Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/3c634a-0cd9-4765-bd09-5663de16d66f/1/aWxnsl0vIl2XLP3ztOr_IuN5AKg.mft
File: aWxnsl0vIl2XLP3ztOr_IuN5AKg.mft (raw, json)
Hash identifier: qijk/ifZ9dSPE/CtHjUrO/IXKBdH+uXPtTPLNDIpqeU=
Subject key identifier: 5D:48:7E:30:3A:F8:62:3D:25:85:C6:78:50:DC:95:A4:7A:0F:D2:1B
Authority key identifier: 69:6C:67:B2:5D:2F:22:5D:97:2C:FD:F3:B4:EA:FF:22:E3:79:00:A8
Certificate issuer: /CN=696c67b25d2f225d972cfdf3b4eaff22e37900a8
Certificate serial: 019A23D32E0C6014B8F3B0F4B7C1E0DDD404
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aWxnsl0vIl2XLP3ztOr_IuN5AKg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/3c634a-0cd9-4765-bd09-5663de16d66f/1/aWxnsl0vIl2XLP3ztOr_IuN5AKg.mft
Manifest number: 05E4
Signing time: Mon 27 Oct 2025 04:00:33 +0000
Manifest this update: Mon 27 Oct 2025 04:00:33 +0000
Manifest next update: Tue 28 Oct 2025 04:00:33 +0000
Files and hashes: 1: 1-7Y0vxgGjFDrArJxbSZiKPHjpLI.roa (hash: bOO4FlKJWXEQJjLmaOoP7m2UMLj2WLiNGPSaCEd5lyU=)
2: aWxnsl0vIl2XLP3ztOr_IuN5AKg.crl (hash: 5ljlVdBcqEWuhn9H1X/m44r07YZQrDbL7alGn6zDd9Y=)
3: fxSPTs_KrZKa-NlCbE6u4smq6IQ.roa (hash: 9pMUqI23+lfSB11w0dNCq2uY/O6yUaZq0tlanY1cD7U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/3c634a-0cd9-4765-bd09-5663de16d66f/1/aWxnsl0vIl2XLP3ztOr_IuN5AKg.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/3c634a-0cd9-4765-bd09-5663de16d66f/1/aWxnsl0vIl2XLP3ztOr_IuN5AKg.mft
rsync://rpki.ripe.net/repository/DEFAULT/aWxnsl0vIl2XLP3ztOr_IuN5AKg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 04:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:23:d3:2e:0c:60:14:b8:f3:b0:f4:b7:c1:e0:dd:d4:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=696c67b25d2f225d972cfdf3b4eaff22e37900a8
Validity
Not Before: Oct 27 04:00:33 2025 GMT
Not After : Oct 28 04:00:33 2025 GMT
Subject: CN=5d487e303af8623d2585c67850dc95a47a0fd21b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:c8:f3:eb:47:6d:cc:ca:c7:7f:df:e9:cc:52:
d0:94:c1:e3:ae:33:c5:0e:34:62:bc:ce:66:4c:59:
86:95:0a:64:b7:59:25:09:dc:29:27:69:47:f0:db:
d1:87:b2:9a:21:8d:c2:3c:19:1d:9f:43:83:68:13:
38:18:cb:5b:bb:4b:9f:01:26:95:a2:e1:e3:33:48:
ce:97:00:53:b0:f5:cc:73:52:46:31:ad:0e:b3:1f:
a4:bd:31:ff:df:61:e4:88:b7:53:e4:44:a9:13:fd:
e8:5e:20:e9:66:d9:53:e2:d8:40:19:c7:8b:67:af:
73:c1:04:2d:15:45:f3:b0:f9:f7:da:32:0a:a4:55:
19:12:7a:84:57:59:e7:47:45:b8:ba:c1:f1:b7:d9:
ca:bc:32:8a:8e:94:04:37:3f:a5:1b:45:ef:23:e6:
8a:9e:2b:a2:a9:42:9c:22:f4:af:de:d5:b4:02:c4:
ed:c7:91:08:eb:a6:e5:e5:4f:50:9d:ee:19:5f:fb:
62:b3:92:89:38:c0:c9:0c:4e:59:f4:ce:4c:a9:0e:
a6:62:9f:33:d5:ac:28:b9:0c:84:8a:08:8f:04:e6:
8e:d3:41:4d:f7:d1:07:fa:a0:47:6d:43:85:d8:38:
38:3d:a3:97:f3:cc:0f:81:1b:eb:44:6d:d6:da:3a:
a8:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:48:7E:30:3A:F8:62:3D:25:85:C6:78:50:DC:95:A4:7A:0F:D2:1B
X509v3 Authority Key Identifier:
keyid:69:6C:67:B2:5D:2F:22:5D:97:2C:FD:F3:B4:EA:FF:22:E3:79:00:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aWxnsl0vIl2XLP3ztOr_IuN5AKg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/3c634a-0cd9-4765-bd09-5663de16d66f/1/aWxnsl0vIl2XLP3ztOr_IuN5AKg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/3c634a-0cd9-4765-bd09-5663de16d66f/1/aWxnsl0vIl2XLP3ztOr_IuN5AKg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:1f:c2:92:24:e6:a5:c6:80:22:75:fb:16:eb:b9:bd:4a:49:
7e:e8:0d:18:7d:96:41:ea:e7:c5:09:09:e9:2d:d4:1b:fb:35:
3a:31:d5:07:a4:5b:c9:2f:cd:a1:ce:c3:40:72:b7:c4:4b:0b:
6f:e7:25:db:9f:4b:ab:96:bd:f4:d0:2f:ea:18:b7:5a:54:7f:
8d:61:f4:bd:59:2d:f8:7f:9f:1f:b0:4f:9a:fb:e1:5a:22:57:
5a:38:58:54:7a:79:bf:31:8e:88:75:7e:e2:3b:8b:c3:81:bf:
b8:12:4b:d6:04:a4:46:b4:6f:99:20:1f:17:cb:2a:a2:9b:93:
ad:6a:a3:77:60:53:3c:f6:a6:c1:33:a0:bd:30:65:e1:dd:20:
40:8d:c2:84:65:9e:f3:36:bf:8d:0c:08:9d:1b:08:cf:11:7d:
cd:45:75:98:c9:99:c5:5e:92:65:94:a4:3b:c2:93:d4:0a:31:
78:a2:05:b3:04:85:bc:00:36:4a:b9:3c:aa:23:0d:c0:f5:16:
71:a1:bc:83:ba:24:de:a4:da:b8:0e:a0:1f:44:99:12:a8:4c:
82:48:eb:2c:bc:ea:db:98:d7:87:f9:13:e1:b6:18:4a:84:e5:
46:b8:2b:b2:81:c8:72:f5:89:d7:b1:33:43:ed:65:14:d4:30:
40:f3:bc:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 12:27:28 2025 by rpki-client