Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/0da847-1ae9-496c-89fa-9245a9ab978b/1/rwMNO0xYnpSj72Hd1UAajz_3m20.mft
File: rwMNO0xYnpSj72Hd1UAajz_3m20.mft (raw, json)
Hash identifier: RqYmWXZrudkCOl7ckUz9fN4Cm4dins3Bmiz3eR/u1MU=
Subject key identifier: 50:59:96:E4:EC:90:8E:F1:48:42:16:FD:9E:35:3C:4F:31:2D:5B:A2
Authority key identifier: AF:03:0D:3B:4C:58:9E:94:A3:EF:61:DD:D5:40:1A:8F:3F:F7:9B:6D
Certificate issuer: /CN=af030d3b4c589e94a3ef61ddd5401a8f3ff79b6d
Certificate serial: 0199FE4701C74FC3581E5FF27C1B00E480A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rwMNO0xYnpSj72Hd1UAajz_3m20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/0da847-1ae9-496c-89fa-9245a9ab978b/1/rwMNO0xYnpSj72Hd1UAajz_3m20.mft
Manifest number: 0519
Signing time: Sun 19 Oct 2025 21:01:30 +0000
Manifest this update: Sun 19 Oct 2025 21:01:30 +0000
Manifest next update: Mon 20 Oct 2025 21:01:30 +0000
Files and hashes: 1: lhPT8Z32dm5HBnSDBqDW1qERmiA.roa (hash: 0NqD/8/FwQf4n6Nk71zoiew6bzyeCyV72ogP7Shiesg=)
2: rwMNO0xYnpSj72Hd1UAajz_3m20.crl (hash: PLGnk/XGs3bEjZohTLCGmnsjRqhrt2oS5b6PHMuRCZE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/0da847-1ae9-496c-89fa-9245a9ab978b/1/rwMNO0xYnpSj72Hd1UAajz_3m20.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/0da847-1ae9-496c-89fa-9245a9ab978b/1/rwMNO0xYnpSj72Hd1UAajz_3m20.mft
rsync://rpki.ripe.net/repository/DEFAULT/rwMNO0xYnpSj72Hd1UAajz_3m20.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:47:01:c7:4f:c3:58:1e:5f:f2:7c:1b:00:e4:80:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af030d3b4c589e94a3ef61ddd5401a8f3ff79b6d
Validity
Not Before: Oct 19 21:01:30 2025 GMT
Not After : Oct 20 21:01:30 2025 GMT
Subject: CN=505996e4ec908ef1484216fd9e353c4f312d5ba2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:6f:ca:f2:a7:11:4e:f6:73:a1:1b:a9:86:51:
fd:76:e6:75:ff:f6:ae:42:5b:b6:4a:b0:b4:d3:b7:
f2:1f:da:44:dd:37:8c:b7:cd:84:f1:ee:e6:25:47:
99:ed:40:1c:ef:9b:b5:e4:71:14:90:03:a3:bb:bd:
a7:4c:19:dc:eb:8c:95:f5:65:74:f1:b0:e5:01:fb:
2f:99:04:82:19:0b:d4:81:57:22:b4:27:0a:52:51:
a8:a8:5a:dc:b7:6f:f5:9c:64:ae:f4:1f:e0:c4:c0:
79:5c:bb:f0:0b:2d:14:c1:55:f4:68:7b:ac:f5:39:
fc:fa:67:00:b3:aa:75:f8:3d:f6:3c:81:18:b9:f2:
85:fe:df:4f:ba:27:1d:7e:40:15:5c:fb:e8:85:74:
e7:cf:de:54:63:79:4b:0d:39:ba:23:55:ed:2d:82:
46:93:63:e2:c0:74:ed:20:8e:e1:d5:de:22:bc:0c:
ff:40:89:b9:fd:09:d2:18:72:a0:9c:74:fe:5d:15:
4a:92:e4:f9:c1:67:50:ba:38:38:28:1b:73:e7:64:
90:c6:e3:fd:00:94:6c:ee:b5:e8:d5:78:c9:6f:66:
48:3d:40:bb:21:8c:9e:9c:13:ce:e5:f7:51:d6:4e:
da:85:99:aa:09:98:b0:72:cc:dd:f3:36:f7:22:bb:
d0:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:59:96:E4:EC:90:8E:F1:48:42:16:FD:9E:35:3C:4F:31:2D:5B:A2
X509v3 Authority Key Identifier:
keyid:AF:03:0D:3B:4C:58:9E:94:A3:EF:61:DD:D5:40:1A:8F:3F:F7:9B:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rwMNO0xYnpSj72Hd1UAajz_3m20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0da847-1ae9-496c-89fa-9245a9ab978b/1/rwMNO0xYnpSj72Hd1UAajz_3m20.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0da847-1ae9-496c-89fa-9245a9ab978b/1/rwMNO0xYnpSj72Hd1UAajz_3m20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:20:90:e7:c2:76:2a:d5:d4:22:6c:e0:b7:8d:54:2a:0a:65:
76:17:1a:16:6d:6c:b8:24:3e:2d:f0:97:af:0e:2b:ff:22:3a:
1d:00:b7:13:40:79:37:90:d8:4c:de:47:06:69:be:0c:f8:35:
76:85:76:b4:a7:e4:9e:2f:4b:c5:7a:47:ae:85:69:15:ed:70:
bf:d3:02:d5:80:06:05:02:f0:ea:8d:74:68:fe:5d:d0:b4:2a:
63:54:fd:c2:fd:68:22:e5:ed:51:14:d9:1a:3f:fb:de:6c:14:
33:ab:82:18:45:ed:23:4d:77:78:9c:bf:7c:22:ff:50:68:1d:
17:eb:33:6a:e6:ab:a0:e7:0f:fd:5f:e6:2b:27:7e:bd:48:df:
f7:f2:36:24:b0:33:4e:45:53:01:c8:b0:57:03:fa:e6:15:78:
ec:9e:b6:f3:5a:e9:c2:cb:9b:74:f4:7b:8f:95:da:7d:a9:0c:
30:ea:9e:7d:29:aa:1f:05:32:35:4e:75:5d:c4:8a:54:66:ad:
be:49:a7:f1:90:81:80:5e:f6:e7:cc:5f:de:36:18:67:00:4f:
c6:89:c3:ae:bd:e2:5b:67:4c:13:e9:15:6f:d8:98:f7:47:75:
7a:06:c5:f5:15:b0:5b:b7:cb:7a:a2:64:79:f3:db:ba:59:7a:
71:3d:b9:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:15:29 2025 by rpki-client