Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/bf0bfe-9554-4b7e-95da-469619d4ecdb/1/r5ss7-OJoa5JdW7cKzKT5Ygwy4I.mft
File: r5ss7-OJoa5JdW7cKzKT5Ygwy4I.mft (raw, json)
Hash identifier: K8qvquIOs+ZrEM8K1W++UptDLIVyjNCDPGZzEcIOA18=
Subject key identifier: 1D:C6:88:55:37:A4:D0:A3:95:14:6A:60:E8:AB:DF:96:29:D9:0B:EB
Authority key identifier: AF:9B:2C:EF:E3:89:A1:AE:49:75:6E:DC:2B:32:93:E5:88:30:CB:82
Certificate issuer: /CN=af9b2cefe389a1ae49756edc2b3293e58830cb82
Certificate serial: 0198481B5611B5B714E1DC5614E747F46BAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r5ss7-OJoa5JdW7cKzKT5Ygwy4I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/bf0bfe-9554-4b7e-95da-469619d4ecdb/1/r5ss7-OJoa5JdW7cKzKT5Ygwy4I.mft
Manifest number: 02DD
Signing time: Sat 26 Jul 2025 19:00:07 +0000
Manifest this update: Sat 26 Jul 2025 19:00:07 +0000
Manifest next update: Sun 27 Jul 2025 19:00:07 +0000
Files and hashes: 1: HlRrYVzs80ZJA5_JZ3csPGXIkEY.roa (hash: 2WA22A/U8/r4tDX+UDoYIX+va554GCdeOFSCw5V25j8=)
2: r5ss7-OJoa5JdW7cKzKT5Ygwy4I.crl (hash: MJHqaFmz+TdhM87i1Ev+KxZiyhOo60Zma0w3Z0vV/ds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/bf0bfe-9554-4b7e-95da-469619d4ecdb/1/r5ss7-OJoa5JdW7cKzKT5Ygwy4I.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/bf0bfe-9554-4b7e-95da-469619d4ecdb/1/r5ss7-OJoa5JdW7cKzKT5Ygwy4I.mft
rsync://rpki.ripe.net/repository/DEFAULT/r5ss7-OJoa5JdW7cKzKT5Ygwy4I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 19:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:1b:56:11:b5:b7:14:e1:dc:56:14:e7:47:f4:6b:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af9b2cefe389a1ae49756edc2b3293e58830cb82
Validity
Not Before: Jul 26 19:00:07 2025 GMT
Not After : Jul 27 19:00:07 2025 GMT
Subject: CN=1dc6885537a4d0a395146a60e8abdf9629d90beb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:7e:71:6e:d1:2a:ed:50:5e:57:c2:a8:8a:37:
11:f3:26:92:74:fc:82:1c:82:db:65:ef:7f:36:31:
66:6b:b5:03:d5:92:be:d4:77:84:e6:0a:1d:50:43:
ac:f3:1e:68:ba:1f:9b:f6:60:2b:29:8f:9d:02:01:
f4:d5:95:45:d6:a4:a2:d5:f2:00:08:7a:ef:d0:59:
91:cd:b2:1e:84:1d:92:29:41:e5:cb:a9:d4:37:f1:
e3:0c:07:6a:41:7f:09:fb:f2:0b:5d:b0:4b:90:40:
09:d9:f7:34:fc:2d:3b:d8:4b:d6:b7:a7:b4:28:68:
7d:43:7b:d4:a0:8c:d4:8d:db:55:93:ec:d9:e6:cf:
31:56:5f:fa:6d:81:63:06:c8:cf:1a:75:8c:75:1c:
6a:e1:36:04:99:38:7b:66:a8:9b:3c:b9:44:b4:3c:
eb:13:a1:93:da:c8:6f:c0:78:67:fc:7a:6c:68:16:
5c:62:47:d1:ba:67:ca:b0:2a:af:4b:75:e0:36:f9:
46:11:0e:55:a2:a6:cd:29:3a:6e:29:e7:52:f0:29:
dd:05:33:fc:11:b7:29:8b:94:04:e6:71:14:4b:28:
b3:66:d2:a3:11:5d:bd:ac:ab:86:50:bb:b0:2a:2d:
40:22:dd:e7:f2:c5:72:44:b0:f8:cb:17:ff:52:59:
01:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:C6:88:55:37:A4:D0:A3:95:14:6A:60:E8:AB:DF:96:29:D9:0B:EB
X509v3 Authority Key Identifier:
keyid:AF:9B:2C:EF:E3:89:A1:AE:49:75:6E:DC:2B:32:93:E5:88:30:CB:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r5ss7-OJoa5JdW7cKzKT5Ygwy4I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/bf0bfe-9554-4b7e-95da-469619d4ecdb/1/r5ss7-OJoa5JdW7cKzKT5Ygwy4I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/bf0bfe-9554-4b7e-95da-469619d4ecdb/1/r5ss7-OJoa5JdW7cKzKT5Ygwy4I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:6d:ee:a4:6d:cd:a6:b9:de:30:3d:9f:73:4a:fd:57:b1:6c:
1b:d9:be:90:a5:9f:05:5f:cc:04:e4:3c:00:c7:2c:39:0b:a9:
89:31:0e:9c:80:eb:48:5c:1a:04:b5:17:51:54:0c:25:56:7f:
04:91:c3:b2:00:38:ea:b1:46:f2:43:c7:0c:86:87:ab:49:f4:
13:3a:85:cb:fd:65:5e:67:6e:07:90:a8:5d:4c:17:28:06:6f:
96:de:c4:c1:7c:2d:a9:a1:09:df:1c:f2:60:fe:f4:4b:d2:f0:
55:4a:f5:d0:bd:03:8b:41:c0:9c:ff:b4:73:9c:31:0b:93:49:
9d:46:79:45:65:4f:e0:c5:3c:ac:89:32:e4:1e:0d:2b:04:74:
4d:9c:08:ca:63:6a:24:5b:3e:1b:be:de:45:6f:f5:8f:25:94:
db:19:f9:da:20:33:45:ef:40:63:d5:37:23:57:2b:05:d1:73:
6c:17:03:61:18:02:b2:eb:eb:d8:62:a8:c8:83:de:50:2f:a6:
d8:71:9d:9c:00:1e:f1:db:e4:89:ea:31:65:64:de:94:11:69:
e2:88:44:17:b2:d4:e9:ef:a7:8d:7a:ff:b6:fd:bd:cd:36:fb:
8c:d0:cf:55:70:47:6a:5b:6a:c3:71:e2:cd:69:6c:10:31:49:
5d:57:db:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 01:53:35 2025 by rpki-client