Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/aebc77-2b81-40cf-8aad-26a38dc8670b/1/A554tFtfWVlOuBHzrGkGKWfyjHc.mft
File: A554tFtfWVlOuBHzrGkGKWfyjHc.mft (raw, json)
Hash identifier: CWYWUDlbhIjmSR49jnVfa8D4U1Xnl0va5Ylvn98B7Bc=
Subject key identifier: D8:A8:C7:13:50:C9:7A:13:88:DE:21:D9:7C:26:93:5B:60:A5:83:32
Authority key identifier: 03:9E:78:B4:5B:5F:59:59:4E:B8:11:F3:AC:69:06:29:67:F2:8C:77
Certificate issuer: /CN=039e78b45b5f59594eb811f3ac69062967f28c77
Certificate serial: 0199FBEAB18E31821B2E16FC7FE6F2964BDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A554tFtfWVlOuBHzrGkGKWfyjHc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/aebc77-2b81-40cf-8aad-26a38dc8670b/1/A554tFtfWVlOuBHzrGkGKWfyjHc.mft
Manifest number: 0556
Signing time: Sun 19 Oct 2025 10:01:26 +0000
Manifest this update: Sun 19 Oct 2025 10:01:26 +0000
Manifest next update: Mon 20 Oct 2025 10:01:26 +0000
Files and hashes: 1: 7h2grz8OfZg3_f3qnvjsQOWeT0M.roa (hash: F0gJrE4+UT2zrGrF6oXGx/pjZ35hmL1zwnN5iPSHMCs=)
2: A554tFtfWVlOuBHzrGkGKWfyjHc.crl (hash: MkoeUSmuiIMRo30LyBOJde6ANBP70DEgyGuaWC45nk8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/aebc77-2b81-40cf-8aad-26a38dc8670b/1/A554tFtfWVlOuBHzrGkGKWfyjHc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/aebc77-2b81-40cf-8aad-26a38dc8670b/1/A554tFtfWVlOuBHzrGkGKWfyjHc.mft
rsync://rpki.ripe.net/repository/DEFAULT/A554tFtfWVlOuBHzrGkGKWfyjHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:b1:8e:31:82:1b:2e:16:fc:7f:e6:f2:96:4b:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=039e78b45b5f59594eb811f3ac69062967f28c77
Validity
Not Before: Oct 19 10:01:26 2025 GMT
Not After : Oct 20 10:01:26 2025 GMT
Subject: CN=d8a8c71350c97a1388de21d97c26935b60a58332
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:09:64:74:18:b9:bd:89:4b:62:b4:1c:5d:f4:
74:7f:00:1f:be:3a:d8:7d:53:6a:a7:b4:d5:94:f8:
c2:37:74:a9:98:75:fb:6c:d9:19:8f:81:08:14:53:
d0:bc:f5:19:31:65:33:6e:6b:d9:29:c2:f6:c6:cd:
5c:ed:dd:a3:a7:a4:1c:89:55:14:69:50:fa:db:fb:
52:8e:bc:72:78:de:b7:3e:61:ce:9c:e2:e7:31:21:
62:c8:e5:5d:8d:b6:0c:02:09:7c:b4:67:f5:1a:60:
0a:66:1c:b7:f4:4e:83:59:3c:b6:5a:b5:21:a4:a4:
30:32:ec:53:e7:90:37:b3:63:d2:67:49:42:02:3b:
2f:d5:8a:3c:be:df:b3:be:0c:d0:95:18:2d:26:d7:
fc:2c:cf:0c:88:ad:f4:7a:95:90:7e:c9:c3:bf:3c:
24:4c:2e:4d:b2:16:40:fc:f6:c9:21:26:af:ca:12:
43:72:28:71:55:59:2b:ea:ea:c8:d6:ab:5c:03:05:
85:e4:24:3c:5f:69:6c:f3:0e:2a:26:bc:e6:63:cd:
8e:43:c4:57:76:5d:19:f8:66:c4:ca:07:48:69:98:
28:ba:77:40:3b:4f:e6:58:d8:b4:91:8c:bf:a0:38:
fa:b7:dc:68:05:3c:76:43:93:18:a2:43:32:d3:14:
6b:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:A8:C7:13:50:C9:7A:13:88:DE:21:D9:7C:26:93:5B:60:A5:83:32
X509v3 Authority Key Identifier:
keyid:03:9E:78:B4:5B:5F:59:59:4E:B8:11:F3:AC:69:06:29:67:F2:8C:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A554tFtfWVlOuBHzrGkGKWfyjHc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/aebc77-2b81-40cf-8aad-26a38dc8670b/1/A554tFtfWVlOuBHzrGkGKWfyjHc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/aebc77-2b81-40cf-8aad-26a38dc8670b/1/A554tFtfWVlOuBHzrGkGKWfyjHc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:cb:b3:9f:40:4d:3d:a1:f5:31:cd:2d:f7:04:fa:28:47:46:
92:85:6f:ae:b9:e0:80:e7:27:58:3f:e8:14:1b:18:d1:5f:80:
99:72:0a:5e:44:c1:bb:77:07:69:d5:4c:d3:12:c9:c2:37:dd:
28:8d:d2:22:23:af:08:c7:4c:18:56:ec:bf:7b:62:69:96:a7:
30:bb:49:2f:85:04:35:18:4f:b2:7d:1d:a2:68:eb:ab:20:a6:
4d:b2:6c:4c:25:24:da:eb:3a:1c:93:38:f2:82:7b:f0:79:44:
c8:ba:62:f0:d1:bf:6b:35:87:92:a2:e9:03:1e:09:35:22:7e:
64:d5:a7:55:28:92:e9:1a:30:ca:3f:34:ca:92:af:1d:87:3d:
99:57:7c:69:39:74:20:17:6d:ad:3d:c2:13:f7:fd:4a:78:de:
cb:63:f2:c6:bf:79:82:5c:b5:73:28:0b:ac:41:13:46:ac:13:
78:42:86:77:87:c4:7c:bc:0c:c8:ef:8d:5a:26:fc:93:a8:95:
5c:d0:75:48:42:70:05:e7:e5:60:5a:64:79:03:66:c3:03:1b:
a4:ca:9d:76:ab:f6:49:9a:ce:a3:12:a3:b9:8a:c8:b3:45:79:
59:fb:24:fe:7f:77:fe:e8:b5:61:64:bb:e8:00:28:39:dc:aa:
30:73:08:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:06:17 2025 by rpki-client