Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/8e3f7b-c78f-4663-bf1d-f5dbdf722f5d/1/r-o5b03jVdqNwHmh6IXgwzdezjI.mft
File: r-o5b03jVdqNwHmh6IXgwzdezjI.mft (raw, json)
Hash identifier: J8TTZDHsgFN22K+82ir+lktBGBmzUUUf5v45xwY30U0=
Subject key identifier: FA:02:E9:83:0B:42:43:73:EC:04:A9:59:64:41:62:00:94:4D:FB:EB
Authority key identifier: AF:EA:39:6F:4D:E3:55:DA:8D:C0:79:A1:E8:85:E0:C3:37:5E:CE:32
Certificate issuer: /CN=afea396f4de355da8dc079a1e885e0c3375ece32
Certificate serial: 019A4F9976A37A729F464DED972BC36328B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r-o5b03jVdqNwHmh6IXgwzdezjI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/8e3f7b-c78f-4663-bf1d-f5dbdf722f5d/1/r-o5b03jVdqNwHmh6IXgwzdezjI.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 16:00:48 +0000
Manifest this update: Tue 04 Nov 2025 16:00:48 +0000
Manifest next update: Wed 05 Nov 2025 16:00:48 +0000
Files and hashes: 1: acvvT5q-PVeUjsCLlPVuoTE00po.roa (hash: MQoBLU//Irn0dEBmlINyAJ8ehIRD+2s0D9hVDHRZB5A=)
2: r-o5b03jVdqNwHmh6IXgwzdezjI.crl (hash: T27dMNktQvQBTyAsMWU6bfiWulv9l7Zn8481aNMUuD4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/8e3f7b-c78f-4663-bf1d-f5dbdf722f5d/1/r-o5b03jVdqNwHmh6IXgwzdezjI.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/8e3f7b-c78f-4663-bf1d-f5dbdf722f5d/1/r-o5b03jVdqNwHmh6IXgwzdezjI.mft
rsync://rpki.ripe.net/repository/DEFAULT/r-o5b03jVdqNwHmh6IXgwzdezjI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:99:76:a3:7a:72:9f:46:4d:ed:97:2b:c3:63:28:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afea396f4de355da8dc079a1e885e0c3375ece32
Validity
Not Before: Nov 4 16:00:48 2025 GMT
Not After : Nov 5 16:00:48 2025 GMT
Subject: CN=fa02e9830b424373ec04a95964416200944dfbeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:47:aa:60:35:6e:41:97:58:dc:98:af:86:38:
b0:c2:44:2d:56:75:b4:19:a5:02:e8:2a:63:8d:d3:
34:b4:7f:83:20:a3:92:ff:bf:d7:f4:65:67:35:54:
ae:c2:ee:40:f7:81:37:c3:bd:dd:49:4f:77:dd:0f:
0b:f6:fb:fa:81:b3:aa:8d:88:c7:f6:01:e1:11:83:
18:a2:64:bc:82:0b:6d:46:4f:b9:e9:d5:22:1c:96:
66:8e:0c:f7:9b:ff:1b:6f:4e:bc:71:85:28:73:ae:
b9:a7:21:14:7a:1d:98:3a:fb:62:a5:4c:f8:5e:dc:
4e:6b:3b:2e:bb:d1:c9:97:63:92:13:3f:b0:8f:2b:
47:70:db:1d:b2:d8:c0:00:65:7f:e1:0d:12:7a:5d:
e6:d8:bc:69:31:f4:3c:56:80:7d:43:8a:d8:a1:9d:
9f:3b:85:12:37:cc:83:75:9d:be:c3:b0:10:7f:c2:
1a:78:1d:59:1d:fa:7d:37:5c:ab:5b:d4:ee:06:d7:
a0:6f:f4:d7:61:93:20:d2:2f:e9:89:8d:3a:93:40:
0a:60:0f:f1:21:d6:74:2c:5c:09:7b:95:93:b2:41:
cb:49:af:42:4a:16:30:70:b6:a4:b3:b7:e7:a3:ee:
aa:dc:cd:c0:63:fc:65:ce:77:35:76:68:e5:37:53:
21:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:02:E9:83:0B:42:43:73:EC:04:A9:59:64:41:62:00:94:4D:FB:EB
X509v3 Authority Key Identifier:
keyid:AF:EA:39:6F:4D:E3:55:DA:8D:C0:79:A1:E8:85:E0:C3:37:5E:CE:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r-o5b03jVdqNwHmh6IXgwzdezjI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8e3f7b-c78f-4663-bf1d-f5dbdf722f5d/1/r-o5b03jVdqNwHmh6IXgwzdezjI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8e3f7b-c78f-4663-bf1d-f5dbdf722f5d/1/r-o5b03jVdqNwHmh6IXgwzdezjI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:a0:0a:1f:e0:07:7f:ab:8d:b7:a7:b9:71:d9:72:a1:f8:d1:
64:bc:12:45:5f:80:dc:fd:12:41:ae:ff:d2:f9:0b:ec:0b:55:
a6:2d:0f:bf:eb:47:f9:ad:49:56:a3:2d:41:39:ba:23:ba:d7:
96:9e:a9:e8:60:6c:26:59:f7:b3:ad:63:96:86:78:6c:8d:fe:
55:4f:aa:87:17:7e:ea:65:8f:22:b5:c0:bc:60:a0:4c:4f:a7:
d9:9c:d9:bf:01:99:f4:a6:1e:0a:3a:3c:da:27:fc:8a:31:71:
53:d3:04:53:fa:44:bd:23:4c:92:0e:fc:cf:21:3e:14:2a:3b:
c6:ba:35:90:d4:1e:66:38:21:1b:f8:5a:57:1e:19:c1:df:1e:
2f:9a:a4:e3:3a:8a:10:3c:8c:93:6c:51:61:a6:ca:81:e9:a0:
67:77:15:b1:f2:36:4e:82:4f:91:76:a0:40:d2:7d:6d:13:09:
89:52:f2:10:45:70:26:cb:97:3b:43:bb:06:56:3a:1a:a1:a5:
3e:72:cd:ae:2a:6c:78:62:5e:87:69:78:17:e8:d7:a2:57:5d:
90:03:2e:18:62:c9:7e:34:85:16:05:c5:52:c6:28:bd:d2:14:
73:c8:ef:c5:03:6b:b7:1d:d5:86:eb:3a:6a:1e:d1:09:88:9d:
09:d9:a3:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:58:33 2025 by rpki-client