
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/83e4757f-d37f-4fd6-a69b-d74bdd6b87dc/0/5E5179BB1757068D7028510FEEB1177AA7CC8818.mft
File: 5E5179BB1757068D7028510FEEB1177AA7CC8818.mft (raw, json)
Hash identifier: CHHyUVhlyxPjToAGVYcQhyfZq70PvzdSGX3Ay5jF0sg=
Subject key identifier: 6A:A4:B8:3E:4B:DE:C6:52:E0:00:71:6E:9C:81:63:9C:5C:9B:D2:05
Authority key identifier: 5E:51:79:BB:17:57:06:8D:70:28:51:0F:EE:B1:17:7A:A7:CC:88:18
Certificate issuer: /CN=5e5179bb1757068d7028510feeb1177aa7cc8818
Certificate serial: 3752D163EF8EFA3DCD93B5764D606C44B969DE4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XlF5uxdXBo1wKFEP7rEXeqfMiBg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/83e4757f-d37f-4fd6-a69b-d74bdd6b87dc/0/5E5179BB1757068D7028510FEEB1177AA7CC8818.mft
Manifest number: 0566
Signing time: Sat 25 Oct 2025 18:59:09 +0000
Manifest this update: Sat 25 Oct 2025 18:54:09 +0000
Manifest next update: Sun 26 Oct 2025 21:06:09 +0000
Files and hashes: 1: 38332e3135302e3231362e302f32322d3234203d3e203631333137.roa (hash: bA7vtpR0TyML0HjZJJdgMHPc1uK0jGA3YpWrjwZ8y+U=)
2: 38332e3135302e3231382e302f32342d3234203d3e20313939343135.roa (hash: yCFgEcnTSAhMVf29HMHp04B1k4DqC3mlqJPDdmg8wFQ=)
3: 3139322e3130392e31302e302f32342d3234203d3e203239383032.roa (hash: zPOJooX1SbIfEdoUfLmfFj+bOWKjqS7oznOqpFqjTp4=)
4: 3139322e3130392e31312e302f32342d3234203d3e203136323736.roa (hash: qRWEBAMqR9/oXRv8A+nfXFduPkpHZgx8k4TEVcf/LOk=)
5: 38332e3135302e3231362e302f32342d3234203d3e203630353538.roa (hash: JKcEyzkTVqyttDFURXSxmaVQ+BAZuAcc4gW4DE+3N8E=)
6: 38332e3135302e3231392e302f32342d3234203d3e203533333430.roa (hash: GXLgWx6Q3CLvfyeGG+4M+PXnBAwSeVlRcKDTfEKYkeQ=)
7: 5E5179BB1757068D7028510FEEB1177AA7CC8818.crl (hash: mgWk7kRO7Kl+AgzJy1C7W3YmOG2zOn2sFs3O8k0L8lE=)
8: 38332e3135302e3231372e302f32342d3234203d3e20323132353034.roa (hash: k8RY7QTEncAN/MOxUGAuMRRlssrdtl7ahwCsdlVrRY0=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/83e4757f-d37f-4fd6-a69b-d74bdd6b87dc/0/5E5179BB1757068D7028510FEEB1177AA7CC8818.crl
rsync://rsync.paas.rpki.ripe.net/repository/83e4757f-d37f-4fd6-a69b-d74bdd6b87dc/0/5E5179BB1757068D7028510FEEB1177AA7CC8818.mft
rsync://rpki.ripe.net/repository/DEFAULT/XlF5uxdXBo1wKFEP7rEXeqfMiBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 11:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:52:d1:63:ef:8e:fa:3d:cd:93:b5:76:4d:60:6c:44:b9:69:de:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e5179bb1757068d7028510feeb1177aa7cc8818
