Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/bf0bfe-9554-4b7e-95da-469619d4ecdb/1/r5ss7-OJoa5JdW7cKzKT5Ygwy4I.mft
File: r5ss7-OJoa5JdW7cKzKT5Ygwy4I.mft (raw, json)
Hash identifier: vHBqUB6O4hwkaBfTrJrzbbU898pnVWFObicvGD2k4ZY=
Subject key identifier: 8C:A7:14:79:54:F5:09:DA:1C:6C:66:EA:A4:3B:31:83:C4:58:70:F0
Authority key identifier: AF:9B:2C:EF:E3:89:A1:AE:49:75:6E:DC:2B:32:93:E5:88:30:CB:82
Certificate issuer: /CN=af9b2cefe389a1ae49756edc2b3293e58830cb82
Certificate serial: 0198D515E45E9076C07E78B7AD5CF1A24836
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r5ss7-OJoa5JdW7cKzKT5Ygwy4I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/bf0bfe-9554-4b7e-95da-469619d4ecdb/1/r5ss7-OJoa5JdW7cKzKT5Ygwy4I.mft
Manifest number: 0326
Signing time: Sat 23 Aug 2025 04:00:38 +0000
Manifest this update: Sat 23 Aug 2025 04:00:38 +0000
Manifest next update: Sun 24 Aug 2025 04:00:38 +0000
Files and hashes: 1: HlRrYVzs80ZJA5_JZ3csPGXIkEY.roa (hash: 2WA22A/U8/r4tDX+UDoYIX+va554GCdeOFSCw5V25j8=)
2: r5ss7-OJoa5JdW7cKzKT5Ygwy4I.crl (hash: JbG5J1+v6d61/8N7ZciLEsN8tJ6qfxzrtlTjhu/QTLY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/bf0bfe-9554-4b7e-95da-469619d4ecdb/1/r5ss7-OJoa5JdW7cKzKT5Ygwy4I.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/bf0bfe-9554-4b7e-95da-469619d4ecdb/1/r5ss7-OJoa5JdW7cKzKT5Ygwy4I.mft
rsync://rpki.ripe.net/repository/DEFAULT/r5ss7-OJoa5JdW7cKzKT5Ygwy4I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:e4:5e:90:76:c0:7e:78:b7:ad:5c:f1:a2:48:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af9b2cefe389a1ae49756edc2b3293e58830cb82
Validity
Not Before: Aug 23 04:00:38 2025 GMT
Not After : Aug 24 04:00:38 2025 GMT
Subject: CN=8ca7147954f509da1c6c66eaa43b3183c45870f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e4:4c:38:a0:c5:ed:94:7d:00:98:69:f8:ac:
da:fa:bb:0d:f6:3e:36:6e:e9:7e:9b:89:27:a0:90:
f0:e0:04:3f:b0:b8:e4:0f:c6:5e:c8:1b:f7:2c:6f:
b9:dc:c5:11:ed:13:77:12:55:d4:a1:68:01:f9:7e:
ec:77:cc:a6:08:84:7f:1f:aa:40:49:2d:d4:5d:9b:
d9:31:e5:3e:a8:45:46:a0:86:1d:df:ac:8b:96:ca:
21:78:b3:cc:2e:0d:d0:93:07:e6:f7:9f:ec:2f:bd:
f0:50:d4:b3:36:3b:b5:a7:49:9b:9c:8a:c4:7a:4c:
97:f1:5c:51:f3:5f:cf:24:ee:02:b4:3a:ef:2f:8f:
34:b3:77:2c:c4:fb:d6:2e:78:e8:93:7a:57:fb:cf:
81:15:97:69:fe:1f:3d:db:07:51:19:61:b0:a2:a8:
8e:a9:55:66:cf:c6:6f:02:7b:bb:11:4d:dc:95:df:
91:76:60:59:81:d2:64:42:c1:d2:c3:76:d1:bb:11:
42:f9:bc:2f:ab:fd:79:9e:a6:e6:27:ff:a3:83:f7:
63:12:af:94:83:9f:aa:e4:4a:2d:f0:14:b4:20:6c:
a9:e5:97:12:b2:08:7a:d4:a7:25:16:ad:77:dc:12:
ac:f2:6e:4c:a1:d8:9a:0b:89:a1:80:9c:6f:d8:4f:
e8:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:A7:14:79:54:F5:09:DA:1C:6C:66:EA:A4:3B:31:83:C4:58:70:F0
X509v3 Authority Key Identifier:
keyid:AF:9B:2C:EF:E3:89:A1:AE:49:75:6E:DC:2B:32:93:E5:88:30:CB:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r5ss7-OJoa5JdW7cKzKT5Ygwy4I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/bf0bfe-9554-4b7e-95da-469619d4ecdb/1/r5ss7-OJoa5JdW7cKzKT5Ygwy4I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/bf0bfe-9554-4b7e-95da-469619d4ecdb/1/r5ss7-OJoa5JdW7cKzKT5Ygwy4I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:f0:54:6a:cf:72:31:36:aa:dd:ea:62:95:67:cc:5b:63:22:
37:48:74:d8:90:be:48:b0:1d:75:2c:40:52:06:06:d1:6b:44:
3e:ca:86:76:fc:18:c8:8d:d6:ee:eb:84:4f:ff:ff:ac:87:9a:
6c:48:4d:99:17:86:bc:c0:7c:06:66:51:4a:93:ff:4b:ac:eb:
d3:37:0e:fe:e2:77:a8:2e:73:f4:2e:e4:cd:f2:87:a0:88:d6:
a4:52:37:76:db:5f:6f:fe:93:55:3c:6e:bc:dd:82:0e:4a:8e:
8f:1e:6c:c3:78:ef:54:40:b4:20:83:ee:3e:47:33:22:a8:bf:
1b:89:ff:18:f1:c1:57:85:85:fd:ef:ae:af:da:a2:a0:e8:f8:
2d:07:26:c5:01:8d:2d:e1:c4:62:61:03:4e:3e:7d:eb:79:e9:
8d:c7:ce:be:5b:9b:09:62:58:78:5d:eb:39:ff:a0:6a:20:ef:
61:22:2d:ac:d9:ab:c3:1d:27:f5:b6:ab:33:68:46:3b:21:e2:
6e:0b:53:1a:78:7e:34:41:52:5f:6b:87:fd:d3:04:15:fa:c8:
66:9d:89:2d:4d:a5:e4:5f:68:da:65:a2:82:fb:29:31:70:e1:
81:ca:5a:63:fc:03:59:ef:28:31:52:74:35:57:02:9e:8a:41:
5d:e8:18:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:37:42 2025 by rpki-client