Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/859170-a974-4ae3-a020-3ea59d96a790/1/r5VJF2-WbToiFBAHkJfIfw4dILE.mft
File: r5VJF2-WbToiFBAHkJfIfw4dILE.mft (raw, json)
Hash identifier: RZrBfkWReSuuq52Do76cPfP6tzSwNmFqXH5tt1x2bgI=
Subject key identifier: AC:98:37:83:C1:B8:DA:56:B1:57:09:89:EC:5F:A4:D9:98:23:CA:F0
Authority key identifier: AF:95:49:17:6F:96:6D:3A:22:14:10:07:90:97:C8:7F:0E:1D:20:B1
Certificate issuer: /CN=af9549176f966d3a221410079097c87f0e1d20b1
Certificate serial: 0198D4DFCB31EE293F009D7EEF0ECD4DBCDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r5VJF2-WbToiFBAHkJfIfw4dILE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/859170-a974-4ae3-a020-3ea59d96a790/1/r5VJF2-WbToiFBAHkJfIfw4dILE.mft
Manifest number: 0DAB
Signing time: Sat 23 Aug 2025 03:01:33 +0000
Manifest this update: Sat 23 Aug 2025 03:01:33 +0000
Manifest next update: Sun 24 Aug 2025 03:01:33 +0000
Files and hashes: 1: 1n_N6auYiXQ1pyBQYj7m3QI_dSs.roa (hash: LsHjMOF74kduMAehGu3uEfQUdY1PYN7E293m6Bfa2Jo=)
2: r5VJF2-WbToiFBAHkJfIfw4dILE.crl (hash: w9A6RpNZqmfkOIK7efU4qiDdnmE4VL8g7s9LIiFy38A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/859170-a974-4ae3-a020-3ea59d96a790/1/r5VJF2-WbToiFBAHkJfIfw4dILE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/859170-a974-4ae3-a020-3ea59d96a790/1/r5VJF2-WbToiFBAHkJfIfw4dILE.mft
rsync://rpki.ripe.net/repository/DEFAULT/r5VJF2-WbToiFBAHkJfIfw4dILE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:df:cb:31:ee:29:3f:00:9d:7e:ef:0e:cd:4d:bc:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af9549176f966d3a221410079097c87f0e1d20b1
Validity
Not Before: Aug 23 03:01:33 2025 GMT
Not After : Aug 24 03:01:33 2025 GMT
Subject: CN=ac983783c1b8da56b1570989ec5fa4d99823caf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a9:cc:2b:5e:3e:ae:44:05:a8:5b:0b:17:b8:
93:35:a5:c1:2d:0f:ef:91:ad:90:9c:00:dc:37:b0:
ab:58:25:7d:a8:b4:9e:a2:2e:e3:13:99:57:0a:1d:
59:4d:c0:02:7e:bb:be:dd:92:23:eb:67:22:77:93:
78:1c:6f:d4:43:9e:2c:85:83:5c:d5:e9:a7:5e:cd:
e3:4c:38:67:7d:dd:fc:0a:19:bc:f8:6e:69:6c:50:
99:45:22:7e:bb:33:84:44:2b:ce:48:84:2e:22:cd:
d6:fa:92:13:fb:ea:76:e0:75:1d:9d:00:8b:9a:33:
bd:1d:92:22:aa:73:45:49:4d:eb:65:7a:fa:ae:95:
2c:fe:3f:17:23:34:b9:c0:a6:bc:3d:c7:96:e2:5e:
97:62:c2:16:19:a3:a9:d8:b8:1a:42:50:18:45:56:
6a:cd:e2:73:33:dd:3b:21:3e:f0:44:b6:e0:62:b2:
bc:f0:05:3b:78:ed:40:9b:9c:89:1c:fe:2c:c7:5f:
22:59:b3:36:03:28:4e:84:1d:3e:8e:8b:47:ff:a6:
18:8d:fc:8b:e1:a3:8e:fa:f2:d1:e9:1a:e4:6f:6d:
50:56:71:29:6a:e4:ba:89:83:e7:f3:34:0f:c4:d7:
fe:98:e6:30:01:e1:2e:f3:ba:94:e7:a2:d5:fb:0f:
25:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:98:37:83:C1:B8:DA:56:B1:57:09:89:EC:5F:A4:D9:98:23:CA:F0
X509v3 Authority Key Identifier:
keyid:AF:95:49:17:6F:96:6D:3A:22:14:10:07:90:97:C8:7F:0E:1D:20:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r5VJF2-WbToiFBAHkJfIfw4dILE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/859170-a974-4ae3-a020-3ea59d96a790/1/r5VJF2-WbToiFBAHkJfIfw4dILE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/859170-a974-4ae3-a020-3ea59d96a790/1/r5VJF2-WbToiFBAHkJfIfw4dILE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:b4:12:08:92:fc:2e:9e:8e:10:d8:e0:7f:25:31:87:01:0d:
91:47:32:12:3c:08:9f:b8:ae:18:ba:aa:ec:20:95:bc:de:77:
64:02:0c:6c:43:82:41:ef:15:ff:18:a8:f6:a4:3d:e0:cf:ca:
15:9e:d9:f7:be:7f:88:0e:32:8b:e9:23:fb:69:67:94:12:09:
e0:e4:a1:1d:58:bc:3a:fb:8a:26:55:6b:aa:7a:75:cc:99:c7:
58:e5:91:ce:e6:69:3e:cb:bb:a6:af:66:52:09:b8:36:b0:05:
45:e6:0d:e2:b1:4e:35:e5:3d:bf:5d:69:ea:2c:a6:74:95:51:
c6:62:6e:86:c6:f2:f0:ef:43:fa:1b:d8:46:d2:b5:39:05:0b:
09:17:85:11:52:14:cc:18:07:83:82:5d:db:00:95:16:24:49:
92:53:46:9c:9d:c6:26:27:b2:0b:8b:28:04:8f:70:93:92:bc:
3e:20:e9:79:19:bd:04:56:b6:39:db:44:9d:5f:02:40:31:28:
10:e2:11:e0:af:69:03:84:bd:f4:87:af:a2:e5:da:bc:36:0b:
0d:7c:07:61:42:15:c8:16:6c:2f:ef:2c:64:68:cf:25:63:5e:
6e:fe:77:c5:57:b3:cf:22:7c:a9:25:a4:4a:6a:61:b1:8d:01:
89:68:72:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:50:26 2025 by rpki-client