Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/2cf88f-2c6a-4b48-a25e-4a8b6b4082b1/1/A5sBNT5Ro6h-g1ljvYgz7YGFPXc.mft
File: A5sBNT5Ro6h-g1ljvYgz7YGFPXc.mft (raw, json)
Hash identifier: eJvFRFhfJjbR0pdOa/pj8OGScLKpmlBncDMEJB5bMKw=
Subject key identifier: 88:7C:1A:E4:D6:5C:3D:8B:55:5A:DD:58:0A:AD:47:78:2F:B9:0E:B2
Authority key identifier: 03:9B:01:35:3E:51:A3:A8:7E:83:59:63:BD:88:33:ED:81:85:3D:77
Certificate issuer: /CN=039b01353e51a3a87e835963bd8833ed81853d77
Certificate serial: 0199FF228D2CEB36A7AE968C7E20FF064D08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A5sBNT5Ro6h-g1ljvYgz7YGFPXc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/2cf88f-2c6a-4b48-a25e-4a8b6b4082b1/1/A5sBNT5Ro6h-g1ljvYgz7YGFPXc.mft
Manifest number: 16E5
Signing time: Mon 20 Oct 2025 01:01:18 +0000
Manifest this update: Mon 20 Oct 2025 01:01:18 +0000
Manifest next update: Tue 21 Oct 2025 01:01:18 +0000
Files and hashes: 1: A5sBNT5Ro6h-g1ljvYgz7YGFPXc.crl (hash: 8d3b5y5vCiynYO/jLjnHpGS/iJYmecqKdI/Pqly7IiU=)
2: aFAF2a0pf2_iQW_Ah5PtSVGIIsU.roa (hash: CRoJAvxL/AEhIjj3BGa3AOSm/IAStthRp+t6FhfWlZc=)
3: g0yUXdYSuBEU7wpjF_M-dIueuPE.roa (hash: PIV5IbeiUmm5gi+hdOXD1voi9O/jmaGDnpkEJZ2+Rwg=)
4: kLgY3X5leR0VtUr8VPTZGFKR1kc.roa (hash: LBSLrR+c9iEdXN69yxUzikKKOnVtulDFWy14eJ7VP9g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/2cf88f-2c6a-4b48-a25e-4a8b6b4082b1/1/A5sBNT5Ro6h-g1ljvYgz7YGFPXc.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/2cf88f-2c6a-4b48-a25e-4a8b6b4082b1/1/A5sBNT5Ro6h-g1ljvYgz7YGFPXc.mft
rsync://rpki.ripe.net/repository/DEFAULT/A5sBNT5Ro6h-g1ljvYgz7YGFPXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:22:8d:2c:eb:36:a7:ae:96:8c:7e:20:ff:06:4d:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=039b01353e51a3a87e835963bd8833ed81853d77
Validity
Not Before: Oct 20 01:01:18 2025 GMT
Not After : Oct 21 01:01:18 2025 GMT
Subject: CN=887c1ae4d65c3d8b555add580aad47782fb90eb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:55:7e:89:e9:0d:05:3c:73:3e:ed:44:33:ef:
cc:7b:72:13:9b:7a:a1:a8:a1:35:c1:38:7f:af:db:
00:57:5b:3e:af:a5:1f:1b:f7:8b:c3:0d:2b:9b:1d:
0c:e9:95:de:98:bc:3d:53:cd:a9:43:ca:2c:f1:2c:
aa:9e:60:22:5a:71:ce:ca:5e:33:7a:ba:51:54:b5:
0c:8d:56:02:f1:14:c3:86:3e:dd:2f:64:09:7a:4b:
e6:aa:3d:6e:45:d1:52:61:e9:26:c4:1b:17:80:79:
90:49:00:39:91:a1:01:33:1b:94:33:df:41:1f:c5:
34:e9:c8:c7:f6:72:d7:09:53:cc:bc:b1:1d:a1:35:
43:35:43:33:66:98:7f:58:30:a3:70:c7:97:03:42:
49:6d:0d:6d:9f:5d:a1:22:f4:bc:6c:5d:0c:6d:c4:
ff:ac:c9:4e:25:7d:ff:15:29:15:cd:6a:e6:0a:03:
87:a9:f2:d4:cf:a4:e8:31:e2:99:01:87:0d:cb:0c:
af:7b:22:dd:7b:78:85:89:2e:b5:50:aa:91:c3:9f:
d1:31:ba:23:32:80:1f:7d:35:16:79:db:66:bb:bf:
3e:bd:b2:2e:98:41:fd:88:13:62:0a:72:64:3f:45:
d2:6e:0f:7e:85:a2:5b:4d:c0:08:81:b9:c7:69:ab:
87:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:7C:1A:E4:D6:5C:3D:8B:55:5A:DD:58:0A:AD:47:78:2F:B9:0E:B2
X509v3 Authority Key Identifier:
keyid:03:9B:01:35:3E:51:A3:A8:7E:83:59:63:BD:88:33:ED:81:85:3D:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A5sBNT5Ro6h-g1ljvYgz7YGFPXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/2cf88f-2c6a-4b48-a25e-4a8b6b4082b1/1/A5sBNT5Ro6h-g1ljvYgz7YGFPXc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/2cf88f-2c6a-4b48-a25e-4a8b6b4082b1/1/A5sBNT5Ro6h-g1ljvYgz7YGFPXc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:da:e5:24:98:f4:06:3e:ad:99:12:a2:2b:eb:15:3b:40:ff:
8b:75:ae:56:78:a8:21:87:ac:5d:a1:f1:97:09:2e:de:81:45:
1a:24:a0:97:6f:fb:cc:3a:a2:97:54:2e:c7:f4:7b:62:ad:8a:
8b:08:2c:19:93:e1:3c:ca:f8:31:b1:81:c9:5b:d0:e9:21:ea:
bc:8c:b0:f3:dc:68:42:e6:90:e8:50:7a:b3:a3:4c:2b:73:cb:
21:06:41:8b:07:a3:7e:b7:89:93:2b:59:12:79:37:33:22:f2:
06:80:2d:33:13:41:59:92:1f:7a:09:34:e4:7e:c5:44:44:f5:
0c:41:a8:8e:42:2d:c8:86:5a:a5:74:ae:ee:1a:f9:8a:20:71:
8f:02:ff:b3:42:df:4e:f6:b5:ca:96:d8:83:6c:82:c2:83:ca:
9a:de:f3:5e:74:dc:9a:9f:7b:d9:a4:53:b9:3e:eb:1d:ad:9c:
bc:9a:f3:32:18:5e:b6:25:8b:e3:9c:95:52:a1:b3:6d:88:09:
16:32:cc:83:e4:3f:d7:26:8b:8c:3b:ae:9a:4a:72:c6:38:2f:
23:c1:c5:ad:44:c3:b1:6b:04:0f:ca:1c:1c:c3:8a:7a:c1:31:
3c:8b:f3:c1:de:0c:bd:04:c2:c9:55:60:d0:cf:a4:55:5f:96:
db:cc:5b:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:55:02 2025 by rpki-client