Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/99be80-152c-4b65-8b32-0718aa8dd9a7/1/r5NOxpSvaBNLdRTBDc0ThXtFnjg.mft
File: r5NOxpSvaBNLdRTBDc0ThXtFnjg.mft (raw, json)
Hash identifier: rs0ze2SeBKCd2445s8bjL6kplXotIZCqxRZuMxPFy+g=
Subject key identifier: 52:13:37:FC:BC:56:58:DF:C0:EE:CD:84:69:5B:C6:A1:98:E9:5F:2A
Authority key identifier: AF:93:4E:C6:94:AF:68:13:4B:75:14:C1:0D:CD:13:85:7B:45:9E:38
Certificate issuer: /CN=af934ec694af68134b7514c10dcd13857b459e38
Certificate serial: 0199228C7499798A0EF12EC9CC73568D9ED5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r5NOxpSvaBNLdRTBDc0ThXtFnjg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/99be80-152c-4b65-8b32-0718aa8dd9a7/1/r5NOxpSvaBNLdRTBDc0ThXtFnjg.mft
Manifest number: 106E
Signing time: Sun 07 Sep 2025 05:00:54 +0000
Manifest this update: Sun 07 Sep 2025 05:00:54 +0000
Manifest next update: Mon 08 Sep 2025 05:00:54 +0000
Files and hashes: 1: 3KVjDh6tV6LcIk6BDE6xPuXzBDM.roa (hash: bQvllPBonHjb5qHCFeaDeGABQpp//k5Dnzxk+0td390=)
2: r5NOxpSvaBNLdRTBDc0ThXtFnjg.crl (hash: L5wigBuLNAV+p6KHGDTniik7eO+D3t9Q3mLx0ZIV0FU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/99be80-152c-4b65-8b32-0718aa8dd9a7/1/r5NOxpSvaBNLdRTBDc0ThXtFnjg.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/99be80-152c-4b65-8b32-0718aa8dd9a7/1/r5NOxpSvaBNLdRTBDc0ThXtFnjg.mft
rsync://rpki.ripe.net/repository/DEFAULT/r5NOxpSvaBNLdRTBDc0ThXtFnjg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:74:99:79:8a:0e:f1:2e:c9:cc:73:56:8d:9e:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af934ec694af68134b7514c10dcd13857b459e38
Validity
Not Before: Sep 7 05:00:54 2025 GMT
Not After : Sep 8 05:00:54 2025 GMT
Subject: CN=521337fcbc5658dfc0eecd84695bc6a198e95f2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:87:3e:9f:28:90:d3:c8:8e:7d:5c:17:99:56:
d8:40:e6:08:60:c0:1e:3e:0f:56:87:0b:4e:1a:b9:
df:3b:6d:5d:31:9a:58:84:5b:be:cf:f9:b1:c5:98:
e5:11:34:41:14:6a:06:61:7a:c1:4e:99:0e:cb:49:
08:0f:2c:ec:fc:f5:ec:5c:ca:16:27:26:38:9d:a5:
18:62:93:23:6e:a9:ae:05:b5:e2:bd:18:43:29:1e:
97:2d:38:a1:34:b4:ec:60:55:ac:65:f7:02:8b:2e:
5c:01:19:54:f6:eb:d1:45:cd:9c:49:f6:99:7a:f2:
23:2e:6f:c0:16:68:83:4b:0c:ef:14:ab:ad:45:20:
7c:bc:52:3e:00:d6:ba:23:1f:05:8e:5c:a8:97:9e:
03:12:89:47:63:66:39:49:6e:be:64:ca:88:e3:e5:
a9:b6:9e:7a:b7:37:86:20:a3:84:06:02:32:84:5c:
36:3f:a8:60:61:78:cd:48:9e:cd:fb:8d:2c:c6:58:
ce:37:c2:c9:22:c6:a1:65:18:5d:b7:29:a9:03:fe:
9c:18:8b:3b:7d:d2:63:84:59:6c:df:19:de:89:d3:
79:6e:19:3a:7c:ec:af:70:7f:8f:ed:84:2d:6e:ac:
bc:02:78:bf:ed:94:1f:90:0d:5c:70:2f:c1:5b:93:
af:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:13:37:FC:BC:56:58:DF:C0:EE:CD:84:69:5B:C6:A1:98:E9:5F:2A
X509v3 Authority Key Identifier:
keyid:AF:93:4E:C6:94:AF:68:13:4B:75:14:C1:0D:CD:13:85:7B:45:9E:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r5NOxpSvaBNLdRTBDc0ThXtFnjg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/99be80-152c-4b65-8b32-0718aa8dd9a7/1/r5NOxpSvaBNLdRTBDc0ThXtFnjg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/99be80-152c-4b65-8b32-0718aa8dd9a7/1/r5NOxpSvaBNLdRTBDc0ThXtFnjg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:48:f1:36:06:c0:df:b6:d2:74:96:8b:d2:3f:99:c1:eb:c6:
2d:e8:00:8b:2c:b9:d4:bd:ed:c1:7c:ad:74:5c:84:03:e0:49:
2f:d0:ab:2e:df:52:3c:00:e5:00:62:85:4e:64:27:52:e6:b4:
2f:aa:d9:f6:25:f5:ba:79:e5:7b:9c:c5:6f:99:f2:08:09:55:
2e:3e:bf:4a:0e:9b:ef:8b:a6:0b:8a:f9:fe:09:1e:9e:39:18:
b7:af:61:55:ad:90:1d:5d:16:70:3f:d3:80:97:80:9b:90:0c:
02:8b:e7:8f:6a:8b:66:31:da:5a:a2:8d:c1:f6:c4:d4:02:59:
28:f5:36:7c:79:db:86:55:a8:80:56:ba:f4:bd:bf:f1:04:b1:
06:d3:cc:93:5a:d8:7c:06:17:c9:88:95:13:85:7e:8d:c2:22:
cd:3d:da:f2:50:56:80:40:e9:47:9f:b0:ea:31:63:f3:87:3e:
5a:16:75:45:67:0a:88:db:b7:e6:cc:44:a4:fc:88:48:55:3c:
d1:b7:bb:a1:e0:d7:bf:da:ce:3b:ac:a2:7c:13:d7:73:13:7a:
12:9a:11:c7:4c:f0:fd:96:26:10:93:44:73:58:55:f7:9c:bc:
8e:e7:8e:95:5a:88:76:54:b6:f3:af:51:61:8b:a0:9f:5d:2c:
c3:73:9c:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:25:35 2025 by rpki-client