Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/99be80-152c-4b65-8b32-0718aa8dd9a7/1/r5NOxpSvaBNLdRTBDc0ThXtFnjg.mft
File: r5NOxpSvaBNLdRTBDc0ThXtFnjg.mft (raw, json)
Hash identifier: GR0uY2GTjRml3I0bXmunR1uAxlkglrOlY23Q5w7U0e8=
Subject key identifier: BE:64:2D:94:D5:07:05:E8:DA:05:D9:47:42:89:5A:53:FF:BB:0C:C1
Authority key identifier: AF:93:4E:C6:94:AF:68:13:4B:75:14:C1:0D:CD:13:85:7B:45:9E:38
Certificate issuer: /CN=af934ec694af68134b7514c10dcd13857b459e38
Certificate serial: 0198D73B2912938641EE43FD37BD753A8E7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r5NOxpSvaBNLdRTBDc0ThXtFnjg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/99be80-152c-4b65-8b32-0718aa8dd9a7/1/r5NOxpSvaBNLdRTBDc0ThXtFnjg.mft
Manifest number: 1047
Signing time: Sat 23 Aug 2025 14:00:35 +0000
Manifest this update: Sat 23 Aug 2025 14:00:35 +0000
Manifest next update: Sun 24 Aug 2025 14:00:35 +0000
Files and hashes: 1: 3KVjDh6tV6LcIk6BDE6xPuXzBDM.roa (hash: bQvllPBonHjb5qHCFeaDeGABQpp//k5Dnzxk+0td390=)
2: r5NOxpSvaBNLdRTBDc0ThXtFnjg.crl (hash: L4sYOhmXE0AoyRkeCkXTRga8K81C6XJUtFxQ4rJYWbs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/99be80-152c-4b65-8b32-0718aa8dd9a7/1/r5NOxpSvaBNLdRTBDc0ThXtFnjg.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/99be80-152c-4b65-8b32-0718aa8dd9a7/1/r5NOxpSvaBNLdRTBDc0ThXtFnjg.mft
rsync://rpki.ripe.net/repository/DEFAULT/r5NOxpSvaBNLdRTBDc0ThXtFnjg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3b:29:12:93:86:41:ee:43:fd:37:bd:75:3a:8e:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af934ec694af68134b7514c10dcd13857b459e38
Validity
Not Before: Aug 23 14:00:35 2025 GMT
Not After : Aug 24 14:00:35 2025 GMT
Subject: CN=be642d94d50705e8da05d94742895a53ffbb0cc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:2e:9b:26:1a:0a:15:64:22:3e:a0:5a:da:08:
c5:fb:3b:67:da:ce:2d:61:ae:fa:09:7b:b5:bd:cd:
06:70:1f:bf:74:7e:1b:88:f4:fd:a8:d4:44:5e:f8:
d0:f5:cc:43:1e:41:2d:d5:67:c8:47:23:84:1b:3c:
de:bd:04:c3:74:e8:e4:d8:ba:0b:6b:9f:dc:bd:92:
c1:d8:5c:40:3e:0b:51:72:c0:59:c7:c3:41:fd:fb:
a3:b2:e0:19:69:13:92:33:7f:44:8e:24:4c:9b:74:
0e:db:e0:6a:af:59:18:a1:f1:b4:05:1a:7c:bc:3c:
7d:14:71:0d:b4:33:bd:ce:6a:45:41:52:2d:de:90:
a7:ad:45:cd:8c:03:e6:ce:67:b1:f1:1f:0b:8b:bc:
79:27:ee:17:01:30:ce:f0:82:9f:b4:52:c4:47:ea:
c5:36:02:b6:06:77:31:c5:e9:08:6f:09:96:3b:15:
7f:0b:47:35:e6:72:35:b2:55:b4:18:5d:bb:de:e5:
8c:cb:d1:52:c9:fb:ea:63:0a:49:c2:d9:bf:2a:da:
07:06:4f:b8:09:0c:05:97:e9:ad:f5:0a:ff:2b:79:
db:d7:71:46:e7:f0:e8:48:a5:4f:c2:35:ff:d5:27:
63:b3:73:93:62:64:9a:10:00:f2:2e:73:d6:6c:a5:
c1:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:64:2D:94:D5:07:05:E8:DA:05:D9:47:42:89:5A:53:FF:BB:0C:C1
X509v3 Authority Key Identifier:
keyid:AF:93:4E:C6:94:AF:68:13:4B:75:14:C1:0D:CD:13:85:7B:45:9E:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r5NOxpSvaBNLdRTBDc0ThXtFnjg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/99be80-152c-4b65-8b32-0718aa8dd9a7/1/r5NOxpSvaBNLdRTBDc0ThXtFnjg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/99be80-152c-4b65-8b32-0718aa8dd9a7/1/r5NOxpSvaBNLdRTBDc0ThXtFnjg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:7c:16:b8:41:3e:31:33:72:5b:2f:89:b0:28:65:8c:30:07:
72:ce:25:c1:17:99:26:a0:42:b4:df:9a:28:c3:5e:59:91:95:
af:dc:97:ee:3a:2d:7f:ff:8e:58:cf:45:7a:4d:2e:b9:3c:eb:
01:e7:b3:29:ee:4f:86:3b:db:67:08:b4:fd:5d:35:61:bb:ea:
9e:00:23:9b:a1:49:4a:02:be:1b:1b:73:e5:f7:bb:48:f9:f9:
b1:74:b3:ad:11:38:65:46:16:c4:70:2a:17:66:ca:f2:84:10:
27:d0:c0:9e:b0:aa:9e:86:61:11:fc:10:c8:af:b1:46:ee:9c:
97:62:68:82:bd:f0:f3:82:5d:85:78:e6:e8:38:c6:0d:90:77:
21:e9:3a:99:39:bc:ec:8f:3b:85:53:63:88:00:80:a0:ef:f8:
f8:01:f8:cd:08:67:2f:89:d5:41:4a:25:92:2f:6b:d7:b1:db:
eb:7a:7f:0a:6b:61:40:d2:80:26:e1:9a:75:9a:27:1a:91:19:
cf:ec:42:12:50:ee:86:6e:8e:f6:9a:96:f0:38:ff:0d:3d:df:
f1:db:52:f8:4f:65:65:cb:ee:93:c8:b6:b2:fa:f1:f0:21:f5:
6b:11:af:48:bb:be:1e:eb:1e:8b:91:21:3c:e2:3c:05:f0:4f:
7d:16:d1:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:35:14 2025 by rpki-client