Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/0423db-f233-4922-8024-b21110d8ffa1/1/5jAHYU9ncAssp21gtJQreo5LXOQ.mft
File: 5jAHYU9ncAssp21gtJQreo5LXOQ.mft (raw, json)
Hash identifier: zi2nORk4iqLkO8lx+zUijAdZwuJluCSyBipcAEysfgw=
Subject key identifier: 6B:A3:BA:DD:68:B0:04:EE:11:BF:1C:9C:59:53:95:26:19:E6:6C:1B
Authority key identifier: E6:30:07:61:4F:67:70:0B:2C:A7:6D:60:B4:94:2B:7A:8E:4B:5C:E4
Certificate issuer: /CN=e63007614f67700b2ca76d60b4942b7a8e4b5ce4
Certificate serial: 019A194FC51F8400CB6FF0392114F5AA2C97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5jAHYU9ncAssp21gtJQreo5LXOQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/0423db-f233-4922-8024-b21110d8ffa1/1/5jAHYU9ncAssp21gtJQreo5LXOQ.mft
Manifest number: 0828
Signing time: Sat 25 Oct 2025 03:00:49 +0000
Manifest this update: Sat 25 Oct 2025 03:00:49 +0000
Manifest next update: Sun 26 Oct 2025 03:00:49 +0000
Files and hashes: 1: 5jAHYU9ncAssp21gtJQreo5LXOQ.crl (hash: S02wGoqfKp0lsZprUMMuyD8yPia5pmGFCzS4f8ZOQlg=)
2: KFEMCZhH126h5EdMOEzOYR3jl7A.roa (hash: i0lu4HO1DlJaiLzdVoxYyKbrNJlxsepiYz5nfS8kc00=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/0423db-f233-4922-8024-b21110d8ffa1/1/5jAHYU9ncAssp21gtJQreo5LXOQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/0423db-f233-4922-8024-b21110d8ffa1/1/5jAHYU9ncAssp21gtJQreo5LXOQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/5jAHYU9ncAssp21gtJQreo5LXOQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 02:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:19:4f:c5:1f:84:00:cb:6f:f0:39:21:14:f5:aa:2c:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e63007614f67700b2ca76d60b4942b7a8e4b5ce4
Validity
Not Before: Oct 25 03:00:49 2025 GMT
Not After : Oct 26 03:00:49 2025 GMT
Subject: CN=6ba3badd68b004ee11bf1c9c5953952619e66c1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:98:74:f8:8f:66:ab:99:9d:b4:6b:7e:da:c6:
a4:6f:3c:45:05:4f:33:05:c9:bf:f0:32:eb:08:ea:
77:93:7c:f7:3e:0a:fb:ca:53:84:d0:b5:48:64:5c:
f9:9a:19:09:00:9b:18:54:95:4d:bf:4e:bc:5f:f6:
ad:87:9b:6f:a1:ee:19:09:86:c5:c4:99:c9:c2:46:
95:fb:fd:47:c7:09:7c:e0:e4:f3:3a:ec:38:02:3f:
95:31:6d:4a:07:17:10:b3:53:c0:f7:4a:41:c6:35:
a8:3c:15:f8:69:49:e8:2c:5a:0a:a2:cc:76:8a:db:
a5:70:40:07:0a:2b:b0:7b:6d:1d:28:0f:30:04:4d:
c3:18:31:39:bf:60:d3:17:21:e5:a2:b3:ea:cb:23:
a8:f8:99:51:f8:ab:35:4c:a2:9d:b7:53:99:18:49:
3e:bd:68:65:c0:2d:28:20:9d:d0:54:f4:5f:e9:9c:
14:6b:18:3d:b9:dd:94:ea:bb:86:dc:b2:50:be:0a:
ac:6f:fe:1f:49:87:8a:b5:52:0c:95:85:30:51:04:
af:8b:ae:47:f3:7c:4c:ef:2f:af:d3:bc:a8:e1:dd:
f4:20:93:b1:bb:a2:9f:13:3e:1e:2d:25:de:e6:f0:
90:e5:df:fb:1b:19:9a:e1:b5:6c:7c:87:0f:33:a0:
33:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:A3:BA:DD:68:B0:04:EE:11:BF:1C:9C:59:53:95:26:19:E6:6C:1B
X509v3 Authority Key Identifier:
keyid:E6:30:07:61:4F:67:70:0B:2C:A7:6D:60:B4:94:2B:7A:8E:4B:5C:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5jAHYU9ncAssp21gtJQreo5LXOQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/0423db-f233-4922-8024-b21110d8ffa1/1/5jAHYU9ncAssp21gtJQreo5LXOQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/0423db-f233-4922-8024-b21110d8ffa1/1/5jAHYU9ncAssp21gtJQreo5LXOQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:20:3e:d1:a0:54:44:59:6a:89:98:d0:e0:f9:5a:6a:64:30:
76:d3:c7:23:a8:71:07:13:cc:87:14:13:2e:cb:3d:6b:af:e3:
bb:0a:54:56:11:17:87:f9:1e:c9:d3:a5:67:2c:9a:3a:cd:86:
53:54:25:d1:c4:bc:3b:99:6b:a5:9d:c8:75:6d:71:08:0a:b5:
7f:6a:9b:52:03:c2:ae:c6:2f:41:ab:63:81:1c:e0:30:cf:31:
08:dd:d2:f0:39:6c:ed:82:6b:2c:c9:68:e7:fc:f6:0a:a7:89:
b4:8d:cd:8a:51:69:cc:92:95:c1:30:3c:4a:53:3f:d7:c4:25:
f6:96:ff:d2:63:82:2b:bb:94:03:b1:26:65:71:98:08:9d:8b:
b0:08:75:35:2b:c7:4d:2d:43:7e:d0:2d:04:ce:f3:1e:97:88:
96:5f:81:0c:8d:0d:6d:8b:f7:c7:d3:0b:ca:db:30:60:8b:b8:
fe:02:eb:ed:fc:3f:48:7f:3a:80:4d:8d:ce:b6:d4:e6:e4:dc:
1b:09:79:e4:06:13:22:3f:00:d3:3d:32:00:75:7e:6c:7e:41:
83:96:85:3c:3a:bf:10:a2:47:3d:d7:48:5c:f0:f9:e6:62:8e:
21:9c:18:27:ff:9c:4d:ad:e5:69:d9:01:78:d8:e0:7b:3e:12:
42:30:bb:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 11:26:49 2025 by rpki-client