Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/0da847-1ae9-496c-89fa-9245a9ab978b/1/rwMNO0xYnpSj72Hd1UAajz_3m20.mft
File: rwMNO0xYnpSj72Hd1UAajz_3m20.mft (raw, json)
Hash identifier: s60i/aI064+3eWpAYbvm6ys3ZqWrl2HxCm14t1rbgXw=
Subject key identifier: 5C:AA:2F:32:D7:1E:1C:82:0E:30:EA:95:79:76:7C:D3:F9:5F:1B:8B
Authority key identifier: AF:03:0D:3B:4C:58:9E:94:A3:EF:61:DD:D5:40:1A:8F:3F:F7:9B:6D
Certificate issuer: /CN=af030d3b4c589e94a3ef61ddd5401a8f3ff79b6d
Certificate serial: 019849D3BACE37629C6721393DFE0F98578A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rwMNO0xYnpSj72Hd1UAajz_3m20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/0da847-1ae9-496c-89fa-9245a9ab978b/1/rwMNO0xYnpSj72Hd1UAajz_3m20.mft
Manifest number: 0437
Signing time: Sun 27 Jul 2025 03:01:09 +0000
Manifest this update: Sun 27 Jul 2025 03:01:09 +0000
Manifest next update: Mon 28 Jul 2025 03:01:09 +0000
Files and hashes: 1: lhPT8Z32dm5HBnSDBqDW1qERmiA.roa (hash: 0NqD/8/FwQf4n6Nk71zoiew6bzyeCyV72ogP7Shiesg=)
2: rwMNO0xYnpSj72Hd1UAajz_3m20.crl (hash: E2X7qM636eJ9d0htx4qHj/WLKRaowVat4DSU/a6z+RY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/0da847-1ae9-496c-89fa-9245a9ab978b/1/rwMNO0xYnpSj72Hd1UAajz_3m20.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/0da847-1ae9-496c-89fa-9245a9ab978b/1/rwMNO0xYnpSj72Hd1UAajz_3m20.mft
rsync://rpki.ripe.net/repository/DEFAULT/rwMNO0xYnpSj72Hd1UAajz_3m20.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:ba:ce:37:62:9c:67:21:39:3d:fe:0f:98:57:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af030d3b4c589e94a3ef61ddd5401a8f3ff79b6d
Validity
Not Before: Jul 27 03:01:09 2025 GMT
Not After : Jul 28 03:01:09 2025 GMT
Subject: CN=5caa2f32d71e1c820e30ea9579767cd3f95f1b8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:08:ac:5c:c9:7c:e3:3b:84:bd:f2:56:37:c2:
cc:91:d7:ee:ca:7a:fe:ff:b6:a4:84:56:18:be:ed:
1f:2d:c0:77:0d:a4:ea:b6:fc:a9:8d:29:ef:b2:93:
aa:b2:80:2f:8f:7a:89:5d:b9:4c:27:db:cc:01:9d:
06:83:c7:63:94:59:fc:b9:88:b3:24:e1:cd:cb:61:
03:99:e6:46:10:d1:c2:da:e3:56:1a:ae:2c:96:df:
e5:59:88:29:74:4c:08:38:9d:09:30:8b:75:86:fc:
1f:bd:5b:8f:36:3b:1c:b6:4f:5f:fa:23:d7:26:5d:
c2:50:15:57:93:2d:81:67:71:44:fd:a7:e5:7d:25:
cd:ed:67:0f:6f:f5:b0:ac:fc:0b:2a:9a:0d:9a:02:
02:58:98:ac:30:cb:73:8d:35:04:a6:48:13:6d:d4:
b3:f1:70:d0:09:9b:ac:7f:6a:68:59:fd:54:5a:50:
a7:a7:82:58:b4:6f:4b:cf:e1:7c:0f:f8:cf:52:eb:
03:59:64:5c:7b:a1:9e:94:9d:e4:d0:26:6b:d4:d6:
84:40:0d:43:da:db:95:f8:c5:5a:05:1d:d5:39:d9:
bd:90:ae:0b:f0:40:9b:72:1a:11:fc:02:84:5b:7e:
d1:09:f2:02:fb:f7:71:4b:7f:52:f5:6d:ae:8a:8f:
c8:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:AA:2F:32:D7:1E:1C:82:0E:30:EA:95:79:76:7C:D3:F9:5F:1B:8B
X509v3 Authority Key Identifier:
