Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/859170-a974-4ae3-a020-3ea59d96a790/1/r5VJF2-WbToiFBAHkJfIfw4dILE.mft
File: r5VJF2-WbToiFBAHkJfIfw4dILE.mft (raw, json)
Hash identifier: ItG0QpfJKvJKAh7vaJgwX5T5NxmRsinciGCUSy5fdwQ=
Subject key identifier: FE:8D:71:DC:9D:94:41:F8:D3:EA:3B:BD:31:1D:23:F0:7D:C8:CF:13
Authority key identifier: AF:95:49:17:6F:96:6D:3A:22:14:10:07:90:97:C8:7F:0E:1D:20:B1
Certificate issuer: /CN=af9549176f966d3a221410079097c87f0e1d20b1
Certificate serial: 01984DAF88BF0BDFD30981D054BBD33D14B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r5VJF2-WbToiFBAHkJfIfw4dILE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/859170-a974-4ae3-a020-3ea59d96a790/1/r5VJF2-WbToiFBAHkJfIfw4dILE.mft
Manifest number: 0D65
Signing time: Sun 27 Jul 2025 21:00:05 +0000
Manifest this update: Sun 27 Jul 2025 21:00:05 +0000
Manifest next update: Mon 28 Jul 2025 21:00:05 +0000
Files and hashes: 1: 1n_N6auYiXQ1pyBQYj7m3QI_dSs.roa (hash: LsHjMOF74kduMAehGu3uEfQUdY1PYN7E293m6Bfa2Jo=)
2: r5VJF2-WbToiFBAHkJfIfw4dILE.crl (hash: Juv5l3Ub7NS8462+sTfh7EIS531AslWu2NAdNLA46l0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/859170-a974-4ae3-a020-3ea59d96a790/1/r5VJF2-WbToiFBAHkJfIfw4dILE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/859170-a974-4ae3-a020-3ea59d96a790/1/r5VJF2-WbToiFBAHkJfIfw4dILE.mft
rsync://rpki.ripe.net/repository/DEFAULT/r5VJF2-WbToiFBAHkJfIfw4dILE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 18:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4d:af:88:bf:0b:df:d3:09:81:d0:54:bb:d3:3d:14:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af9549176f966d3a221410079097c87f0e1d20b1
Validity
Not Before: Jul 27 21:00:05 2025 GMT
Not After : Jul 28 21:00:05 2025 GMT
Subject: CN=fe8d71dc9d9441f8d3ea3bbd311d23f07dc8cf13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:31:a2:51:88:58:eb:12:8a:76:b8:69:ad:99:
91:9f:13:18:95:70:22:9e:fd:43:a1:bb:08:fb:65:
fa:98:7b:00:89:9b:3d:fc:b7:27:e4:71:54:23:45:
68:99:c2:dc:01:90:50:c7:a8:8b:50:59:90:12:09:
06:cb:6a:79:f6:8d:e6:25:18:58:26:ef:c7:5a:11:
c6:ed:40:ba:9e:4b:eb:89:6b:71:c0:66:42:8f:a3:
72:91:db:80:e2:7b:ca:c4:83:ce:49:de:43:6d:79:
f9:c1:98:fb:87:8e:6f:39:40:18:45:0c:d2:0e:24:
e1:d3:3e:bb:ea:a9:12:35:46:6a:71:31:00:c5:29:
f9:bf:cf:8b:f2:ce:3d:3e:d5:91:9a:82:22:f5:1a:
d4:66:cb:5a:28:de:81:a5:80:89:86:1b:df:b5:16:
e9:77:fb:a8:85:e8:df:e0:07:9f:8e:9b:71:a8:ce:
8a:80:9a:82:1b:2e:08:16:c0:34:0c:a4:55:54:b7:
d7:78:42:13:1a:70:ed:55:fe:a2:68:8d:8f:71:92:
ab:48:a5:fa:d6:4c:84:f8:8e:c6:86:c5:1e:58:a0:
f8:db:f9:39:c6:24:dc:b0:6b:a5:53:bb:0f:1c:ce:
0a:85:5b:f4:84:53:41:12:90:ce:56:ca:52:36:b2:
5c:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:8D:71:DC:9D:94:41:F8:D3:EA:3B:BD:31:1D:23:F0:7D:C8:CF:13
X509v3 Authority Key Identifier:
