Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/ab9fa6-a906-4ac4-ac0c-6389220b26c6/1/afAHCvh31rmGswe5vATvGcRAQz0.mft
File: afAHCvh31rmGswe5vATvGcRAQz0.mft (raw, json)
Hash identifier: XBYHPClYiWGfAvEqsb0DFesHBWSoyF9zLi6XY+kYF/k=
Subject key identifier: 60:A5:16:D4:E5:C9:DB:7D:3B:71:E8:72:F2:F5:72:81:1F:4B:DB:CA
Authority key identifier: 69:F0:07:0A:F8:77:D6:B9:86:B3:07:B9:BC:04:EF:19:C4:40:43:3D
Certificate issuer: /CN=69f0070af877d6b986b307b9bc04ef19c440433d
Certificate serial: 019776E628F5200972E5809C2D4EF65ABE34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/afAHCvh31rmGswe5vATvGcRAQz0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/ab9fa6-a906-4ac4-ac0c-6389220b26c6/1/afAHCvh31rmGswe5vATvGcRAQz0.mft
Manifest number: 07C8
Signing time: Mon 16 Jun 2025 04:01:24 +0000
Manifest this update: Mon 16 Jun 2025 04:01:24 +0000
Manifest next update: Tue 17 Jun 2025 04:01:24 +0000
Files and hashes: 1: 5m0E4hrlymj_oPq4RutDZTBvpFc.roa (hash: D3u2GpmWvvHTn4HOSLwFPi92ntWCyeD4rYP1qp5He0g=)
2: afAHCvh31rmGswe5vATvGcRAQz0.crl (hash: JNU6Q1Jj/91RLQTK6J5Es27lmGeem7R6NRQQc864uW4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/ab9fa6-a906-4ac4-ac0c-6389220b26c6/1/afAHCvh31rmGswe5vATvGcRAQz0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/ab9fa6-a906-4ac4-ac0c-6389220b26c6/1/afAHCvh31rmGswe5vATvGcRAQz0.mft
rsync://rpki.ripe.net/repository/DEFAULT/afAHCvh31rmGswe5vATvGcRAQz0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 04:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:76:e6:28:f5:20:09:72:e5:80:9c:2d:4e:f6:5a:be:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69f0070af877d6b986b307b9bc04ef19c440433d
Validity
Not Before: Jun 16 04:01:24 2025 GMT
Not After : Jun 17 04:01:24 2025 GMT
Subject: CN=60a516d4e5c9db7d3b71e872f2f572811f4bdbca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:81:3e:f0:2d:8f:6d:82:50:6a:35:0b:1e:dc:
4d:a3:91:31:26:6e:d0:bf:81:22:b5:38:a1:9b:e4:
07:1d:1c:74:8d:ed:29:54:15:1d:f6:c3:be:51:dc:
a8:ec:84:02:b9:d5:3e:4f:6c:81:ad:97:32:14:60:
9c:5c:fa:9b:5d:02:b9:b8:a8:d0:f4:1e:65:88:a7:
5f:6d:07:ce:c8:d9:5e:ea:98:a4:cf:f8:ce:8b:a7:
e6:df:60:6f:fa:57:56:a7:cf:39:9b:aa:3b:b8:3c:
dd:a1:f4:be:b5:b1:f0:34:b7:3c:6b:fa:b4:85:f1:
73:d8:54:5b:d7:b2:3c:6f:2f:3f:c1:28:75:7a:7a:
d0:59:8e:26:4f:7d:17:86:1d:b4:8e:99:14:29:28:
d1:5c:eb:58:f2:28:94:9d:b5:4f:62:31:58:96:9a:
ce:55:6c:ce:dc:c8:ae:54:df:1f:f0:20:69:f7:1f:
13:01:29:6e:59:55:3e:4b:ee:e9:46:d3:c1:59:db:
86:0c:96:09:c4:29:fc:f1:20:65:05:4d:1d:b8:48:
fb:a7:47:1c:ce:ba:cf:ca:85:39:f5:03:70:06:42:
d9:8d:f5:1e:4f:97:be:99:83:ec:1e:d3:99:64:d2:
4e:0f:c9:14:8f:82:a8:37:c2:a2:f9:e0:db:ed:3c:
8e:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:A5:16:D4:E5:C9:DB:7D:3B:71:E8:72:F2:F5:72:81:1F:4B:DB:CA
X509v3 Authority Key Identifier:
