Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/12349e-5282-472a-ae52-2a06223623e0/1/a5LPM5DKpYeedZcpzZAIxuylWic.mft
File: a5LPM5DKpYeedZcpzZAIxuylWic.mft (raw, json)
Hash identifier: 4e4SYvIedhUepdTVMXpYQ6iCuZ8BqyivYvH08WfqO3M=
Subject key identifier: D5:A2:88:12:AD:D8:0D:47:47:3E:90:CE:92:B3:FD:5B:7E:E9:D1:6A
Authority key identifier: 6B:92:CF:33:90:CA:A5:87:9E:75:97:29:CD:90:08:C6:EC:A5:5A:27
Certificate issuer: /CN=6b92cf3390caa5879e759729cd9008c6eca55a27
Certificate serial: 019A0524056A0CEA6785CC4B3B1DF5A35AE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a5LPM5DKpYeedZcpzZAIxuylWic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/12349e-5282-472a-ae52-2a06223623e0/1/a5LPM5DKpYeedZcpzZAIxuylWic.mft
Manifest number: 0715
Signing time: Tue 21 Oct 2025 05:00:37 +0000
Manifest this update: Tue 21 Oct 2025 05:00:37 +0000
Manifest next update: Wed 22 Oct 2025 05:00:37 +0000
Files and hashes: 1: FXli7IVxfRti4qt1ad27nRecqaM.roa (hash: u1NhxzgiSWTpvPzqFkEG54wTsIn/+oZByZ4cbRuTRXA=)
2: H4J_7ypAJ4hgBEB4fVDKFhXluIE.roa (hash: BtWyDIO/zf/0LXUY6FzALBn7OXPRy7qH7floDc9wE5g=)
3: a5LPM5DKpYeedZcpzZAIxuylWic.crl (hash: kwM+AcsdfpDPLLRJgKho/0IZtSuLHpiosaEHgT8USMw=)
4: nHW9BLq4zRW7_GDpHKk8LDtfSmI.roa (hash: wgNVfFr1EUmSTQMiYZD3CFdfwE6KU5e+fnSwgZEt6SA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/12349e-5282-472a-ae52-2a06223623e0/1/a5LPM5DKpYeedZcpzZAIxuylWic.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/12349e-5282-472a-ae52-2a06223623e0/1/a5LPM5DKpYeedZcpzZAIxuylWic.mft
rsync://rpki.ripe.net/repository/DEFAULT/a5LPM5DKpYeedZcpzZAIxuylWic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Oct 2025 05:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:05:24:05:6a:0c:ea:67:85:cc:4b:3b:1d:f5:a3:5a:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b92cf3390caa5879e759729cd9008c6eca55a27
Validity
Not Before: Oct 21 05:00:37 2025 GMT
Not After : Oct 22 05:00:37 2025 GMT
Subject: CN=d5a28812add80d47473e90ce92b3fd5b7ee9d16a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:fc:ab:4a:19:60:cf:ae:9d:7c:27:40:16:43:
6d:c1:b0:36:7e:2d:b8:35:a3:be:94:1f:4c:6b:fc:
98:6b:4d:f8:a3:01:c1:a8:21:25:a4:4e:2c:1f:d7:
73:0b:6e:ab:25:0d:61:ba:fa:38:31:c3:a8:37:52:
a0:ca:53:15:0c:e8:be:4a:bb:11:e4:3c:07:b3:3f:
78:c3:a4:f8:ec:5c:56:f9:ed:dd:43:7e:90:56:e7:
71:6f:85:a9:00:dd:36:9e:c4:aa:c1:25:09:d9:22:
6e:48:6f:5f:ac:45:ce:09:dc:77:27:df:c2:7b:dd:
80:b5:4f:aa:42:9f:1f:1f:3e:27:08:47:6a:29:3a:
5e:1a:1b:2c:d0:77:96:7b:a7:67:e7:0a:00:45:df:
6f:12:ee:a5:37:aa:17:f3:6d:13:7a:f7:91:1f:f3:
ce:d3:20:ec:0b:1b:1e:fb:7a:70:5f:60:67:36:86:
a8:9f:ae:e8:9a:41:8e:74:99:05:7c:5e:11:b9:c3:
72:b7:3c:8a:c8:61:3f:16:43:c5:97:2c:76:5b:cf:
11:6f:17:f9:60:8d:ea:ac:b6:d6:0b:ea:06:f7:bd:
b3:d4:4d:34:b5:a0:76:4b:01:cf:84:79:9d:b7:21:
98:b4:a2:89:e3:33:88:e8:32:df:ef:ae:69:01:40:
eb:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:A2:88:12:AD:D8:0D:47:47:3E:90:CE:92:B3:FD:5B:7E:E9:D1:6A
X509v3 Authority Key Identifier:
keyid:6B:92:CF:33:90:CA:A5:87:9E:75:97:29:CD:90:08:C6:EC:A5:5A:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5LPM5DKpYeedZcpzZAIxuylWic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/12349e-5282-472a-ae52-2a06223623e0/1/a5LPM5DKpYeedZcpzZAIxuylWic.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/12349e-5282-472a-ae52-2a06223623e0/1/a5LPM5DKpYeedZcpzZAIxuylWic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:1e:b9:c3:a1:53:aa:94:59:4f:22:f0:1b:63:c6:4b:93:96:
eb:4e:c4:69:20:c6:8b:70:da:a6:95:53:e0:ef:ad:db:b3:84:
a3:04:b1:1a:fa:dc:34:c1:d2:f8:fe:0e:71:a3:76:5e:b5:87:
bc:3a:7f:d4:9c:57:d9:0b:c9:70:82:fd:36:56:cf:7d:03:38:
a2:8c:7d:eb:14:77:07:7c:f8:a9:48:8b:4e:5e:43:a0:86:33:
dc:7b:1a:17:f7:04:b2:1c:4c:43:69:5b:d7:c4:85:2a:6a:65:
3d:0a:5d:42:fa:ed:22:3a:64:63:a7:f2:b1:81:15:b2:70:6e:
05:b4:df:70:dd:d9:9e:d2:7b:15:06:65:e6:6a:37:d2:d3:4b:
9c:19:cd:28:64:65:33:83:45:41:fd:80:2f:59:d5:a3:22:31:
ee:44:bb:54:8f:17:21:b2:42:de:0b:36:81:93:bf:a1:b1:b5:
c3:2b:6e:b8:0a:19:02:c3:a8:23:fa:75:4c:df:89:9b:7f:65:
34:05:80:a4:34:4d:46:b0:99:a7:65:6e:6b:96:f4:8f:bf:33:
af:a4:c4:11:59:17:71:5f:68:12:af:a5:d1:e9:55:48:68:65:
1d:e2:ae:a3:c1:3f:1d:8f:bb:72:53:7e:33:ef:77:c5:b9:cb:
e0:23:38:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 09:47:11 2025 by rpki-client