Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/3001ad-de90-4360-811f-0a0d05ed0c6b/1/r5NWA-UugxU3cW1FizYBkvmaNok.mft
File: r5NWA-UugxU3cW1FizYBkvmaNok.mft (raw, json)
Hash identifier: 7hsDCsO8dMe/ZrHYPO7j7KwClQJPAgJbAQG1xzPfqT4=
Subject key identifier: 1B:C2:CF:7F:AF:7A:12:3A:FA:14:DF:27:DA:23:9F:2F:19:D6:F2:1B
Authority key identifier: AF:93:56:03:E5:2E:83:15:37:71:6D:45:8B:36:01:92:F9:9A:36:89
Certificate issuer: /CN=af935603e52e831537716d458b360192f99a3689
Certificate serial: 01988CFDE6C36D02DE73A667513FDB1E0887
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r5NWA-UugxU3cW1FizYBkvmaNok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/3001ad-de90-4360-811f-0a0d05ed0c6b/1/r5NWA-UugxU3cW1FizYBkvmaNok.mft
Manifest number: 0E1C
Signing time: Sat 09 Aug 2025 04:01:46 +0000
Manifest this update: Sat 09 Aug 2025 04:01:46 +0000
Manifest next update: Sun 10 Aug 2025 04:01:46 +0000
Files and hashes: 1: C8GJTtN7fk4YCqjJY8mOHTrefmE.roa (hash: UKesPOi4+5CzCQnG0snfHD/ZU73osDFB9OchjV8wo3E=)
2: eQMDRNJuMlNlfPMiBSEoRMIZqkc.roa (hash: +YT5AumPRJxR5qeAOACvLYBXjcHMfp3cae2CLFa9pWo=)
3: pK186WjMEhCqpTApn72adWGJTc0.roa (hash: 2vPV6EcNoUKs6NmXfu/cqUoWqE3tnBkAH13PFqBjjPI=)
4: r5NWA-UugxU3cW1FizYBkvmaNok.crl (hash: Rvo3WUQhHdTtNxudb3ULbsxIDQ2DFdwMjmJ8vl6n688=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/3001ad-de90-4360-811f-0a0d05ed0c6b/1/r5NWA-UugxU3cW1FizYBkvmaNok.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/3001ad-de90-4360-811f-0a0d05ed0c6b/1/r5NWA-UugxU3cW1FizYBkvmaNok.mft
rsync://rpki.ripe.net/repository/DEFAULT/r5NWA-UugxU3cW1FizYBkvmaNok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 04:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8c:fd:e6:c3:6d:02:de:73:a6:67:51:3f:db:1e:08:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af935603e52e831537716d458b360192f99a3689
Validity
Not Before: Aug 9 04:01:46 2025 GMT
Not After : Aug 10 04:01:46 2025 GMT
Subject: CN=1bc2cf7faf7a123afa14df27da239f2f19d6f21b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d4:23:ab:dd:7e:2f:75:24:f9:d4:de:05:17:
c8:f3:a7:1b:17:e1:a8:12:3f:34:33:02:8f:87:ce:
71:77:13:e4:cf:f4:cd:9d:12:a5:ad:00:1b:dd:68:
fb:58:67:bb:89:55:61:b3:0e:76:6f:b5:98:a7:c3:
e9:50:0a:19:e8:8b:d4:c0:c9:37:be:13:c3:12:52:
7c:04:89:b1:6b:a6:fd:8b:20:55:53:a1:6e:dc:d4:
c0:de:da:0f:e6:a3:59:57:97:e2:04:a4:d1:6d:3b:
15:10:53:e9:c4:32:a2:ad:49:64:bf:4e:8b:d1:13:
88:48:4c:ef:00:8b:18:32:4c:91:f5:7e:6c:e7:5a:
32:44:fd:c4:80:95:29:9f:4d:98:42:2b:29:31:d4:
f9:bd:3b:17:4d:da:39:08:c9:9e:32:ca:aa:87:ca:
e9:aa:f7:e8:c9:2a:8b:8c:86:0f:aa:d0:5f:08:4b:
88:e1:4f:df:ee:f9:7e:90:32:f6:6d:85:54:87:00:
03:d2:eb:a6:a0:de:41:73:39:12:a7:5e:ef:6b:fa:
fd:4b:b2:44:32:11:8a:6c:86:78:43:02:88:41:55:
3f:d2:17:1b:c7:bf:41:13:9e:d7:fd:a3:86:da:33:
24:53:b2:60:e2:ae:0e:e6:84:d2:9a:f4:f6:45:92:
a2:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:C2:CF:7F:AF:7A:12:3A:FA:14:DF:27:DA:23:9F:2F:19:D6:F2:1B
X509v3 Authority Key Identifier:
keyid:AF:93:56:03:E5:2E:83:15:37:71:6D:45:8B:36:01:92:F9:9A:36:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r5NWA-UugxU3cW1FizYBkvmaNok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/3001ad-de90-4360-811f-0a0d05ed0c6b/1/r5NWA-UugxU3cW1FizYBkvmaNok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/3001ad-de90-4360-811f-0a0d05ed0c6b/1/r5NWA-UugxU3cW1FizYBkvmaNok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:a8:83:b7:fc:99:cf:8a:dc:93:b9:10:f8:13:c3:24:df:8a:
ac:de:23:b2:df:89:0e:ca:81:46:eb:8a:67:6b:5c:a2:c7:fd:
8d:48:73:8a:72:c0:c0:a6:0a:64:6d:b3:ee:a5:e7:fd:6d:76:
49:38:c7:1c:b1:1f:28:2c:7d:14:47:0d:c1:71:f9:5a:3a:eb:
96:cb:42:58:58:1e:10:f4:1d:28:91:33:59:49:b7:cb:7e:04:
4e:46:8c:fa:2a:0a:ad:a5:ab:19:67:99:06:28:ff:05:b2:ed:
56:c1:c3:73:4a:26:76:fe:82:fe:aa:f1:6e:7b:70:ca:7f:af:
5a:fe:c7:88:ad:c9:ca:ec:17:3a:cc:6c:78:e8:18:08:17:2f:
f2:35:3d:49:f2:d8:13:a6:b0:31:0a:12:14:4e:32:40:54:68:
6a:35:07:30:74:64:72:d1:18:a5:0a:b6:d6:11:c3:51:ca:23:
42:a8:22:b7:03:ec:6f:54:2d:9c:a7:c7:96:ed:a0:28:60:f6:
6a:97:5b:41:c8:e2:65:b8:d2:d7:1f:ff:27:44:f8:64:e4:22:
95:2d:d5:bc:22:94:ca:55:70:4c:84:04:b9:b3:23:e0:e9:f9:
80:6e:7c:45:9f:e3:79:2d:a6:20:d5:d8:01:77:26:76:c2:c6:
02:46:23:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 14:23:57 2025 by rpki-client