Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/ccf777-9465-4a2e-8112-71d8b8850853/1/af3-gkn5Q6q60Ygfylg2YTpqZ7w.mft
File: af3-gkn5Q6q60Ygfylg2YTpqZ7w.mft (raw, json)
Hash identifier: 84n8uwDZ1KaqkhnrO8Lr3WEwlCbLMe577/URRf1wafY=
Subject key identifier: 5A:9B:4C:6F:B5:44:91:4B:77:10:A0:47:F4:69:D2:3B:42:F2:44:79
Authority key identifier: 69:FD:FE:82:49:F9:43:AA:BA:D1:88:1F:CA:58:36:61:3A:6A:67:BC
Certificate issuer: /CN=69fdfe8249f943aabad1881fca5836613a6a67bc
Certificate serial: 019896DC8AA3CB035AED676E0CD4FA00AC5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/af3-gkn5Q6q60Ygfylg2YTpqZ7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/ccf777-9465-4a2e-8112-71d8b8850853/1/af3-gkn5Q6q60Ygfylg2YTpqZ7w.mft
Manifest number: 1629
Signing time: Mon 11 Aug 2025 02:01:32 +0000
Manifest this update: Mon 11 Aug 2025 02:01:32 +0000
Manifest next update: Tue 12 Aug 2025 02:01:32 +0000
Files and hashes: 1: Ceo-HVPoWV3_2SxJvVUz90MzCXU.roa (hash: hrbJxLsRN5MK/3GlRfITM4zehXoSXHDnVzwmbM92S3A=)
2: af3-gkn5Q6q60Ygfylg2YTpqZ7w.crl (hash: ikneSA5b5/ozpepWoxOvYKi2KWtQCIWfQqQKeB8efr4=)
3: u-uD5eJkyZwHdvCGzRD30UcsPdQ.roa (hash: 972IpaBLO7W9fM3TeJorAGTATEI6lVsjC4rz1G6aPgA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/ccf777-9465-4a2e-8112-71d8b8850853/1/af3-gkn5Q6q60Ygfylg2YTpqZ7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/ccf777-9465-4a2e-8112-71d8b8850853/1/af3-gkn5Q6q60Ygfylg2YTpqZ7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/af3-gkn5Q6q60Ygfylg2YTpqZ7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:dc:8a:a3:cb:03:5a:ed:67:6e:0c:d4:fa:00:ac:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69fdfe8249f943aabad1881fca5836613a6a67bc
Validity
Not Before: Aug 11 02:01:32 2025 GMT
Not After : Aug 12 02:01:32 2025 GMT
Subject: CN=5a9b4c6fb544914b7710a047f469d23b42f24479
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:b3:f3:ed:eb:fc:cf:d5:a6:ed:f8:e1:81:4e:
2e:bc:e9:ee:ef:b0:02:dd:a4:14:1d:30:14:2d:19:
9b:b3:11:28:d5:2e:ac:7c:32:f5:f7:01:e2:4a:e2:
3a:74:68:50:83:3d:14:9d:f3:13:ca:34:7a:44:87:
4a:5b:fc:29:59:55:99:03:5f:de:fb:9f:df:2f:7b:
75:97:03:8b:f7:34:de:9d:de:96:c1:91:63:00:1b:
e2:32:13:8a:21:67:b0:14:18:e1:49:37:d1:6b:bc:
5f:18:d8:1c:63:2b:2b:a0:62:53:f4:ef:a2:00:7f:
a4:19:d1:ea:5a:b9:80:20:af:6c:98:90:3a:15:0d:
66:0c:44:b6:ab:dc:b5:5a:83:ac:87:39:96:e7:ae:
af:17:62:7c:11:9f:d0:7f:fd:cf:8e:5f:ad:d3:d9:
6e:2c:25:41:57:d4:4c:69:2b:5c:7f:07:45:72:2a:
43:15:98:42:13:2b:cd:de:f5:27:9a:ea:a8:4a:d5:
74:f1:0b:87:c7:0f:05:67:46:0f:d3:e4:bc:61:05:
40:bb:2a:f7:56:f6:1a:76:ee:2f:1b:8a:0b:6f:bf:
56:68:9c:57:16:4a:c3:3d:e7:fb:7b:7f:98:0e:f6:
08:9b:d6:59:79:3e:05:2d:92:c8:3d:48:b9:e2:98:
e0:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:9B:4C:6F:B5:44:91:4B:77:10:A0:47:F4:69:D2:3B:42:F2:44:79
X509v3 Authority Key Identifier:
keyid:69:FD:FE:82:49:F9:43:AA:BA:D1:88:1F:CA:58:36:61:3A:6A:67:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/af3-gkn5Q6q60Ygfylg2YTpqZ7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/ccf777-9465-4a2e-8112-71d8b8850853/1/af3-gkn5Q6q60Ygfylg2YTpqZ7w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/ccf777-9465-4a2e-8112-71d8b8850853/1/af3-gkn5Q6q60Ygfylg2YTpqZ7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:81:59:7d:39:95:e5:a0:17:92:72:9f:07:34:39:2b:53:df:
2a:78:3e:59:72:6c:cb:e0:fb:41:f2:e6:7b:34:1e:4c:a9:ed:
3e:b8:77:64:d5:a4:d6:72:49:05:e5:76:69:77:32:61:e9:a5:
b3:57:b1:14:95:7d:c3:74:ab:70:22:f6:d2:20:5b:7c:6e:c0:
b6:f2:dd:f5:cd:4a:ee:4c:f9:cb:64:54:c5:43:35:78:c8:af:
e4:a9:ed:3a:98:b0:5a:d0:66:e8:16:dd:8d:35:5a:7c:d8:ac:
59:bb:68:0e:a0:f8:c0:82:dd:77:bb:35:e9:37:7a:e0:08:95:
f2:a0:4b:5c:59:ba:30:e6:17:60:03:1a:1d:5f:2c:1c:99:16:
57:b1:45:1d:b5:11:41:7d:24:3d:e1:58:c5:24:9f:9a:c8:08:
0d:8d:9d:41:9f:ac:4a:ed:1c:53:cc:d6:87:6c:85:17:c1:a3:
79:fb:55:b0:08:b6:43:a7:85:0d:16:07:28:07:3d:b6:f0:ce:
34:68:4f:80:16:d4:dc:f8:22:d6:21:8b:a3:39:64:bc:b4:e4:
c0:bd:ee:b1:f6:1d:c5:d9:14:7b:c2:a7:42:c2:cc:04:09:2c:
99:78:59:92:d0:88:4c:06:33:0d:a6:43:31:42:86:de:ba:2c:
b3:ed:cf:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 04:09:13 2025 by rpki-client