keyid:AF:03:0D:3B:4C:58:9E:94:A3:EF:61:DD:D5:40:1A:8F:3F:F7:9B:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rwMNO0xYnpSj72Hd1UAajz_3m20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0da847-1ae9-496c-89fa-9245a9ab978b/1/rwMNO0xYnpSj72Hd1UAajz_3m20.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0da847-1ae9-496c-89fa-9245a9ab978b/1/rwMNO0xYnpSj72Hd1UAajz_3m20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:3e:7e:d3:e7:fd:4f:c7:50:ed:21:96:ce:ff:d3:6a:fa:e7:
3e:52:e2:d6:97:ff:c9:e1:f8:30:28:36:99:f3:99:a0:6a:6b:
f7:64:60:d1:99:75:b9:07:60:b6:69:c1:98:94:f9:be:ff:00:
aa:61:fc:0b:35:21:fb:bc:98:6b:98:b3:3d:3c:1f:8a:62:dd:
09:80:31:61:89:40:a5:0a:cd:8d:c3:98:7a:8c:25:fb:1d:53:
8c:a5:ff:f9:ef:0b:8d:e8:1a:5f:3f:34:05:be:00:07:13:f9:
27:41:8c:6b:7c:02:f6:e5:7e:5c:bc:f4:dc:0e:d9:88:fd:bb:
62:8e:4e:20:59:60:6b:58:d3:2b:65:ed:14:ba:e5:e8:02:72:
20:bb:ff:48:da:ad:28:21:79:8b:9e:65:8c:40:22:a1:89:5d:
48:41:f8:af:5d:58:04:03:dc:36:19:b1:f5:a6:96:24:34:a2:
d3:95:c7:79:b1:e4:1e:b6:4d:ca:12:1e:b1:52:2a:15:d9:48:
34:24:a8:49:5a:bc:33:29:33:4e:da:94:80:eb:88:f1:a8:ab:
c3:83:89:28:43:b0:35:6a:25:f5:ed:ff:63:77:89:ac:e7:36:
73:71:42:22:e7:e9:3b:02:c8:a9:48:20:ff:ca:57:e5:68:a2:
9e:ca:ba:e0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhJ07rON2KcZyE5Pf4PmFeKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmMDMwZDNiNGM1ODllOTRhM2VmNjFkZGQ1NDAxYThmM2Zm
NzliNmQwHhcNMjUwNzI3MDMwMTA5WhcNMjUwNzI4MDMwMTA5WjAzMTEwLwYDVQQD
Eyg1Y2FhMmYzMmQ3MWUxYzgyMGUzMGVhOTU3OTc2N2NkM2Y5NWYxYjhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApAisXMl84zuEvfJWN8LMkdfuynr+
/7akhFYYvu0fLcB3DaTqtvypjSnvspOqsoAvj3qJXblMJ9vMAZ0Gg8djlFn8uYiz
JOHNy2EDmeZGENHC2uNWGq4slt/lWYgpdEwIOJ0JMIt1hvwfvVuPNjsctk9f+iPX
Jl3CUBVXky2BZ3FE/aflfSXN7WcPb/WwrPwLKpoNmgICWJisMMtzjTUEpkgTbdSz
8XDQCZusf2poWf1UWlCnp4JYtG9Lz+F8D/jPUusDWWRce6GelJ3k0CZr1NaEQA1D
2tuV+MVaBR3VOdm9kK4L8ECbchoR/AKEW37RCfIC+/dxS39S9W2uio/ImwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFyqLzLXHhyCDjDqlXl2fNP5XxuLMB8GA1UdIwQY
MBaAFK8DDTtMWJ6Uo+9h3dVAGo8/95ttMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcndNTk8weFlucFNqNzJIZDFVQWFqel8zbTIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi8wZGE4NDctMWFlOS00OTZjLTg5ZmEt
OTI0NWE5YWI5NzhiLzEvcndNTk8weFlucFNqNzJIZDFVQWFqel8zbTIwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi8wZGE4NDctMWFlOS00OTZjLTg5ZmEtOTI0NWE5YWI5Nzhi
LzEvcndNTk8weFlucFNqNzJIZDFVQWFqel8zbTIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcD5+0+f9
T8dQ7SGWzv/TavrnPlLi1pf/yeH4MCg2mfOZoGpr92Rg0Zl1uQdgtmnBmJT5vv8A
qmH8CzUh+7yYa5izPTwfimLdCYAxYYlApQrNjcOYeowl+x1TjKX/+e8LjegaXz80
Bb4ABxP5J0GMa3wC9uV+XLz03A7ZiP27Yo5OIFlga1jTK2XtFLrl6AJyILv/SNqt
KCF5i55ljEAioYldSEH4r11YBAPcNhmx9aaWJDSi05XHebHkHrZNyhIesVIqFdlI
NCSoSVq8MykzTtqUgOuI8airw4OJKEOwNWol9e3/Y3eJrOc2c3FCIufpOwLIqUgg
/8pX5Wiinsq64A==
-----END CERTIFICATE-----
Generated at Sun Jul 27 09:33:12 2025 by rpki-client