Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/5aGzZVL52sy5KsXDtEtCbWQ3SeI.mft
File: 5aGzZVL52sy5KsXDtEtCbWQ3SeI.mft (raw, json)
Hash identifier: oGFD3m9FFEs72Vq9aYORJGkRWtQAey16YaBF7rp7x/s=
Subject key identifier: 79:71:4F:5B:35:6E:28:7D:E6:71:92:D2:BD:CA:F3:A7:72:AF:E4:D2
Authority key identifier: E5:A1:B3:65:52:F9:DA:CC:B9:2A:C5:C3:B4:4B:42:6D:64:37:49:E2
Certificate issuer: /CN=e5a1b36552f9daccb92ac5c3b44b426d643749e2
Certificate serial: 0199FC8F6029ED45B6D757AD71412CCD7332
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5aGzZVL52sy5KsXDtEtCbWQ3SeI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/5aGzZVL52sy5KsXDtEtCbWQ3SeI.mft
Manifest number: 16ED
Signing time: Sun 19 Oct 2025 13:01:18 +0000
Manifest this update: Sun 19 Oct 2025 13:01:18 +0000
Manifest next update: Mon 20 Oct 2025 13:01:18 +0000
Files and hashes: 1: 5aGzZVL52sy5KsXDtEtCbWQ3SeI.crl (hash: Xj49DpXpNzm8vmL+vWVj7HKocApIawjha4IQ/SrqQPA=)
2: Q5lprEAu1AjZg8eC8e9vCRTQc5c.roa (hash: 1TVaYcq6pwwmReP0rlqvmkebRDkja4y3qu5GJXEAYFk=)
3: ScDiG1bEMg_iYAnwZ5RqZ9iuBfE.roa (hash: M8oZJ8Uj/JF9chZaxOYRuKYLCgT5+KWo335qmSJiUXs=)
4: _jwv_lcEjeP6obJDvR7tAaQUU-k.roa (hash: 5K6HFH8TXSLWVxpMWf5RIreFCOahhdZCzVwIY3yAflg=)
5: a3iaEBF86wbe5VjQTp-OMfHJc1E.roa (hash: nuf4ev5fGHCC4PXZAB5L19yGP986oYjP7JfQB1/fdXU=)
6: a9_bN0F2h_Kug5sgN-Kpf5AuF0Y.roa (hash: f6TkQWvmEWMglWzfpXp6gmToVC7S2f1cCbDqMTnyBzg=)
7: lihzuQoSb7FSiRKzRwb1us4H1SM.roa (hash: KHb+Gcf8LKwRqmsQV3Dwa1dFj1b8D+2+U6h0xyQG13I=)
8: qi8JXs2yo200PkF0ybkWzT5gLbA.roa (hash: rDwlWPK/DQ56zjNjEs53TpTRvG/Y0OQ9Sl2iycPDuH4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/5aGzZVL52sy5KsXDtEtCbWQ3SeI.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/5aGzZVL52sy5KsXDtEtCbWQ3SeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/5aGzZVL52sy5KsXDtEtCbWQ3SeI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:60:29:ed:45:b6:d7:57:ad:71:41:2c:cd:73:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5a1b36552f9daccb92ac5c3b44b426d643749e2
Validity
Not Before: Oct 19 13:01:18 2025 GMT
Not After : Oct 20 13:01:18 2025 GMT
Subject: CN=79714f5b356e287de67192d2bdcaf3a772afe4d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:58:b9:0b:db:02:c8:21:a6:00:78:c7:a7:3c:
e4:89:59:19:9f:ed:5d:fe:64:fc:da:56:35:15:66:
01:f3:a3:21:fe:93:81:8b:37:56:85:ad:24:86:25:
44:7c:51:11:b4:89:ef:51:f2:1d:f9:b4:56:60:91:
30:1b:c3:04:43:ef:e8:8c:1d:bd:d3:98:c6:9c:91:
d4:1d:4d:ea:c0:63:0f:1b:06:6e:5d:c2:d3:aa:07:
0d:6a:b9:2b:d3:de:31:eb:41:56:24:0a:53:cc:47:
ac:25:8c:cd:3e:9e:09:1e:8b:12:f6:15:df:90:8f:
c6:c0:81:65:0b:7a:ab:07:89:cd:9d:1f:3a:63:c9:
16:79:7e:27:60:09:2b:76:0b:b3:66:b7:b2:7f:73:
8c:7e:25:62:82:06:3f:39:7b:5f:64:42:af:8f:4d:
f8:4c:4e:71:2d:73:ca:87:2d:61:1c:15:47:d0:44:
12:25:97:2f:1a:b1:3b:7b:31:5b:b9:64:38:c2:cc:
84:86:ad:3a:09:b2:18:ce:24:5f:b6:a1:a9:87:3e:
ab:9b:18:6c:62:e5:44:49:7e:75:c7:bd:9c:82:44:
33:e8:77:6a:ca:c7:06:46:7f:54:30:e3:94:cb:d5:
b1:54:3a:4d:e4:e3:50:ee:c6:03:e9:84:e7:68:b3:
99:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:71:4F:5B:35:6E:28:7D:E6:71:92:D2:BD:CA:F3:A7:72:AF:E4:D2
X509v3 Authority Key Identifier:
keyid:E5:A1:B3:65:52:F9:DA:CC:B9:2A:C5:C3:B4:4B:42:6D:64:37:49:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5aGzZVL52sy5KsXDtEtCbWQ3SeI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/5aGzZVL52sy5KsXDtEtCbWQ3SeI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/5aGzZVL52sy5KsXDtEtCbWQ3SeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:9c:75:f3:90:f4:e2:ee:18:cf:da:d0:b7:8a:da:34:2c:84:
ee:3d:1a:0f:8c:1f:6b:00:6a:4b:d4:81:d1:da:95:02:5d:cc:
49:50:0d:03:3b:a6:1a:38:05:e8:fc:0d:33:03:63:81:b1:06:
02:55:b7:ce:a3:e5:de:b4:a6:17:c6:9b:75:09:c7:2e:e2:35:
0b:26:ce:d0:d5:eb:bf:c3:d6:8d:a2:b4:8b:29:ff:d8:c5:24:
e6:f3:57:15:ba:fd:35:41:85:2a:11:66:48:54:e2:e2:73:55:
d8:04:49:81:8e:02:67:4d:57:10:27:63:73:a3:56:6a:b6:d1:
8b:4a:db:72:d1:96:ec:21:42:fa:65:25:b2:bd:51:ed:e8:6a:
1d:4c:61:53:a2:77:77:df:38:24:81:7f:1e:da:b0:e5:0e:2f:
a1:41:fe:5b:e2:e0:fa:fd:05:b9:41:69:8e:97:03:c3:f5:20:
42:bf:10:62:d2:f2:7f:eb:ea:fd:09:1f:34:62:3e:0f:e9:5f:
59:34:4e:a3:47:82:cf:20:c3:ca:cf:61:48:ae:92:96:0e:48:
65:11:1a:49:6c:6c:e1:04:37:1a:a7:f5:d2:8d:81:2d:8b:6c:
5d:7f:5c:1f:b4:31:1f:cd:07:6b:8d:50:78:ab:a8:71:98:9c:
d8:d7:74:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:05:12 2025 by rpki-client