keyid:69:F0:07:0A:F8:77:D6:B9:86:B3:07:B9:BC:04:EF:19:C4:40:43:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/afAHCvh31rmGswe5vATvGcRAQz0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ab9fa6-a906-4ac4-ac0c-6389220b26c6/1/afAHCvh31rmGswe5vATvGcRAQz0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ab9fa6-a906-4ac4-ac0c-6389220b26c6/1/afAHCvh31rmGswe5vATvGcRAQz0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:e9:72:47:12:6c:3b:0b:84:e0:d8:60:78:02:91:08:41:d4:
ed:79:a2:66:33:47:25:b3:0c:43:ab:23:8a:04:ef:ac:7a:25:
61:9d:9c:e2:02:39:d9:2a:b5:45:75:df:78:54:09:79:1b:b1:
4f:31:fa:7a:45:25:83:18:dc:90:a1:5e:5d:c8:43:66:37:b4:
4a:c1:e9:42:4c:9f:bf:6b:d5:f0:27:e6:54:39:6f:27:d9:e5:
a8:c9:ca:0f:b2:54:75:74:af:fe:9e:68:89:00:f6:04:20:59:
bd:4b:4d:2c:a6:56:d2:da:49:6e:19:a5:78:08:4a:c6:b2:8f:
e2:51:6c:53:40:ac:72:7b:10:96:f4:95:c9:61:44:14:9c:51:
13:ff:79:49:31:65:fc:c3:21:a3:2d:1a:5e:03:22:56:87:05:
11:5e:c3:46:10:bc:51:1d:75:46:63:71:8b:a3:6e:5c:c0:fa:
87:8e:0d:4f:c4:36:23:4e:25:0b:2e:49:0c:14:bf:1e:c6:26:
5f:4b:89:3e:6b:69:a8:73:0d:b1:6f:4b:26:35:ff:12:cc:92:
22:64:27:41:f1:de:77:fb:59:1a:b8:7e:05:cb:59:f7:74:bf:
35:a1:3d:d4:da:b8:f2:e9:83:10:2b:17:11:de:f3:f0:c6:b2:
86:4b:72:94
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd25ij1IAly5YCcLU72Wr40MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5ZjAwNzBhZjg3N2Q2Yjk4NmIzMDdiOWJjMDRlZjE5YzQ0
MDQzM2QwHhcNMjUwNjE2MDQwMTI0WhcNMjUwNjE3MDQwMTI0WjAzMTEwLwYDVQQD
Eyg2MGE1MTZkNGU1YzlkYjdkM2I3MWU4NzJmMmY1NzI4MTFmNGJkYmNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl4E+8C2PbYJQajULHtxNo5ExJm7Q
v4EitTihm+QHHRx0je0pVBUd9sO+Udyo7IQCudU+T2yBrZcyFGCcXPqbXQK5uKjQ
9B5liKdfbQfOyNle6pikz/jOi6fm32Bv+ldWp885m6o7uDzdofS+tbHwNLc8a/q0
hfFz2FRb17I8by8/wSh1enrQWY4mT30Xhh20jpkUKSjRXOtY8iiUnbVPYjFYlprO
VWzO3MiuVN8f8CBp9x8TASluWVU+S+7pRtPBWduGDJYJxCn88SBlBU0duEj7p0cc
zrrPyoU59QNwBkLZjfUeT5e+mYPsHtOZZNJOD8kUj4KoN8Ki+eDb7TyOaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGClFtTlydt9O3HocvL1coEfS9vKMB8GA1UdIwQY
MBaAFGnwBwr4d9a5hrMHubwE7xnEQEM9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWZBSEN2aDMxcm1Hc3dlNXZBVHZHY1JBUXowLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC9hYjlmYTYtYTkwNi00YWM0LWFjMGMt
NjM4OTIyMGIyNmM2LzEvYWZBSEN2aDMxcm1Hc3dlNXZBVHZHY1JBUXowLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC9hYjlmYTYtYTkwNi00YWM0LWFjMGMtNjM4OTIyMGIyNmM2
LzEvYWZBSEN2aDMxcm1Hc3dlNXZBVHZHY1JBUXowLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARulyRxJs
OwuE4NhgeAKRCEHU7XmiZjNHJbMMQ6sjigTvrHolYZ2c4gI52Sq1RXXfeFQJeRux
TzH6ekUlgxjckKFeXchDZje0SsHpQkyfv2vV8CfmVDlvJ9nlqMnKD7JUdXSv/p5o
iQD2BCBZvUtNLKZW0tpJbhmleAhKxrKP4lFsU0CscnsQlvSVyWFEFJxRE/95STFl
/MMhoy0aXgMiVocFEV7DRhC8UR11RmNxi6NuXMD6h44NT8Q2I04lCy5JDBS/HsYm
X0uJPmtpqHMNsW9LJjX/EsySImQnQfHed/tZGrh+BctZ93S/NaE91Nq48umDECsX
Ed7z8MayhktylA==
-----END CERTIFICATE-----
Generated at Mon Jun 16 09:00:06 2025 by rpki-client