Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/518fab-7606-4832-aa66-5a8c67842389/1/AH5rWqQ302kxUVAqIRSW431K4sU.mft
File: AH5rWqQ302kxUVAqIRSW431K4sU.mft (raw, json)
Hash identifier: Jp8pFouARLc1eJliU5ES/TSJoLJtbxGEyVnjGRhiRag=
Subject key identifier: 9C:80:66:E2:3A:F3:5E:97:5D:94:08:3E:E0:21:0F:B8:99:48:90:73
Authority key identifier: 00:7E:6B:5A:A4:37:D3:69:31:51:50:2A:21:14:96:E3:7D:4A:E2:C5
Certificate issuer: /CN=007e6b5aa437d3693151502a211496e37d4ae2c5
Certificate serial: 019A03354A317AB5CB88D217E8C4EDDFB37B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AH5rWqQ302kxUVAqIRSW431K4sU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/518fab-7606-4832-aa66-5a8c67842389/1/AH5rWqQ302kxUVAqIRSW431K4sU.mft
Manifest number: 1464
Signing time: Mon 20 Oct 2025 20:00:15 +0000
Manifest this update: Mon 20 Oct 2025 20:00:15 +0000
Manifest next update: Tue 21 Oct 2025 20:00:15 +0000
Files and hashes: 1: 6F_Q4XpRKgEexZcCv84M_kGGwx8.roa (hash: jzUe5knYI2NZSGwBtOwn1dJh+2wMTZvaI6KEnoCDN6M=)
2: AH5rWqQ302kxUVAqIRSW431K4sU.crl (hash: Ps728FLvUqKCGQ2yFnOKhbmEEdXNtHrp18IA7p/j2vc=)
3: Ry-o6BvHlNuOD_d14wdLVmhDsgM.roa (hash: S/jHrYJPbAAtdA+RZZOotd+GpMfWfmGdhS0b8Kc0V30=)
4: VFSqRzcGMZ3Y2JFZb1Fsblb27nQ.roa (hash: UUfcXkF0GWrqVSNu+3z9VDCb/uLRbXj4ZsTEe5POQ7M=)
5: W_b0Ax5Mpx_fhvv-92F8GttV04I.roa (hash: y/SVVGY3IuSmMubg1JbInzxD9q8qop1Ol37UDvpp3pE=)
6: gZrmTs3ukQIINjYb9akCKLL_iZM.roa (hash: WbSg2tywBgMqpLgEuUZPOKgd7CPp10c7QuJJvyuvaco=)
7: mV18Ah11BcP39CQhLtpf79pVug8.roa (hash: RGt06BrejPetx9+VOGQ2Y1/RTWPMTF5VhkkYrYGyW40=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/518fab-7606-4832-aa66-5a8c67842389/1/AH5rWqQ302kxUVAqIRSW431K4sU.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/518fab-7606-4832-aa66-5a8c67842389/1/AH5rWqQ302kxUVAqIRSW431K4sU.mft
rsync://rpki.ripe.net/repository/DEFAULT/AH5rWqQ302kxUVAqIRSW431K4sU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 20:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:03:35:4a:31:7a:b5:cb:88:d2:17:e8:c4:ed:df:b3:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=007e6b5aa437d3693151502a211496e37d4ae2c5
Validity
Not Before: Oct 20 20:00:15 2025 GMT
Not After : Oct 21 20:00:15 2025 GMT
Subject: CN=9c8066e23af35e975d94083ee0210fb899489073
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:9e:3c:58:32:1d:2c:b3:88:a0:28:97:b3:79:
45:e4:c3:38:e9:b1:6b:26:9e:95:10:e8:1b:4c:8e:
88:61:dc:4e:27:22:0a:6a:bc:5f:9f:38:3d:5e:5b:
bf:af:cc:ae:f4:3c:4e:83:66:8f:6f:0b:9d:56:4c:
a2:b5:15:2c:54:b9:9b:7e:91:67:23:39:48:02:e4:
7c:e6:1a:27:0a:41:ee:54:8f:e4:be:10:20:f0:72:
75:82:ac:23:f2:6c:43:14:80:ab:3c:a0:17:5b:8a:
8a:6f:02:fe:e8:96:0a:f6:f2:c5:b3:0a:a3:d2:89:
73:7a:6e:5b:bb:fc:b4:cf:fe:21:d0:1c:33:8e:95:
26:5a:1e:aa:81:4e:c6:bb:81:e4:a8:ce:17:5d:84:
b4:96:ef:ee:2e:7f:80:48:7b:bf:e3:41:c2:2c:8e:
ac:bf:d2:c3:e4:28:52:8b:5f:56:7a:af:49:84:38:
dd:0e:e8:b0:63:d6:34:96:27:0a:e9:48:1a:55:93:
7b:1a:4f:e6:e5:7f:b5:85:b6:05:de:a4:71:ba:0b:
4f:88:f9:22:f4:f1:e8:5a:d5:c7:cc:bd:e1:85:ee:
d2:0c:30:c7:34:08:da:77:0e:59:2f:b4:2a:18:be:
05:b3:7a:ea:b7:35:85:e1:4c:37:63:0e:b0:87:fa:
07:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:80:66:E2:3A:F3:5E:97:5D:94:08:3E:E0:21:0F:B8:99:48:90:73
X509v3 Authority Key Identifier:
keyid:00:7E:6B:5A:A4:37:D3:69:31:51:50:2A:21:14:96:E3:7D:4A:E2:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AH5rWqQ302kxUVAqIRSW431K4sU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/518fab-7606-4832-aa66-5a8c67842389/1/AH5rWqQ302kxUVAqIRSW431K4sU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/518fab-7606-4832-aa66-5a8c67842389/1/AH5rWqQ302kxUVAqIRSW431K4sU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:b4:24:c2:e7:80:fc:a1:76:c6:ae:54:fd:b0:a2:cf:77:a5:
67:86:d3:55:72:3b:c8:83:96:31:96:67:c4:74:05:78:14:99:
ed:f4:19:d3:8d:1c:48:da:e3:0e:c4:ab:8f:15:48:50:57:50:
a6:b5:04:85:6a:4e:b3:01:60:45:ba:79:e0:c8:58:7e:c6:ec:
72:15:8e:e5:e0:cf:60:55:9f:31:0a:57:a9:fd:a9:bb:0b:66:
2c:b9:39:ef:a7:42:e3:4a:e7:54:9d:2a:db:11:b0:e8:e2:ca:
9e:7b:46:da:49:83:53:a3:ff:20:08:a9:4e:89:58:07:da:71:
a3:de:af:5a:0c:1a:2f:b1:63:29:7e:35:2c:94:e1:85:8e:89:
e0:f7:ef:52:00:94:9e:d4:9f:f6:32:4c:b3:4c:5d:9b:99:a0:
fa:ea:db:68:e6:17:9e:49:b5:03:c4:5b:1a:1e:9e:c8:82:36:
6b:93:93:fc:7e:9d:0c:7b:16:56:61:ea:66:8d:db:ae:3f:6d:
e3:4b:46:24:d9:b6:c8:36:b2:34:9c:6a:10:d7:af:56:c3:de:
d8:46:61:e1:c8:65:94:03:9b:0d:bb:83:8d:e4:10:86:e0:6c:
e6:ab:b6:2f:a0:60:f8:54:48:39:4a:dc:ab:03:62:0a:88:c7:
d9:9f:40:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 02:57:08 2025 by rpki-client