Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/ab9fa6-a906-4ac4-ac0c-6389220b26c6/1/afAHCvh31rmGswe5vATvGcRAQz0.mft
File: afAHCvh31rmGswe5vATvGcRAQz0.mft (raw, json)
Hash identifier: /+oiNxE4VKddyFkn9IwtQXPdEIDBX+JJ4SViPniaEz8=
Subject key identifier: C4:33:5B:55:32:21:E8:AB:4D:4F:A1:19:A6:E9:13:0A:90:30:01:12
Authority key identifier: 69:F0:07:0A:F8:77:D6:B9:86:B3:07:B9:BC:04:EF:19:C4:40:43:3D
Certificate issuer: /CN=69f0070af877d6b986b307b9bc04ef19c440433d
Certificate serial: 019A4EF5472AD3BF9F9BCC3933C5102C1192
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/afAHCvh31rmGswe5vATvGcRAQz0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/ab9fa6-a906-4ac4-ac0c-6389220b26c6/1/afAHCvh31rmGswe5vATvGcRAQz0.mft
Manifest number: 0941
Signing time: Tue 04 Nov 2025 13:01:28 +0000
Manifest this update: Tue 04 Nov 2025 13:01:28 +0000
Manifest next update: Wed 05 Nov 2025 13:01:28 +0000
Files and hashes: 1: 5m0E4hrlymj_oPq4RutDZTBvpFc.roa (hash: D3u2GpmWvvHTn4HOSLwFPi92ntWCyeD4rYP1qp5He0g=)
2: afAHCvh31rmGswe5vATvGcRAQz0.crl (hash: upVFtpkg2BnfWRWkpKGPqE6HATR5SSOCWksFdZbzxxM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/ab9fa6-a906-4ac4-ac0c-6389220b26c6/1/afAHCvh31rmGswe5vATvGcRAQz0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/ab9fa6-a906-4ac4-ac0c-6389220b26c6/1/afAHCvh31rmGswe5vATvGcRAQz0.mft
rsync://rpki.ripe.net/repository/DEFAULT/afAHCvh31rmGswe5vATvGcRAQz0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:47:2a:d3:bf:9f:9b:cc:39:33:c5:10:2c:11:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69f0070af877d6b986b307b9bc04ef19c440433d
Validity
Not Before: Nov 4 13:01:28 2025 GMT
Not After : Nov 5 13:01:28 2025 GMT
Subject: CN=c4335b553221e8ab4d4fa119a6e9130a90300112
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:b9:eb:82:b8:f5:1e:8b:d1:5c:5f:78:a9:e7:
a6:4f:39:be:4d:76:31:62:63:95:0d:9f:94:17:41:
f0:b5:f3:d4:42:7e:a4:76:d3:6a:41:d1:60:ee:ef:
80:ad:e1:43:08:7a:88:27:1a:d5:b9:af:bd:72:d8:
37:42:33:f8:2a:58:d7:f4:93:e4:54:55:35:38:4f:
8e:01:76:e7:2f:e3:14:f6:e5:f6:3d:9c:c0:e7:f5:
17:75:0a:72:50:f6:f2:c3:0c:7d:85:76:92:3c:af:
3d:78:ae:38:c0:df:b4:5b:31:65:e5:2a:55:43:c3:
dd:a9:01:5a:1b:37:79:04:35:68:85:59:90:6b:2a:
71:37:7e:b0:bf:85:57:23:b5:5c:14:b7:b8:64:7e:
35:15:61:ec:c8:10:46:a1:41:b7:d1:ec:7b:ba:aa:
be:2c:01:40:cb:9a:a0:0a:30:0c:1a:9b:ef:eb:1c:
b5:3b:e1:4f:fb:c4:7c:54:47:76:dc:e3:87:71:59:
82:55:97:4f:0b:39:ac:8e:15:8b:5b:87:a5:fd:2d:
da:8a:47:85:38:f8:76:75:3c:3e:c9:4b:0b:23:37:
f0:91:a1:f5:0f:73:9c:e2:14:08:f5:58:cd:9b:4d:
25:f3:13:d4:25:0a:a7:1a:77:15:9b:54:50:6b:91:
e2:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:33:5B:55:32:21:E8:AB:4D:4F:A1:19:A6:E9:13:0A:90:30:01:12
X509v3 Authority Key Identifier:
keyid:69:F0:07:0A:F8:77:D6:B9:86:B3:07:B9:BC:04:EF:19:C4:40:43:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/afAHCvh31rmGswe5vATvGcRAQz0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ab9fa6-a906-4ac4-ac0c-6389220b26c6/1/afAHCvh31rmGswe5vATvGcRAQz0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ab9fa6-a906-4ac4-ac0c-6389220b26c6/1/afAHCvh31rmGswe5vATvGcRAQz0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:0b:41:92:4c:74:df:fe:60:98:22:eb:8c:cf:b9:c2:2c:ea:
f8:45:c3:2a:c3:83:e3:ed:af:56:24:e9:70:3e:13:f1:40:3b:
3e:34:70:a7:a8:79:73:9d:c9:80:eb:69:42:33:aa:8a:1b:0c:
5f:49:3c:76:fe:63:52:8b:04:7c:79:46:dc:84:9a:bb:05:42:
87:13:e6:c5:9b:60:b9:c4:23:55:b0:08:77:b1:5e:4c:a0:d9:
5b:91:c8:40:31:79:c6:0c:16:9e:1d:15:c2:16:06:f1:1e:00:
88:7c:7a:d0:65:6a:05:6f:e2:f2:12:91:5a:64:8e:50:44:32:
75:85:e2:07:78:e0:80:a5:6a:2c:a2:65:f1:e5:e2:21:46:72:
b1:84:7a:d6:f7:05:6a:46:13:91:15:ab:b2:c4:78:00:5e:83:
9d:c0:d0:a8:dd:36:4f:dd:35:77:bb:82:11:76:a2:03:e6:00:
45:0d:a4:5d:ec:d9:e9:b5:e5:68:d6:10:ae:98:c3:e2:98:c4:
ab:5a:b5:3f:da:ac:a8:af:4a:b6:4f:9d:6e:02:7a:8d:64:6d:
04:81:49:4f:5e:31:e8:07:65:98:cb:12:b7:1b:b4:d4:4c:f8:
46:de:91:25:6c:2d:90:46:df:ad:ad:14:ac:f3:7c:84:e5:65:
63:97:53:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:21:01 2025 by rpki-client