Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/0da847-1ae9-496c-89fa-9245a9ab978b/1/rwMNO0xYnpSj72Hd1UAajz_3m20.mft
File: rwMNO0xYnpSj72Hd1UAajz_3m20.mft (raw, json)
Hash identifier: QfyGdyY8n+ZTv/K0CX1CWbTvm0bFyJKYB54ScHDl+nA=
Subject key identifier: A3:95:6E:99:5D:E9:EB:D1:6F:F9:0C:56:1A:D7:92:2A:CC:05:10:47
Authority key identifier: AF:03:0D:3B:4C:58:9E:94:A3:EF:61:DD:D5:40:1A:8F:3F:F7:9B:6D
Certificate issuer: /CN=af030d3b4c589e94a3ef61ddd5401a8f3ff79b6d
Certificate serial: 019A1D2C7687DEB132B892476F5E28D4612B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rwMNO0xYnpSj72Hd1UAajz_3m20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/0da847-1ae9-496c-89fa-9245a9ab978b/1/rwMNO0xYnpSj72Hd1UAajz_3m20.mft
Manifest number: 0529
Signing time: Sat 25 Oct 2025 21:00:44 +0000
Manifest this update: Sat 25 Oct 2025 21:00:44 +0000
Manifest next update: Sun 26 Oct 2025 21:00:44 +0000
Files and hashes: 1: lhPT8Z32dm5HBnSDBqDW1qERmiA.roa (hash: 0NqD/8/FwQf4n6Nk71zoiew6bzyeCyV72ogP7Shiesg=)
2: rwMNO0xYnpSj72Hd1UAajz_3m20.crl (hash: 9VbBw1cmENHxIk4tK1cf1vKOX0r0nLfnJnKBdXQNDkY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/0da847-1ae9-496c-89fa-9245a9ab978b/1/rwMNO0xYnpSj72Hd1UAajz_3m20.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/0da847-1ae9-496c-89fa-9245a9ab978b/1/rwMNO0xYnpSj72Hd1UAajz_3m20.mft
rsync://rpki.ripe.net/repository/DEFAULT/rwMNO0xYnpSj72Hd1UAajz_3m20.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 21:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1d:2c:76:87:de:b1:32:b8:92:47:6f:5e:28:d4:61:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af030d3b4c589e94a3ef61ddd5401a8f3ff79b6d
Validity
Not Before: Oct 25 21:00:44 2025 GMT
Not After : Oct 26 21:00:44 2025 GMT
Subject: CN=a3956e995de9ebd16ff90c561ad7922acc051047
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:da:c6:cf:bb:74:72:2a:a4:1d:d1:b2:a3:f1:
e2:1f:17:42:61:21:93:4a:51:9e:1c:76:1d:bb:d0:
eb:03:03:85:64:04:84:49:a3:6f:9a:15:18:80:c1:
4e:8d:b9:ea:c3:5f:23:bd:0c:f4:b9:c7:10:f9:dd:
86:d3:fd:1d:a4:c6:20:e1:e2:c7:95:14:d2:92:ff:
bc:1c:af:35:f0:7d:24:ee:ea:9c:3e:34:44:71:72:
a6:57:2a:11:96:54:cc:ce:11:38:90:53:8c:9e:5e:
bb:1b:ca:e9:06:b0:00:76:9d:53:2f:0b:26:5d:c1:
09:c0:03:99:71:b6:af:94:f5:19:07:c6:c3:1e:65:
b5:93:49:24:1e:c9:74:67:10:64:75:f9:f1:54:b9:
c4:9b:0d:cb:26:74:56:c7:ad:ca:14:c8:48:b9:bd:
97:69:ef:71:14:15:dc:b9:33:92:04:a7:c7:63:32:
c7:e4:4f:3d:1f:34:f8:83:b6:a3:85:3f:09:d4:43:
e1:67:cb:5f:06:da:84:92:82:17:ae:6b:7f:bc:b1:
70:e9:99:ea:cf:04:3f:e9:0d:03:6c:96:68:c2:6b:
f5:c7:13:83:bc:0a:48:79:a6:3f:4e:5d:e2:4a:52:
2b:ea:ec:0d:bd:ea:60:99:2d:f4:b7:58:da:4d:af:
f5:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:95:6E:99:5D:E9:EB:D1:6F:F9:0C:56:1A:D7:92:2A:CC:05:10:47
X509v3 Authority Key Identifier:
keyid:AF:03:0D:3B:4C:58:9E:94:A3:EF:61:DD:D5:40:1A:8F:3F:F7:9B:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rwMNO0xYnpSj72Hd1UAajz_3m20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0da847-1ae9-496c-89fa-9245a9ab978b/1/rwMNO0xYnpSj72Hd1UAajz_3m20.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0da847-1ae9-496c-89fa-9245a9ab978b/1/rwMNO0xYnpSj72Hd1UAajz_3m20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:7c:51:5e:d0:2d:46:04:0e:14:f9:c7:04:78:59:5d:c8:f7:
03:f0:8a:0e:86:53:50:6f:38:0b:e6:dc:6d:d0:45:41:dc:c8:
b3:75:17:05:85:23:f6:77:5b:bb:12:b0:61:dd:8e:1e:67:26:
2e:95:b8:57:de:6e:28:c8:d1:fb:04:8c:77:72:83:2b:3a:9a:
82:3d:bb:fd:ed:85:50:86:13:1f:d2:54:7a:de:75:e2:e2:d6:
67:c7:4e:52:5f:20:7d:d1:0a:e6:54:fb:56:5c:ee:fe:65:a0:
80:26:85:ba:e4:28:78:87:e0:3c:58:5d:58:d1:43:4a:d1:10:
34:b9:11:80:e0:75:53:3f:77:f0:67:8b:6a:bf:e3:83:3e:e1:
1d:e0:c5:55:ac:97:89:e5:3e:24:71:43:98:a1:4f:be:1c:7d:
df:e0:a7:be:38:b1:92:3a:49:ca:77:a9:3c:c3:fe:51:85:bb:
dd:87:39:19:35:6b:2a:53:e4:31:ec:f4:0d:a3:5b:9b:f4:e7:
db:c3:b2:1f:06:92:74:13:59:d6:21:cb:28:13:85:37:df:80:
79:0a:26:6b:c7:ca:ff:9e:f9:d9:7c:8c:7c:0c:59:5c:1b:33:
70:95:1d:a3:cd:40:5c:00:66:91:90:52:bb:24:f4:f0:1e:a6:
f1:c3:7c:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 06:56:45 2025 by rpki-client