Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/0da847-1ae9-496c-89fa-9245a9ab978b/1/rwMNO0xYnpSj72Hd1UAajz_3m20.mft
File: rwMNO0xYnpSj72Hd1UAajz_3m20.mft (raw, json)
Hash identifier: QNI827l4DFuIf/HEemC4QoVs2yG01/gIU8eZ5IUxfRs=
Subject key identifier: 5F:8A:A0:CD:53:2C:09:03:81:96:3E:84:4F:D2:87:F0:C4:FD:D6:63
Authority key identifier: AF:03:0D:3B:4C:58:9E:94:A3:EF:61:DD:D5:40:1A:8F:3F:F7:9B:6D
Certificate issuer: /CN=af030d3b4c589e94a3ef61ddd5401a8f3ff79b6d
Certificate serial: 0198D4E08E58F2F16C62579DFEA7BDF72EDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rwMNO0xYnpSj72Hd1UAajz_3m20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/0da847-1ae9-496c-89fa-9245a9ab978b/1/rwMNO0xYnpSj72Hd1UAajz_3m20.mft
Manifest number: 047F
Signing time: Sat 23 Aug 2025 03:02:22 +0000
Manifest this update: Sat 23 Aug 2025 03:02:22 +0000
Manifest next update: Sun 24 Aug 2025 03:02:22 +0000
Files and hashes: 1: lhPT8Z32dm5HBnSDBqDW1qERmiA.roa (hash: 0NqD/8/FwQf4n6Nk71zoiew6bzyeCyV72ogP7Shiesg=)
2: rwMNO0xYnpSj72Hd1UAajz_3m20.crl (hash: zpkgkVXwCnVf5DY2z4JNku4pu1oOx9WiDkWr/Wen40I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/0da847-1ae9-496c-89fa-9245a9ab978b/1/rwMNO0xYnpSj72Hd1UAajz_3m20.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/0da847-1ae9-496c-89fa-9245a9ab978b/1/rwMNO0xYnpSj72Hd1UAajz_3m20.mft
rsync://rpki.ripe.net/repository/DEFAULT/rwMNO0xYnpSj72Hd1UAajz_3m20.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:8e:58:f2:f1:6c:62:57:9d:fe:a7:bd:f7:2e:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af030d3b4c589e94a3ef61ddd5401a8f3ff79b6d
Validity
Not Before: Aug 23 03:02:22 2025 GMT
Not After : Aug 24 03:02:22 2025 GMT
Subject: CN=5f8aa0cd532c090381963e844fd287f0c4fdd663
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:1a:54:57:41:71:4d:22:21:50:c8:69:7e:e1:
27:4c:e1:7e:4c:66:8d:51:93:22:6f:55:f8:57:dd:
51:48:70:b0:d3:6d:e2:d5:fd:4d:3a:16:ab:7a:e5:
58:fa:35:01:b6:50:77:d9:5b:76:43:93:38:21:9c:
fb:e2:ba:83:bf:95:62:01:5e:ab:ca:ce:93:99:07:
0e:0d:06:d3:d9:c9:56:26:bc:f0:e9:b3:34:93:95:
30:ad:e6:3d:c8:ce:aa:6c:ec:81:8d:1f:c5:fc:67:
ea:92:9f:3d:58:fa:03:74:73:6e:60:90:36:1e:90:
a4:e5:d9:7d:41:5e:ba:b2:48:ff:66:9e:65:62:d2:
fb:9e:45:b8:a7:a6:80:04:4c:7d:63:3c:86:f4:89:
60:3a:13:7c:02:3c:ab:30:09:6f:99:25:ad:6a:0a:
0d:9f:42:9d:03:8c:a2:3c:1c:a8:a2:9d:38:28:41:
ca:03:a8:c3:af:66:7d:78:c8:f8:fb:f1:96:34:90:
5c:08:1e:1a:27:9c:b3:57:f4:8b:2a:b5:a2:eb:fc:
ed:7a:30:eb:d0:11:e5:da:98:c9:06:62:34:15:5a:
7f:bf:f6:81:f5:77:1a:ac:16:77:ac:58:f4:f1:a9:
e5:72:1c:eb:5a:a9:79:72:b2:ff:33:b6:8d:b2:22:
5d:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:8A:A0:CD:53:2C:09:03:81:96:3E:84:4F:D2:87:F0:C4:FD:D6:63
X509v3 Authority Key Identifier:
keyid:AF:03:0D:3B:4C:58:9E:94:A3:EF:61:DD:D5:40:1A:8F:3F:F7:9B:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rwMNO0xYnpSj72Hd1UAajz_3m20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0da847-1ae9-496c-89fa-9245a9ab978b/1/rwMNO0xYnpSj72Hd1UAajz_3m20.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0da847-1ae9-496c-89fa-9245a9ab978b/1/rwMNO0xYnpSj72Hd1UAajz_3m20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:72:46:b8:09:3a:9d:13:9d:38:14:69:3b:d3:0e:4d:92:1a:
f4:3d:84:09:4d:8a:35:0c:7d:b2:7e:0d:e1:b4:0b:03:df:61:
cb:89:26:be:e1:a3:a7:9d:ec:ad:87:d3:a5:07:da:73:e8:7a:
01:67:c1:0d:01:12:d1:3c:f5:18:cc:00:76:78:f3:ef:da:85:
c2:5c:0a:d1:50:47:d1:98:6f:bf:a8:f1:8e:fd:d4:b8:85:ab:
1f:9e:45:1c:e1:da:0f:64:b8:09:51:1f:bf:e8:74:52:09:4c:
6a:12:ca:f5:9a:53:db:b7:c2:6f:24:8a:12:f2:a5:70:ba:22:
42:ef:fc:96:e7:0b:9c:96:6d:85:4c:93:ba:f3:14:d9:76:89:
ae:d3:bc:1c:c7:14:64:6d:19:be:c9:4e:17:b8:57:9a:1d:ab:
04:7f:b2:c8:07:1b:fb:c2:00:24:7a:50:90:3c:6e:34:5f:db:
a3:e9:bb:65:32:06:39:47:6c:be:dc:1d:ae:33:5a:9f:10:e3:
49:5b:37:bc:13:8f:0e:f9:0a:ae:c6:eb:f2:c0:10:b8:8c:0d:
91:2c:ba:22:d8:f4:37:46:b2:26:8b:a7:25:ae:31:00:ee:fe:
7f:77:1f:d3:96:b4:9f:78:8c:9f:fe:40:a1:1f:3b:4b:b2:a2:
65:09:07:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:31:45 2025 by rpki-client