Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/bf0bfe-9554-4b7e-95da-469619d4ecdb/1/r5ss7-OJoa5JdW7cKzKT5Ygwy4I.mft
File: r5ss7-OJoa5JdW7cKzKT5Ygwy4I.mft (raw, json)
Hash identifier: ghx68syizQd2fcfg/WRsemarouAmXNt0SSscQzxHRHg=
Subject key identifier: 7B:0E:51:02:8F:B4:F6:7A:BA:FE:9D:D7:EF:3A:1A:CB:62:73:B4:CF
Authority key identifier: AF:9B:2C:EF:E3:89:A1:AE:49:75:6E:DC:2B:32:93:E5:88:30:CB:82
Certificate issuer: /CN=af9b2cefe389a1ae49756edc2b3293e58830cb82
Certificate serial: 0197C8A6BC048CB5DBD04C3AE31571C1D88A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r5ss7-OJoa5JdW7cKzKT5Ygwy4I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/bf0bfe-9554-4b7e-95da-469619d4ecdb/1/r5ss7-OJoa5JdW7cKzKT5Ygwy4I.mft
Manifest number: 029B
Signing time: Wed 02 Jul 2025 01:00:59 +0000
Manifest this update: Wed 02 Jul 2025 01:00:59 +0000
Manifest next update: Thu 03 Jul 2025 01:00:59 +0000
Files and hashes: 1: HlRrYVzs80ZJA5_JZ3csPGXIkEY.roa (hash: 2WA22A/U8/r4tDX+UDoYIX+va554GCdeOFSCw5V25j8=)
2: r5ss7-OJoa5JdW7cKzKT5Ygwy4I.crl (hash: hfpGvGwR8Qg0+mR/+6+pO80fIjkxSAmf1VW0IeLBWYM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/bf0bfe-9554-4b7e-95da-469619d4ecdb/1/r5ss7-OJoa5JdW7cKzKT5Ygwy4I.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/bf0bfe-9554-4b7e-95da-469619d4ecdb/1/r5ss7-OJoa5JdW7cKzKT5Ygwy4I.mft
rsync://rpki.ripe.net/repository/DEFAULT/r5ss7-OJoa5JdW7cKzKT5Ygwy4I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 01:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c8:a6:bc:04:8c:b5:db:d0:4c:3a:e3:15:71:c1:d8:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af9b2cefe389a1ae49756edc2b3293e58830cb82
Validity
Not Before: Jul 2 01:00:59 2025 GMT
Not After : Jul 3 01:00:59 2025 GMT
Subject: CN=7b0e51028fb4f67abafe9dd7ef3a1acb6273b4cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:5c:9b:74:ed:43:00:4f:26:58:e4:a9:e6:ce:
43:aa:d5:0f:14:f8:3f:17:b7:e2:9e:9e:89:84:07:
24:2b:c3:a3:78:1b:9b:41:b5:26:fa:9d:c3:73:7b:
71:bd:19:77:6d:f4:4a:2d:e4:c8:ac:c7:ed:88:a3:
bd:d3:f8:c2:69:02:53:dd:2e:e5:b3:aa:fa:73:6e:
db:93:fe:76:d9:71:3c:d7:9b:6c:fd:6e:8a:4d:d5:
c7:42:65:f7:2f:54:67:71:6a:ce:59:f0:fd:cd:4d:
c0:28:aa:ae:33:cd:3c:88:68:2d:65:6d:25:04:0c:
8b:6a:ce:61:af:b1:52:5f:72:a3:c4:32:32:e9:60:
b1:67:09:b6:dc:88:a7:1c:d9:52:9a:93:e4:3a:e8:
63:a5:98:1a:a6:62:4f:93:aa:02:bd:dd:9c:3b:47:
0e:ae:cb:0a:da:05:48:fa:fb:b4:e7:83:91:2a:15:
b3:15:af:09:9d:bc:be:7a:fd:9b:06:42:2a:0e:1f:
56:ad:f1:67:8c:b5:1f:31:05:ff:c8:dd:e5:9f:8d:
d2:1a:5b:0a:ad:ce:bc:d9:4f:1c:87:1e:7a:10:05:
47:fd:ca:37:48:f3:2b:59:ad:2f:27:00:49:e0:36:
ae:d9:55:51:40:19:44:e2:3f:42:22:8b:7c:e0:06:
dd:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:0E:51:02:8F:B4:F6:7A:BA:FE:9D:D7:EF:3A:1A:CB:62:73:B4:CF
X509v3 Authority Key Identifier:
