Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/e99954-c00f-4014-8e71-8aee2bf89b91/1/afY2pbazoordg_l0Rtewg7lMPa4.mft
File: afY2pbazoordg_l0Rtewg7lMPa4.mft (raw, json)
Hash identifier: Ohs+b1h0/lRYZfHsYka4cSXoP1UbxaRvyPx549KEipI=
Subject key identifier: 7C:0A:39:82:37:42:03:EB:F8:D8:EC:B4:94:FD:6B:1C:D3:17:FF:6A
Authority key identifier: 69:F6:36:A5:B6:B3:A2:8A:DD:83:F9:74:46:D7:B0:83:B9:4C:3D:AE
Certificate issuer: /CN=69f636a5b6b3a28add83f97446d7b083b94c3dae
Certificate serial: 019A545144C0535752C9F309A8C729CA6C02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/afY2pbazoordg_l0Rtewg7lMPa4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/e99954-c00f-4014-8e71-8aee2bf89b91/1/afY2pbazoordg_l0Rtewg7lMPa4.mft
Manifest number: 06DF
Signing time: Wed 05 Nov 2025 14:00:03 +0000
Manifest this update: Wed 05 Nov 2025 14:00:03 +0000
Manifest next update: Thu 06 Nov 2025 14:00:03 +0000
Files and hashes: 1: Uq41S_TL-4cdbHQOXq-81k1Y6B0.roa (hash: imvcawPVkLTN2rqi9GrM6dLepGLRmW6IgQsJl3oa4vo=)
2: afY2pbazoordg_l0Rtewg7lMPa4.crl (hash: JpWpepi+MFQise4WeUKym8Xgp658uvNuTo/BU60HlCg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/e99954-c00f-4014-8e71-8aee2bf89b91/1/afY2pbazoordg_l0Rtewg7lMPa4.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/e99954-c00f-4014-8e71-8aee2bf89b91/1/afY2pbazoordg_l0Rtewg7lMPa4.mft
rsync://rpki.ripe.net/repository/DEFAULT/afY2pbazoordg_l0Rtewg7lMPa4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:51:44:c0:53:57:52:c9:f3:09:a8:c7:29:ca:6c:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69f636a5b6b3a28add83f97446d7b083b94c3dae
Validity
Not Before: Nov 5 14:00:03 2025 GMT
Not After : Nov 6 14:00:03 2025 GMT
Subject: CN=7c0a3982374203ebf8d8ecb494fd6b1cd317ff6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e7:b8:15:6c:bb:23:d8:64:a6:a5:99:3e:15:
38:94:70:fc:af:a9:fd:a0:07:ee:6a:b7:39:db:a5:
22:40:3c:2c:99:a0:36:ca:25:28:1f:9f:d1:f9:29:
68:ce:57:f9:94:8f:5f:bf:be:5a:ff:be:86:0f:99:
1f:c3:de:b2:1d:be:ab:4e:d1:2e:04:13:af:55:bf:
a6:12:e2:51:c6:4f:ce:87:f8:94:65:bd:c2:be:e6:
f4:3f:4a:39:36:cd:9c:16:f3:63:ee:13:7b:d8:2d:
c3:a1:d9:b0:1a:2c:cc:a3:78:2f:2d:62:d5:87:51:
b2:da:e4:00:a8:b3:eb:c5:87:68:0f:1d:4d:85:cc:
09:73:1b:05:c1:12:dc:ba:68:52:13:84:81:e9:8e:
d8:c8:71:80:cf:71:2e:fe:06:1c:39:ab:40:78:41:
0d:25:f6:0e:7e:93:72:d1:4e:2b:31:14:82:72:f6:
40:e7:f9:0f:47:18:b3:53:cf:01:d4:c9:0d:ce:96:
d6:32:fd:1b:bf:59:c6:ff:ad:25:95:3f:c6:9f:1f:
4e:05:e1:a5:02:85:e7:b9:cb:f2:a0:12:50:be:0a:
8a:8f:94:81:5e:4e:02:6c:76:19:1f:da:56:2e:10:
b5:18:36:e0:0e:33:79:cb:b5:46:79:2c:10:80:80:
b0:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:0A:39:82:37:42:03:EB:F8:D8:EC:B4:94:FD:6B:1C:D3:17:FF:6A
X509v3 Authority Key Identifier:
keyid:69:F6:36:A5:B6:B3:A2:8A:DD:83:F9:74:46:D7:B0:83:B9:4C:3D:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/afY2pbazoordg_l0Rtewg7lMPa4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/e99954-c00f-4014-8e71-8aee2bf89b91/1/afY2pbazoordg_l0Rtewg7lMPa4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/e99954-c00f-4014-8e71-8aee2bf89b91/1/afY2pbazoordg_l0Rtewg7lMPa4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:9f:4d:20:66:a9:34:40:76:a4:af:d0:bd:c7:3d:c3:22:66:
49:ba:aa:5f:e7:38:73:7b:13:13:21:db:15:88:a1:71:b7:2d:
06:a8:ba:8e:1c:b2:2a:65:3c:25:9e:39:5c:40:a4:73:15:39:
44:3d:37:63:9f:95:a3:fd:49:fb:9f:c8:52:8e:de:7c:64:b6:
3f:c9:61:72:1a:a5:b5:b6:2a:0c:74:0c:09:6b:40:6f:86:7b:
ce:c9:67:d0:38:fd:a6:3b:ff:c6:b6:19:7c:f2:08:23:aa:14:
74:d7:56:49:42:50:f6:f0:1f:f3:0f:1a:67:51:48:73:18:ab:
13:19:2e:be:f2:58:3a:88:61:3e:d5:93:90:f3:27:5e:0b:ae:
6d:22:29:8e:3e:ab:c6:84:80:fd:34:59:13:3c:24:6d:2d:ed:
d3:af:40:fa:7c:98:54:90:6c:9d:db:cc:f8:cb:f0:18:32:bb:
f7:75:12:6a:7f:d7:07:24:bd:68:f4:ad:27:7c:55:b4:ad:ac:
f4:d5:5a:58:fd:7c:3f:2c:d7:8f:e2:1a:2d:da:98:35:59:5b:
a2:e2:ff:aa:14:23:b6:8f:09:2c:a5:ef:ff:64:fe:9c:d2:eb:
7c:cd:82:54:fa:03:1c:cb:a0:80:6c:bc:c0:93:5e:52:d1:61:
93:84:3a:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 17:51:44 2025 by rpki-client