Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/d16e96-0313-4c9b-9c09-a95fe3102645/1/r5MQJRHmYCY_jvbkwfmrMjk4ObI.mft
File: r5MQJRHmYCY_jvbkwfmrMjk4ObI.mft (raw, json)
Hash identifier: 47w5sbr1ONAgGwsVwxLJ219qJdAcJwsVN08/xCwmUJM=
Subject key identifier: 96:50:1E:D6:F5:BE:34:33:D5:DC:68:EC:B5:CB:8D:88:69:19:0A:8F
Authority key identifier: AF:93:10:25:11:E6:60:26:3F:8E:F6:E4:C1:F9:AB:32:39:38:39:B2
Certificate issuer: /CN=af93102511e660263f8ef6e4c1f9ab32393839b2
Certificate serial: 0198745099949109D32902EF286CA36F28D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r5MQJRHmYCY_jvbkwfmrMjk4ObI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/d16e96-0313-4c9b-9c09-a95fe3102645/1/r5MQJRHmYCY_jvbkwfmrMjk4ObI.mft
Manifest number: 0A83
Signing time: Mon 04 Aug 2025 09:01:35 +0000
Manifest this update: Mon 04 Aug 2025 09:01:35 +0000
Manifest next update: Tue 05 Aug 2025 09:01:35 +0000
Files and hashes: 1: QyIQhrwBc_E0RzmwfCK0p-xEPL8.roa (hash: KU05TYN4aOywUPeCIgZViB5uKUpefnNLinujip3r7Ws=)
2: r5MQJRHmYCY_jvbkwfmrMjk4ObI.crl (hash: 5gOOszx+cLZBT5R68ikVvZOH1IhEtk1LzeFOge5Kapc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/d16e96-0313-4c9b-9c09-a95fe3102645/1/r5MQJRHmYCY_jvbkwfmrMjk4ObI.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/d16e96-0313-4c9b-9c09-a95fe3102645/1/r5MQJRHmYCY_jvbkwfmrMjk4ObI.mft
rsync://rpki.ripe.net/repository/DEFAULT/r5MQJRHmYCY_jvbkwfmrMjk4ObI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:50:99:94:91:09:d3:29:02:ef:28:6c:a3:6f:28:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af93102511e660263f8ef6e4c1f9ab32393839b2
Validity
Not Before: Aug 4 09:01:35 2025 GMT
Not After : Aug 5 09:01:35 2025 GMT
Subject: CN=96501ed6f5be3433d5dc68ecb5cb8d8869190a8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:1b:90:8e:1d:f5:c3:31:a8:d9:9e:3b:9a:57:
71:3f:9a:91:67:b0:83:0e:f5:c3:68:a5:00:ff:68:
c7:27:2c:ba:3c:a1:60:bb:be:b0:da:ae:93:83:5f:
2a:02:8e:01:94:7e:fc:a5:ee:dd:f4:4d:d4:f6:bb:
df:40:0d:5f:5a:52:a3:e1:7d:a8:ed:1b:d5:be:3d:
43:68:8f:0b:f3:ee:23:44:34:e6:2c:67:68:22:96:
21:43:4c:7e:34:d7:3f:f4:96:db:e4:f3:de:74:d4:
ba:da:ed:46:3f:cf:0e:8a:57:a5:23:d7:9c:e2:bc:
c2:19:37:f7:95:37:4a:27:55:31:05:11:ee:74:37:
a1:4e:ea:fc:ad:de:ec:e1:24:42:8a:b5:28:53:ac:
13:51:c2:e1:87:67:55:46:34:5f:f8:c5:d6:ff:c8:
18:2f:4e:6c:ae:66:f5:31:71:6d:36:ca:d5:1c:7f:
4a:2a:85:91:6f:43:8c:21:4f:bb:d9:a1:cc:a1:87:
2f:fa:8d:26:08:25:dd:e5:8f:c8:41:df:02:48:eb:
04:55:6f:f6:41:51:54:98:7b:ee:1a:6d:05:35:56:
1f:54:70:1c:ad:82:34:07:4c:f7:fc:af:ff:6e:3f:
f5:d7:a6:92:35:33:7a:f6:67:6d:28:b8:83:ac:41:
e0:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:50:1E:D6:F5:BE:34:33:D5:DC:68:EC:B5:CB:8D:88:69:19:0A:8F
X509v3 Authority Key Identifier:
keyid:AF:93:10:25:11:E6:60:26:3F:8E:F6:E4:C1:F9:AB:32:39:38:39:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r5MQJRHmYCY_jvbkwfmrMjk4ObI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/d16e96-0313-4c9b-9c09-a95fe3102645/1/r5MQJRHmYCY_jvbkwfmrMjk4ObI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/d16e96-0313-4c9b-9c09-a95fe3102645/1/r5MQJRHmYCY_jvbkwfmrMjk4ObI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:a4:a8:e0:ca:7c:97:53:21:95:f7:18:c0:a1:28:10:ef:5c:
bd:f3:19:08:b3:8b:12:44:b6:d1:b1:e8:c4:17:70:dc:9b:c2:
ad:1f:f8:ba:26:d9:4b:40:7b:82:a6:dd:5a:80:3a:94:54:4e:
a9:90:39:55:28:6c:b1:f1:bb:b1:4d:98:44:d1:d4:e7:80:5e:
26:49:f3:73:c3:06:a4:2a:fc:09:1d:34:46:74:93:b4:18:5a:
3a:cf:d7:06:b9:77:51:19:c5:79:70:f0:89:c9:b1:42:a4:9c:
97:8e:e7:74:aa:53:e8:c6:06:9d:d1:83:e1:00:c7:72:41:b9:
d2:bc:66:2c:fe:8f:9e:53:23:20:f3:7e:36:2c:ae:55:ad:9a:
70:fc:fe:6a:58:de:38:26:8d:a8:a8:3c:53:08:93:af:3f:04:
ea:aa:cc:5c:a5:e1:21:60:fb:5e:e0:09:a1:a8:33:6f:ab:d2:
c8:3e:27:33:0c:9e:ab:7e:f6:ae:41:cc:24:7e:86:47:c7:3d:
44:6c:a1:60:56:38:3a:de:da:2d:47:aa:1d:4f:18:bf:dd:22:
8c:cf:a1:14:72:3b:a3:a2:18:22:87:b3:a1:dd:f1:df:9e:fb:
f6:49:35:b8:5d:02:f7:e8:84:f4:8d:03:7d:05:1d:71:59:02:
68:cd:59:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:21:39 2025 by rpki-client