Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/5aGzZVL52sy5KsXDtEtCbWQ3SeI.mft
File: 5aGzZVL52sy5KsXDtEtCbWQ3SeI.mft (raw, json)
Hash identifier: xhZH/hJTwoTlQN2eMgbzyp/bwzj8HUh82lorH+Y+Xf4=
Subject key identifier: B7:2C:D6:9A:48:5C:FE:58:12:5D:C4:38:09:64:C0:84:20:FD:5F:29
Authority key identifier: E5:A1:B3:65:52:F9:DA:CC:B9:2A:C5:C3:B4:4B:42:6D:64:37:49:E2
Certificate issuer: /CN=e5a1b36552f9daccb92ac5c3b44b426d643749e2
Certificate serial: 019A19867FE347ED43DECDEFBBA6D47BCD34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5aGzZVL52sy5KsXDtEtCbWQ3SeI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/5aGzZVL52sy5KsXDtEtCbWQ3SeI.mft
Manifest number: 16FC
Signing time: Sat 25 Oct 2025 04:00:36 +0000
Manifest this update: Sat 25 Oct 2025 04:00:36 +0000
Manifest next update: Sun 26 Oct 2025 04:00:36 +0000
Files and hashes: 1: 5aGzZVL52sy5KsXDtEtCbWQ3SeI.crl (hash: 95Ksyg9hQTeOJOFG3ugbSmo4Gbby7f8c4Qvk6rcWTLk=)
2: Q5lprEAu1AjZg8eC8e9vCRTQc5c.roa (hash: 1TVaYcq6pwwmReP0rlqvmkebRDkja4y3qu5GJXEAYFk=)
3: ScDiG1bEMg_iYAnwZ5RqZ9iuBfE.roa (hash: M8oZJ8Uj/JF9chZaxOYRuKYLCgT5+KWo335qmSJiUXs=)
4: _jwv_lcEjeP6obJDvR7tAaQUU-k.roa (hash: 5K6HFH8TXSLWVxpMWf5RIreFCOahhdZCzVwIY3yAflg=)
5: a3iaEBF86wbe5VjQTp-OMfHJc1E.roa (hash: nuf4ev5fGHCC4PXZAB5L19yGP986oYjP7JfQB1/fdXU=)
6: a9_bN0F2h_Kug5sgN-Kpf5AuF0Y.roa (hash: f6TkQWvmEWMglWzfpXp6gmToVC7S2f1cCbDqMTnyBzg=)
7: lihzuQoSb7FSiRKzRwb1us4H1SM.roa (hash: KHb+Gcf8LKwRqmsQV3Dwa1dFj1b8D+2+U6h0xyQG13I=)
8: qi8JXs2yo200PkF0ybkWzT5gLbA.roa (hash: rDwlWPK/DQ56zjNjEs53TpTRvG/Y0OQ9Sl2iycPDuH4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/5aGzZVL52sy5KsXDtEtCbWQ3SeI.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/5aGzZVL52sy5KsXDtEtCbWQ3SeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/5aGzZVL52sy5KsXDtEtCbWQ3SeI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 02:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:19:86:7f:e3:47:ed:43:de:cd:ef:bb:a6:d4:7b:cd:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5a1b36552f9daccb92ac5c3b44b426d643749e2
Validity
Not Before: Oct 25 04:00:36 2025 GMT
Not After : Oct 26 04:00:36 2025 GMT
Subject: CN=b72cd69a485cfe58125dc4380964c08420fd5f29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:3d:41:57:10:d9:ae:f6:48:d5:ec:57:0a:ba:
ef:4d:a9:63:2b:8f:ec:9f:be:d0:14:5c:d3:f1:15:
61:d0:7a:4f:29:ab:b3:90:06:f8:af:7a:f5:e4:f0:
c0:5f:34:37:69:cb:45:cc:dd:40:1d:86:f5:b3:38:
ef:2f:f0:9a:1a:b3:cc:e1:06:38:e6:a9:19:47:de:
61:9c:35:4d:33:43:04:7c:8a:d6:9b:2e:39:fb:52:
ec:b3:13:21:ec:27:dd:d0:a1:9f:e4:59:12:2d:02:
71:03:71:f0:60:2c:b0:6b:01:13:18:13:85:ed:2f:
e8:d4:58:a1:ce:fd:13:32:17:06:91:e1:eb:3a:90:
ba:82:f9:ca:21:e4:cf:4a:7c:90:08:6a:6b:18:f7:
09:23:3e:5c:50:9b:00:b8:56:4e:ae:df:63:7e:0f:
ff:a6:c1:b6:3a:e4:a8:e0:ab:d7:4c:80:0a:62:03:
55:06:3c:37:de:fd:9f:a7:2e:0e:d7:f4:07:79:41:
df:e2:51:db:37:30:0f:36:4d:b5:00:58:a6:a7:3d:
2d:9d:bf:43:8e:59:f8:f9:8b:21:71:2d:bf:69:16:
37:82:e6:2e:22:1e:04:e1:4e:c0:fa:b3:c2:0e:da:
1c:68:28:1c:47:10:8d:f0:02:bb:c6:4a:32:4a:81:
af:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:2C:D6:9A:48:5C:FE:58:12:5D:C4:38:09:64:C0:84:20:FD:5F:29
X509v3 Authority Key Identifier:
keyid:E5:A1:B3:65:52:F9:DA:CC:B9:2A:C5:C3:B4:4B:42:6D:64:37:49:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5aGzZVL52sy5KsXDtEtCbWQ3SeI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/5aGzZVL52sy5KsXDtEtCbWQ3SeI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/5aGzZVL52sy5KsXDtEtCbWQ3SeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:43:ca:62:7b:58:3d:18:1d:f4:de:5e:9f:9f:6b:d7:94:32:
63:0b:2e:32:18:1f:bf:7a:fe:3d:fd:f0:fe:ac:0d:27:40:c3:
c1:5b:ce:3f:07:32:32:e0:59:18:ef:e6:27:91:9d:87:90:2e:
00:b2:a2:79:9b:c7:85:d1:7e:12:b1:6c:6b:52:13:88:b2:36:
b8:c0:1d:2d:80:c1:7a:5a:39:a7:a4:e9:c4:2d:da:81:d3:ba:
9b:5a:49:0b:fd:0e:92:3e:dd:79:e6:d7:2a:88:42:a5:5b:51:
fb:89:bd:ce:5d:84:ef:b1:e8:ab:b3:f1:6d:4c:16:2a:8e:bd:
50:92:bd:16:7c:1a:12:38:06:d8:7c:b9:80:01:7f:13:12:e1:
00:10:8c:09:2c:63:de:0f:d0:4f:1d:a8:a7:e0:e9:ca:17:30:
28:5a:fd:aa:73:d4:22:11:ab:1a:5c:ae:f8:41:f9:c3:41:68:
d2:ac:04:37:8c:ff:da:9e:91:0b:43:18:dc:1a:d8:94:78:5a:
45:45:83:a2:39:7e:15:40:e6:e2:ce:98:8b:1e:7b:22:ca:93:
c4:37:71:9a:4e:a0:54:f1:ac:31:bc:74:0a:cc:ce:a1:fe:a9:
60:36:b9:55:fc:ea:ff:7e:6d:77:dd:ba:73:7f:5a:d1:ea:4b:
4d:fd:03:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 11:33:20 2025 by rpki-client