Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/ca34eb-8e20-4bf1-b1b2-5872109b67a8/1/5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.mft
File: 5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.mft (raw, json)
Hash identifier: iHNx2qUjB14EBZH36pJ3BOnMcNiJa4SSZSpeSq1aoN8=
Subject key identifier: A7:1B:A2:F0:04:37:01:70:4C:40:12:3D:04:3F:C1:E1:F2:8E:15:C7
Authority key identifier: E5:A6:79:4B:91:B8:14:06:41:2A:13:78:70:BF:DE:3B:17:0D:E0:94
Certificate issuer: /CN=e5a6794b91b81406412a137870bfde3b170de094
Certificate serial: 0199368104C112E216D3D25F989A6AB212B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/ca34eb-8e20-4bf1-b1b2-5872109b67a8/1/5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.mft
Manifest number: 1160
Signing time: Thu 11 Sep 2025 02:00:48 +0000
Manifest this update: Thu 11 Sep 2025 02:00:48 +0000
Manifest next update: Fri 12 Sep 2025 02:00:48 +0000
Files and hashes: 1: 1n-VVl_FUGuc471oALycpRiqCLk.roa (hash: CyDn40gRMpRIy4CCIQiJsw5qJAYeVVUI59AY9O976Cg=)
2: 5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.crl (hash: hKfX3LW8f5l9q4dGP5H6XeWzpQgaVZ40gyy8EtM8/8A=)
3: bvJaB1n4DlwgW-YHgMlWz2d0zE0.roa (hash: Aum897RCErwCFSWkB8MTk4Vue2u5uq3XMcwvd1bOMFQ=)
4: d-c3fV9q29dsWUsutXEO_XUxELA.roa (hash: odfjS8/wqJCuj1kyoe6nkIiHEr+jKawF6ritEznO31s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/ca34eb-8e20-4bf1-b1b2-5872109b67a8/1/5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/ca34eb-8e20-4bf1-b1b2-5872109b67a8/1/5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 20:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:36:81:04:c1:12:e2:16:d3:d2:5f:98:9a:6a:b2:12:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5a6794b91b81406412a137870bfde3b170de094
Validity
Not Before: Sep 11 02:00:48 2025 GMT
Not After : Sep 12 02:00:48 2025 GMT
Subject: CN=a71ba2f0043701704c40123d043fc1e1f28e15c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f3:70:27:0f:1e:6c:ea:2a:4e:89:31:87:e7:
b7:7a:93:63:3e:36:72:a5:f3:60:35:65:f7:90:bd:
48:5c:47:71:9b:91:d1:40:f9:83:61:4d:09:64:fb:
11:85:61:db:54:c2:bb:9c:0b:6e:44:8d:4d:09:e2:
1e:70:1d:dd:c6:72:39:0f:4d:fa:ce:07:a9:40:d0:
c7:67:3a:88:59:83:8a:bc:e7:7b:8e:74:83:73:c6:
2d:4b:b7:d7:ca:2b:7c:fc:16:a9:80:32:9f:b3:6b:
5d:85:82:3b:1c:58:a9:3c:af:2d:28:cb:64:52:77:
09:59:46:6a:b0:5f:c4:49:e1:3d:bf:c2:7c:0c:06:
6c:58:d9:5b:c5:4a:16:67:0d:6b:a8:39:62:35:f1:
3f:48:1b:0a:d7:88:90:36:09:51:9b:ec:84:2e:13:
8e:5b:72:fd:35:08:8b:b3:9a:03:56:fc:09:1f:b6:
15:b3:b3:4d:f0:69:47:ff:52:f4:91:a1:be:a9:f5:
ce:84:35:91:fe:23:64:db:75:3a:60:85:30:5b:7f:
60:97:18:b8:3a:a5:71:dd:87:e5:77:5a:ff:5a:5b:
ba:23:fa:f4:d6:25:75:9e:16:c1:a7:f2:e6:50:f4:
bb:1b:f2:a2:e6:e3:3d:f8:4d:08:7d:1b:af:9e:1b:
dd:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:1B:A2:F0:04:37:01:70:4C:40:12:3D:04:3F:C1:E1:F2:8E:15:C7
X509v3 Authority Key Identifier:
keyid:E5:A6:79:4B:91:B8:14:06:41:2A:13:78:70:BF:DE:3B:17:0D:E0:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/ca34eb-8e20-4bf1-b1b2-5872109b67a8/1/5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/ca34eb-8e20-4bf1-b1b2-5872109b67a8/1/5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:71:67:e5:0d:c5:9f:ec:b6:a6:63:61:ee:ca:2c:c0:7c:b8:
20:55:62:dd:88:74:5a:63:6a:2f:8a:29:31:d9:53:54:b0:07:
b9:6b:65:a4:02:a3:04:a3:19:e6:53:ab:0e:6d:f7:fa:f0:99:
32:51:38:0f:29:05:44:25:6c:93:a4:83:a6:60:b9:9c:78:f9:
a0:46:a7:7e:a3:f8:55:25:75:bf:c6:87:93:c1:80:64:a7:ba:
76:0e:70:9c:0e:a5:75:c7:74:b0:b8:58:68:05:a8:29:ac:73:
12:81:07:e4:82:a0:2e:88:5b:fb:c3:f6:d0:4d:a9:1b:da:8b:
c7:b1:7c:43:ae:c8:3b:b5:99:1a:67:9d:24:8d:6a:49:2d:99:
65:ce:7b:a5:30:ee:a6:f4:a1:83:17:e5:a0:05:ae:ea:1a:ec:
37:da:e0:d2:14:c6:26:0e:0a:88:35:a2:5d:12:34:10:b1:43:
4c:3a:2f:cb:37:7a:74:16:d4:23:29:19:f1:d1:23:85:82:41:
1b:99:85:48:13:79:79:38:9e:ca:2d:49:00:21:ca:b4:b7:17:
6f:be:2e:32:e3:c1:8c:9a:39:39:d7:24:76:8b:2f:39:99:f3:
50:a8:12:8f:50:ac:24:37:fe:dd:11:e5:34:48:ae:8d:bb:d3:
a5:ba:ed:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 03:03:28 2025 by rpki-client