be:1e:99:5e:48:02:
08:27:58:00:e3:c5:4c:64:48:1d:e3:59:aa:cf:5c:
3c:24:d9:32:5d:8c:e2:75:48:14:f7:bb:3c:e2:a2:
73:e2:e7:aa:1b:fb:80:29:21:7d:3b:6d:35:45:c8:
c1:89:30:c0:f6:e4:7d:d6:e3:ae:e4:1b:f8:93:13:
fc:0d:83:a3:8a:cd:56:ba:66:6e:71:47:b1:48:c2:
d0:03:54:de:b2:72:1b:71:cf:de:60:dd:01:6e:f3:
ad:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:2A:DA:BF:E9:88:D7:0F:CC:38:1F:A8:3C:16:4B:E9:D4:C3:51:40
X509v3 Authority Key Identifier:
keyid:69:F0:07:0A:F8:77:D6:B9:86:B3:07:B9:BC:04:EF:19:C4:40:43:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/afAHCvh31rmGswe5vATvGcRAQz0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ab9fa6-a906-4ac4-ac0c-6389220b26c6/1/afAHCvh31rmGswe5vATvGcRAQz0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ab9fa6-a906-4ac4-ac0c-6389220b26c6/1/afAHCvh31rmGswe5vATvGcRAQz0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:13:bc:8f:29:7b:6c:3e:23:1c:3c:cd:ff:b5:29:56:5f:ef:
a5:9a:90:54:f8:64:f1:89:f0:b2:8d:81:2a:67:1b:18:6c:20:
f1:6f:59:56:6d:bb:f1:b2:e6:53:bb:0a:17:7d:51:5e:44:31:
aa:53:77:34:d0:22:c6:34:93:ae:06:5f:a4:12:16:5a:ce:83:
4b:b3:e0:67:1d:08:5b:f8:8d:e1:f7:e1:3d:d3:13:b1:ee:b2:
5d:d2:5a:88:97:d4:a6:8b:a1:03:b1:cc:fe:09:9c:61:20:95:
8a:48:c3:4a:7f:25:88:fc:8d:37:a1:35:ab:d2:5f:ec:2b:ec:
be:99:5b:49:62:d6:d7:d9:52:65:30:97:43:13:45:c7:44:e6:
2d:7b:b7:bf:38:62:d7:df:10:89:ec:b2:d1:4f:e1:96:2f:f9:
fd:e0:73:4a:c8:60:e8:9a:27:14:34:56:31:d6:62:6e:f3:5d:
62:d9:75:b9:45:f9:1b:ad:55:9b:2a:d0:2b:ad:c5:f1:41:6d:
7c:32:f7:33:37:7f:94:69:bf:75:6e:d2:09:59:ea:d0:42:87:
5a:4e:69:e3:bb:de:da:2e:2b:b9:5c:10:d9:60:0f:c6:96:3d:
94:70:80:9e:a4:ca:a6:23:15:b7:49:f7:fd:2f:de:25:50:ad:
ba:e8:60:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:35:34 2025 by rpki-client