Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/990506-41bc-4098-af7f-cc8bf3fbef99/1/r0eMzcBICmtDus2KruAHmxbsLmg.mft
File: r0eMzcBICmtDus2KruAHmxbsLmg.mft (raw, json)
Hash identifier: KDx7fIuIYo0MDkoIuL6PziQhQULR9TkPOMsa3wkzaT4=
Subject key identifier: F5:BC:E8:FD:45:F6:79:38:AA:C9:DA:67:73:F7:67:AE:42:6A:FF:DA
Authority key identifier: AF:47:8C:CD:C0:48:0A:6B:43:BA:CD:8A:AE:E0:07:9B:16:EC:2E:68
Certificate issuer: /CN=af478ccdc0480a6b43bacd8aaee0079b16ec2e68
Certificate serial: 019A4EF470E1CED3179149DE3E921F611254
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r0eMzcBICmtDus2KruAHmxbsLmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/990506-41bc-4098-af7f-cc8bf3fbef99/1/r0eMzcBICmtDus2KruAHmxbsLmg.mft
Manifest number: 098E
Signing time: Tue 04 Nov 2025 13:00:33 +0000
Manifest this update: Tue 04 Nov 2025 13:00:33 +0000
Manifest next update: Wed 05 Nov 2025 13:00:33 +0000
Files and hashes: 1: DTxczwIBr_nfZRTIPgBtQYWGTi8.roa (hash: +VMycRtyrx3wbrRNOQ5x4frKIMykN9VHtpPYdKmVF5w=)
2: r0eMzcBICmtDus2KruAHmxbsLmg.crl (hash: +cPBY3XHDUQuBQirYGuQMiRklkA3avfOC74VsLZOzW0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/990506-41bc-4098-af7f-cc8bf3fbef99/1/r0eMzcBICmtDus2KruAHmxbsLmg.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/990506-41bc-4098-af7f-cc8bf3fbef99/1/r0eMzcBICmtDus2KruAHmxbsLmg.mft
rsync://rpki.ripe.net/repository/DEFAULT/r0eMzcBICmtDus2KruAHmxbsLmg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:70:e1:ce:d3:17:91:49:de:3e:92:1f:61:12:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af478ccdc0480a6b43bacd8aaee0079b16ec2e68
Validity
Not Before: Nov 4 13:00:33 2025 GMT
Not After : Nov 5 13:00:33 2025 GMT
Subject: CN=f5bce8fd45f67938aac9da6773f767ae426affda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:35:8f:1d:59:69:e2:11:23:ed:91:d9:44:27:
38:0c:be:08:74:8c:55:5a:9e:3d:a8:c1:ab:28:f3:
36:d9:a6:a0:b4:a1:4c:77:c9:87:b6:df:2d:9b:54:
4d:08:d1:a8:fe:02:4b:41:d6:c8:b5:4f:c0:ab:ce:
2b:88:f3:69:86:5e:f5:de:9e:19:7b:68:88:20:63:
84:24:0e:f5:49:b6:c8:d2:17:7b:5b:46:d0:6b:5a:
9a:cd:b6:1d:88:3b:82:c2:8f:8f:16:21:44:1c:b7:
b1:77:35:dc:00:73:db:cf:09:a2:ac:3f:93:7d:81:
9f:c5:bd:48:35:b4:c5:2f:7d:b7:48:af:8b:86:70:
86:0b:ce:91:6b:42:50:4f:6e:7f:cc:dd:9f:f3:9b:
36:ef:b3:08:04:f6:12:e1:21:67:1a:c7:06:b8:c2:
90:57:92:ab:8f:81:68:e7:48:4f:72:ab:4d:78:49:
6e:1f:85:7f:2c:3c:46:14:8c:b4:32:4e:0a:dc:68:
75:ec:91:35:6c:94:a0:c1:4c:a4:09:1b:43:c4:a4:
6d:3c:35:9e:8b:32:7b:60:85:85:1f:c0:cd:11:fe:
71:ac:aa:05:79:93:2e:84:08:38:2d:67:fb:0d:75:
04:01:c6:44:3a:4a:b6:92:f6:30:78:d2:d4:a5:27:
76:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:BC:E8:FD:45:F6:79:38:AA:C9:DA:67:73:F7:67:AE:42:6A:FF:DA
X509v3 Authority Key Identifier:
keyid:AF:47:8C:CD:C0:48:0A:6B:43:BA:CD:8A:AE:E0:07:9B:16:EC:2E:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r0eMzcBICmtDus2KruAHmxbsLmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/990506-41bc-4098-af7f-cc8bf3fbef99/1/r0eMzcBICmtDus2KruAHmxbsLmg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/990506-41bc-4098-af7f-cc8bf3fbef99/1/r0eMzcBICmtDus2KruAHmxbsLmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:f5:c3:2d:0b:30:b2:ee:6f:ae:f4:2e:0f:06:6f:72:15:ff:
ad:65:2f:b0:c8:2f:3d:ad:ba:aa:05:d4:4a:80:c1:17:b1:cb:
ce:7c:5e:8b:bc:64:d2:b0:4f:3b:6d:66:ee:75:c3:ae:54:4e:
4d:12:85:95:80:a6:02:81:ee:48:eb:81:7c:3f:26:c0:fd:23:
58:90:46:45:4a:20:0d:62:88:04:78:e1:5c:b3:af:01:8b:fa:
e8:0b:11:d7:32:94:f7:77:b5:26:22:62:c6:d7:24:4b:cc:9e:
dd:3d:1f:51:16:9e:2f:24:c6:6d:e8:d8:8e:b4:53:d9:ef:1d:
15:4b:1e:53:17:fc:77:7d:f5:bf:32:6a:72:d1:96:5f:fe:00:
c1:f1:10:97:f1:96:1b:e1:d1:77:e3:13:23:c1:78:3e:90:13:
9d:87:80:f3:c4:54:ab:f5:af:d8:04:68:9e:7a:db:08:00:2d:
8b:7f:87:51:88:bd:42:a4:0d:37:ac:6b:43:83:6c:b4:3e:ab:
5e:d9:5e:70:b4:27:e7:65:20:96:74:13:3c:9e:de:e5:df:08:
1a:6a:ec:f9:2b:ad:7f:d8:50:8c:b6:8a:87:3b:1b:e5:96:5c:
0f:e9:5a:52:72:13:b6:b9:2d:79:29:66:d4:14:75:7c:4b:a4:
50:9b:c4:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:22:09 2025 by rpki-client