Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/3001ad-de90-4360-811f-0a0d05ed0c6b/1/r5NWA-UugxU3cW1FizYBkvmaNok.mft
File: r5NWA-UugxU3cW1FizYBkvmaNok.mft (raw, json)
Hash identifier: YM30xc+53bDZJ8O7GVR1Sag1dLTMV9LJTo/hRaA2/Yg=
Subject key identifier: 47:CD:98:C2:63:BB:30:B3:E1:3C:2D:64:B0:5B:83:2B:B2:C7:B9:4B
Authority key identifier: AF:93:56:03:E5:2E:83:15:37:71:6D:45:8B:36:01:92:F9:9A:36:89
Certificate issuer: /CN=af935603e52e831537716d458b360192f99a3689
Certificate serial: 0198458929D36D8ED5EA398D22C48B47FD08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r5NWA-UugxU3cW1FizYBkvmaNok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/3001ad-de90-4360-811f-0a0d05ed0c6b/1/r5NWA-UugxU3cW1FizYBkvmaNok.mft
Manifest number: 0DF7
Signing time: Sat 26 Jul 2025 07:01:13 +0000
Manifest this update: Sat 26 Jul 2025 07:01:13 +0000
Manifest next update: Sun 27 Jul 2025 07:01:13 +0000
Files and hashes: 1: C8GJTtN7fk4YCqjJY8mOHTrefmE.roa (hash: UKesPOi4+5CzCQnG0snfHD/ZU73osDFB9OchjV8wo3E=)
2: eQMDRNJuMlNlfPMiBSEoRMIZqkc.roa (hash: +YT5AumPRJxR5qeAOACvLYBXjcHMfp3cae2CLFa9pWo=)
3: pK186WjMEhCqpTApn72adWGJTc0.roa (hash: 2vPV6EcNoUKs6NmXfu/cqUoWqE3tnBkAH13PFqBjjPI=)
4: r5NWA-UugxU3cW1FizYBkvmaNok.crl (hash: kIzUNZu/sE3UyZxe0bdzDZCC/aYGQLEBVJLiko002+c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/3001ad-de90-4360-811f-0a0d05ed0c6b/1/r5NWA-UugxU3cW1FizYBkvmaNok.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/3001ad-de90-4360-811f-0a0d05ed0c6b/1/r5NWA-UugxU3cW1FizYBkvmaNok.mft
rsync://rpki.ripe.net/repository/DEFAULT/r5NWA-UugxU3cW1FizYBkvmaNok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 06:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:89:29:d3:6d:8e:d5:ea:39:8d:22:c4:8b:47:fd:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af935603e52e831537716d458b360192f99a3689
Validity
Not Before: Jul 26 07:01:13 2025 GMT
Not After : Jul 27 07:01:13 2025 GMT
Subject: CN=47cd98c263bb30b3e13c2d64b05b832bb2c7b94b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:54:6d:ef:14:ef:f5:af:f0:48:0b:c7:a9:09:
30:10:1b:b8:66:68:98:30:3c:f8:2b:36:6a:d0:a7:
e2:70:79:54:68:c1:cd:ac:55:f7:95:60:cd:5b:b1:
4d:94:52:4b:94:18:95:bf:99:ab:fa:6a:77:7c:e2:
2f:9e:f9:42:11:c4:09:03:28:5d:5c:2c:36:be:50:
08:69:e1:0e:33:9f:e6:81:3f:92:0b:a9:13:a7:6a:
3b:6f:cc:35:7a:45:5f:89:e7:c6:bb:c3:b3:3c:f1:
6d:68:00:b4:3a:ae:73:c8:49:35:f4:32:af:45:c0:
a4:4e:29:d9:83:1b:1c:21:09:88:b4:59:96:6b:0d:
d1:94:fd:f0:20:ca:c4:1f:a2:70:2b:63:46:a5:9f:
d9:f9:82:70:36:18:d8:1f:d3:6b:cb:bf:e6:31:97:
61:28:22:2b:84:5a:f9:0b:b1:f7:fe:ab:25:47:c6:
af:b0:05:44:79:19:06:20:d9:7a:ed:a0:27:37:b9:
14:e9:d7:99:51:f2:92:6a:88:71:b8:d6:2a:8b:7d:
a4:77:b3:18:78:60:a2:c8:39:e4:97:ff:de:d1:93:
64:01:30:df:a2:42:34:a1:74:3c:87:04:4c:31:c6:
50:f9:ae:ec:8a:7f:1a:7b:d7:b6:29:46:c0:60:88:
a8:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:CD:98:C2:63:BB:30:B3:E1:3C:2D:64:B0:5B:83:2B:B2:C7:B9:4B
X509v3 Authority Key Identifier:
keyid:AF:93:56:03:E5:2E:83:15:37:71:6D:45:8B:36:01:92:F9:9A:36:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r5NWA-UugxU3cW1FizYBkvmaNok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/3001ad-de90-4360-811f-0a0d05ed0c6b/1/r5NWA-UugxU3cW1FizYBkvmaNok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/3001ad-de90-4360-811f-0a0d05ed0c6b/1/r5NWA-UugxU3cW1FizYBkvmaNok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:93:e0:1d:3e:9c:55:4a:66:ea:3e:c2:59:5e:9f:3d:5e:8c:
39:fa:3f:a1:8b:f9:45:e7:12:e0:a5:8f:3a:c5:da:04:2e:fb:
31:0b:1a:6d:3c:9d:fb:9d:b1:5b:b7:b9:01:48:f0:bb:be:71:
1a:1d:0b:f5:f0:fc:60:75:fb:19:89:41:25:77:34:d3:6c:30:
b4:fc:57:8b:f4:46:aa:af:19:6a:2d:3c:b1:74:d1:f9:a6:6f:
6e:2a:d3:6d:e6:8e:d3:16:30:be:94:98:52:20:b7:f8:92:3e:
53:d8:ee:40:c7:8e:59:0a:2f:a9:67:70:cd:9f:7d:59:e5:09:
9e:0a:f4:d0:5f:58:8f:a8:ce:02:46:39:6a:63:a7:47:51:eb:
67:d8:74:4d:88:c4:42:5c:23:09:36:04:e3:e8:19:45:fd:44:
dc:1b:89:e3:b0:c1:47:bb:1c:7e:82:9d:d9:ed:23:7e:ba:4e:
52:49:f0:50:47:ca:f3:94:84:c2:d4:18:d2:d0:29:e8:25:9b:
b7:98:d0:21:5b:41:76:8a:ce:fc:15:ea:51:20:4f:27:78:6d:
c2:d9:d6:c0:b7:05:fd:fc:d5:d4:b0:4a:1b:0b:6b:93:13:91:
3e:11:2b:aa:f5:20:e6:fb:3d:12:4f:9d:ff:1c:70:30:35:f7:
c9:36:c9:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 15:01:45 2025 by rpki-client