Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/fdb398-3fb5-4b6a-a003-cfc4a676d6e0/1/A5Wt2Guvay0G_0H1Um00f3HutBA.mft
File: A5Wt2Guvay0G_0H1Um00f3HutBA.mft (raw, json)
Hash identifier: MJf/CajLk6gP7YJmOboRnmJ7jtA5QZ6/6rfnO3DU65c=
Subject key identifier: 68:67:51:93:87:68:9D:2E:64:BF:F6:5F:60:22:9F:E0:A7:78:23:DE
Authority key identifier: 03:95:AD:D8:6B:AF:6B:2D:06:FF:41:F5:52:6D:34:7F:71:EE:B4:10
Certificate issuer: /CN=0395add86baf6b2d06ff41f5526d347f71eeb410
Certificate serial: 019A3A23B54EB7BF5739CF6725A4250659E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A5Wt2Guvay0G_0H1Um00f3HutBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/fdb398-3fb5-4b6a-a003-cfc4a676d6e0/1/A5Wt2Guvay0G_0H1Um00f3HutBA.mft
Manifest number: 1694
Signing time: Fri 31 Oct 2025 12:00:09 +0000
Manifest this update: Fri 31 Oct 2025 12:00:09 +0000
Manifest next update: Sat 01 Nov 2025 12:00:09 +0000
Files and hashes: 1: 1VRLJKU_iS-J5hpp2gSlpHTKJrM.roa (hash: wMqFEiKVsvmfTXQPWnG9RRXDiwBKVCmwH1hZAvPWe5Y=)
2: A5Wt2Guvay0G_0H1Um00f3HutBA.crl (hash: S+joADCXMINxBg768W6fa0dVeBpMJGM7L0CKYZN4MiI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/fdb398-3fb5-4b6a-a003-cfc4a676d6e0/1/A5Wt2Guvay0G_0H1Um00f3HutBA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/fdb398-3fb5-4b6a-a003-cfc4a676d6e0/1/A5Wt2Guvay0G_0H1Um00f3HutBA.mft
rsync://rpki.ripe.net/repository/DEFAULT/A5Wt2Guvay0G_0H1Um00f3HutBA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Nov 2025 12:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:3a:23:b5:4e:b7:bf:57:39:cf:67:25:a4:25:06:59:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0395add86baf6b2d06ff41f5526d347f71eeb410
Validity
Not Before: Oct 31 12:00:09 2025 GMT
Not After : Nov 1 12:00:09 2025 GMT
Subject: CN=6867519387689d2e64bff65f60229fe0a77823de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:5b:5a:c1:0d:d8:46:20:81:3c:6b:c2:bc:4b:
b8:59:f2:2c:a9:4b:60:b5:86:13:23:c2:ca:16:ba:
2f:d1:d5:71:8c:1a:49:45:91:97:d9:ba:d5:b5:cd:
5b:68:b0:d0:0a:75:b5:40:9c:8e:6f:0e:a6:0d:11:
15:20:ad:28:ae:96:6c:a6:19:b0:0f:c3:c1:0d:16:
62:6e:e3:69:cf:92:3e:55:45:bd:75:c5:c2:5c:af:
0a:b4:99:83:54:77:39:e3:0b:aa:2b:82:d9:36:38:
dd:e1:31:89:57:7d:8c:b2:37:1f:d7:10:ca:4f:4b:
42:5a:26:dc:9d:60:52:9d:28:0c:03:31:5f:7c:15:
e9:6b:4a:b8:e9:23:e2:af:ca:c9:08:31:9b:18:5b:
2e:ce:0d:6a:53:8b:3e:4e:41:48:76:0d:d0:e1:90:
de:8b:a7:d7:6b:13:43:63:e5:b2:e4:35:7d:f5:fe:
08:c4:fc:60:b9:fe:ce:22:fe:ee:24:3d:01:04:cc:
c0:80:b5:4d:d8:21:db:ae:48:7f:6f:9e:a1:2c:89:
29:ae:62:74:ee:ed:1c:21:d1:73:80:7b:71:ac:c9:
fe:6d:3f:dd:29:b8:6b:bc:02:cb:56:c0:97:9e:24:
fe:39:e5:d4:10:18:5b:b0:89:c8:47:28:7f:b0:7a:
da:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:67:51:93:87:68:9D:2E:64:BF:F6:5F:60:22:9F:E0:A7:78:23:DE
X509v3 Authority Key Identifier:
keyid:03:95:AD:D8:6B:AF:6B:2D:06:FF:41:F5:52:6D:34:7F:71:EE:B4:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A5Wt2Guvay0G_0H1Um00f3HutBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/fdb398-3fb5-4b6a-a003-cfc4a676d6e0/1/A5Wt2Guvay0G_0H1Um00f3HutBA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/fdb398-3fb5-4b6a-a003-cfc4a676d6e0/1/A5Wt2Guvay0G_0H1Um00f3HutBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:de:8b:33:a1:1a:be:4b:41:30:c4:42:7a:77:7f:d5:aa:7e:
3e:16:1b:ed:b7:a5:97:2b:77:f4:9f:04:9a:bf:84:82:25:5e:
54:ef:63:af:1e:26:ab:bc:17:2c:60:0d:b8:54:b8:d1:fe:10:
b3:35:62:67:28:b8:4f:9d:6f:d7:ca:b5:90:e9:e1:5c:f3:02:
5c:82:d2:b1:be:9f:8e:b6:06:8a:55:bc:2b:dd:a6:c9:2c:a5:
d3:7e:91:da:bf:49:31:63:58:0d:d6:54:35:80:93:83:84:6c:
d7:1c:f1:cb:7c:51:61:d2:5b:88:9b:02:79:2b:61:4e:7b:00:
c3:5a:9b:dc:9f:79:98:37:d4:d7:d5:54:bc:42:1c:df:15:dd:
df:71:a3:db:6e:03:61:7f:82:c7:ce:0c:39:32:b3:c9:e7:c0:
3f:9f:a0:5d:78:47:06:8e:f0:3c:08:5b:3b:9b:44:e7:e7:c7:
e1:81:37:c7:38:82:e3:26:09:33:8a:a6:5c:7e:89:dd:16:a0:
02:eb:58:d7:b8:c4:d3:c0:f4:b1:73:41:b3:5d:f4:80:20:1b:
c1:83:cc:27:c8:79:44:45:60:73:8f:ca:47:ac:2b:32:81:23:
34:ff:2d:9d:e6:6b:79:53:db:a9:a5:44:82:73:83:a1:a1:09:
9a:20:54:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 31 19:21:37 2025 by rpki-client