Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/3001ad-de90-4360-811f-0a0d05ed0c6b/1/r5NWA-UugxU3cW1FizYBkvmaNok.mft
File: r5NWA-UugxU3cW1FizYBkvmaNok.mft (raw, json)
Hash identifier: s1wKQidJeDE95ndlm/dEFHXTE31ITbdE5wliahC4KBM=
Subject key identifier: F9:91:0B:0E:BE:09:D3:CE:95:F6:03:FA:46:FC:59:99:C1:78:98:7D
Authority key identifier: AF:93:56:03:E5:2E:83:15:37:71:6D:45:8B:36:01:92:F9:9A:36:89
Certificate issuer: /CN=af935603e52e831537716d458b360192f99a3689
Certificate serial: 019A52D1EA1604F87D76058E40446A734651
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r5NWA-UugxU3cW1FizYBkvmaNok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/3001ad-de90-4360-811f-0a0d05ed0c6b/1/r5NWA-UugxU3cW1FizYBkvmaNok.mft
Manifest number: 0F07
Signing time: Wed 05 Nov 2025 07:01:19 +0000
Manifest this update: Wed 05 Nov 2025 07:01:19 +0000
Manifest next update: Thu 06 Nov 2025 07:01:19 +0000
Files and hashes: 1: C8GJTtN7fk4YCqjJY8mOHTrefmE.roa (hash: UKesPOi4+5CzCQnG0snfHD/ZU73osDFB9OchjV8wo3E=)
2: eQMDRNJuMlNlfPMiBSEoRMIZqkc.roa (hash: +YT5AumPRJxR5qeAOACvLYBXjcHMfp3cae2CLFa9pWo=)
3: pK186WjMEhCqpTApn72adWGJTc0.roa (hash: 2vPV6EcNoUKs6NmXfu/cqUoWqE3tnBkAH13PFqBjjPI=)
4: r5NWA-UugxU3cW1FizYBkvmaNok.crl (hash: hojn/5uvVM0KyRXVs9iwIzWiEgLdcoWAi4DcK4CtmNw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/3001ad-de90-4360-811f-0a0d05ed0c6b/1/r5NWA-UugxU3cW1FizYBkvmaNok.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/3001ad-de90-4360-811f-0a0d05ed0c6b/1/r5NWA-UugxU3cW1FizYBkvmaNok.mft
rsync://rpki.ripe.net/repository/DEFAULT/r5NWA-UugxU3cW1FizYBkvmaNok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d1:ea:16:04:f8:7d:76:05:8e:40:44:6a:73:46:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af935603e52e831537716d458b360192f99a3689
Validity
Not Before: Nov 5 07:01:19 2025 GMT
Not After : Nov 6 07:01:19 2025 GMT
Subject: CN=f9910b0ebe09d3ce95f603fa46fc5999c178987d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:75:e4:6b:10:f6:b9:85:63:91:6c:51:2d:5d:
49:52:7f:44:20:17:f1:a2:88:68:eb:a5:5e:d0:e8:
06:da:e5:23:8a:17:be:45:e9:9e:6e:08:ea:d3:3f:
0c:9e:fc:ff:4e:3b:c2:4a:88:d9:c6:01:02:e2:f5:
aa:e6:7f:8d:4d:7d:31:bc:2d:10:63:2c:1e:9a:30:
27:bf:09:3e:5e:d8:e8:ec:43:76:72:56:24:0c:b7:
52:66:93:c9:02:62:b5:8e:61:61:44:f6:9e:98:6a:
58:9c:93:78:22:03:7f:d2:3f:66:b6:97:a4:ee:5a:
b9:06:d4:9c:38:02:8b:61:73:8b:f4:94:3f:7b:a5:
db:fb:86:bf:c2:4f:58:03:05:49:b0:97:73:db:9b:
b9:73:67:aa:33:05:8c:d5:66:5d:72:65:b3:24:46:
40:23:03:50:fa:c9:d8:5a:c6:af:d5:b4:22:4b:38:
b8:05:a4:86:89:1c:1a:53:05:2d:98:4d:03:82:2e:
c6:08:42:23:41:66:87:c5:c1:35:37:c5:7b:fc:c7:
69:f4:66:84:fa:ad:b5:de:84:9c:dc:d5:fa:6e:99:
67:b1:c6:25:c5:bb:7c:4b:b9:c7:77:9a:f6:fe:b1:
91:6f:19:b0:9c:b0:3f:27:d7:5a:34:79:03:e9:8c:
ef:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:91:0B:0E:BE:09:D3:CE:95:F6:03:FA:46:FC:59:99:C1:78:98:7D
X509v3 Authority Key Identifier:
keyid:AF:93:56:03:E5:2E:83:15:37:71:6D:45:8B:36:01:92:F9:9A:36:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r5NWA-UugxU3cW1FizYBkvmaNok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/3001ad-de90-4360-811f-0a0d05ed0c6b/1/r5NWA-UugxU3cW1FizYBkvmaNok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/3001ad-de90-4360-811f-0a0d05ed0c6b/1/r5NWA-UugxU3cW1FizYBkvmaNok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:6b:0a:c2:56:d2:97:ba:0c:12:10:0f:6b:fc:c4:d3:4f:91:
20:58:0a:60:ae:dd:c9:df:f0:15:4e:1f:38:0c:ec:89:c5:c9:
29:60:47:2c:c5:de:73:59:fa:3c:1f:12:87:0f:2d:0f:5a:f9:
9e:9a:d4:6a:dd:a6:40:d9:56:43:4d:e8:af:7b:89:0c:6b:c0:
47:25:79:88:53:59:ab:b3:85:18:b7:4b:b0:9c:72:73:4a:da:
b9:1f:19:f1:0b:c7:c2:e8:09:7a:1b:e9:5a:11:85:85:dd:6d:
fb:bd:85:4c:a7:37:81:64:e5:56:50:02:dc:29:cb:0e:0c:e9:
e2:fc:03:57:57:92:9e:14:ea:9a:df:ce:b0:62:31:19:2f:50:
d8:f0:6b:98:ec:08:bd:0a:d7:81:63:01:5b:f5:3b:04:08:68:
c3:27:8c:bf:a6:73:9e:87:f2:5d:07:cc:97:e5:a8:ea:1b:47:
29:f5:f9:e7:3f:61:a7:b8:ee:57:5c:00:95:30:be:d0:f7:55:
3a:d8:e6:3e:02:95:51:53:4b:55:22:7e:d6:35:49:1d:8b:ab:
ee:fc:20:a2:c1:12:8b:ca:a9:fc:a1:cb:c7:a4:90:1a:5c:21:
b1:78:05:12:47:c3:ea:c1:40:c6:f1:6c:dd:e6:42:eb:e8:85:
db:23:76:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:45:40 2025 by rpki-client