Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/12349e-5282-472a-ae52-2a06223623e0/1/a5LPM5DKpYeedZcpzZAIxuylWic.mft
File: a5LPM5DKpYeedZcpzZAIxuylWic.mft (raw, json)
Hash identifier: VewDDBhGUJmGsrvigKpxr0jofw2O+uJJ8KbrT0GTYEg=
Subject key identifier: 3E:D0:A7:AD:5C:C0:67:D7:C8:97:7F:AA:BB:05:C7:4F:09:77:CD:D6
Authority key identifier: 6B:92:CF:33:90:CA:A5:87:9E:75:97:29:CD:90:08:C6:EC:A5:5A:27
Certificate issuer: /CN=6b92cf3390caa5879e759729cd9008c6eca55a27
Certificate serial: 0198D515E780326845085B80E4F8FED7F622
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a5LPM5DKpYeedZcpzZAIxuylWic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/12349e-5282-472a-ae52-2a06223623e0/1/a5LPM5DKpYeedZcpzZAIxuylWic.mft
Manifest number: 0674
Signing time: Sat 23 Aug 2025 04:00:39 +0000
Manifest this update: Sat 23 Aug 2025 04:00:39 +0000
Manifest next update: Sun 24 Aug 2025 04:00:39 +0000
Files and hashes: 1: MKVWoK3wRPR_92nYPkQa4dZVFlU.roa (hash: CUusBr3IW9QaEzh3QeMtC6ZDvXcFkIcu309/jIeDme8=)
2: UVKqbvOHvCn6HoAzG1ux5mNYX9U.roa (hash: zS7iofsDKAb9AZxOa/q1sMs1Br0lasrnbRlbpqfAq5w=)
3: a5LPM5DKpYeedZcpzZAIxuylWic.crl (hash: 43Oz1haSUnbgoEwIEAsjYHbmpqokI81pySR89LgmTVg=)
4: nHW9BLq4zRW7_GDpHKk8LDtfSmI.roa (hash: wgNVfFr1EUmSTQMiYZD3CFdfwE6KU5e+fnSwgZEt6SA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/12349e-5282-472a-ae52-2a06223623e0/1/a5LPM5DKpYeedZcpzZAIxuylWic.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/12349e-5282-472a-ae52-2a06223623e0/1/a5LPM5DKpYeedZcpzZAIxuylWic.mft
rsync://rpki.ripe.net/repository/DEFAULT/a5LPM5DKpYeedZcpzZAIxuylWic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:e7:80:32:68:45:08:5b:80:e4:f8:fe:d7:f6:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b92cf3390caa5879e759729cd9008c6eca55a27
Validity
Not Before: Aug 23 04:00:39 2025 GMT
Not After : Aug 24 04:00:39 2025 GMT
Subject: CN=3ed0a7ad5cc067d7c8977faabb05c74f0977cdd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:44:98:7c:83:5a:be:5a:5f:aa:15:38:a3:19:
34:a7:ca:6c:a3:db:5a:a9:5e:b5:a3:5f:b8:ac:42:
d2:74:fd:ef:4a:46:d1:d0:85:79:b5:01:b4:d6:ce:
fc:99:0b:2f:f5:57:e9:c8:2e:ba:f4:d8:66:43:9f:
0a:5a:2a:ff:00:fc:1e:6e:83:2e:45:3e:44:1f:9d:
02:a1:57:1a:ce:79:39:50:17:c4:9d:1c:36:5f:b5:
1b:a0:02:68:6f:7e:e1:e4:06:31:8e:12:6f:ea:f9:
56:4b:85:82:50:65:90:fd:37:d5:6c:0b:37:47:b5:
d3:ef:c8:53:b4:6f:fa:ce:4e:4e:cd:25:c0:1d:9b:
ca:5b:24:dc:3c:75:6e:2f:b6:2a:9a:31:7f:5a:6e:
28:49:b4:3c:8a:e6:a6:75:a8:51:3e:96:64:20:49:
9b:7c:ba:73:96:0f:57:65:61:44:a4:56:32:18:40:
8d:68:3b:5a:a4:80:65:7e:92:a8:91:c1:26:74:fb:
ea:08:23:96:93:2b:f4:d2:f4:17:be:82:85:27:20:
58:52:3e:5e:f8:2a:1a:12:89:20:b0:5a:ac:25:13:
de:42:09:33:2f:4c:71:34:47:b0:ab:ab:05:d8:a6:
46:1f:d5:83:2c:20:c1:fe:02:62:15:20:38:d7:7b:
7f:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:D0:A7:AD:5C:C0:67:D7:C8:97:7F:AA:BB:05:C7:4F:09:77:CD:D6
X509v3 Authority Key Identifier:
keyid:6B:92:CF:33:90:CA:A5:87:9E:75:97:29:CD:90:08:C6:EC:A5:5A:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5LPM5DKpYeedZcpzZAIxuylWic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/12349e-5282-472a-ae52-2a06223623e0/1/a5LPM5DKpYeedZcpzZAIxuylWic.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/12349e-5282-472a-ae52-2a06223623e0/1/a5LPM5DKpYeedZcpzZAIxuylWic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:7c:72:46:7b:09:43:7b:20:45:7c:f6:df:84:8f:90:d1:18:
9e:cb:ba:9d:f2:41:a8:b3:28:94:c2:2e:99:c3:87:c2:86:17:
7c:fc:46:ca:2b:3c:c5:61:10:25:34:6d:87:aa:1e:71:99:93:
43:dc:3b:39:28:33:02:0a:28:b1:27:a2:e0:57:95:85:2c:64:
b4:bb:04:5a:2c:7b:0d:a2:3d:f4:89:0d:ca:38:c2:2e:57:ba:
b3:93:8a:28:bd:f5:c5:ca:e9:a5:8f:12:af:cc:31:7a:42:6a:
db:f0:21:ea:80:24:b8:bb:63:14:e2:dd:f0:cb:d0:9c:84:9b:
66:12:6e:cb:60:88:50:c2:d6:7c:8b:02:c9:33:7a:22:58:70:
70:aa:4c:6c:52:8a:17:8d:5f:a0:81:85:90:20:16:54:04:c9:
f0:b8:67:b0:a3:aa:44:ec:c7:ff:77:2b:b5:02:48:28:20:48:
4b:33:4f:0b:23:ef:3b:f1:e9:f6:71:94:ce:e3:68:27:3d:ab:
65:0b:a0:85:c3:80:20:15:a5:e4:dd:03:fc:3c:e2:d2:b6:ea:
c8:95:87:32:a4:69:6b:e5:be:93:66:a6:bc:8c:18:0f:e1:98:
38:a7:2e:99:d2:b3:d7:cf:53:7d:51:a4:02:5b:2d:68:45:82:
a7:23:61:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:07:25 2025 by rpki-client