
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/518fab-7606-4832-aa66-5a8c67842389/1/AH5rWqQ302kxUVAqIRSW431K4sU.mft
File: AH5rWqQ302kxUVAqIRSW431K4sU.mft (raw, json)
Hash identifier: 1tNilLSlY2DTMSWePZZbhb4d7HdyIHqOMLRGSgWsSDQ=
Subject key identifier: 82:DC:84:A0:3E:13:97:E1:DC:50:A8:63:F9:08:A5:F6:A2:3E:05:E3
Authority key identifier: 00:7E:6B:5A:A4:37:D3:69:31:51:50:2A:21:14:96:E3:7D:4A:E2:C5
Certificate issuer: /CN=007e6b5aa437d3693151502a211496e37d4ae2c5
Certificate serial: 019A0147BDBA65F4A950BB3FD99E5DC835FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AH5rWqQ302kxUVAqIRSW431K4sU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/518fab-7606-4832-aa66-5a8c67842389/1/AH5rWqQ302kxUVAqIRSW431K4sU.mft
Manifest number: 1463
Signing time: Mon 20 Oct 2025 11:01:09 +0000
Manifest this update: Mon 20 Oct 2025 11:01:09 +0000
Manifest next update: Tue 21 Oct 2025 11:01:09 +0000
Files and hashes: 1: 6F_Q4XpRKgEexZcCv84M_kGGwx8.roa (hash: jzUe5knYI2NZSGwBtOwn1dJh+2wMTZvaI6KEnoCDN6M=)
2: AH5rWqQ302kxUVAqIRSW431K4sU.crl (hash: J9ciF387gtkonQL0Slqvg68ksf6J8PzFkiEILpeO6C4=)
3: Ry-o6BvHlNuOD_d14wdLVmhDsgM.roa (hash: S/jHrYJPbAAtdA+RZZOotd+GpMfWfmGdhS0b8Kc0V30=)
4: VFSqRzcGMZ3Y2JFZb1Fsblb27nQ.roa (hash: UUfcXkF0GWrqVSNu+3z9VDCb/uLRbXj4ZsTEe5POQ7M=)
5: W_b0Ax5Mpx_fhvv-92F8GttV04I.roa (hash: y/SVVGY3IuSmMubg1JbInzxD9q8qop1Ol37UDvpp3pE=)
6: gZrmTs3ukQIINjYb9akCKLL_iZM.roa (hash: WbSg2tywBgMqpLgEuUZPOKgd7CPp10c7QuJJvyuvaco=)
7: mV18Ah11BcP39CQhLtpf79pVug8.roa (hash: RGt06BrejPetx9+VOGQ2Y1/RTWPMTF5VhkkYrYGyW40=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/518fab-7606-4832-aa66-5a8c67842389/1/AH5rWqQ302kxUVAqIRSW431K4sU.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/518fab-7606-4832-aa66-5a8c67842389/1/AH5rWqQ302kxUVAqIRSW431K4sU.mft
rsync://rpki.ripe.net/repository/DEFAULT/AH5rWqQ302kxUVAqIRSW431K4sU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 09:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:47:bd:ba:65:f4:a9:50:bb:3f:d9:9e:5d:c8:35:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=007e6b5aa437d3693151502a211496e37d4ae2c5
Validity
Not Before: Oct 20 11:01:09 2025 GMT
Not After : Oct 21 11:01:09 2025 GMT
Subject: CN=82dc84a03e1397e1dc50a863f908a5f6a23e05e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:28:50:88:69:bd:f4:c4:ac:f6:00:b0:dc:62:
96:4a:be:bf:03:c4:47:db:0b:8c:a9:8f:3b:57:5a:
70:36:42:61:bf:95:24:e2:ba:58:b9:aa:ad:aa:2f:
b5:8b:ce:2f:49:54:fd:90:7c:93:31:4d:56:28:3b:
59:ef:50:91:b4:c8:53:15:96:fa:91:49:89:6d:b0:
6f:db:cd:62:c3:47:eb:cb:c5:d9:5b:d1:cc:2a:f8:
17:3d:a5:eb:b7:9e:88:8c:8e:2a:3e:7f:5d:be:a6:
1c:ff:95:b8:33:44:96:bf:0d:d1:55:35:fe:82:c1:
7e:f3:08:86:93:b1:47:23:ee:f4:c3:03:a8:ac:b5:
33:c1:21:d1:a9:27:05:78:8f:9a:37:0b:6e:17:a8:
bf:ba:20:81:43:c4:fa:39:19:d2:e9:46:36:60:b5:
2e:dc:d2:a9:66:2d:cf:0e:e4:98:ac:07:85:9f:cc:
f6:cf:7d:dd:24:e9:ce:d4:77:c4:10:52:d0:f0:4e:
75:ba:1c:92:39:24:3d:f2:f9:12:0d:05:3c:88:d7:
c5:21:d4:13:98:90:60:1f:48:d6:79:0e:c8:4b:57:
68:92:92:7c:35:19:96:b6:ba:d0:dc:03:8d:99:b0:
04:ba:b0:a9:c4:d1:4d:76:d8:c1:cc:4c:ea:99:ad:
80:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:DC:84:A0:3E:13:97:E1:DC:50:A8:63:F9:08:A5:F6:A2:3E:05:E3
X509v3 Authority Key Identifier:
keyid:00:7E:6B:5A:A4:37:D3:69:31:51:50:2A:21:14:96:E3:7D:4A:E2:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AH5rWqQ302kxUVAqIRSW431K4sU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/518fab-7606-4832-aa66-5a8c67842389/1/AH5rWqQ302kxUVAqIRSW431K4sU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/518fab-7606-4832-aa66-5a8c67842389/1/AH5rWqQ302kxUVAqIRSW431K4sU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:67:cf:19:ea:ab:c4:09:f7:c5:ea:20:e2:02:52:10:e9:96:
03:95:c2:3f:2b:c0:ef:b7:16:e9:2b:57:de:51:83:0a:2a:9e:
7b:6a:a0:8e:d7:2a:df:a1:15:5d:4f:ac:8a:7b:fb:9f:bd:bc:
3f:1b:2d:52:49:74:0d:62:67:89:cc:9f:06:6b:11:53:6d:fa:
32:1f:57:b2:a3:e1:7b:83:e0:2b:16:f0:d0:46:41:3b:d2:1b:
00:a5:6b:a1:eb:07:0f:f7:cb:2c:7e:31:ed:54:d6:8c:4f:50:
92:06:33:79:88:cf:6e:68:0b:6b:ce:00:42:e9:43:c8:d0:54:
19:16:58:e2:8b:46:a8:68:25:47:e2:8a:e8:c3:f3:0e:1c:7d:
93:92:31:f4:89:ba:48:7f:4e:8e:33:ee:8b:8b:1e:97:50:0c:
5c:7b:68:86:aa:58:5d:cd:c1:b7:63:62:fe:f6:29:af:09:d2:
51:6c:0b:e5:b9:39:c0:a8:be:ff:18:ea:d8:66:91:d7:4b:d0:
59:37:5f:88:9c:e9:90:b0:23:c7:ec:57:ed:c4:16:16:14:72:
ad:42:1b:14:b1:b7:c1:7d:e3:ef:04:76:05:14:4e:3b:0b:09:
8b:6d:76:ef:4a:01:02:36:30:b8:b2:ae:3c:3d:61:72:11:90:
ca:bc:9a:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:02:33 2025 by rpki-client