Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/216802-e8f9-4cbc-9d65-b9252cf2cc47/1/5G6atHypH6EyVlhgvN2aEHugMuQ.mft
File: 5G6atHypH6EyVlhgvN2aEHugMuQ.mft (raw, json)
Hash identifier: E17MhinMeJbksmtUuENAa7M4kNROH2SeZLUjPtlSXx8=
Subject key identifier: 3A:AA:57:65:B7:1F:C6:DA:27:45:FF:E0:95:2E:5A:D8:4C:F4:35:EE
Authority key identifier: E4:6E:9A:B4:7C:A9:1F:A1:32:56:58:60:BC:DD:9A:10:7B:A0:32:E4
Certificate issuer: /CN=e46e9ab47ca91fa132565860bcdd9a107ba032e4
Certificate serial: 0199FBEB24A9B0267D21EF6953CA7B3DD930
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5G6atHypH6EyVlhgvN2aEHugMuQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/216802-e8f9-4cbc-9d65-b9252cf2cc47/1/5G6atHypH6EyVlhgvN2aEHugMuQ.mft
Manifest number: 0ACA
Signing time: Sun 19 Oct 2025 10:01:55 +0000
Manifest this update: Sun 19 Oct 2025 10:01:55 +0000
Manifest next update: Mon 20 Oct 2025 10:01:55 +0000
Files and hashes: 1: 5G6atHypH6EyVlhgvN2aEHugMuQ.crl (hash: Wniou63VP+y1nPMcTvNUVydNtZxaL/4B4VzCfxdQem0=)
2: ZMyt0wlwwtfEVeBGSMwWH5LMwOs.roa (hash: ZRcLJw84jWUkZxRHh71cpWt8gGeiHiTOOmsOGRDFxnY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/216802-e8f9-4cbc-9d65-b9252cf2cc47/1/5G6atHypH6EyVlhgvN2aEHugMuQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/216802-e8f9-4cbc-9d65-b9252cf2cc47/1/5G6atHypH6EyVlhgvN2aEHugMuQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/5G6atHypH6EyVlhgvN2aEHugMuQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:24:a9:b0:26:7d:21:ef:69:53:ca:7b:3d:d9:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e46e9ab47ca91fa132565860bcdd9a107ba032e4
Validity
Not Before: Oct 19 10:01:55 2025 GMT
Not After : Oct 20 10:01:55 2025 GMT
Subject: CN=3aaa5765b71fc6da2745ffe0952e5ad84cf435ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:b7:6e:ce:04:7f:ca:e6:59:c0:53:bc:80:14:
6c:30:df:8e:94:29:ce:cf:af:97:7a:dd:23:62:56:
d3:87:aa:49:ab:02:e8:b9:16:7c:c4:8a:1d:bf:93:
e3:6d:4e:1c:e3:36:6e:81:f5:4b:b9:4f:03:84:90:
4b:df:5e:de:4f:dd:d6:e0:4e:70:99:74:d2:44:b8:
a0:7c:c4:f8:64:1f:9f:da:f8:83:be:e0:a3:67:f0:
4b:27:4b:2b:5f:7b:eb:5f:7b:13:83:dd:1e:8a:35:
f1:84:09:6c:ee:df:bc:bf:28:5d:6d:28:df:f2:8f:
a0:0d:a0:d6:50:7f:78:63:93:ce:32:cf:22:47:5a:
3d:cd:c8:9c:a7:80:47:a4:73:9c:bb:f1:84:0f:3b:
2b:1c:77:d2:d6:8a:a4:81:32:44:84:05:2d:fe:a4:
c2:6b:d1:98:9b:6f:f4:ae:48:be:4e:d0:e7:77:4f:
96:57:3a:89:b2:43:89:f0:91:39:3d:5f:22:31:41:
4b:15:7f:fa:19:9c:23:ed:fd:f8:bf:2d:d8:d9:e3:
55:4a:70:52:3f:2a:65:0f:a1:da:d2:32:b3:23:80:
63:6b:91:db:27:32:0c:6b:bc:fb:c3:2d:e2:aa:36:
b1:46:6f:14:b6:4c:82:75:61:e8:1e:4c:1e:16:3d:
4b:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:AA:57:65:B7:1F:C6:DA:27:45:FF:E0:95:2E:5A:D8:4C:F4:35:EE
X509v3 Authority Key Identifier:
keyid:E4:6E:9A:B4:7C:A9:1F:A1:32:56:58:60:BC:DD:9A:10:7B:A0:32:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5G6atHypH6EyVlhgvN2aEHugMuQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/216802-e8f9-4cbc-9d65-b9252cf2cc47/1/5G6atHypH6EyVlhgvN2aEHugMuQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/216802-e8f9-4cbc-9d65-b9252cf2cc47/1/5G6atHypH6EyVlhgvN2aEHugMuQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:b3:b7:0a:73:7f:bd:80:46:bc:1a:1c:15:11:8e:14:5b:36:
5a:71:18:aa:b5:70:39:60:44:26:77:88:c8:b2:54:62:e8:ee:
7d:92:b4:ad:e8:bc:8c:83:1f:61:1a:26:cf:cd:bd:12:93:be:
92:d2:98:c2:94:62:47:ea:0e:56:72:e8:11:bd:e5:7a:60:83:
cf:e9:c2:6a:02:41:6a:8d:1c:4a:3b:95:fc:c1:61:47:b8:71:
51:63:05:b6:2a:2c:6f:25:d3:1f:d3:c5:fa:96:b7:81:60:73:
fa:70:9e:d7:ba:0e:15:c7:67:30:fb:f5:a5:53:6c:61:87:e1:
69:d3:93:05:9d:ac:87:cd:40:08:be:49:6c:18:c0:d2:ea:9f:
d3:81:59:2f:57:06:10:5a:27:dd:e0:46:7f:10:6c:32:f0:13:
bd:c7:ea:c8:cd:41:e3:1d:ca:05:69:7d:37:ee:f0:7a:56:1d:
4c:a7:fb:ee:32:67:da:89:1d:94:45:26:12:63:a9:85:77:db:
e0:5e:f8:03:77:54:e9:23:68:a8:00:4c:37:1b:6e:87:28:0b:
9b:8b:51:34:0e:22:0f:54:5f:71:33:3f:b6:7c:06:58:11:89:
c2:a7:ce:89:87:44:df:1c:91:11:3e:41:5d:78:d1:5b:40:f4:
ba:44:e2:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:32:00 2025 by rpki-client