Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/c06536-01aa-4e39-89b6-b58704f28591/1/afURWpSbKIPEzDxJX_uJk97Z2F0.mft
File: afURWpSbKIPEzDxJX_uJk97Z2F0.mft (raw, json)
Hash identifier: kn2eUt/lA+qLXjDAIlhdNIihjMyByLkhU143lH7FgzQ=
Subject key identifier: 8A:45:1C:84:90:80:35:C7:BA:BA:DF:91:34:A8:53:EA:CC:CF:58:B4
Authority key identifier: 69:F5:11:5A:94:9B:28:83:C4:CC:3C:49:5F:FB:89:93:DE:D9:D8:5D
Certificate issuer: /CN=69f5115a949b2883c4cc3c495ffb8993ded9d85d
Certificate serial: 019A5150CC6CAE75B1C80C250E3B9FA481B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/afURWpSbKIPEzDxJX_uJk97Z2F0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/c06536-01aa-4e39-89b6-b58704f28591/1/afURWpSbKIPEzDxJX_uJk97Z2F0.mft
Manifest number: 012C
Signing time: Wed 05 Nov 2025 00:00:40 +0000
Manifest this update: Wed 05 Nov 2025 00:00:40 +0000
Manifest next update: Thu 06 Nov 2025 00:00:40 +0000
Files and hashes: 1: 4BZY4KShEUmhrY8s7jFk_wJEp5k.roa (hash: UlyxYtAIHY75kSHD+hMXhTJxJxd+/SUaiDAFT6/piUg=)
2: afURWpSbKIPEzDxJX_uJk97Z2F0.crl (hash: /dc0L6ODiPE10V8N5VKGyZRhVWlqM5SpRi6xSeN0y6Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/c06536-01aa-4e39-89b6-b58704f28591/1/afURWpSbKIPEzDxJX_uJk97Z2F0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/c06536-01aa-4e39-89b6-b58704f28591/1/afURWpSbKIPEzDxJX_uJk97Z2F0.mft
rsync://rpki.ripe.net/repository/DEFAULT/afURWpSbKIPEzDxJX_uJk97Z2F0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 00:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:50:cc:6c:ae:75:b1:c8:0c:25:0e:3b:9f:a4:81:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69f5115a949b2883c4cc3c495ffb8993ded9d85d
Validity
Not Before: Nov 5 00:00:40 2025 GMT
Not After : Nov 6 00:00:40 2025 GMT
Subject: CN=8a451c84908035c7babadf9134a853eacccf58b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:3a:18:db:df:0d:5e:4d:83:1a:1e:cd:ec:1c:
3b:ff:34:e0:74:c2:54:ca:38:cb:a9:d4:f3:a4:ab:
e1:b0:14:96:d4:60:d9:c3:db:68:90:8e:51:6b:98:
e4:fe:99:1c:c6:9a:93:33:35:4d:ff:15:6a:24:9b:
ba:e8:52:08:4a:14:ba:37:78:ab:8c:0f:42:25:dd:
d2:e8:e3:38:86:d1:63:06:f2:32:1d:2d:99:77:79:
36:dd:f1:40:fe:a8:88:82:fa:73:7a:eb:77:37:14:
f2:5c:69:0d:fb:38:bd:25:5c:ec:ce:1e:b7:c7:8c:
5a:98:8a:e6:2f:07:09:29:28:5f:72:9c:72:a9:f5:
37:74:e0:80:96:07:7d:7f:a0:4c:e6:09:d7:3f:ea:
4f:a8:e0:8e:9a:36:eb:43:db:3c:6a:13:ee:2a:1c:
d7:dd:d7:c0:53:ec:67:37:f6:2a:cd:4a:80:28:1e:
63:ec:88:0f:a0:f4:a5:cb:ec:2c:2e:7a:3f:d2:df:
79:ea:63:63:13:61:2f:31:fb:c4:7f:61:64:dd:cb:
09:f5:08:05:18:5e:f5:e8:e7:1b:07:dc:b2:90:79:
39:11:80:18:0a:96:cf:1c:e1:97:b5:2d:b9:23:4e:
c1:c9:de:e1:93:e6:ca:d5:7d:9b:52:9a:d4:01:0a:
c4:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:45:1C:84:90:80:35:C7:BA:BA:DF:91:34:A8:53:EA:CC:CF:58:B4
X509v3 Authority Key Identifier:
keyid:69:F5:11:5A:94:9B:28:83:C4:CC:3C:49:5F:FB:89:93:DE:D9:D8:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/afURWpSbKIPEzDxJX_uJk97Z2F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c06536-01aa-4e39-89b6-b58704f28591/1/afURWpSbKIPEzDxJX_uJk97Z2F0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c06536-01aa-4e39-89b6-b58704f28591/1/afURWpSbKIPEzDxJX_uJk97Z2F0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:92:dc:73:cc:34:8a:f8:6b:52:ea:3f:79:a2:cc:b4:bf:28:
83:0a:c1:c5:09:89:83:2f:b9:91:fc:e5:37:85:c3:a9:3a:ff:
5c:9d:76:d7:7e:a7:b3:79:b7:f0:1c:8f:5b:37:e9:9b:1c:27:
1e:b7:ba:5d:78:10:1d:53:44:85:ec:59:a8:f3:17:0e:26:35:
e3:6f:ec:cf:ec:38:a7:3b:1e:34:39:8a:23:a1:52:f1:2b:e1:
e1:42:df:44:f8:0f:03:48:df:c5:17:25:14:72:75:63:55:c0:
c3:23:5c:0c:d6:d8:52:23:12:62:61:8c:b4:73:23:ec:ac:23:
6a:c3:4e:0d:b8:7a:79:f0:0f:60:3c:dd:fe:bf:b3:f7:69:be:
90:f1:06:f9:50:4b:86:5e:23:19:86:f8:c6:4e:1e:40:0c:de:
4c:a4:21:c1:4a:3d:ff:62:2d:51:cb:78:a1:98:b1:e9:c2:cc:
2e:99:a2:75:e6:15:44:48:24:19:b3:c3:3a:6e:7a:c1:b0:dc:
3b:a1:89:fd:48:80:7d:09:26:99:5b:b6:43:44:ec:db:f9:82:
02:31:cf:e5:c9:34:a5:78:40:7e:88:17:fb:ac:7a:9d:b8:c8:
4e:29:1a:8f:23:c8:40:89:bd:7e:c3:e9:0c:39:31:8d:0d:01:
b2:18:ea:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:53:33 2025 by rpki-client