keyid:AF:9B:2C:EF:E3:89:A1:AE:49:75:6E:DC:2B:32:93:E5:88:30:CB:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r5ss7-OJoa5JdW7cKzKT5Ygwy4I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/bf0bfe-9554-4b7e-95da-469619d4ecdb/1/r5ss7-OJoa5JdW7cKzKT5Ygwy4I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/bf0bfe-9554-4b7e-95da-469619d4ecdb/1/r5ss7-OJoa5JdW7cKzKT5Ygwy4I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:03:d1:44:39:b8:9a:02:f4:96:25:5e:82:6a:0c:37:bb:4f:
a9:53:24:c8:8a:b3:84:b8:f5:d7:34:dd:5c:48:20:e2:db:e4:
10:1b:1a:a8:fe:3e:f9:31:0c:2c:11:fd:33:e0:41:28:0e:6f:
b9:35:8b:50:fb:05:bb:85:09:40:d9:de:b9:c3:5c:21:83:94:
03:2c:ba:a0:da:c5:a0:6e:82:f0:cc:d3:49:dc:ba:37:fe:e3:
67:e0:f3:bb:c8:9b:ac:69:64:67:07:c3:38:f1:da:e8:3e:06:
32:ed:81:ce:b2:0d:e1:30:89:21:c7:c2:3c:22:22:f2:57:9a:
10:09:26:45:64:87:91:51:89:c6:27:69:25:6c:80:b9:ff:4e:
8e:21:67:85:fd:ed:c6:4b:dc:e6:07:62:84:ec:ac:59:27:ac:
c7:28:5a:49:06:02:22:dc:e8:84:d6:d1:5b:db:93:7b:06:22:
4e:e8:8d:fb:11:8e:08:1f:0d:15:12:b2:d0:59:5d:97:bc:f2:
4c:9b:ed:00:70:78:f6:3d:bb:a5:c7:c0:1b:3f:9c:53:00:2a:
66:35:ca:5c:43:0e:ef:0e:b8:3f:2e:36:74:c2:e5:44:ad:f2:
06:b6:23:1c:97:b2:e2:81:82:5a:51:ee:56:7f:94:31:e2:5c:
87:3b:cb:c5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfIprwEjLXb0Ew64xVxwdiKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmOWIyY2VmZTM4OWExYWU0OTc1NmVkYzJiMzI5M2U1ODgz
MGNiODIwHhcNMjUwNzAyMDEwMDU5WhcNMjUwNzAzMDEwMDU5WjAzMTEwLwYDVQQD
Eyg3YjBlNTEwMjhmYjRmNjdhYmFmZTlkZDdlZjNhMWFjYjYyNzNiNGNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqVybdO1DAE8mWOSp5s5DqtUPFPg/
F7finp6JhAckK8OjeBubQbUm+p3Dc3txvRl3bfRKLeTIrMftiKO90/jCaQJT3S7l
s6r6c27bk/522XE815ts/W6KTdXHQmX3L1RncWrOWfD9zU3AKKquM808iGgtZW0l
BAyLas5hr7FSX3KjxDIy6WCxZwm23IinHNlSmpPkOuhjpZgapmJPk6oCvd2cO0cO
rssK2gVI+vu054ORKhWzFa8Jnby+ev2bBkIqDh9WrfFnjLUfMQX/yN3ln43SGlsK
rc682U8chx56EAVH/co3SPMrWa0vJwBJ4Dau2VVRQBlE4j9CIot84AbdxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHsOUQKPtPZ6uv6d1+86Gstic7TPMB8GA1UdIwQY
MBaAFK+bLO/jiaGuSXVu3Csyk+WIMMuCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcjVzczctT0pvYTVKZFc3Y0t6S1Q1WWd3eTRJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9iZjBiZmUtOTU1NC00YjdlLTk1ZGEt
NDY5NjE5ZDRlY2RiLzEvcjVzczctT0pvYTVKZFc3Y0t6S1Q1WWd3eTRJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy9iZjBiZmUtOTU1NC00YjdlLTk1ZGEtNDY5NjE5ZDRlY2Ri
LzEvcjVzczctT0pvYTVKZFc3Y0t6S1Q1WWd3eTRJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANgPRRDm4
mgL0liVegmoMN7tPqVMkyIqzhLj11zTdXEgg4tvkEBsaqP4++TEMLBH9M+BBKA5v
uTWLUPsFu4UJQNneucNcIYOUAyy6oNrFoG6C8MzTSdy6N/7jZ+Dzu8ibrGlkZwfD
OPHa6D4GMu2BzrIN4TCJIcfCPCIi8leaEAkmRWSHkVGJxidpJWyAuf9OjiFnhf3t
xkvc5gdihOysWSesxyhaSQYCItzohNbRW9uTewYiTuiN+xGOCB8NFRKy0Fldl7zy
TJvtAHB49j27pcfAGz+cUwAqZjXKXEMO7w64Py42dMLlRK3yBrYjHJey4oGCWlHu
Vn+UMeJchzvLxQ==
-----END CERTIFICATE-----
Generated at Wed Jul 2 07:34:48 2025 by rpki-client