Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/d16e96-0313-4c9b-9c09-a95fe3102645/1/r5MQJRHmYCY_jvbkwfmrMjk4ObI.mft
File: r5MQJRHmYCY_jvbkwfmrMjk4ObI.mft (raw, json)
Hash identifier: lxZvfvkf0c+ZKJSg4J6OxlTAhTBfDwIWvXUva0E95X0=
Subject key identifier: 2D:39:4B:0E:F2:09:6C:20:9B:A3:8D:22:F7:45:7F:2B:FD:19:92:41
Authority key identifier: AF:93:10:25:11:E6:60:26:3F:8E:F6:E4:C1:F9:AB:32:39:38:39:B2
Certificate issuer: /CN=af93102511e660263f8ef6e4c1f9ab32393839b2
Certificate serial: 019A4F62325AD2B3DD2C5B4376C8B2FE4A59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r5MQJRHmYCY_jvbkwfmrMjk4ObI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/d16e96-0313-4c9b-9c09-a95fe3102645/1/r5MQJRHmYCY_jvbkwfmrMjk4ObI.mft
Manifest number: 0B79
Signing time: Tue 04 Nov 2025 15:00:26 +0000
Manifest this update: Tue 04 Nov 2025 15:00:26 +0000
Manifest next update: Wed 05 Nov 2025 15:00:26 +0000
Files and hashes: 1: QyIQhrwBc_E0RzmwfCK0p-xEPL8.roa (hash: KU05TYN4aOywUPeCIgZViB5uKUpefnNLinujip3r7Ws=)
2: r5MQJRHmYCY_jvbkwfmrMjk4ObI.crl (hash: lPdgi90IL+nG1VSUfHYw+h0qngQk4w598UHlSXBf/6k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/d16e96-0313-4c9b-9c09-a95fe3102645/1/r5MQJRHmYCY_jvbkwfmrMjk4ObI.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/d16e96-0313-4c9b-9c09-a95fe3102645/1/r5MQJRHmYCY_jvbkwfmrMjk4ObI.mft
rsync://rpki.ripe.net/repository/DEFAULT/r5MQJRHmYCY_jvbkwfmrMjk4ObI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:32:5a:d2:b3:dd:2c:5b:43:76:c8:b2:fe:4a:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af93102511e660263f8ef6e4c1f9ab32393839b2
Validity
Not Before: Nov 4 15:00:26 2025 GMT
Not After : Nov 5 15:00:26 2025 GMT
Subject: CN=2d394b0ef2096c209ba38d22f7457f2bfd199241
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:19:a2:21:a5:b4:e3:2d:9f:1f:f5:53:07:b0:
e0:24:10:73:77:37:5d:aa:e0:c9:98:78:f6:a6:34:
31:12:82:72:80:27:8e:09:b6:5f:bf:84:6b:b0:c3:
45:4e:d9:ec:b3:07:01:ce:95:a5:6e:0c:2b:41:7d:
99:ec:f2:0c:44:c0:27:bf:6f:2c:e3:3f:06:a8:09:
62:4e:d0:8f:f4:0e:d8:3e:01:65:4c:7a:67:b7:1b:
bc:cc:fa:8d:b9:42:ca:18:91:a3:26:0a:7e:8c:ac:
4e:d1:e3:fb:8f:3f:da:25:91:64:dc:69:89:75:70:
79:3c:cb:a8:b1:2f:44:37:53:e8:85:4a:af:db:f2:
4a:87:40:fa:d4:5d:7c:4e:f2:61:5a:c8:91:a4:ac:
f8:79:ac:30:44:05:22:6f:77:f5:06:46:85:a5:be:
b9:14:46:6f:68:de:db:f7:5b:29:3c:8f:ca:b2:65:
ac:3f:24:6f:5f:7e:90:97:72:f0:26:b0:53:af:3d:
ab:5c:9e:1b:06:8f:6a:03:f5:62:27:af:e5:3b:55:
4c:75:e6:a3:dc:6b:b8:96:93:6b:c6:96:39:ff:72:
c7:07:30:29:fe:44:48:30:f3:38:1a:1f:9a:5e:6f:
ea:1c:39:a8:77:73:c3:d3:92:8e:b1:48:89:f7:ba:
38:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:39:4B:0E:F2:09:6C:20:9B:A3:8D:22:F7:45:7F:2B:FD:19:92:41
X509v3 Authority Key Identifier:
keyid:AF:93:10:25:11:E6:60:26:3F:8E:F6:E4:C1:F9:AB:32:39:38:39:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r5MQJRHmYCY_jvbkwfmrMjk4ObI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/d16e96-0313-4c9b-9c09-a95fe3102645/1/r5MQJRHmYCY_jvbkwfmrMjk4ObI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/d16e96-0313-4c9b-9c09-a95fe3102645/1/r5MQJRHmYCY_jvbkwfmrMjk4ObI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:6d:47:48:85:c0:a0:4c:14:07:d2:d2:1d:64:f4:72:30:d6:
fe:a3:97:5f:56:e2:ed:15:11:8b:a3:af:5b:20:3e:83:dd:40:
3e:97:52:fb:b7:89:c1:16:5d:86:64:a6:75:7d:d3:e4:3b:4a:
48:2d:66:54:e4:7f:a6:fe:ab:55:69:27:e6:29:bc:82:97:34:
83:84:3b:ee:26:ec:62:c9:7a:5b:58:b0:30:3f:27:fd:b8:6e:
6a:e3:eb:26:ec:04:4a:8d:e3:0c:5c:38:41:1b:ea:95:2b:82:
58:8f:51:ee:60:03:98:2e:4b:3e:0a:2a:34:d5:b9:2e:60:0c:
4b:aa:23:c6:8f:c5:54:9a:86:c6:9d:4b:ff:c1:2d:8d:1e:08:
70:31:8f:cc:b3:9a:de:bb:44:45:83:c8:2d:9c:f2:ad:7f:03:
58:65:62:b3:75:18:65:52:a4:05:8c:5a:d7:07:30:98:a1:88:
b0:3d:98:fa:06:05:1d:b1:a4:74:90:53:72:af:5a:d1:56:05:
cd:94:85:1c:4d:72:db:44:9f:ac:76:d3:56:59:12:f2:2e:b9:
10:89:cc:2c:94:da:23:30:1f:b8:74:26:bf:f4:b2:3f:c3:92:
74:f7:6d:45:8e:33:4c:a9:13:97:95:e7:a1:c4:4b:b8:b1:e0:
b8:20:59:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:18:57 2025 by rpki-client