Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/3001ad-de90-4360-811f-0a0d05ed0c6b/1/r5NWA-UugxU3cW1FizYBkvmaNok.mft
File: r5NWA-UugxU3cW1FizYBkvmaNok.mft (raw, json)
Hash identifier: Fc/wyklxB0rzrEiCK75sD8yidIYGbZGdNaTXAyc8euk=
Subject key identifier: 8D:23:3C:22:3E:4B:14:E9:A1:E7:B9:3E:A7:D1:D0:1E:F1:D9:4A:D7
Authority key identifier: AF:93:56:03:E5:2E:83:15:37:71:6D:45:8B:36:01:92:F9:9A:36:89
Certificate issuer: /CN=af935603e52e831537716d458b360192f99a3689
Certificate serial: 0199C3E9E68EED8C5C7D0D506AEC2528F240
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r5NWA-UugxU3cW1FizYBkvmaNok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/3001ad-de90-4360-811f-0a0d05ed0c6b/1/r5NWA-UugxU3cW1FizYBkvmaNok.mft
Manifest number: 0EBD
Signing time: Wed 08 Oct 2025 13:01:49 +0000
Manifest this update: Wed 08 Oct 2025 13:01:49 +0000
Manifest next update: Thu 09 Oct 2025 13:01:49 +0000
Files and hashes: 1: C8GJTtN7fk4YCqjJY8mOHTrefmE.roa (hash: UKesPOi4+5CzCQnG0snfHD/ZU73osDFB9OchjV8wo3E=)
2: eQMDRNJuMlNlfPMiBSEoRMIZqkc.roa (hash: +YT5AumPRJxR5qeAOACvLYBXjcHMfp3cae2CLFa9pWo=)
3: pK186WjMEhCqpTApn72adWGJTc0.roa (hash: 2vPV6EcNoUKs6NmXfu/cqUoWqE3tnBkAH13PFqBjjPI=)
4: r5NWA-UugxU3cW1FizYBkvmaNok.crl (hash: z++H/YvA36zieQtwD3zybZGghK9xmPOSJFKIYQOrSXY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/3001ad-de90-4360-811f-0a0d05ed0c6b/1/r5NWA-UugxU3cW1FizYBkvmaNok.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/3001ad-de90-4360-811f-0a0d05ed0c6b/1/r5NWA-UugxU3cW1FizYBkvmaNok.mft
rsync://rpki.ripe.net/repository/DEFAULT/r5NWA-UugxU3cW1FizYBkvmaNok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 13:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c3:e9:e6:8e:ed:8c:5c:7d:0d:50:6a:ec:25:28:f2:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af935603e52e831537716d458b360192f99a3689
Validity
Not Before: Oct 8 13:01:49 2025 GMT
Not After : Oct 9 13:01:49 2025 GMT
Subject: CN=8d233c223e4b14e9a1e7b93ea7d1d01ef1d94ad7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:d1:cd:a2:fb:4c:c0:36:c2:3a:cc:ac:e5:4a:
d7:1d:5d:bf:9f:a1:62:5c:0c:a2:c9:7b:89:e2:8c:
cc:71:f5:4a:f3:51:12:47:03:4d:4b:93:ea:7a:49:
0f:7c:6b:e2:94:a7:f5:8d:81:03:ad:70:1c:b8:44:
58:9d:b4:a0:8c:ab:44:03:db:9f:a6:66:6d:2b:c7:
0c:ee:1c:06:71:d7:e6:56:56:a2:7f:b0:fe:1f:5f:
41:40:4d:f4:ee:86:92:86:dc:47:5f:50:79:1d:84:
c7:bc:b9:d9:c7:df:09:7e:d4:8c:48:82:f2:ae:e7:
87:42:b4:fd:70:bb:77:3d:87:b6:40:59:56:a7:cd:
45:57:89:39:e5:2f:56:df:dd:31:95:6b:1d:92:03:
17:5f:20:95:32:ef:4e:dd:d9:b6:ec:0f:8e:79:5f:
2f:6d:d9:48:80:10:d7:87:b0:5b:76:1a:ad:25:46:
39:4a:87:95:c7:89:b8:8b:74:45:5a:c7:75:82:27:
c0:41:e2:8a:4c:de:01:40:da:03:15:df:a4:2d:fc:
1e:f0:b5:8c:39:67:bc:18:56:54:1b:1e:4c:9a:09:
33:c6:8f:a9:44:7b:68:3f:d7:af:1b:d1:f7:25:d3:
82:78:0d:44:c0:f9:18:ce:2e:1d:19:2d:5d:30:7f:
02:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:23:3C:22:3E:4B:14:E9:A1:E7:B9:3E:A7:D1:D0:1E:F1:D9:4A:D7
X509v3 Authority Key Identifier:
keyid:AF:93:56:03:E5:2E:83:15:37:71:6D:45:8B:36:01:92:F9:9A:36:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r5NWA-UugxU3cW1FizYBkvmaNok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/3001ad-de90-4360-811f-0a0d05ed0c6b/1/r5NWA-UugxU3cW1FizYBkvmaNok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/3001ad-de90-4360-811f-0a0d05ed0c6b/1/r5NWA-UugxU3cW1FizYBkvmaNok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:b0:da:ee:05:82:18:60:d6:35:01:5f:cf:f0:5f:33:36:9c:
d1:f7:74:e1:39:3f:ad:54:17:f6:ea:e2:84:ba:9b:dc:ec:a6:
12:56:64:f2:2d:12:fc:b9:e4:75:73:19:85:c5:66:25:b9:ba:
45:45:80:e3:fc:62:0d:b0:b7:4b:9e:e9:d1:0a:9f:83:80:ee:
84:72:a4:d8:51:2b:1c:22:81:12:3f:65:c8:27:0e:aa:64:31:
f4:b7:08:78:31:47:e0:68:62:0d:83:52:c0:97:4a:9d:f9:75:
0e:5d:e1:4d:31:d8:c3:02:ae:0f:17:e8:db:d5:86:dc:5c:20:
3a:b5:e0:45:be:e4:08:23:da:65:1a:f3:48:35:22:ed:58:40:
cf:5a:d9:8e:f4:90:95:ff:ae:c0:81:d5:42:44:80:4c:b1:44:
0a:3a:ef:7c:31:2c:7b:b4:27:29:5d:b6:72:fa:ce:6b:fb:c6:
12:e3:42:ed:fb:0c:b9:f4:0e:bb:22:ad:7d:e7:4e:6d:84:95:
a8:76:b8:b0:b9:a9:f1:62:cf:44:dc:d2:53:5a:40:18:27:3e:
bb:54:d6:cf:1e:87:96:46:01:d6:24:76:f1:5d:34:dc:2d:de:
97:a0:6f:cf:f5:b8:c3:d4:4b:4e:9a:c3:e1:63:6c:97:98:c2:
44:3b:26:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 21:25:30 2025 by rpki-client