keyid:AF:95:49:17:6F:96:6D:3A:22:14:10:07:90:97:C8:7F:0E:1D:20:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r5VJF2-WbToiFBAHkJfIfw4dILE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/859170-a974-4ae3-a020-3ea59d96a790/1/r5VJF2-WbToiFBAHkJfIfw4dILE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/859170-a974-4ae3-a020-3ea59d96a790/1/r5VJF2-WbToiFBAHkJfIfw4dILE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:4c:98:8b:87:1a:cc:f1:d8:eb:c9:6c:27:67:a4:c2:96:e1:
de:d0:f4:b1:20:46:7a:f2:91:77:be:35:1e:1f:df:d1:a6:cb:
d7:32:86:37:ae:64:15:00:4b:7c:30:a1:73:2d:56:e7:70:b8:
a1:f6:7a:e7:29:f3:d9:1b:a1:0c:ac:96:60:0a:16:0a:1d:91:
09:89:b3:8a:40:7f:ed:e9:b9:a1:06:83:48:bc:82:6b:2a:25:
52:ae:9e:d0:fe:a3:c0:67:53:85:59:e5:a1:db:49:bd:0e:9b:
0f:5c:13:c2:aa:ea:39:c6:63:e7:4b:e5:eb:33:81:b6:af:9c:
1e:33:50:91:98:54:4d:e8:de:e5:6a:90:3f:17:7d:d7:c2:54:
78:43:94:fc:4c:6c:67:c6:7e:bf:1e:3f:55:9b:ab:0f:26:50:
eb:e6:1f:69:d2:10:28:80:83:0b:d7:3d:fb:9a:0e:a1:6f:72:
eb:cc:d6:33:44:67:d3:34:a7:87:4c:d5:50:ad:e8:42:69:a7:
17:76:f2:68:29:8a:00:82:c7:5f:a2:cb:9f:aa:93:98:5a:83:
77:f9:b6:6d:46:0e:93:56:0b:a3:63:5c:3f:10:68:7b:f8:ba:
43:80:12:c3:35:be:51:31:41:22:0e:1d:5d:97:c4:b7:fe:0a:
ae:c8:2b:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhNr4i/C9/TCYHQVLvTPRSwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmOTU0OTE3NmY5NjZkM2EyMjE0MTAwNzkwOTdjODdmMGUx
ZDIwYjEwHhcNMjUwNzI3MjEwMDA1WhcNMjUwNzI4MjEwMDA1WjAzMTEwLwYDVQQD
EyhmZThkNzFkYzlkOTQ0MWY4ZDNlYTNiYmQzMTFkMjNmMDdkYzhjZjEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAljGiUYhY6xKKdrhprZmRnxMYlXAi
nv1DobsI+2X6mHsAiZs9/Lcn5HFUI0VomcLcAZBQx6iLUFmQEgkGy2p59o3mJRhY
Ju/HWhHG7UC6nkvriWtxwGZCj6NykduA4nvKxIPOSd5DbXn5wZj7h45vOUAYRQzS
DiTh0z676qkSNUZqcTEAxSn5v8+L8s49PtWRmoIi9RrUZstaKN6BpYCJhhvftRbp
d/uohejf4AefjptxqM6KgJqCGy4IFsA0DKRVVLfXeEITGnDtVf6iaI2PcZKrSKX6
1kyE+I7GhsUeWKD42/k5xiTcsGulU7sPHM4KhVv0hFNBEpDOVspSNrJc7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP6NcdydlEH40+o7vTEdI/B9yM8TMB8GA1UdIwQY
MBaAFK+VSRdvlm06IhQQB5CXyH8OHSCxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcjVWSkYyLVdiVG9pRkJBSGtKZklmdzRkSUxFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS84NTkxNzAtYTk3NC00YWUzLWEwMjAt
M2VhNTlkOTZhNzkwLzEvcjVWSkYyLVdiVG9pRkJBSGtKZklmdzRkSUxFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS84NTkxNzAtYTk3NC00YWUzLWEwMjAtM2VhNTlkOTZhNzkw
LzEvcjVWSkYyLVdiVG9pRkJBSGtKZklmdzRkSUxFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANEyYi4ca
zPHY68lsJ2ekwpbh3tD0sSBGevKRd741Hh/f0abL1zKGN65kFQBLfDChcy1W53C4
ofZ65ynz2RuhDKyWYAoWCh2RCYmzikB/7em5oQaDSLyCayolUq6e0P6jwGdThVnl
odtJvQ6bD1wTwqrqOcZj50vl6zOBtq+cHjNQkZhUTeje5WqQPxd918JUeEOU/Exs
Z8Z+vx4/VZurDyZQ6+YfadIQKICDC9c9+5oOoW9y68zWM0Rn0zSnh0zVUK3oQmmn
F3byaCmKAILHX6LLn6qTmFqDd/m2bUYOk1YLo2NcPxBoe/i6Q4ASwzW+UTFBIg4d
XZfEt/4KrsgrRg==
-----END CERTIFICATE-----
Generated at Mon Jul 28 01:48:28 2025 by rpki-client