Validity
Not Before: Oct 25 18:54:09 2025 GMT
Not After : Oct 26 21:06:09 2025 GMT
Subject: CN=6AA4B83E4BDEC652E000716E9C81639C5C9BD205
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:69:48:20:13:37:38:be:ee:24:08:8d:3d:4d:
18:76:06:e9:7e:f2:f9:92:32:43:87:39:8c:d6:0c:
23:e4:4f:b2:9b:c7:91:07:8e:b8:e9:51:0a:54:90:
54:35:b9:9c:cb:c2:ca:98:db:3c:97:66:9c:a3:06:
7a:6c:4e:14:21:39:f4:92:cd:02:26:31:e2:e4:bf:
98:66:db:4b:86:83:26:a7:07:fe:3c:52:1c:74:f4:
3c:9e:82:4f:52:cd:16:9d:c5:97:c7:26:7a:6c:bf:
04:15:b3:8c:1b:fc:52:29:08:14:97:be:26:89:64:
95:19:2f:8d:1e:56:5a:8f:a8:79:63:82:d2:e5:18:
58:fb:fc:2d:bd:e6:3a:59:3f:cb:5e:3f:0c:26:4a:
a3:e7:bf:e5:44:6a:84:5c:79:e0:80:23:da:ed:7c:
75:91:17:26:fa:7f:0e:95:cc:66:b6:d6:86:82:68:
ac:58:87:a5:91:fe:a9:4e:2b:8b:b2:73:2e:27:be:
5e:8f:86:dd:8a:f1:8e:46:5f:ac:e6:5a:7e:c0:90:
d9:a4:23:8f:ee:1a:1e:a9:34:56:8a:71:54:43:57:
52:90:5b:7f:3a:a6:40:4c:c7:6e:a7:16:0d:7f:34:
c0:bc:06:df:ca:d2:3a:48:74:04:c0:06:4e:a2:72:
8a:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:A4:B8:3E:4B:DE:C6:52:E0:00:71:6E:9C:81:63:9C:5C:9B:D2:05
X509v3 Authority Key Identifier:
keyid:5E:51:79:BB:17:57:06:8D:70:28:51:0F:EE:B1:17:7A:A7:CC:88:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/83e4757f-d37f-4fd6-a69b-d74bdd6b87dc/0/5E5179BB1757068D7028510FEEB1177AA7CC8818.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XlF5uxdXBo1wKFEP7rEXeqfMiBg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/83e4757f-d37f-4fd6-a69b-d74bdd6b87dc/0/5E5179BB1757068D7028510FEEB1177AA7CC8818.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:21:a9:6e:66:2f:b5:eb:13:86:37:9e:4e:ee:9c:b1:09:71:
26:f9:1a:86:5b:d2:c9:86:34:5a:80:5b:97:cf:52:67:ec:61:
a5:97:b6:86:0f:ad:84:6c:97:38:7c:ed:76:fb:e9:ab:8e:b8:
79:5f:22:5d:fb:c8:0f:9d:73:d8:59:41:f1:1c:27:bb:ea:17:
90:59:36:48:2d:be:c9:a1:51:bb:af:c2:fc:71:85:b3:f7:54:
9d:11:63:13:06:1f:a8:d8:88:97:ee:cb:2b:4c:1b:8b:aa:3d:
ef:3f:c7:d9:23:31:8e:aa:35:7d:19:aa:46:08:66:26:e3:9f:
7c:85:33:ec:72:3d:31:de:e7:25:2a:66:ab:31:8e:39:60:3f:
c9:5e:d8:b7:fc:87:a0:ab:bc:f9:dc:c9:cd:5b:c0:f5:a2:00:
ec:fb:e4:f6:ba:63:17:77:b7:08:dd:36:6f:04:68:80:ac:2d:
ec:80:59:79:13:e1:cf:84:5a:b2:79:66:52:8b:a5:de:dd:4d:
e9:ed:16:4b:df:f0:40:b9:52:9a:72:89:79:b3:51:ef:cd:a8:
6c:50:fb:05:19:ab:51:cd:f2:05:74:45:1b:0b:1e:9b:96:4a:
d4:21:34:30:ce:fe:bf:89:bf:b8:c3:ad:55:58:a5:a2:79:16:
8f:8c:a7:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 21:06:52 2025 by rpki-client