Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/95fe44-b039-4c93-b975-46ee99a1ee30/1/AFSIJAGwckhkqMzLrq_kLIUkBFY.mft
File: AFSIJAGwckhkqMzLrq_kLIUkBFY.mft (raw, json)
Hash identifier: MptGz9iOAV7G39yoj9U4dxFQPJqebN9827fQ4K2uiJs=
Subject key identifier: 66:CE:4B:C8:F0:EE:F0:64:24:6D:D7:E5:50:6C:0F:3B:76:7A:C1:C2
Authority key identifier: 00:54:88:24:01:B0:72:48:64:A8:CC:CB:AE:AF:E4:2C:85:24:04:56
Certificate issuer: /CN=0054882401b0724864a8cccbaeafe42c85240456
Certificate serial: 019896A6EAC0EAF9AC972CA1801520EAD6D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AFSIJAGwckhkqMzLrq_kLIUkBFY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/95fe44-b039-4c93-b975-46ee99a1ee30/1/AFSIJAGwckhkqMzLrq_kLIUkBFY.mft
Manifest number: 162A
Signing time: Mon 11 Aug 2025 01:02:58 +0000
Manifest this update: Mon 11 Aug 2025 01:02:58 +0000
Manifest next update: Tue 12 Aug 2025 01:02:58 +0000
Files and hashes: 1: 0ya4sfz42L60TJ0bcAyUqtENC28.roa (hash: 8fugK/0QqnnO0V3k6nBzfLlx/GUIRpJ1ovogrf7zS2I=)
2: AFSIJAGwckhkqMzLrq_kLIUkBFY.crl (hash: jZlIV0NQLhdwe+E8FWWKiM7dmumpSeYQDG1g1kVdZgI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/95fe44-b039-4c93-b975-46ee99a1ee30/1/AFSIJAGwckhkqMzLrq_kLIUkBFY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/95fe44-b039-4c93-b975-46ee99a1ee30/1/AFSIJAGwckhkqMzLrq_kLIUkBFY.mft
rsync://rpki.ripe.net/repository/DEFAULT/AFSIJAGwckhkqMzLrq_kLIUkBFY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 01:02:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:a6:ea:c0:ea:f9:ac:97:2c:a1:80:15:20:ea:d6:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0054882401b0724864a8cccbaeafe42c85240456
Validity
Not Before: Aug 11 01:02:58 2025 GMT
Not After : Aug 12 01:02:58 2025 GMT
Subject: CN=66ce4bc8f0eef064246dd7e5506c0f3b767ac1c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:c2:27:64:ac:8d:09:27:25:fb:bf:42:4c:90:
59:13:e2:62:f5:30:73:81:83:e5:0e:a4:ec:06:f4:
85:f0:bf:aa:0d:83:a0:5d:fe:81:a6:df:8b:8c:99:
23:46:e1:68:9c:2f:05:20:e0:2e:a1:ba:6f:d1:e8:
dd:6a:1c:3b:8d:3c:f6:8b:44:7c:e4:74:26:29:55:
96:61:22:1d:92:98:8a:e6:42:4c:73:b7:4a:b2:20:
7c:64:bc:26:7f:f2:7e:5e:31:55:d9:3e:b2:f6:cf:
0d:3b:46:5d:1b:cd:de:99:37:11:2c:09:91:0e:62:
f6:5f:a0:e4:ce:37:d9:89:1f:48:5b:c5:af:5a:97:
c6:92:ad:2f:b5:7f:be:e0:96:f1:c4:24:05:ff:41:
bb:27:f6:d7:ca:93:48:7d:41:04:50:e9:57:5b:df:
28:8d:6a:1e:f9:08:55:83:f3:ea:3c:43:9b:31:a6:
14:ec:fe:3e:4a:72:a9:14:d3:1b:e5:9a:c4:90:07:
7a:84:2c:19:a3:0c:6e:2b:c8:59:f6:cc:e2:fb:1e:
02:31:9d:a9:a1:e6:cf:47:0f:3a:db:20:e4:ec:c1:
c2:39:13:91:24:5a:83:dc:b9:e4:f4:23:35:09:3b:
af:bb:05:27:19:91:d8:30:ca:b0:1f:b7:54:17:84:
2c:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:CE:4B:C8:F0:EE:F0:64:24:6D:D7:E5:50:6C:0F:3B:76:7A:C1:C2
X509v3 Authority Key Identifier:
