Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/c129ab-79a7-4bc0-9a3b-41efeace7a71/1/A5aaE8t8Nxi9NxdxJijnqxszsKU.mft
File: A5aaE8t8Nxi9NxdxJijnqxszsKU.mft (raw, json)
Hash identifier: H8gwccotm2fqQjN2TgFlVY82c5stfEYid2jYwtcXA6Y=
Subject key identifier: 5D:06:38:B6:5D:DA:BF:8C:6A:78:AE:69:D3:82:15:03:11:74:99:C0
Authority key identifier: 03:96:9A:13:CB:7C:37:18:BD:37:17:71:26:28:E7:AB:1B:33:B0:A5
Certificate issuer: /CN=03969a13cb7c3718bd3717712628e7ab1b33b0a5
Certificate serial: 0199FCC6B57EDA5DB9123D25433E271D2017
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A5aaE8t8Nxi9NxdxJijnqxszsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/c129ab-79a7-4bc0-9a3b-41efeace7a71/1/A5aaE8t8Nxi9NxdxJijnqxszsKU.mft
Manifest number: 0B10
Signing time: Sun 19 Oct 2025 14:01:44 +0000
Manifest this update: Sun 19 Oct 2025 14:01:44 +0000
Manifest next update: Mon 20 Oct 2025 14:01:44 +0000
Files and hashes: 1: A5aaE8t8Nxi9NxdxJijnqxszsKU.crl (hash: +8XlkcLN7CQeVdEE9bLYfBvu4DmpM1KHyRMZ8A2E52g=)
2: MK6Wt26ubZnx8uPGofYFajPlEuM.roa (hash: pNoc6zxMnN0pQF1kB42eiM3UzngOuAJOl2Ggh4EWIBo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/c129ab-79a7-4bc0-9a3b-41efeace7a71/1/A5aaE8t8Nxi9NxdxJijnqxszsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/c129ab-79a7-4bc0-9a3b-41efeace7a71/1/A5aaE8t8Nxi9NxdxJijnqxszsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/A5aaE8t8Nxi9NxdxJijnqxszsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:b5:7e:da:5d:b9:12:3d:25:43:3e:27:1d:20:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03969a13cb7c3718bd3717712628e7ab1b33b0a5
Validity
Not Before: Oct 19 14:01:44 2025 GMT
Not After : Oct 20 14:01:44 2025 GMT
Subject: CN=5d0638b65ddabf8c6a78ae69d3821503117499c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:c3:c6:65:da:04:cf:0c:1b:20:08:2c:ae:ca:
89:33:cd:1a:6f:a7:f3:f6:91:8f:08:28:27:79:6d:
5b:d8:e5:9a:da:4b:7c:fe:ce:28:e9:67:c7:72:75:
14:9a:07:1b:de:b2:e5:00:3a:7b:86:13:2b:fe:44:
8f:9d:9e:8f:2d:ce:90:76:b1:f0:7d:20:2f:37:b1:
dd:84:4a:ff:79:04:21:ea:a9:28:b6:b6:fd:41:8a:
24:c4:b4:c1:e6:b8:44:53:3f:93:e6:bf:07:31:31:
b7:cb:41:da:42:e2:f5:cf:58:0d:c3:b2:ea:c2:aa:
68:58:54:9a:eb:7b:d5:32:41:95:cc:6d:39:27:4e:
06:57:ed:b4:c2:74:2b:e7:79:db:0e:bc:c3:60:2c:
9c:0a:69:a9:38:3a:06:7a:a3:da:46:44:46:0b:b7:
ef:44:e1:89:f5:98:f4:e2:c6:8e:ab:f0:b0:c3:45:
21:f8:f5:8e:94:bb:91:83:15:02:a2:61:0c:b7:4a:
ce:ee:de:16:78:ff:eb:08:b1:0a:da:ac:df:35:e5:
04:3a:14:3e:d6:ae:31:fa:d2:39:5b:e0:e2:60:57:
d1:fe:8b:76:c2:5d:c9:52:42:ab:b5:5a:1e:0e:a8:
18:1f:f9:e7:0d:6c:92:fa:63:77:1c:15:fa:52:e0:
0e:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:06:38:B6:5D:DA:BF:8C:6A:78:AE:69:D3:82:15:03:11:74:99:C0
X509v3 Authority Key Identifier:
keyid:03:96:9A:13:CB:7C:37:18:BD:37:17:71:26:28:E7:AB:1B:33:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A5aaE8t8Nxi9NxdxJijnqxszsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/c129ab-79a7-4bc0-9a3b-41efeace7a71/1/A5aaE8t8Nxi9NxdxJijnqxszsKU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/c129ab-79a7-4bc0-9a3b-41efeace7a71/1/A5aaE8t8Nxi9NxdxJijnqxszsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:0e:7b:bd:32:48:cd:49:5f:f0:86:2f:86:07:d7:59:fc:95:
f3:a1:e6:04:99:eb:8c:e0:6e:57:6b:d3:38:90:2b:95:14:50:
a7:b3:ce:37:8a:28:f3:07:d5:2b:71:b3:ad:66:c3:f2:89:18:
39:38:59:16:54:d4:27:1f:d1:dc:fe:83:12:63:5c:aa:4a:1d:
5c:11:fa:fe:b2:a2:e4:e7:9d:0d:5f:45:24:e8:fc:ba:0f:62:
f7:db:dc:7f:20:9e:60:e4:25:0f:9f:91:04:4f:df:c3:be:f4:
4d:d3:38:fc:7b:c2:7c:f7:9b:e1:d5:5a:c2:0a:db:80:ba:9a:
c4:da:34:0d:cf:17:9b:a1:93:92:e0:0a:7a:0e:c5:60:7a:8f:
a1:de:7a:68:ee:12:bf:49:d7:79:6d:42:3f:f1:83:b9:d8:22:
8a:be:21:1c:e7:78:a5:1d:cd:83:96:6c:9c:34:f9:68:3a:a3:
fd:66:3e:06:9e:15:9d:5b:2b:e0:46:4c:fe:db:1b:c5:ff:26:
de:51:16:a3:74:14:90:17:48:6e:e6:05:d3:ee:42:ca:d3:6c:
13:8c:56:b1:bc:66:27:cc:1a:60:39:17:3e:16:21:68:2f:4a:
bd:87:d0:cc:46:16:ce:f5:fb:a6:c3:17:7b:54:2e:c8:68:e4:
5e:a2:37:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:23:26 2025 by rpki-client