Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/bf0bfe-9554-4b7e-95da-469619d4ecdb/1/r5ss7-OJoa5JdW7cKzKT5Ygwy4I.mft
File: r5ss7-OJoa5JdW7cKzKT5Ygwy4I.mft (raw, json)
Hash identifier: 3j7XUvU5TyJJKuk0++S84YwzowStXF1BUWMWegxxVic=
Subject key identifier: 66:3E:C4:AC:23:10:E1:20:D2:15:56:D9:46:CE:05:92:0E:01:C1:D2
Authority key identifier: AF:9B:2C:EF:E3:89:A1:AE:49:75:6E:DC:2B:32:93:E5:88:30:CB:82
Certificate issuer: /CN=af9b2cefe389a1ae49756edc2b3293e58830cb82
Certificate serial: 0199FE46A8060CF12851610D5DC34BE5307C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r5ss7-OJoa5JdW7cKzKT5Ygwy4I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/bf0bfe-9554-4b7e-95da-469619d4ecdb/1/r5ss7-OJoa5JdW7cKzKT5Ygwy4I.mft
Manifest number: 03C0
Signing time: Sun 19 Oct 2025 21:01:07 +0000
Manifest this update: Sun 19 Oct 2025 21:01:07 +0000
Manifest next update: Mon 20 Oct 2025 21:01:07 +0000
Files and hashes: 1: HlRrYVzs80ZJA5_JZ3csPGXIkEY.roa (hash: 2WA22A/U8/r4tDX+UDoYIX+va554GCdeOFSCw5V25j8=)
2: r5ss7-OJoa5JdW7cKzKT5Ygwy4I.crl (hash: kB0JCTSkHLl2Pg/JARRVbTZd+D+ciMn8wZLf1wkp3vc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/bf0bfe-9554-4b7e-95da-469619d4ecdb/1/r5ss7-OJoa5JdW7cKzKT5Ygwy4I.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/bf0bfe-9554-4b7e-95da-469619d4ecdb/1/r5ss7-OJoa5JdW7cKzKT5Ygwy4I.mft
rsync://rpki.ripe.net/repository/DEFAULT/r5ss7-OJoa5JdW7cKzKT5Ygwy4I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:46:a8:06:0c:f1:28:51:61:0d:5d:c3:4b:e5:30:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af9b2cefe389a1ae49756edc2b3293e58830cb82
Validity
Not Before: Oct 19 21:01:07 2025 GMT
Not After : Oct 20 21:01:07 2025 GMT
Subject: CN=663ec4ac2310e120d21556d946ce05920e01c1d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:dc:88:b5:10:d7:e0:91:5e:c8:5c:ce:fd:fd:
e1:d7:b3:09:31:2d:59:a6:76:7b:67:e1:2c:79:f3:
2a:4a:61:66:5b:f3:e0:3b:46:75:ca:03:4a:88:1b:
f2:9f:4c:14:da:61:6b:7d:93:b3:62:07:94:5c:ab:
5e:05:a5:c2:52:4b:6f:ba:e0:46:9d:e7:04:fb:83:
7e:68:d7:41:d0:ee:8a:d5:6f:d7:5a:c3:1a:c7:74:
38:22:fb:67:e7:5e:d1:2f:f1:67:f4:b4:e6:47:13:
08:c6:29:c5:dd:31:ad:47:aa:63:4e:2f:34:d2:2a:
16:59:7c:af:ba:ab:45:9c:39:72:86:c5:32:69:7d:
1d:ce:79:d3:80:13:21:10:3e:80:1f:79:6a:b1:c7:
b3:bc:5e:20:1a:9f:87:51:97:92:8f:5c:88:34:4a:
e0:4d:84:25:46:44:da:ce:49:b3:45:9c:5b:fa:80:
03:ba:59:34:e4:f9:0c:64:62:d8:52:92:84:cf:a8:
ae:ae:a9:6d:c3:e7:23:b8:b1:5c:5b:44:94:cc:0d:
67:5f:0a:0c:4b:9e:7c:07:fa:d4:38:de:96:5e:b4:
cf:74:2f:f1:5d:59:75:fc:cb:17:53:7f:18:91:33:
28:28:ec:5f:08:9a:f5:47:72:03:7a:0c:a2:52:d9:
5b:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:3E:C4:AC:23:10:E1:20:D2:15:56:D9:46:CE:05:92:0E:01:C1:D2
X509v3 Authority Key Identifier:
keyid:AF:9B:2C:EF:E3:89:A1:AE:49:75:6E:DC:2B:32:93:E5:88:30:CB:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r5ss7-OJoa5JdW7cKzKT5Ygwy4I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/bf0bfe-9554-4b7e-95da-469619d4ecdb/1/r5ss7-OJoa5JdW7cKzKT5Ygwy4I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/bf0bfe-9554-4b7e-95da-469619d4ecdb/1/r5ss7-OJoa5JdW7cKzKT5Ygwy4I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:04:4b:07:ef:23:29:59:c2:dc:c3:83:58:ba:6a:63:2c:69:
27:67:ff:fe:25:1b:94:23:13:a9:63:d7:47:57:06:14:4a:0a:
80:9e:1e:cf:6e:0c:aa:f4:73:57:3b:03:56:92:db:b9:bd:17:
bf:43:f9:42:46:a6:2a:b2:bc:26:f0:34:99:7d:61:3a:6a:03:
95:c5:d5:b0:35:25:23:db:55:1a:26:ec:dc:ee:2f:c4:9b:35:
74:5e:c4:fc:1b:45:e5:f0:ea:9a:f1:6a:ef:f6:da:56:06:59:
87:2b:48:19:23:b6:3e:ad:d7:0e:49:c6:ac:50:f9:ea:1a:29:
01:db:87:9d:5c:be:00:86:8c:a0:af:da:98:c0:b8:e9:e9:e7:
5e:1c:3a:9c:19:e2:f7:d1:af:45:26:c5:1d:71:93:cd:87:ec:
87:7d:58:bc:1f:04:b0:4f:2c:eb:38:de:b8:08:da:1e:16:c6:
1a:cf:56:f6:2a:f2:bf:be:66:15:18:21:3a:6e:7a:3e:5d:75:
3f:f2:2f:53:e6:3e:7b:9d:4a:1f:e6:2c:29:20:f6:77:9b:ba:
d3:78:46:80:19:50:84:55:8a:b1:85:af:40:a6:fb:22:1f:8a:
08:7e:84:8a:da:bd:64:83:c6:06:c7:d8:e9:e7:07:da:43:74:
9b:83:d9:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:01:47 2025 by rpki-client