Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/859170-a974-4ae3-a020-3ea59d96a790/1/r5VJF2-WbToiFBAHkJfIfw4dILE.mft
File: r5VJF2-WbToiFBAHkJfIfw4dILE.mft (raw, json)
Hash identifier: jSgfaEOFlrMqbTIUlwOpFW236oCKyvLBUhxjZXPDAV8=
Subject key identifier: 09:5F:6A:92:47:10:37:3E:D0:56:54:25:80:EC:1A:E2:50:23:FB:23
Authority key identifier: AF:95:49:17:6F:96:6D:3A:22:14:10:07:90:97:C8:7F:0E:1D:20:B1
Certificate issuer: /CN=af9549176f966d3a221410079097c87f0e1d20b1
Certificate serial: 019A72267F16AEBD28644561DD22C0E659E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r5VJF2-WbToiFBAHkJfIfw4dILE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/859170-a974-4ae3-a020-3ea59d96a790/1/r5VJF2-WbToiFBAHkJfIfw4dILE.mft
Manifest number: 0E81
Signing time: Tue 11 Nov 2025 09:01:56 +0000
Manifest this update: Tue 11 Nov 2025 09:01:56 +0000
Manifest next update: Wed 12 Nov 2025 09:01:56 +0000
Files and hashes: 1: 1n_N6auYiXQ1pyBQYj7m3QI_dSs.roa (hash: LsHjMOF74kduMAehGu3uEfQUdY1PYN7E293m6Bfa2Jo=)
2: r5VJF2-WbToiFBAHkJfIfw4dILE.crl (hash: nPWGjFh6Xt/nhnPxynI/4VcHIx/29v31tqht/tLd+Vs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/859170-a974-4ae3-a020-3ea59d96a790/1/r5VJF2-WbToiFBAHkJfIfw4dILE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/859170-a974-4ae3-a020-3ea59d96a790/1/r5VJF2-WbToiFBAHkJfIfw4dILE.mft
rsync://rpki.ripe.net/repository/DEFAULT/r5VJF2-WbToiFBAHkJfIfw4dILE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:7f:16:ae:bd:28:64:45:61:dd:22:c0:e6:59:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af9549176f966d3a221410079097c87f0e1d20b1
Validity
Not Before: Nov 11 09:01:56 2025 GMT
Not After : Nov 12 09:01:56 2025 GMT
Subject: CN=095f6a924710373ed056542580ec1ae25023fb23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:27:1b:fa:c7:ac:79:29:13:6d:c1:a1:95:1f:
c7:9e:a0:ee:7c:11:55:5e:c1:d2:89:28:10:49:9a:
00:d1:6d:46:70:cb:cc:cb:03:30:e0:48:ab:28:68:
e6:aa:93:ba:5e:14:a3:b5:87:00:84:c0:31:2b:c3:
40:78:59:a6:ee:56:55:ca:32:03:f7:bd:c7:55:64:
9a:24:6a:d7:08:4c:44:29:9d:06:b9:06:3c:74:d7:
9a:4d:89:8a:b1:c5:29:77:52:73:18:84:52:9f:58:
89:3c:2a:27:51:5d:c1:7a:d0:0b:38:c8:c2:89:df:
a8:4a:e5:ca:35:56:97:2c:43:9f:5d:a5:4f:2a:6c:
76:ca:09:98:67:f3:13:49:e7:48:92:0d:4e:ec:6e:
b6:0b:a9:67:88:0e:98:cc:74:32:d5:4b:c3:2e:3f:
b0:e5:b4:22:5c:64:c6:10:84:d9:d7:d9:c5:6b:f0:
aa:4e:91:25:b5:99:52:1f:85:65:54:92:79:bd:b6:
4b:3a:be:e7:bd:04:e8:fd:98:db:e5:2a:97:e7:72:
ad:e6:9c:ae:e3:bd:77:03:10:45:21:f4:66:aa:a2:
7f:0c:7d:0e:aa:13:bb:96:17:d6:46:22:a5:be:0d:
5d:fe:a5:cc:7f:d3:8b:68:6a:fe:30:86:ad:40:d8:
b7:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:5F:6A:92:47:10:37:3E:D0:56:54:25:80:EC:1A:E2:50:23:FB:23
X509v3 Authority Key Identifier:
keyid:AF:95:49:17:6F:96:6D:3A:22:14:10:07:90:97:C8:7F:0E:1D:20:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r5VJF2-WbToiFBAHkJfIfw4dILE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/859170-a974-4ae3-a020-3ea59d96a790/1/r5VJF2-WbToiFBAHkJfIfw4dILE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/859170-a974-4ae3-a020-3ea59d96a790/1/r5VJF2-WbToiFBAHkJfIfw4dILE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:6b:56:14:41:6f:30:61:2f:a3:1a:a3:6b:59:44:24:34:62:
a3:3a:b9:be:fb:8e:75:e0:83:f6:b7:9c:54:42:39:3f:2e:fe:
7f:90:b8:f5:93:a6:9f:be:c9:dd:1f:f7:5e:05:1b:df:2e:a9:
2f:14:85:6b:73:a9:4f:ef:67:8f:27:89:58:14:a2:5c:b5:b6:
1d:cc:a3:ad:27:9c:de:79:2f:ef:f2:d6:35:57:26:77:cc:5d:
52:1b:b1:57:b0:95:66:f7:1c:0c:80:eb:02:d2:22:0d:82:b5:
f2:3f:9f:6a:55:53:18:51:75:e2:62:2c:66:f3:81:5a:a9:e7:
f3:25:f6:25:55:e6:73:cb:af:b6:54:49:76:67:28:69:80:07:
f5:91:27:94:39:41:72:c5:aa:5a:91:5b:f1:52:8d:c9:4f:ef:
10:e7:db:00:c3:db:9a:f9:f8:1d:6e:f3:63:42:70:09:28:ef:
67:ef:20:34:97:24:11:42:0b:96:b5:a6:8c:a6:48:82:cd:8b:
e1:e4:41:27:59:74:95:94:ad:1a:78:3a:88:c0:c4:cd:a1:70:
35:f8:bb:9b:03:37:45:96:8f:7e:9b:30:d6:55:4f:fa:23:c9:
86:9a:bb:a0:99:78:fa:e5:4c:84:63:3c:37:0b:eb:1c:6f:15:
4a:61:11:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:43:15 2025 by rpki-client