Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/a2a3a4-ab75-49d4-a941-353f9812b1db/1/h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.mft
File: h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.mft (raw, json)
Hash identifier: caAEdDn2cn+g1Z77HDmIwCi9tX0Ha5fljhBOR7aS5zo=
Subject key identifier: 83:FE:21:6D:F2:C5:7D:F4:26:A1:EA:BB:4C:41:B7:48:54:32:B9:6A
Authority key identifier: 87:94:39:5A:C8:22:DF:E0:11:65:21:6C:77:81:FF:D6:1D:B2:8D:5B
Certificate issuer: /CN=8794395ac822dfe01165216c7781ffd61db28d5b
Certificate serial: 019A1CBE976BA8CBBB39A60D2CF99A5E39B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/a2a3a4-ab75-49d4-a941-353f9812b1db/1/h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.mft
Manifest number: 0577
Signing time: Sat 25 Oct 2025 19:00:43 +0000
Manifest this update: Sat 25 Oct 2025 19:00:43 +0000
Manifest next update: Sun 26 Oct 2025 19:00:43 +0000
Files and hashes: 1: SalDxwYnKzervGIcZp186xtzhug.roa (hash: EtmDhhah0eA3Tfn8nv8gHra13dzs3VvNRMhkqeNatXs=)
2: h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.crl (hash: 67zieh6v+SStWN+RgSV9xx81sNBX6Hkh5UqAh5UArho=)
3: vJ1U4ASLgA44UNL7Z4BBXNsC6QU.roa (hash: UmSdOz5rZ6J32yPtrp522X1fQ0TXmlUWN5/Uf0zeDr8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/a2a3a4-ab75-49d4-a941-353f9812b1db/1/h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/a2a3a4-ab75-49d4-a941-353f9812b1db/1/h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 19:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1c:be:97:6b:a8:cb:bb:39:a6:0d:2c:f9:9a:5e:39:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8794395ac822dfe01165216c7781ffd61db28d5b
Validity
Not Before: Oct 25 19:00:43 2025 GMT
Not After : Oct 26 19:00:43 2025 GMT
Subject: CN=83fe216df2c57df426a1eabb4c41b7485432b96a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:3a:96:6a:0e:c0:4a:36:26:db:9a:49:dc:d9:
50:32:8e:c7:5b:07:10:12:60:b7:c9:ab:ed:00:a2:
c0:c6:e8:e0:84:c7:67:25:71:3f:36:c6:17:42:9d:
af:82:c5:af:bc:19:e8:de:13:a9:ad:28:ca:0c:62:
10:8d:f3:7a:e7:2e:ef:21:0e:01:ac:14:a1:c0:37:
26:28:e9:a8:b7:3f:0c:0f:b9:9b:9d:e0:f3:4c:9d:
91:d5:05:a5:3d:76:8b:e7:25:4c:0d:61:9d:42:e4:
82:24:15:3a:13:9c:5f:90:4a:32:9b:5f:b9:d1:bd:
f9:74:d8:9a:00:f6:43:d6:43:9e:31:e7:cb:27:3e:
0e:11:20:87:6d:3c:40:6d:90:aa:a2:eb:af:0e:c5:
70:f9:68:21:fb:81:28:c2:11:9b:ff:cc:47:22:12:
a0:92:e2:9b:e8:40:e3:ff:d6:19:f6:fc:b7:4a:cf:
e5:9c:bf:c1:59:d8:a2:04:77:f3:e6:6b:75:ee:b5:
7a:d0:5d:40:bc:7b:19:0f:d2:f4:bb:98:d0:bf:47:
db:da:c5:69:98:28:92:9f:15:f5:e1:cb:0b:7f:6b:
c6:b8:b7:95:c8:40:a3:a6:db:5d:c2:1b:c1:65:ff:
23:89:41:a2:ef:c8:3c:83:7e:ea:80:ae:7a:9d:2f:
fa:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:FE:21:6D:F2:C5:7D:F4:26:A1:EA:BB:4C:41:B7:48:54:32:B9:6A
X509v3 Authority Key Identifier:
keyid:87:94:39:5A:C8:22:DF:E0:11:65:21:6C:77:81:FF:D6:1D:B2:8D:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a2a3a4-ab75-49d4-a941-353f9812b1db/1/h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a2a3a4-ab75-49d4-a941-353f9812b1db/1/h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:33:ce:96:7d:a3:1f:b0:40:53:19:a6:13:19:71:f1:e7:6d:
63:95:4e:74:c7:25:7a:c8:03:8e:44:47:16:31:a5:b0:8f:93:
09:6f:ad:3c:0a:a4:eb:11:f9:f4:56:72:59:85:d6:40:4a:9c:
4c:09:f0:a5:34:9f:c0:4a:99:80:a4:7d:96:af:21:ff:12:ca:
33:8e:92:e9:49:81:4a:30:dd:03:62:06:34:84:db:eb:95:29:
18:af:24:4f:4e:5c:33:53:cb:bc:27:29:24:35:b4:aa:c4:e6:
06:92:f1:6b:4a:5a:5d:f2:36:b4:77:b7:e7:ec:9e:2c:33:19:
76:1d:c7:f6:9c:7d:0c:ef:2a:0c:67:d8:2c:f7:56:16:86:18:
46:3b:bb:99:02:d5:d8:d1:25:ac:e3:e4:ad:ca:c6:b8:51:b1:
3a:bd:3d:58:78:27:13:43:a2:f3:45:4d:39:4e:0b:0b:eb:80:
5e:93:97:1e:29:c8:15:43:6b:99:09:d1:a5:de:bb:6a:cf:93:
dd:64:21:37:6b:03:83:59:fc:bf:8f:bb:4c:1a:50:42:ee:8b:
61:03:73:54:19:c3:b8:5a:25:82:7b:80:21:8b:86:9d:81:54:
b7:2a:eb:dd:8f:96:32:aa:4b:d4:62:b7:ad:d3:85:d8:43:f9:
0a:02:19:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 02:33:23 2025 by rpki-client