Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/99be80-152c-4b65-8b32-0718aa8dd9a7/1/r5NOxpSvaBNLdRTBDc0ThXtFnjg.mft
File: r5NOxpSvaBNLdRTBDc0ThXtFnjg.mft (raw, json)
Hash identifier: gkVik25btzCapzUigb64WiXyyS/8x8x34Wx6aiqOfkQ=
Subject key identifier: 26:3A:BE:CD:DA:42:D5:0C:16:4C:06:9E:7B:8D:76:02:A0:D0:93:23
Authority key identifier: AF:93:4E:C6:94:AF:68:13:4B:75:14:C1:0D:CD:13:85:7B:45:9E:38
Certificate issuer: /CN=af934ec694af68134b7514c10dcd13857b459e38
Certificate serial: 019872D011EAE401F0FEC188A044456A5FAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r5NOxpSvaBNLdRTBDc0ThXtFnjg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/99be80-152c-4b65-8b32-0718aa8dd9a7/1/r5NOxpSvaBNLdRTBDc0ThXtFnjg.mft
Manifest number: 1013
Signing time: Mon 04 Aug 2025 02:01:35 +0000
Manifest this update: Mon 04 Aug 2025 02:01:35 +0000
Manifest next update: Tue 05 Aug 2025 02:01:35 +0000
Files and hashes: 1: 3KVjDh6tV6LcIk6BDE6xPuXzBDM.roa (hash: bQvllPBonHjb5qHCFeaDeGABQpp//k5Dnzxk+0td390=)
2: r5NOxpSvaBNLdRTBDc0ThXtFnjg.crl (hash: Q0TaY2jJ5L3rsA/yv5KWA+ievJ9h0pISNCjiYXqbFuk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/99be80-152c-4b65-8b32-0718aa8dd9a7/1/r5NOxpSvaBNLdRTBDc0ThXtFnjg.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/99be80-152c-4b65-8b32-0718aa8dd9a7/1/r5NOxpSvaBNLdRTBDc0ThXtFnjg.mft
rsync://rpki.ripe.net/repository/DEFAULT/r5NOxpSvaBNLdRTBDc0ThXtFnjg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 02:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:d0:11:ea:e4:01:f0:fe:c1:88:a0:44:45:6a:5f:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af934ec694af68134b7514c10dcd13857b459e38
Validity
Not Before: Aug 4 02:01:35 2025 GMT
Not After : Aug 5 02:01:35 2025 GMT
Subject: CN=263abecdda42d50c164c069e7b8d7602a0d09323
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:59:43:a2:b5:e8:29:51:2f:7d:8a:c7:b0:87:
d0:1f:f7:35:7b:cd:f4:b4:5a:24:fd:6e:0b:0e:07:
df:4c:a8:da:b2:84:3d:0e:69:1f:73:0a:27:a6:95:
51:7a:fd:37:7d:b3:08:af:ed:ca:03:86:68:b4:fd:
8b:15:11:83:6b:83:71:60:2a:2e:b9:8e:65:68:76:
b9:02:9c:60:2a:0a:8f:4a:6f:94:59:54:cf:db:ba:
ae:01:6e:c0:51:e9:e2:9c:90:81:39:29:f6:f8:71:
95:de:c8:45:96:e4:5f:6e:fc:8b:c1:08:77:fc:a4:
d1:c8:36:39:e1:57:ca:65:af:f0:e2:68:0a:4b:d0:
d6:20:e0:0d:b7:33:ba:78:26:b6:71:7b:5e:ed:72:
06:a2:b0:56:97:28:bd:42:8d:79:5a:24:aa:f1:6c:
ae:9c:2e:e6:a3:4f:5d:03:99:88:3e:e7:a7:c5:4c:
36:0a:1b:0c:41:06:a6:f7:40:e3:eb:e4:26:4b:6a:
78:dd:95:64:1d:96:e8:97:81:b9:bb:9a:2b:51:5c:
b4:a1:0e:f1:69:c9:16:46:bb:33:36:27:7e:cd:c2:
2c:9d:0f:c7:32:e2:e4:56:3c:7b:1c:e0:db:d9:27:
ae:40:46:4d:c1:f9:e2:b8:8b:95:b0:de:19:7d:33:
21:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:3A:BE:CD:DA:42:D5:0C:16:4C:06:9E:7B:8D:76:02:A0:D0:93:23
X509v3 Authority Key Identifier:
keyid:AF:93:4E:C6:94:AF:68:13:4B:75:14:C1:0D:CD:13:85:7B:45:9E:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r5NOxpSvaBNLdRTBDc0ThXtFnjg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/99be80-152c-4b65-8b32-0718aa8dd9a7/1/r5NOxpSvaBNLdRTBDc0ThXtFnjg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/99be80-152c-4b65-8b32-0718aa8dd9a7/1/r5NOxpSvaBNLdRTBDc0ThXtFnjg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:c4:84:a7:4f:54:e8:90:48:d0:0e:5c:e0:c8:24:f6:cd:0c:
08:00:4d:0a:aa:42:ac:a7:3f:bb:fd:2d:2d:c4:28:ac:df:74:
d4:c9:7d:0a:fc:cd:31:7c:6a:a4:32:aa:7b:59:ac:c2:5e:29:
be:c9:64:fb:56:0e:44:7d:03:c9:11:76:f4:a2:7f:56:33:df:
09:e6:47:4a:a1:f6:5e:92:72:72:f1:a2:c5:23:ca:40:2a:b1:
ed:77:00:c7:da:56:47:c3:64:aa:32:2c:77:e2:ab:09:8a:f9:
fe:85:48:5b:5d:35:a8:73:6d:71:26:f6:23:d3:e8:16:ac:0b:
1e:c9:eb:42:53:c5:80:99:99:cf:64:8c:34:16:ff:3c:00:ca:
34:45:50:e6:5d:7e:56:41:15:99:54:4b:86:59:79:c7:72:bf:
83:5a:5a:05:f1:b6:a4:82:7b:bf:7e:35:57:a1:cc:db:bb:5b:
a2:cf:a0:14:bb:b0:a0:1a:b1:a6:c9:c0:7d:3f:9b:4c:74:47:
8f:78:87:d3:66:e5:3f:4e:df:4f:64:75:4e:40:95:b7:a9:46:
22:80:7b:07:99:f5:91:1c:52:53:fc:e0:fa:d2:34:ca:46:da:
6e:d6:a0:5b:36:c5:ef:fc:9b:ec:fc:fc:c3:1a:c6:97:08:32:
d2:23:6d:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:25:10 2025 by rpki-client