Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/95fe44-b039-4c93-b975-46ee99a1ee30/1/AFSIJAGwckhkqMzLrq_kLIUkBFY.mft
File: AFSIJAGwckhkqMzLrq_kLIUkBFY.mft (raw, json)
Hash identifier: h3AtEO9tIWfDFdAGbz8hyP1fjLVaMW++fbM+8IzD+d0=
Subject key identifier: FC:BF:A9:DB:58:29:C1:A3:A9:22:D2:D4:FF:24:52:51:A8:B9:B3:E7
Authority key identifier: 00:54:88:24:01:B0:72:48:64:A8:CC:CB:AE:AF:E4:2C:85:24:04:56
Certificate issuer: /CN=0054882401b0724864a8cccbaeafe42c85240456
Certificate serial: 019A4EF4FC68A9CAC6BDB0FE5B29CF0B1CFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AFSIJAGwckhkqMzLrq_kLIUkBFY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/95fe44-b039-4c93-b975-46ee99a1ee30/1/AFSIJAGwckhkqMzLrq_kLIUkBFY.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 13:01:09 +0000
Manifest this update: Tue 04 Nov 2025 13:01:09 +0000
Manifest next update: Wed 05 Nov 2025 13:01:09 +0000
Files and hashes: 1: 0ya4sfz42L60TJ0bcAyUqtENC28.roa (hash: 8fugK/0QqnnO0V3k6nBzfLlx/GUIRpJ1ovogrf7zS2I=)
2: AFSIJAGwckhkqMzLrq_kLIUkBFY.crl (hash: fIVmgsgBte3iZjWzQI/REgbTMlkjlhDaDcMMJREpXaQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/95fe44-b039-4c93-b975-46ee99a1ee30/1/AFSIJAGwckhkqMzLrq_kLIUkBFY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/95fe44-b039-4c93-b975-46ee99a1ee30/1/AFSIJAGwckhkqMzLrq_kLIUkBFY.mft
rsync://rpki.ripe.net/repository/DEFAULT/AFSIJAGwckhkqMzLrq_kLIUkBFY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:fc:68:a9:ca:c6:bd:b0:fe:5b:29:cf:0b:1c:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0054882401b0724864a8cccbaeafe42c85240456
Validity
Not Before: Nov 4 13:01:09 2025 GMT
Not After : Nov 5 13:01:09 2025 GMT
Subject: CN=fcbfa9db5829c1a3a922d2d4ff245251a8b9b3e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:49:a0:c2:0f:18:d8:20:e1:00:1d:17:06:98:
12:9e:62:85:61:80:97:b2:2b:3f:1d:cf:af:22:a6:
59:30:85:a3:57:02:ea:3f:4f:42:e5:ee:62:94:a1:
82:b0:c9:cf:43:17:86:6c:f6:5c:dc:b0:25:76:9f:
9c:f5:ce:a5:e5:18:79:29:cd:20:d1:c7:71:8f:1e:
6c:1a:0a:8e:e9:64:9f:97:a6:33:48:28:34:14:54:
90:ac:f6:f5:60:77:17:44:2d:a3:e7:e9:98:fd:6c:
07:20:04:32:94:99:8b:5a:c5:c6:a9:41:07:a1:af:
60:72:fb:d2:7a:df:18:92:e0:b4:13:df:92:2f:45:
5b:6d:2a:e4:b8:ac:86:5f:8b:92:ac:64:c3:76:c8:
26:4d:07:00:17:46:13:d8:4d:f0:6d:6c:67:aa:c9:
63:7b:1c:8d:42:3d:27:40:75:50:2d:59:fc:bb:4c:
fa:21:25:5c:24:78:17:c6:f4:dd:15:1d:a4:be:33:
74:fb:c9:83:ed:74:c6:3b:5d:69:88:12:15:f3:94:
c6:66:26:7b:a8:10:c8:11:a1:5b:d1:66:9f:d3:97:
4a:38:f8:b1:55:d9:5c:de:5e:81:73:32:60:35:df:
67:5a:e6:7d:b1:e2:56:e9:d2:16:13:e5:92:ea:91:
34:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:BF:A9:DB:58:29:C1:A3:A9:22:D2:D4:FF:24:52:51:A8:B9:B3:E7
X509v3 Authority Key Identifier:
keyid:00:54:88:24:01:B0:72:48:64:A8:CC:CB:AE:AF:E4:2C:85:24:04:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AFSIJAGwckhkqMzLrq_kLIUkBFY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/95fe44-b039-4c93-b975-46ee99a1ee30/1/AFSIJAGwckhkqMzLrq_kLIUkBFY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/95fe44-b039-4c93-b975-46ee99a1ee30/1/AFSIJAGwckhkqMzLrq_kLIUkBFY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:7a:07:55:77:b0:a9:4a:a4:9f:3f:64:6e:88:67:ae:64:c2:
de:cb:a4:ea:e5:c8:1c:8e:a2:47:29:3a:3c:c4:60:f1:4f:da:
08:49:85:ac:c8:e1:e7:6f:0f:50:b4:8b:9c:37:58:81:c0:43:
f2:d8:af:e0:23:fb:f2:16:4f:9c:5e:2e:18:26:fd:dc:3f:4b:
a5:f7:d3:92:cf:14:3d:4a:4f:cd:c0:98:a1:c4:b0:62:59:e9:
d5:74:d2:2d:a5:96:8b:ca:bc:6d:35:6f:13:ae:9f:3a:67:7b:
46:7c:7d:90:62:66:ac:0e:ce:76:33:fe:1e:18:31:77:21:f8:
25:ff:ca:8c:77:45:eb:c8:59:5c:e9:ae:d0:e8:bb:c3:b7:0d:
07:16:ec:1c:78:6d:d3:1e:03:77:97:ec:69:7f:e5:52:f8:70:
52:c9:d3:41:a9:6a:55:8e:c0:5c:49:e8:ce:32:c2:e0:df:48:
12:99:81:c2:30:38:52:2d:19:ab:5e:6c:39:04:bc:1c:01:1c:
7b:c9:70:f1:48:d3:c6:8b:37:e0:e0:23:8d:bc:c0:17:ee:af:
25:88:72:bb:9e:fe:cc:ed:a3:f8:7e:40:be:5b:ac:46:fc:fb:
83:a6:ce:3f:a3:3f:b7:63:5b:03:f7:67:c5:e2:35:d8:76:4c:
5a:f6:fd:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:09:36 2025 by rpki-client