
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/25daa4-f7fa-40fa-9250-996326ca7dd6/1/RvP5tB9FoPl7KmqBHKZ6BAKgR38.mft
File: RvP5tB9FoPl7KmqBHKZ6BAKgR38.mft (raw, json)
Hash identifier: ekRzzZRtsTMahciazPEJst+PqyXrOzrnZPeZNdX2Z80=
Subject key identifier: AF:89:6E:5D:39:BA:07:FE:16:72:16:92:6C:F3:8D:ED:0D:34:FB:88
Authority key identifier: 46:F3:F9:B4:1F:45:A0:F9:7B:2A:6A:81:1C:A6:7A:04:02:A0:47:7F
Certificate issuer: /CN=46f3f9b41f45a0f97b2a6a811ca67a0402a0477f
Certificate serial: 0198729849D715B682A837565F71B10657F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RvP5tB9FoPl7KmqBHKZ6BAKgR38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/25daa4-f7fa-40fa-9250-996326ca7dd6/1/RvP5tB9FoPl7KmqBHKZ6BAKgR38.mft
Manifest number: 1011
Signing time: Mon 04 Aug 2025 01:00:39 +0000
Manifest this update: Mon 04 Aug 2025 01:00:39 +0000
Manifest next update: Tue 05 Aug 2025 01:00:39 +0000
Files and hashes: 1: RvP5tB9FoPl7KmqBHKZ6BAKgR38.crl (hash: nCVxsxvf4UHDgsrIZ7P1wUVGu8K13slU/ur9J9GCk+k=)
2: mbYI3-hNPDwmapQzW6ANq2gKpA4.roa (hash: lOLT23JUefetUmb19vAU2x5VH7+ec+ZaMiJuuVxV7Oc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/25daa4-f7fa-40fa-9250-996326ca7dd6/1/RvP5tB9FoPl7KmqBHKZ6BAKgR38.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/25daa4-f7fa-40fa-9250-996326ca7dd6/1/RvP5tB9FoPl7KmqBHKZ6BAKgR38.mft
rsync://rpki.ripe.net/repository/DEFAULT/RvP5tB9FoPl7KmqBHKZ6BAKgR38.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 01:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:98:49:d7:15:b6:82:a8:37:56:5f:71:b1:06:57:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46f3f9b41f45a0f97b2a6a811ca67a0402a0477f
Validity
Not Before: Aug 4 01:00:39 2025 GMT
Not After : Aug 5 01:00:39 2025 GMT
Subject: CN=af896e5d39ba07fe167216926cf38ded0d34fb88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:92:a0:71:59:9a:15:af:75:71:c5:c2:b0:2b:
b8:ce:21:2f:46:f9:5a:70:06:07:88:a6:17:5b:07:
4b:b1:fa:77:3b:97:22:d7:f6:24:80:5a:84:65:6b:
50:44:b3:61:e9:99:ed:68:31:29:56:55:e9:f6:84:
8e:3c:06:99:41:d2:af:a7:c5:66:c5:2d:6a:10:5e:
79:e9:18:48:1c:dc:10:bd:4a:ef:74:2f:e6:bf:13:
9f:d4:d9:cf:e0:8b:0a:cc:bf:44:e6:69:3f:a4:f0:
1e:26:10:36:7b:8c:43:04:65:6b:81:b8:73:2c:f7:
80:82:27:5a:98:67:35:94:b0:04:f9:20:67:34:fa:
54:d4:0f:f3:b4:77:82:d2:71:23:d3:ef:cb:b6:21:
32:23:8f:3a:a8:ac:1b:48:35:ec:c2:e6:d6:c6:c9:
81:80:40:ee:5a:32:cd:c1:fe:bc:81:8e:9c:53:85:
76:a3:f5:ce:b8:b1:ef:b2:d9:5c:42:2a:9d:77:db:
e9:66:82:0a:bb:76:56:32:4d:15:57:5a:a4:96:23:
4f:d9:5b:0a:83:54:c6:37:27:49:a5:0e:c1:40:34:
bb:3c:b6:32:db:34:89:b4:11:99:2d:86:92:5f:cb:
47:a3:f5:78:97:44:b3:72:55:87:f2:2f:4a:9f:98:
22:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:89:6E:5D:39:BA:07:FE:16:72:16:92:6C:F3:8D:ED:0D:34:FB:88
X509v3 Authority Key Identifier:
keyid:46:F3:F9:B4:1F:45:A0:F9:7B:2A:6A:81:1C:A6:7A:04:02:A0:47:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RvP5tB9FoPl7KmqBHKZ6BAKgR38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/25daa4-f7fa-40fa-9250-996326ca7dd6/1/RvP5tB9FoPl7KmqBHKZ6BAKgR38.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/25daa4-f7fa-40fa-9250-996326ca7dd6/1/RvP5tB9FoPl7KmqBHKZ6BAKgR38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:a6:f3:53:a9:f9:90:45:2b:46:3e:10:c1:1f:44:2d:6b:b2:
a2:8c:6b:ce:03:0f:9f:2c:39:3d:ae:3f:01:af:95:b9:04:62:
d9:bf:fd:b2:f3:2c:e0:d9:71:10:c8:2e:a7:00:44:bb:aa:b1:
bb:e3:b2:d9:c2:1f:09:7f:f5:ef:ad:6f:8f:39:df:41:a0:87:
34:9f:3d:8a:0a:bc:54:b2:48:23:38:76:33:07:3c:4e:7c:1c:
0c:f8:06:6e:2d:bf:28:b9:38:39:74:1b:b0:84:9f:b5:3a:32:
2d:fb:41:8a:df:8a:04:75:42:57:e2:20:c0:85:e4:61:7a:1d:
c4:d5:11:80:46:32:6d:d4:3a:eb:5c:c5:d5:12:43:2f:c0:63:
4b:a1:7c:8b:01:df:e9:30:90:2d:62:18:45:f7:a0:a4:56:82:
af:55:df:bf:4f:ab:9f:38:9b:4f:e0:f3:e4:eb:97:42:c0:11:
a0:78:0d:ab:98:ea:00:bd:3d:c5:ab:69:3a:31:c7:93:a2:8f:
6b:43:cf:0f:2d:4e:fe:d7:63:5f:0e:a8:12:01:06:24:28:7f:
a0:32:0f:40:3b:fd:3d:50:c0:6f:e4:8a:44:d6:cd:b7:7e:b4:
30:ed:de:16:5c:5a:c9:04:1b:c6:d9:62:f3:f3:2c:41:a3:95:
52:00:1e:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:27:10 2025 by rpki-client