Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/7560e4-fc7d-4a64-b500-e7f05f029a48/1/rwXUKRyugYXGw0LiXe6bfpIPdt0.mft
File: rwXUKRyugYXGw0LiXe6bfpIPdt0.mft (raw, json)
Hash identifier: ig+DWAr4AqihG8TNLv6irFYHitatFD56FcJ6/JjciII=
Subject key identifier: 2B:AA:53:70:C3:1B:82:AB:F8:04:03:8C:04:84:FC:50:01:01:EE:BD
Authority key identifier: AF:05:D4:29:1C:AE:81:85:C6:C3:42:E2:5D:EE:9B:7E:92:0F:76:DD
Certificate issuer: /CN=af05d4291cae8185c6c342e25dee9b7e920f76dd
Certificate serial: 019A5299EC8D8CD7335021642396A631517C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rwXUKRyugYXGw0LiXe6bfpIPdt0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/7560e4-fc7d-4a64-b500-e7f05f029a48/1/rwXUKRyugYXGw0LiXe6bfpIPdt0.mft
Manifest number: 05D7
Signing time: Wed 05 Nov 2025 06:00:10 +0000
Manifest this update: Wed 05 Nov 2025 06:00:10 +0000
Manifest next update: Thu 06 Nov 2025 06:00:10 +0000
Files and hashes: 1: 41rmP0fRaJ_Rp04VkDrnen4Ff9k.roa (hash: hIEQZsD1Luj1wzFwd6Ncf1xZemUGDUraVaNuYs6VnsA=)
2: rwXUKRyugYXGw0LiXe6bfpIPdt0.crl (hash: Kn8dwZEZIdRjNbb3RBYfJztJHVTNE0TBu5R/Ty7zCUc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/7560e4-fc7d-4a64-b500-e7f05f029a48/1/rwXUKRyugYXGw0LiXe6bfpIPdt0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/7560e4-fc7d-4a64-b500-e7f05f029a48/1/rwXUKRyugYXGw0LiXe6bfpIPdt0.mft
rsync://rpki.ripe.net/repository/DEFAULT/rwXUKRyugYXGw0LiXe6bfpIPdt0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:99:ec:8d:8c:d7:33:50:21:64:23:96:a6:31:51:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af05d4291cae8185c6c342e25dee9b7e920f76dd
Validity
Not Before: Nov 5 06:00:10 2025 GMT
Not After : Nov 6 06:00:10 2025 GMT
Subject: CN=2baa5370c31b82abf804038c0484fc500101eebd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:4c:3d:f7:9d:c1:f0:8f:e6:d0:1a:e0:55:37:
1f:85:85:2a:4f:42:60:43:80:50:e2:d6:af:e8:ee:
8d:5b:19:0e:0d:70:28:87:db:dd:5d:f6:2a:d7:b7:
cb:0f:b5:92:36:97:ad:9a:8c:d2:6a:81:d0:4a:e0:
aa:81:33:3d:f5:aa:2b:3d:3b:79:6b:41:cd:b2:29:
db:2b:88:7c:6c:51:6b:a3:e7:ce:b6:60:1c:ad:a3:
dd:c7:4f:49:a6:fa:1f:49:12:b7:da:2d:bf:6f:99:
47:27:1e:0d:18:87:b8:22:76:f1:be:a8:18:a9:f4:
c6:37:3a:db:38:05:3a:7d:b2:bc:60:1c:a5:7e:2a:
4e:98:49:c7:f8:12:58:0e:ba:ca:da:5b:80:71:6d:
ca:b4:17:46:d1:32:40:da:40:a4:42:ab:f2:7c:9c:
d1:1e:b7:3b:6d:cd:e8:07:74:26:1d:3b:ab:35:b4:
c7:bd:19:8b:e3:cc:74:64:41:4a:ad:a6:04:19:75:
f4:0f:f6:f7:ea:2f:d3:af:7b:5c:8a:70:22:b1:87:
ce:07:e8:1a:6f:85:ce:5b:63:d7:db:3f:c9:ac:b2:
36:02:d2:00:73:75:3d:3c:4d:5f:b5:25:aa:5e:70:
4c:52:4f:29:d7:ec:0f:09:fe:f2:8d:5a:15:c1:3a:
e6:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:AA:53:70:C3:1B:82:AB:F8:04:03:8C:04:84:FC:50:01:01:EE:BD
X509v3 Authority Key Identifier:
keyid:AF:05:D4:29:1C:AE:81:85:C6:C3:42:E2:5D:EE:9B:7E:92:0F:76:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rwXUKRyugYXGw0LiXe6bfpIPdt0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/7560e4-fc7d-4a64-b500-e7f05f029a48/1/rwXUKRyugYXGw0LiXe6bfpIPdt0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/7560e4-fc7d-4a64-b500-e7f05f029a48/1/rwXUKRyugYXGw0LiXe6bfpIPdt0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:d7:f0:52:ce:07:d4:e4:5c:1c:d7:9a:be:63:d0:71:8c:b0:
8b:8b:6e:1d:53:b7:3f:63:d8:4f:c0:c2:d6:0d:d6:28:6b:82:
c1:f1:b3:b0:3c:a3:4e:b9:0f:6e:4c:95:39:29:50:27:01:6d:
c7:a4:25:6d:00:1a:e4:ce:c1:a6:59:04:0f:89:65:f0:a7:29:
b4:7c:28:70:9c:e2:b6:7e:c7:25:73:a1:90:ab:2a:e9:08:34:
22:29:79:b7:59:d8:dc:36:f4:16:fe:4f:14:07:c2:2c:f7:a2:
70:a1:4e:9f:56:d5:54:14:ee:30:a0:e4:d8:93:85:96:25:1c:
ae:41:35:ad:ff:85:9c:30:10:5c:c3:52:40:53:07:8e:7a:4d:
52:a6:f4:5d:6d:80:5f:6b:ba:d9:cb:49:4b:c4:5b:70:4c:91:
97:19:48:1b:97:40:e6:93:3f:f3:31:7f:4c:3e:9c:2e:1f:12:
db:91:7b:e1:1d:b5:06:9c:db:a2:14:af:eb:ed:8c:21:79:0c:
10:dd:50:6e:50:c5:fb:d9:bf:64:14:24:27:4c:9e:2e:30:c4:
01:74:4d:ff:e9:47:47:bc:92:43:f4:38:4f:13:b6:b3:2b:65:
21:1f:ad:bd:75:fe:20:67:09:78:19:b7:e6:61:4b:5a:5b:a1:
f2:60:50:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:59:20 2025 by rpki-client