Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/7560e4-fc7d-4a64-b500-e7f05f029a48/1/rwXUKRyugYXGw0LiXe6bfpIPdt0.mft
File: rwXUKRyugYXGw0LiXe6bfpIPdt0.mft (raw, json)
Hash identifier: 8/aTo22YM2YgwJwM1h4WQ5JVei/eyQJC2s2J4Ui9LJQ=
Subject key identifier: 8D:C8:CC:9C:61:BD:2C:CC:A9:12:E4:51:53:85:B9:17:FF:EC:1B:0D
Authority key identifier: AF:05:D4:29:1C:AE:81:85:C6:C3:42:E2:5D:EE:9B:7E:92:0F:76:DD
Certificate issuer: /CN=af05d4291cae8185c6c342e25dee9b7e920f76dd
Certificate serial: 0199FBB35EE5436FC6359C3C21BC017CA771
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rwXUKRyugYXGw0LiXe6bfpIPdt0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/7560e4-fc7d-4a64-b500-e7f05f029a48/1/rwXUKRyugYXGw0LiXe6bfpIPdt0.mft
Manifest number: 05AA
Signing time: Sun 19 Oct 2025 09:01:00 +0000
Manifest this update: Sun 19 Oct 2025 09:01:00 +0000
Manifest next update: Mon 20 Oct 2025 09:01:00 +0000
Files and hashes: 1: 41rmP0fRaJ_Rp04VkDrnen4Ff9k.roa (hash: hIEQZsD1Luj1wzFwd6Ncf1xZemUGDUraVaNuYs6VnsA=)
2: rwXUKRyugYXGw0LiXe6bfpIPdt0.crl (hash: 5ETVoUoA5AJuA+0sgebQBEb9SYHN4TvxiwLmwKiADkE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/7560e4-fc7d-4a64-b500-e7f05f029a48/1/rwXUKRyugYXGw0LiXe6bfpIPdt0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/7560e4-fc7d-4a64-b500-e7f05f029a48/1/rwXUKRyugYXGw0LiXe6bfpIPdt0.mft
rsync://rpki.ripe.net/repository/DEFAULT/rwXUKRyugYXGw0LiXe6bfpIPdt0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 09:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:b3:5e:e5:43:6f:c6:35:9c:3c:21:bc:01:7c:a7:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af05d4291cae8185c6c342e25dee9b7e920f76dd
Validity
Not Before: Oct 19 09:01:00 2025 GMT
Not After : Oct 20 09:01:00 2025 GMT
Subject: CN=8dc8cc9c61bd2ccca912e4515385b917ffec1b0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:83:bd:2a:3d:65:55:4f:53:4f:e3:e7:7d:09:
8a:64:af:b6:08:a1:8c:c7:2c:04:68:3f:a6:10:3e:
cd:d0:da:e7:37:37:4c:e7:f4:07:49:0d:a7:5a:33:
3c:56:c2:8d:19:e0:4a:ff:73:37:09:6d:31:80:7e:
63:56:75:60:35:b2:56:e4:28:bc:6d:c4:df:6d:8c:
79:79:54:31:eb:33:ef:c3:98:89:6b:6a:bf:a3:c0:
66:4c:d1:66:ab:75:50:e5:6f:e1:49:a6:d4:3d:38:
ef:f6:28:1e:b1:9a:75:e2:a2:c1:11:47:17:25:22:
20:e6:17:f8:c1:7f:c4:14:ef:ca:e7:cf:c5:02:04:
7d:50:32:18:26:4d:d3:1b:09:0c:3b:fe:36:5f:3b:
a7:d1:c5:e9:7e:da:f7:67:ff:2a:21:18:31:b6:44:
fb:c8:28:5a:75:8f:f0:be:de:cd:f6:c6:8a:2a:07:
d1:94:48:10:43:73:95:a5:f3:c8:c9:da:7d:ca:3c:
46:99:78:69:ec:a4:5a:64:d7:25:b6:6c:1d:17:cd:
57:36:6d:f9:2e:90:98:63:79:f3:f5:4b:ac:81:6e:
4c:ac:9c:21:ab:90:54:e5:d2:98:5c:fe:6b:90:9d:
e0:50:66:51:9d:c4:97:e0:57:fb:7a:d3:d7:c0:e3:
c6:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:C8:CC:9C:61:BD:2C:CC:A9:12:E4:51:53:85:B9:17:FF:EC:1B:0D
X509v3 Authority Key Identifier:
keyid:AF:05:D4:29:1C:AE:81:85:C6:C3:42:E2:5D:EE:9B:7E:92:0F:76:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rwXUKRyugYXGw0LiXe6bfpIPdt0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/7560e4-fc7d-4a64-b500-e7f05f029a48/1/rwXUKRyugYXGw0LiXe6bfpIPdt0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/7560e4-fc7d-4a64-b500-e7f05f029a48/1/rwXUKRyugYXGw0LiXe6bfpIPdt0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:68:d7:c0:01:42:5b:4a:4d:3c:04:01:9c:cb:96:27:95:e4:
e0:c1:fb:82:07:ac:d0:5f:c4:99:70:ae:54:c1:d3:ed:e4:01:
f3:f4:ed:a6:bb:11:6b:cb:38:20:10:d1:cd:34:32:96:88:92:
6e:be:18:fc:1f:0e:ac:8b:7f:5f:90:c9:92:31:df:b7:49:21:
0e:f8:4a:b5:03:a3:6a:8a:72:a6:81:31:69:c5:ff:ac:fe:09:
de:7d:ed:ee:c6:76:34:eb:0f:2e:ec:3b:08:24:ba:e7:ca:f1:
da:03:6f:43:7a:40:eb:7f:74:48:45:c2:8e:8b:d4:83:f5:9a:
f2:c1:f9:0f:b6:12:ba:c0:67:f9:6d:86:b1:c2:37:24:6c:8c:
a3:0d:3d:53:f9:d8:53:6f:80:a2:b8:ee:24:c0:68:fb:dc:62:
a1:61:96:76:5e:25:d3:51:84:02:f3:77:03:c9:02:dd:ab:01:
de:0f:ee:13:c9:00:a1:67:75:ed:b2:bf:83:20:d3:4b:06:9d:
d3:1a:ff:a4:84:39:5f:05:50:6e:26:75:71:e2:22:70:b1:bf:
be:38:72:b6:da:40:5c:71:89:55:58:a2:8a:f9:42:e8:60:11:
9c:80:c6:63:ad:36:42:e1:40:af:42:26:7a:a3:d7:70:c5:bf:
f2:c8:58:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:56:02 2025 by rpki-client