Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9f5223-a56c-465b-ac65-fd152a6a0587/1/5ar3bSe6gS4NXOIwXxfFMYjCWAw.mft
File: 5ar3bSe6gS4NXOIwXxfFMYjCWAw.mft (raw, json)
Hash identifier: FF/PW1Xg2fDn9FqmORohJa015Yd+nKfg8vsdvRPHWlg=
Subject key identifier: D6:77:1A:BD:86:68:6C:67:AF:4E:BE:EC:75:26:D7:2F:F0:02:8B:0A
Authority key identifier: E5:AA:F7:6D:27:BA:81:2E:0D:5C:E2:30:5F:17:C5:31:88:C2:58:0C
Certificate issuer: /CN=e5aaf76d27ba812e0d5ce2305f17c53188c2580c
Certificate serial: 019A1CBFC11AEF567E205AD0C9F51D4CEBB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5ar3bSe6gS4NXOIwXxfFMYjCWAw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9f5223-a56c-465b-ac65-fd152a6a0587/1/5ar3bSe6gS4NXOIwXxfFMYjCWAw.mft
Manifest number: 0902
Signing time: Sat 25 Oct 2025 19:02:00 +0000
Manifest this update: Sat 25 Oct 2025 19:02:00 +0000
Manifest next update: Sun 26 Oct 2025 19:02:00 +0000
Files and hashes: 1: 5ar3bSe6gS4NXOIwXxfFMYjCWAw.crl (hash: u7IfRqCGVnkf7Avaw7123ZyMtqX/oxf4KRM6rb0/D08=)
2: GkuupBH0S6UfIOVBxWCowAfIXUM.roa (hash: 0Pa8It6a3TFSH6XKo+NzCtHNBkz88WRMk9KlV3Y4AVM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/9f5223-a56c-465b-ac65-fd152a6a0587/1/5ar3bSe6gS4NXOIwXxfFMYjCWAw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/9f5223-a56c-465b-ac65-fd152a6a0587/1/5ar3bSe6gS4NXOIwXxfFMYjCWAw.mft
rsync://rpki.ripe.net/repository/DEFAULT/5ar3bSe6gS4NXOIwXxfFMYjCWAw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 19:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1c:bf:c1:1a:ef:56:7e:20:5a:d0:c9:f5:1d:4c:eb:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5aaf76d27ba812e0d5ce2305f17c53188c2580c
Validity
Not Before: Oct 25 19:02:00 2025 GMT
Not After : Oct 26 19:02:00 2025 GMT
Subject: CN=d6771abd86686c67af4ebeec7526d72ff0028b0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ad:cc:ad:4b:ae:89:b5:85:f7:2e:ac:2a:4f:
5f:ac:4a:1d:b9:11:57:4c:5c:27:a4:3d:83:67:ab:
2a:4a:d1:0b:10:c9:8b:14:50:50:e7:e6:5c:d7:aa:
a9:e1:c3:a1:0d:9b:e1:f2:36:42:22:be:bb:9d:94:
85:a3:04:05:62:b6:b4:ba:d6:a6:d8:6e:8c:86:29:
43:f1:56:3b:95:66:f1:f9:2d:34:cf:e8:d8:aa:cc:
3b:e9:05:85:67:7d:52:6d:13:93:bd:e8:03:48:ce:
b7:00:34:fa:6f:c7:91:f8:73:4c:6c:be:b8:4a:bd:
73:ac:ba:fe:1e:b8:ae:08:da:08:79:8f:6e:54:74:
b1:a4:9f:75:67:71:a2:ea:67:8c:95:91:c4:d7:bf:
67:e3:f6:ea:dd:50:c6:b8:93:84:c9:12:7d:f2:e1:
8d:52:96:82:cc:5e:f8:84:bd:9c:29:70:7b:05:92:
3a:ca:dd:d8:1c:c6:2d:86:18:6e:00:b7:c9:d8:19:
2a:0d:39:0f:28:7a:ff:df:98:1a:d5:52:f3:45:5b:
35:1a:31:f7:ea:e4:15:34:18:b2:35:dc:d8:bd:6c:
61:86:ec:36:f0:91:52:5c:0d:92:42:12:1b:d3:6a:
51:4a:1b:c7:fa:03:dd:2f:a5:99:cc:c5:ee:4b:18:
45:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:77:1A:BD:86:68:6C:67:AF:4E:BE:EC:75:26:D7:2F:F0:02:8B:0A
X509v3 Authority Key Identifier:
keyid:E5:AA:F7:6D:27:BA:81:2E:0D:5C:E2:30:5F:17:C5:31:88:C2:58:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5ar3bSe6gS4NXOIwXxfFMYjCWAw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9f5223-a56c-465b-ac65-fd152a6a0587/1/5ar3bSe6gS4NXOIwXxfFMYjCWAw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9f5223-a56c-465b-ac65-fd152a6a0587/1/5ar3bSe6gS4NXOIwXxfFMYjCWAw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:43:48:93:e2:d1:e1:6b:c6:bd:fb:bd:8e:6b:bd:31:2a:6e:
61:14:43:78:e5:cb:be:b8:8d:f4:9d:8b:af:65:da:fa:29:37:
01:28:46:6e:e8:66:14:00:52:52:09:c0:7d:d4:d7:c1:c4:6a:
1f:8d:17:bb:ef:a8:11:e2:48:9d:da:99:ff:1e:5a:62:aa:b8:
9b:3e:5f:32:45:23:b3:54:96:a4:cb:e7:a8:51:ee:64:35:06:
5d:41:d4:87:5e:a3:49:57:b9:79:b9:03:50:74:28:ea:84:58:
66:ce:51:b5:ee:0b:cb:fc:e7:85:39:74:d9:5f:29:ec:32:93:
98:bb:c6:71:20:3a:f5:d6:6b:60:63:fa:11:80:53:df:9e:ca:
1b:88:1e:f7:2e:7e:62:f1:88:02:27:18:18:14:b5:ee:1a:17:
9b:e6:e3:04:fa:93:8a:40:79:6b:db:b9:ce:f2:8d:ea:26:a3:
c6:ed:87:08:55:ec:30:4f:f3:38:15:0e:69:98:cd:6b:b5:4e:
50:1d:51:fb:30:7f:cf:0a:31:4d:1f:52:98:7d:06:fe:62:03:
fc:e7:e2:b4:e6:f3:f0:27:3d:d3:40:e8:1a:bd:36:e1:79:6d:
ef:d9:ae:0a:10:24:a9:95:6b:c2:d3:ed:8f:80:2d:d0:e4:7b:
cb:3a:fa:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 05:41:50 2025 by rpki-client