Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/e4494e-1e33-4437-8433-037b5a7b9544/1/A5gx97o94vvvFtRkn9SGDBXp1sM.mft
File: A5gx97o94vvvFtRkn9SGDBXp1sM.mft (raw, json)
Hash identifier: mqteHTxh5sCN4jGRA88eSqCpCM1xBJ6FOG1dNrY8VS0=
Subject key identifier: A5:85:3C:F9:52:CE:6A:CF:9E:0E:56:35:F9:87:59:CE:F5:D5:0B:B0
Authority key identifier: 03:98:31:F7:BA:3D:E2:FB:EF:16:D4:64:9F:D4:86:0C:15:E9:D6:C3
Certificate issuer: /CN=039831f7ba3de2fbef16d4649fd4860c15e9d6c3
Certificate serial: 019A71B7D2C7828ECC82066BD8AF6D489A49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A5gx97o94vvvFtRkn9SGDBXp1sM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/e4494e-1e33-4437-8433-037b5a7b9544/1/A5gx97o94vvvFtRkn9SGDBXp1sM.mft
Manifest number: 0789
Signing time: Tue 11 Nov 2025 07:01:03 +0000
Manifest this update: Tue 11 Nov 2025 07:01:03 +0000
Manifest next update: Wed 12 Nov 2025 07:01:03 +0000
Files and hashes: 1: A5gx97o94vvvFtRkn9SGDBXp1sM.crl (hash: hpsUrNdZZY0lYa1PMhhS0QfcrKMOR00viIwTc3Rlb2c=)
2: p0cL-vdhY3KSfcwz6s4koNapmbw.roa (hash: 9RImGj5UfNKUq/CzlTB6jfp8TR4Xc1sqYedIB3MDaIs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/e4494e-1e33-4437-8433-037b5a7b9544/1/A5gx97o94vvvFtRkn9SGDBXp1sM.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/e4494e-1e33-4437-8433-037b5a7b9544/1/A5gx97o94vvvFtRkn9SGDBXp1sM.mft
rsync://rpki.ripe.net/repository/DEFAULT/A5gx97o94vvvFtRkn9SGDBXp1sM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:d2:c7:82:8e:cc:82:06:6b:d8:af:6d:48:9a:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=039831f7ba3de2fbef16d4649fd4860c15e9d6c3
Validity
Not Before: Nov 11 07:01:03 2025 GMT
Not After : Nov 12 07:01:03 2025 GMT
Subject: CN=a5853cf952ce6acf9e0e5635f98759cef5d50bb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:21:da:f5:27:43:99:42:bf:aa:bb:94:c7:1b:
ec:34:ae:2d:62:f0:fc:1d:68:9f:1d:14:5f:ba:b2:
4c:91:30:aa:62:42:5d:7d:cd:e0:3a:15:55:cd:c1:
91:30:70:b0:81:74:11:ae:9e:cb:2c:f8:f0:c5:16:
83:ae:b6:e3:ec:f9:ce:54:39:f5:f1:ba:9a:da:ae:
a7:22:e3:46:d0:02:1a:e9:26:57:53:88:ff:af:8c:
b7:cb:d8:15:fc:5e:b2:04:3c:09:77:3b:76:d7:b5:
21:d0:1e:c8:dc:69:52:0d:85:bb:f1:a7:52:45:6e:
23:83:f9:86:e1:1f:e9:8f:ac:76:6f:8e:0a:2f:4b:
ce:c0:47:a8:82:06:78:eb:71:dc:fa:ac:a8:2f:b2:
b2:21:13:4c:19:34:10:28:87:a9:e8:82:89:cc:ab:
13:5e:b1:04:79:a7:b2:21:a5:ff:22:2c:65:07:cb:
08:d6:39:70:63:36:14:47:5a:db:4b:b9:d9:56:ea:
08:2f:2c:a4:6c:ba:ed:ee:c1:2e:bb:62:7d:81:b5:
71:b8:be:5d:06:37:a2:9d:c8:09:49:81:00:66:13:
60:14:1e:6a:3b:0e:9b:06:ca:89:12:9d:05:51:62:
f8:91:96:0d:14:63:02:57:f0:8a:a7:85:fb:6b:7a:
53:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:85:3C:F9:52:CE:6A:CF:9E:0E:56:35:F9:87:59:CE:F5:D5:0B:B0
X509v3 Authority Key Identifier:
keyid:03:98:31:F7:BA:3D:E2:FB:EF:16:D4:64:9F:D4:86:0C:15:E9:D6:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A5gx97o94vvvFtRkn9SGDBXp1sM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e4494e-1e33-4437-8433-037b5a7b9544/1/A5gx97o94vvvFtRkn9SGDBXp1sM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e4494e-1e33-4437-8433-037b5a7b9544/1/A5gx97o94vvvFtRkn9SGDBXp1sM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:b4:c7:10:2e:dd:2a:66:98:41:97:f0:3b:f3:38:fc:1c:05:
00:e9:f8:e6:16:72:2a:45:01:44:51:32:71:9b:71:02:49:c3:
0e:da:b0:39:9d:08:dd:98:a9:f6:e8:4a:1b:c5:1b:3a:92:5e:
d3:37:a1:35:89:1e:a7:40:29:1b:80:3b:a6:5e:13:a4:10:7e:
4f:7c:83:0b:6f:48:22:62:9c:71:4d:c7:7a:cc:72:4e:7c:52:
37:5d:8c:98:38:53:fd:b6:ed:01:27:ad:ea:45:4a:90:f1:5c:
2d:51:d0:a8:b4:94:41:94:7a:2b:a6:0c:a5:71:89:75:9e:73:
c9:71:ab:1a:0e:d0:dc:f0:bf:7a:ed:54:77:87:0f:3a:1a:1d:
ed:91:c1:5f:5d:95:b1:bd:ea:e0:76:b0:bf:c6:d5:3d:1a:02:
87:82:14:e9:d0:f1:5b:4c:27:64:f3:fa:70:97:8f:9c:b6:03:
9d:75:3f:e9:95:55:f4:82:31:bc:26:a9:eb:e9:97:1e:d6:d1:
c6:54:89:c2:ef:13:fd:d7:58:69:06:a3:27:88:72:5f:8a:aa:
0a:9d:b9:a9:57:1d:b8:60:03:83:82:5f:40:39:29:e6:7f:bb:
ae:02:7d:dc:1e:78:2a:71:bb:6b:03:03:bd:ce:91:be:5f:82:
67:51:ae:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 17:19:42 2025 by rpki-client