keyid:00:54:88:24:01:B0:72:48:64:A8:CC:CB:AE:AF:E4:2C:85:24:04:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AFSIJAGwckhkqMzLrq_kLIUkBFY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/95fe44-b039-4c93-b975-46ee99a1ee30/1/AFSIJAGwckhkqMzLrq_kLIUkBFY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/95fe44-b039-4c93-b975-46ee99a1ee30/1/AFSIJAGwckhkqMzLrq_kLIUkBFY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:05:cd:89:99:83:f3:7f:5f:3b:21:d1:4a:a1:73:6f:35:7c:
43:97:fb:56:a0:43:65:78:10:0b:6b:4c:66:8d:15:1a:46:29:
77:63:35:37:a2:4b:20:1e:cc:a3:e1:9d:d2:dd:1e:7f:ea:14:
b4:db:dd:8d:98:f6:39:cf:41:3e:a1:fd:f5:1e:82:d2:10:a0:
f0:c4:b2:9c:c7:b3:23:81:3e:4a:ef:34:5d:c7:1e:fa:0f:7b:
1a:6e:fa:db:e2:84:d4:55:97:18:c7:01:49:fd:2e:1a:e5:ad:
84:99:9d:96:81:09:bb:74:ba:77:a7:40:40:8f:0e:9a:76:38:
6e:c5:50:1c:91:68:77:19:3e:f2:31:44:00:ef:be:a3:c5:96:
bd:e2:c0:df:51:08:c4:fd:ca:0c:3e:54:cb:2a:74:1d:ff:c1:
9e:c2:e6:aa:95:ff:b8:f1:b1:3d:5d:18:f9:67:52:26:60:13:
90:d8:48:a3:22:2d:6e:87:47:54:6e:11:c9:67:54:36:c1:7a:
35:67:7d:37:a6:42:55:6a:23:82:1c:53:bb:ba:9f:88:c8:da:
86:d7:3b:5d:ed:59:1a:8a:9f:bb:7b:3d:b5:e4:7b:3e:01:6a:
27:fd:f7:38:e5:fa:2a:35:5a:24:79:3a:a5:5c:45:10:09:00:
04:c2:22:c2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiWpurA6vmslyyhgBUg6tbWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwNTQ4ODI0MDFiMDcyNDg2NGE4Y2NjYmFlYWZlNDJjODUy
NDA0NTYwHhcNMjUwODExMDEwMjU4WhcNMjUwODEyMDEwMjU4WjAzMTEwLwYDVQQD
Eyg2NmNlNGJjOGYwZWVmMDY0MjQ2ZGQ3ZTU1MDZjMGYzYjc2N2FjMWMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9cInZKyNCScl+79CTJBZE+Ji9TBz
gYPlDqTsBvSF8L+qDYOgXf6Bpt+LjJkjRuFonC8FIOAuobpv0ejdahw7jTz2i0R8
5HQmKVWWYSIdkpiK5kJMc7dKsiB8ZLwmf/J+XjFV2T6y9s8NO0ZdG83emTcRLAmR
DmL2X6DkzjfZiR9IW8WvWpfGkq0vtX++4JbxxCQF/0G7J/bXypNIfUEEUOlXW98o
jWoe+QhVg/PqPEObMaYU7P4+SnKpFNMb5ZrEkAd6hCwZowxuK8hZ9szi+x4CMZ2p
oebPRw862yDk7MHCORORJFqD3Lnk9CM1CTuvuwUnGZHYMMqwH7dUF4QsAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGbOS8jw7vBkJG3X5VBsDzt2esHCMB8GA1UdIwQY
MBaAFABUiCQBsHJIZKjMy66v5CyFJARWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUZTSUpBR3dja2hrcU16THJxX2tMSVVrQkZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS85NWZlNDQtYjAzOS00YzkzLWI5NzUt
NDZlZTk5YTFlZTMwLzEvQUZTSUpBR3dja2hrcU16THJxX2tMSVVrQkZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS85NWZlNDQtYjAzOS00YzkzLWI5NzUtNDZlZTk5YTFlZTMw
LzEvQUZTSUpBR3dja2hrcU16THJxX2tMSVVrQkZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOgXNiZmD
839fOyHRSqFzbzV8Q5f7VqBDZXgQC2tMZo0VGkYpd2M1N6JLIB7Mo+Gd0t0ef+oU
tNvdjZj2Oc9BPqH99R6C0hCg8MSynMezI4E+Su80Xcce+g97Gm762+KE1FWXGMcB
Sf0uGuWthJmdloEJu3S6d6dAQI8OmnY4bsVQHJFodxk+8jFEAO++o8WWveLA31EI
xP3KDD5Uyyp0Hf/BnsLmqpX/uPGxPV0Y+WdSJmATkNhIoyItbodHVG4RyWdUNsF6
NWd9N6ZCVWojghxTu7qfiMjahtc7Xe1ZGoqfu3s9teR7PgFqJ/33OOX6KjVaJHk6
pVxFEAkABMIiwg==
-----END CERTIFICATE-----
Generated at Mon Aug 11 05:06:12 2025 by rpki-client