Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/d16e96-0313-4c9b-9c09-a95fe3102645/1/r5MQJRHmYCY_jvbkwfmrMjk4ObI.mft
File: r5MQJRHmYCY_jvbkwfmrMjk4ObI.mft (raw, json)
Hash identifier: h1v13m1p6tws5KtX9vuZ3RKMsyzl7YBZbcizDxyShn8=
Subject key identifier: 8A:83:BB:21:5F:43:42:E4:A0:E4:FB:72:C7:08:32:17:FD:E9:46:C7
Authority key identifier: AF:93:10:25:11:E6:60:26:3F:8E:F6:E4:C1:F9:AB:32:39:38:39:B2
Certificate issuer: /CN=af93102511e660263f8ef6e4c1f9ab32393839b2
Certificate serial: 0199FE4690848DA7B2336FD488961DB88BEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r5MQJRHmYCY_jvbkwfmrMjk4ObI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/d16e96-0313-4c9b-9c09-a95fe3102645/1/r5MQJRHmYCY_jvbkwfmrMjk4ObI.mft
Manifest number: 0B4F
Signing time: Sun 19 Oct 2025 21:01:01 +0000
Manifest this update: Sun 19 Oct 2025 21:01:01 +0000
Manifest next update: Mon 20 Oct 2025 21:01:01 +0000
Files and hashes: 1: QyIQhrwBc_E0RzmwfCK0p-xEPL8.roa (hash: KU05TYN4aOywUPeCIgZViB5uKUpefnNLinujip3r7Ws=)
2: r5MQJRHmYCY_jvbkwfmrMjk4ObI.crl (hash: BvumEkUpecKbbW2mZsf37m7rE42id9E+P1YU61VXB9w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/d16e96-0313-4c9b-9c09-a95fe3102645/1/r5MQJRHmYCY_jvbkwfmrMjk4ObI.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/d16e96-0313-4c9b-9c09-a95fe3102645/1/r5MQJRHmYCY_jvbkwfmrMjk4ObI.mft
rsync://rpki.ripe.net/repository/DEFAULT/r5MQJRHmYCY_jvbkwfmrMjk4ObI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:46:90:84:8d:a7:b2:33:6f:d4:88:96:1d:b8:8b:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af93102511e660263f8ef6e4c1f9ab32393839b2
Validity
Not Before: Oct 19 21:01:01 2025 GMT
Not After : Oct 20 21:01:01 2025 GMT
Subject: CN=8a83bb215f4342e4a0e4fb72c7083217fde946c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:1d:30:9d:2d:5f:b6:91:d3:f5:2b:76:35:4b:
72:23:10:3d:26:a1:a9:eb:bb:aa:1d:21:b7:d6:11:
90:bf:78:f8:05:2d:6d:2b:8a:39:93:a7:67:f7:36:
f3:7f:fb:c8:b1:24:ca:56:d2:31:9f:1a:8b:6b:19:
66:75:3f:26:8b:be:73:e8:c6:68:89:9c:0f:d6:77:
dd:53:0a:d5:74:6e:2c:07:81:d5:86:18:ff:79:11:
ad:c3:c3:7b:69:69:82:27:6d:84:63:55:2f:85:ec:
9b:1b:4f:f2:57:8d:4e:b1:28:26:d9:65:85:e4:fb:
c4:e7:16:71:ae:b4:37:cc:d7:6c:33:3f:67:ae:1a:
96:50:d8:7d:c3:de:aa:e5:5e:9b:e4:a4:8b:1c:93:
f9:36:3c:79:b4:97:70:5b:d5:b6:74:90:79:82:0d:
0e:4e:e0:21:8f:5e:71:9b:d2:53:f8:04:1d:eb:0c:
e5:3c:18:7e:4f:41:2e:5d:f3:5b:ea:bd:42:ba:55:
43:1b:b6:1c:65:5e:23:73:0c:8d:1b:2a:a8:fa:db:
20:8e:76:51:10:a7:88:1d:dd:08:d9:87:02:7c:c4:
58:e7:99:b4:26:46:1d:c2:7a:b4:2d:4c:e3:ba:83:
e4:e6:15:db:29:11:75:b7:b9:f9:a3:64:88:69:30:
7b:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:83:BB:21:5F:43:42:E4:A0:E4:FB:72:C7:08:32:17:FD:E9:46:C7
X509v3 Authority Key Identifier:
keyid:AF:93:10:25:11:E6:60:26:3F:8E:F6:E4:C1:F9:AB:32:39:38:39:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r5MQJRHmYCY_jvbkwfmrMjk4ObI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/d16e96-0313-4c9b-9c09-a95fe3102645/1/r5MQJRHmYCY_jvbkwfmrMjk4ObI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/d16e96-0313-4c9b-9c09-a95fe3102645/1/r5MQJRHmYCY_jvbkwfmrMjk4ObI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:67:8a:82:e3:2f:8b:47:a9:72:46:4e:5c:d4:4d:c1:50:58:
e1:d6:4c:58:cc:16:b3:cc:ca:c2:32:8c:3c:e0:ff:4c:41:9e:
4e:60:a2:28:4f:ce:18:b0:cf:c9:b4:fd:fd:0b:34:6e:ce:28:
10:21:c3:6d:9d:75:ec:af:6f:eb:9c:c8:49:5e:88:e9:2d:f7:
ae:82:d8:f3:3c:37:ff:04:bf:79:20:83:fb:a0:97:ab:06:96:
46:1d:11:1b:af:71:bd:35:be:ec:93:c6:39:48:ad:8b:63:1a:
5b:46:0f:7b:9d:3c:c6:a2:75:8a:b4:a6:ed:02:67:6d:3f:b6:
f5:03:f7:99:ec:d5:2f:db:62:bf:7b:ad:8b:5f:0a:48:23:d7:
eb:b2:e0:24:42:f5:2e:a9:78:cc:0f:6f:92:62:38:1c:90:9e:
3e:ae:09:4e:89:d4:61:98:2c:7f:38:09:d9:6d:e6:80:b3:50:
3a:e7:04:24:07:5e:68:af:69:5a:3d:00:19:45:11:42:f1:8b:
ed:a9:41:bb:1f:c8:4b:2a:8a:4f:12:b6:f9:c9:2f:2e:a7:d2:
87:4b:3b:b1:c0:05:5c:b4:00:88:33:a5:a3:d1:2f:7c:3b:9e:
5d:ef:10:05:00:05:61:27:3c:1c:df:9e:64:d0:fd:ec:8e:2c:
a2:dc:7b:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:05:09 2025 by rpki-client