Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/ca34eb-8e20-4bf1-b1b2-5872109b67a8/1/5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.mft
File: 5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.mft (raw, json)
Hash identifier: 4m5RCIYmHC56+1ykUfLJV5mjRhHMhh3sqrC63nF/330=
Subject key identifier: E4:C4:06:0E:33:02:55:46:E4:99:93:D2:B5:B2:C1:23:BD:E6:41:92
Authority key identifier: E5:A6:79:4B:91:B8:14:06:41:2A:13:78:70:BF:DE:3B:17:0D:E0:94
Certificate issuer: /CN=e5a6794b91b81406412a137870bfde3b170de094
Certificate serial: 019A23D2D7BD608268993B38B2ECF90873A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/ca34eb-8e20-4bf1-b1b2-5872109b67a8/1/5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.mft
Manifest number: 11DC
Signing time: Mon 27 Oct 2025 04:00:11 +0000
Manifest this update: Mon 27 Oct 2025 04:00:11 +0000
Manifest next update: Tue 28 Oct 2025 04:00:11 +0000
Files and hashes: 1: 1n-VVl_FUGuc471oALycpRiqCLk.roa (hash: CyDn40gRMpRIy4CCIQiJsw5qJAYeVVUI59AY9O976Cg=)
2: 5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.crl (hash: l0a8LCOUcDv7F5mpIj9Tw0pE3saBQtFDy9yL8jYgMjQ=)
3: bvJaB1n4DlwgW-YHgMlWz2d0zE0.roa (hash: Aum897RCErwCFSWkB8MTk4Vue2u5uq3XMcwvd1bOMFQ=)
4: d-c3fV9q29dsWUsutXEO_XUxELA.roa (hash: odfjS8/wqJCuj1kyoe6nkIiHEr+jKawF6ritEznO31s=)
5: sXJREdbwAm9mG_ih-kGMSE4IF1g.roa (hash: Vz5vIbPRAiUHJvwDkitmXzn8yuqUilXU/W786A3ZvJM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/ca34eb-8e20-4bf1-b1b2-5872109b67a8/1/5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/ca34eb-8e20-4bf1-b1b2-5872109b67a8/1/5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 04:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:23:d2:d7:bd:60:82:68:99:3b:38:b2:ec:f9:08:73:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5a6794b91b81406412a137870bfde3b170de094
Validity
Not Before: Oct 27 04:00:11 2025 GMT
Not After : Oct 28 04:00:11 2025 GMT
Subject: CN=e4c4060e33025546e49993d2b5b2c123bde64192
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:9c:c6:9e:c9:ed:9c:d9:c3:f1:88:79:3f:72:
73:c2:c4:53:df:be:ad:50:97:e1:c6:b2:e9:4b:4e:
d0:da:24:54:6c:b1:e6:4c:cd:13:eb:da:73:ef:93:
fc:8f:a8:7c:c4:28:9c:ba:85:18:3e:2b:23:f0:0c:
10:a7:4b:8a:7a:51:7a:46:00:d5:b3:6e:c6:23:ba:
34:3d:c7:8a:9f:0a:6a:87:12:60:fb:c3:a6:80:28:
ef:43:64:d6:16:aa:4a:9a:08:4c:5d:ca:a1:33:42:
24:56:b5:4e:7b:50:1c:e0:d9:46:2a:f0:67:09:fc:
b6:5a:a6:2b:57:24:8f:89:76:9c:c0:53:1f:89:37:
5e:39:5b:1f:13:20:58:31:19:52:7d:55:7b:33:64:
c9:d7:52:5f:93:4d:8b:f7:cb:c6:6b:ec:d9:4b:c1:
8e:31:d3:4b:78:e9:f3:c1:46:64:08:df:5b:13:f3:
a9:c9:75:46:a7:99:00:8d:96:58:93:8e:3c:79:27:
68:fe:4a:c1:0f:7a:a5:75:56:47:2f:a1:2b:58:c4:
53:ce:32:07:81:e3:4b:41:39:be:06:8d:26:18:80:
a6:70:6f:22:0f:ef:ca:9f:f1:e3:71:76:e0:90:3c:
3f:5a:36:40:70:13:49:69:55:16:4d:08:dc:3f:5f:
2f:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:C4:06:0E:33:02:55:46:E4:99:93:D2:B5:B2:C1:23:BD:E6:41:92
X509v3 Authority Key Identifier:
keyid:E5:A6:79:4B:91:B8:14:06:41:2A:13:78:70:BF:DE:3B:17:0D:E0:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/ca34eb-8e20-4bf1-b1b2-5872109b67a8/1/5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/ca34eb-8e20-4bf1-b1b2-5872109b67a8/1/5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:37:f0:1c:96:11:cf:7e:15:3a:62:eb:a6:b6:ef:04:fe:27:
eb:72:37:71:e9:09:32:e2:65:ab:0b:9d:1d:6e:e8:82:e0:df:
ca:12:26:65:a8:61:3e:92:15:ab:9d:a8:9b:d1:2c:66:49:b9:
99:f5:4f:6f:8a:c5:c7:5b:b7:9d:f6:2b:c1:8c:67:ef:7c:f1:
c9:45:02:e7:c7:fd:f4:33:b4:60:78:33:77:a1:ac:d4:4d:6d:
ac:21:31:ad:ad:95:26:e2:41:79:b9:44:3b:ca:e0:95:c2:d0:
2f:21:a4:7e:87:cd:64:f9:3b:d1:73:11:25:f1:e8:34:be:90:
4b:f6:26:4f:55:ea:c3:0d:f1:3a:02:95:cb:3e:c1:52:5a:3f:
25:a5:2b:2f:75:99:fe:4b:f3:88:82:1d:a8:47:50:bd:0c:22:
09:11:a4:63:7c:40:e8:3b:6c:d6:70:e3:85:d5:ac:69:1c:db:
f6:ac:55:3d:82:96:68:89:04:a9:56:35:09:89:26:7c:16:31:
ab:07:ef:d9:f8:f7:85:5a:90:c9:24:09:47:88:81:ef:8e:86:
33:c2:12:63:60:b5:5b:ac:5d:b2:79:bb:ce:a2:4b:87:b7:2d:
6a:35:67:7c:ab:8d:5a:ee:d2:d9:64:42:5a:3a:1d:8f:f7:cc:
5f:04:68:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 12:24:26 2025 by rpki-client