Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/52b199-9e1f-4ec7-b0aa-4a4e0f424f17/1/rwNoFqMX3ZnSU4OjKmgYWcBHtf8.mft
File: rwNoFqMX3ZnSU4OjKmgYWcBHtf8.mft (raw, json)
Hash identifier: 3bwBYtGCuvjTGNUQ44ohfxfz5GAiECAHJFNdVW05m9o=
Subject key identifier: AD:D5:4F:E9:33:E4:0D:19:C4:76:A0:DA:FC:15:4D:D1:4E:DD:2E:2F
Authority key identifier: AF:03:68:16:A3:17:DD:99:D2:53:83:A3:2A:68:18:59:C0:47:B5:FF
Certificate issuer: /CN=af036816a317dd99d25383a32a681859c047b5ff
Certificate serial: 01984A419B00A3E3D4AF207514DB0465CCC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rwNoFqMX3ZnSU4OjKmgYWcBHtf8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/52b199-9e1f-4ec7-b0aa-4a4e0f424f17/1/rwNoFqMX3ZnSU4OjKmgYWcBHtf8.mft
Manifest number: 105D
Signing time: Sun 27 Jul 2025 05:01:10 +0000
Manifest this update: Sun 27 Jul 2025 05:01:10 +0000
Manifest next update: Mon 28 Jul 2025 05:01:10 +0000
Files and hashes: 1: dv2-CubAEzDgm9-A6q6tebm8sb8.roa (hash: TsKOArcBjp/tutNspO+BZ3fNFViji2g9Yje5CxDDQXE=)
2: rwNoFqMX3ZnSU4OjKmgYWcBHtf8.crl (hash: mFxOKcDnNnSspMXrPFF7fVXrbqnEC4AkFWRwYeL4KTY=)
3: uPmBIiMy_mwoAMwRr2tHb8mN_DQ.roa (hash: HueNCAsjAp0HpCdgeRDBaDeI3suLIq9xXvHT44od5wE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/52b199-9e1f-4ec7-b0aa-4a4e0f424f17/1/rwNoFqMX3ZnSU4OjKmgYWcBHtf8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/52b199-9e1f-4ec7-b0aa-4a4e0f424f17/1/rwNoFqMX3ZnSU4OjKmgYWcBHtf8.mft
rsync://rpki.ripe.net/repository/DEFAULT/rwNoFqMX3ZnSU4OjKmgYWcBHtf8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:41:9b:00:a3:e3:d4:af:20:75:14:db:04:65:cc:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af036816a317dd99d25383a32a681859c047b5ff
Validity
Not Before: Jul 27 05:01:10 2025 GMT
Not After : Jul 28 05:01:10 2025 GMT
Subject: CN=add54fe933e40d19c476a0dafc154dd14edd2e2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:b8:8c:e0:10:2b:ba:bd:66:27:26:da:79:c8:
02:8d:b6:1d:8a:85:5b:f9:24:c6:2a:fb:40:55:94:
6e:02:1f:09:d6:6b:7a:2d:8f:a5:69:9d:5f:29:00:
bc:7d:ee:27:ee:2e:67:6f:f1:61:9e:d3:39:14:1d:
10:e0:ed:d9:d1:c9:f2:97:16:2f:cc:7d:3a:03:ee:
c2:fe:9b:cb:27:f7:36:fd:60:21:97:55:c5:97:b4:
82:4c:6e:06:c9:3c:65:61:92:25:a0:bd:e7:0d:80:
7d:e1:06:85:ed:b0:02:74:90:56:c8:0b:80:e1:37:
58:64:0c:9f:9f:1b:74:0e:8e:4e:fb:1a:aa:87:94:
b4:79:76:be:05:1b:a2:a6:e4:3b:fe:20:d2:00:bb:
a0:e4:ce:95:31:50:5e:e3:44:36:89:16:1d:84:78:
5b:83:0c:6d:34:f5:4c:70:08:e3:46:ee:4b:55:09:
b0:28:f9:c9:7c:3c:3f:b2:ad:4f:95:ef:21:51:bd:
3d:c2:f1:61:e3:11:d7:92:9d:b5:9e:32:c3:17:8b:
b6:d3:7c:ea:85:30:aa:ab:53:9b:d1:45:22:f4:47:
d4:11:d6:de:23:53:55:1e:8c:b3:7c:55:f9:88:dc:
d2:ea:0f:52:35:3c:54:9a:35:f4:5d:ac:c9:0b:f4:
63:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:D5:4F:E9:33:E4:0D:19:C4:76:A0:DA:FC:15:4D:D1:4E:DD:2E:2F
X509v3 Authority Key Identifier:
keyid:AF:03:68:16:A3:17:DD:99:D2:53:83:A3:2A:68:18:59:C0:47:B5:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rwNoFqMX3ZnSU4OjKmgYWcBHtf8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/52b199-9e1f-4ec7-b0aa-4a4e0f424f17/1/rwNoFqMX3ZnSU4OjKmgYWcBHtf8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/52b199-9e1f-4ec7-b0aa-4a4e0f424f17/1/rwNoFqMX3ZnSU4OjKmgYWcBHtf8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:3f:e8:d1:d2:0f:da:da:38:be:2d:59:2d:ad:a3:fd:5d:30:
bc:5f:29:8c:c4:0a:d5:11:a5:fa:82:e2:c0:a3:7f:21:50:ad:
68:b5:4d:f8:55:cd:b8:bc:f7:d6:a1:03:ed:0d:8d:d0:6e:55:
f3:88:53:cd:6b:02:2e:09:08:3d:12:70:b6:bf:17:13:4c:48:
16:3d:a9:0e:e5:66:66:d0:2a:f8:c1:f8:e4:20:02:6b:00:f3:
95:94:74:33:90:c7:06:dd:c9:ea:3b:f9:8d:dc:ad:fa:b0:85:
e8:97:b1:4d:44:87:7d:94:5e:a5:e8:2a:be:bb:b2:67:91:30:
b7:a7:e5:76:b1:a6:55:8a:9b:95:10:0d:d2:a9:98:a3:58:fa:
9d:d6:57:3a:56:5f:d9:71:cb:d4:3c:94:6f:03:78:0c:89:84:
6d:3c:ea:33:fa:cd:af:fc:ea:b1:ec:22:83:99:56:4d:73:fa:
fd:1b:b0:1e:3d:ee:10:59:22:05:a6:0a:34:3d:49:1e:b2:e3:
7d:67:40:19:65:a3:ab:d9:05:bb:34:3b:90:2d:10:8e:2e:fa:
39:48:6a:f0:54:23:b9:47:9d:d7:78:e1:e7:69:62:bd:f0:02:
a2:78:be:36:3e:ef:31:f1:58:74:ce:e9:61:ae:60:8f:5e:a9:
7a:62:d1:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:36:09 2025 by rpki-client