Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/12349e-5282-472a-ae52-2a06223623e0/1/a5LPM5DKpYeedZcpzZAIxuylWic.mft
File: a5LPM5DKpYeedZcpzZAIxuylWic.mft (raw, json)
Hash identifier: gxldejPSdABZpPfJXTmBRg/7qVlwYwU3f/HdQlarPFk=
Subject key identifier: A3:0B:FE:69:6A:3F:30:E9:8E:E1:D6:A9:87:F8:B1:CD:B4:09:A1:EF
Authority key identifier: 6B:92:CF:33:90:CA:A5:87:9E:75:97:29:CD:90:08:C6:EC:A5:5A:27
Certificate issuer: /CN=6b92cf3390caa5879e759729cd9008c6eca55a27
Certificate serial: 0199FD6B27F1F949DC089985EF1CE7690F25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a5LPM5DKpYeedZcpzZAIxuylWic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/12349e-5282-472a-ae52-2a06223623e0/1/a5LPM5DKpYeedZcpzZAIxuylWic.mft
Manifest number: 0711
Signing time: Sun 19 Oct 2025 17:01:22 +0000
Manifest this update: Sun 19 Oct 2025 17:01:22 +0000
Manifest next update: Mon 20 Oct 2025 17:01:22 +0000
Files and hashes: 1: FXli7IVxfRti4qt1ad27nRecqaM.roa (hash: u1NhxzgiSWTpvPzqFkEG54wTsIn/+oZByZ4cbRuTRXA=)
2: H4J_7ypAJ4hgBEB4fVDKFhXluIE.roa (hash: BtWyDIO/zf/0LXUY6FzALBn7OXPRy7qH7floDc9wE5g=)
3: a5LPM5DKpYeedZcpzZAIxuylWic.crl (hash: utsNTwW4IYAMxTOZalPLZCaNVWjTQEqM1XJ28AU0d5A=)
4: nHW9BLq4zRW7_GDpHKk8LDtfSmI.roa (hash: wgNVfFr1EUmSTQMiYZD3CFdfwE6KU5e+fnSwgZEt6SA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/12349e-5282-472a-ae52-2a06223623e0/1/a5LPM5DKpYeedZcpzZAIxuylWic.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/12349e-5282-472a-ae52-2a06223623e0/1/a5LPM5DKpYeedZcpzZAIxuylWic.mft
rsync://rpki.ripe.net/repository/DEFAULT/a5LPM5DKpYeedZcpzZAIxuylWic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6b:27:f1:f9:49:dc:08:99:85:ef:1c:e7:69:0f:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b92cf3390caa5879e759729cd9008c6eca55a27
Validity
Not Before: Oct 19 17:01:22 2025 GMT
Not After : Oct 20 17:01:22 2025 GMT
Subject: CN=a30bfe696a3f30e98ee1d6a987f8b1cdb409a1ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:84:0f:b6:fd:68:4a:67:7c:17:22:c5:c5:20:
b2:17:9e:bb:67:00:c8:1a:e6:e2:57:73:1a:53:40:
9e:c8:00:94:49:75:c4:ab:c6:ec:cc:80:63:1d:40:
e0:ae:ea:ec:7c:d2:8e:fb:de:a9:c0:80:36:d3:1d:
d5:8d:f5:b9:31:ed:42:33:9f:34:ea:ba:9b:38:cc:
5a:47:73:ef:8a:c5:3c:b5:ed:97:6a:4d:f4:9b:90:
7f:e9:30:0d:e1:f3:46:1b:40:08:f0:a9:c3:73:c8:
f2:d2:26:5c:fc:a1:0e:8f:1c:f6:3e:8d:48:09:78:
97:6f:59:53:71:0c:38:a3:41:27:40:db:4d:c1:86:
90:d8:5d:f5:31:27:7c:a5:e8:f8:f4:56:56:a5:ba:
8d:dc:12:12:9d:99:b5:90:74:59:d2:69:4f:3f:7b:
82:63:5d:aa:db:ff:93:5a:ad:7f:74:99:1b:6f:6e:
fa:f4:0a:6f:d9:c9:2b:34:39:16:5a:40:8e:e7:c8:
4e:52:06:1b:b2:df:14:21:86:a3:da:9c:1c:b1:9d:
43:f1:d0:a7:bd:04:4c:6b:e6:f2:4b:27:a6:c9:fa:
86:7e:b0:ef:30:0c:b1:fc:fd:60:5e:88:b3:ec:4b:
3d:58:71:0c:2c:fe:07:fc:cb:93:60:b9:15:29:8d:
6b:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:0B:FE:69:6A:3F:30:E9:8E:E1:D6:A9:87:F8:B1:CD:B4:09:A1:EF
X509v3 Authority Key Identifier:
keyid:6B:92:CF:33:90:CA:A5:87:9E:75:97:29:CD:90:08:C6:EC:A5:5A:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5LPM5DKpYeedZcpzZAIxuylWic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/12349e-5282-472a-ae52-2a06223623e0/1/a5LPM5DKpYeedZcpzZAIxuylWic.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/12349e-5282-472a-ae52-2a06223623e0/1/a5LPM5DKpYeedZcpzZAIxuylWic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:e0:55:3b:d0:ec:8b:f1:11:a1:6a:b5:d3:2e:be:56:49:5b:
e1:e7:9c:10:6f:d9:33:f5:a1:c5:c3:fc:cf:2c:20:ab:6a:d7:
c0:36:4b:6e:c3:81:1a:79:17:e9:0d:2f:05:84:42:a3:4e:7c:
db:99:59:5b:6d:fb:34:6b:51:4c:54:c5:bb:b6:c1:4f:e5:08:
1c:af:a3:bd:4e:c8:5e:d9:fc:62:c6:4c:b7:da:ec:c9:45:91:
d6:a0:2b:5c:4b:49:c7:8a:93:6e:be:bb:c6:d2:87:5e:82:f2:
61:4e:bf:21:26:d7:ba:b2:39:20:d9:02:0c:55:51:99:c2:60:
f0:61:e1:e1:e4:e4:77:12:8e:35:0f:ac:18:cf:b5:88:0c:d8:
83:71:59:4e:b5:12:1a:c2:35:40:32:ae:49:55:0a:99:de:c7:
c5:e2:e0:32:4f:39:06:c8:db:d1:a2:ce:23:be:83:6f:d2:f7:
53:1c:2e:d4:0e:4a:ff:4a:49:a3:eb:6b:18:5e:25:9f:25:ef:
11:9b:00:61:71:0f:28:bb:c7:cf:6b:9c:e3:b3:c9:de:bb:3f:
80:04:83:33:54:84:55:34:be:8f:98:49:fc:40:69:a9:7b:4c:
35:87:71:e1:87:c0:69:fc:ea:5c:55:93:43:bd:06:81:f0:55:
35:c6:15:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:12:40 2025 by rpki-client