Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/ca34eb-8e20-4bf1-b1b2-5872109b67a8/1/5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.mft
File: 5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.mft (raw, json)
Hash identifier: NsBYwOsHPwlyI2AiYiOrf8qZN0pNJUQ7qNN8x5XJksU=
Subject key identifier: 42:3A:90:84:B4:06:DA:F7:60:8C:42:9F:5A:27:A1:66:B5:D9:DA:2F
Authority key identifier: E5:A6:79:4B:91:B8:14:06:41:2A:13:78:70:BF:DE:3B:17:0D:E0:94
Certificate issuer: /CN=e5a6794b91b81406412a137870bfde3b170de094
Certificate serial: 0199FF22622A003CAFAB5F0DCC34D6330FE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/ca34eb-8e20-4bf1-b1b2-5872109b67a8/1/5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.mft
Manifest number: 11C9
Signing time: Mon 20 Oct 2025 01:01:07 +0000
Manifest this update: Mon 20 Oct 2025 01:01:07 +0000
Manifest next update: Tue 21 Oct 2025 01:01:07 +0000
Files and hashes: 1: 1n-VVl_FUGuc471oALycpRiqCLk.roa (hash: CyDn40gRMpRIy4CCIQiJsw5qJAYeVVUI59AY9O976Cg=)
2: 5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.crl (hash: niShQEOSvmFQch3phGiXy51VSe8yrlGpJpazUZmD2sU=)
3: bvJaB1n4DlwgW-YHgMlWz2d0zE0.roa (hash: Aum897RCErwCFSWkB8MTk4Vue2u5uq3XMcwvd1bOMFQ=)
4: d-c3fV9q29dsWUsutXEO_XUxELA.roa (hash: odfjS8/wqJCuj1kyoe6nkIiHEr+jKawF6ritEznO31s=)
5: sXJREdbwAm9mG_ih-kGMSE4IF1g.roa (hash: Vz5vIbPRAiUHJvwDkitmXzn8yuqUilXU/W786A3ZvJM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/ca34eb-8e20-4bf1-b1b2-5872109b67a8/1/5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/ca34eb-8e20-4bf1-b1b2-5872109b67a8/1/5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:22:62:2a:00:3c:af:ab:5f:0d:cc:34:d6:33:0f:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5a6794b91b81406412a137870bfde3b170de094
Validity
Not Before: Oct 20 01:01:07 2025 GMT
Not After : Oct 21 01:01:07 2025 GMT
Subject: CN=423a9084b406daf7608c429f5a27a166b5d9da2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:dd:50:07:a5:70:11:3b:2e:66:7d:7f:69:c3:
ea:f9:46:10:08:bb:22:4f:50:2d:10:2b:34:7d:d5:
36:d2:08:84:80:2c:2f:9f:42:5a:37:30:ac:60:d0:
33:06:f8:78:7c:85:3f:b1:de:ea:a8:01:85:a9:b8:
7f:6e:1b:30:d8:7c:40:75:05:0c:f8:cf:45:7d:df:
cc:ca:0d:30:d5:eb:19:55:5e:7f:99:c8:21:f1:37:
a4:e6:10:06:ef:e9:dc:51:c7:51:b9:2d:65:c0:d2:
95:49:82:fe:16:b9:96:b9:e3:b4:a2:d4:f9:62:c3:
47:c5:10:ae:3f:f4:4e:c7:13:8c:bf:95:17:83:da:
ff:87:13:f3:a3:8b:b4:5b:0a:8c:b9:7e:75:12:00:
81:68:08:bf:34:86:ac:17:8c:c1:e7:87:ed:74:28:
a5:fe:b0:8b:f3:9d:9d:33:0d:22:84:e8:3d:63:60:
4e:1c:e2:f5:ba:dd:12:a9:e8:f8:a2:06:8d:2e:a0:
54:f6:59:dd:fa:f5:fe:f0:aa:e0:68:02:8d:5f:d4:
3d:ac:49:20:c0:0b:d7:a9:d4:d5:79:15:26:21:1f:
50:a2:e1:92:db:39:88:fe:9d:61:e5:b5:cb:77:3c:
c9:63:cb:fc:fb:9c:58:d1:ce:93:b8:04:be:1c:a1:
47:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:3A:90:84:B4:06:DA:F7:60:8C:42:9F:5A:27:A1:66:B5:D9:DA:2F
X509v3 Authority Key Identifier:
keyid:E5:A6:79:4B:91:B8:14:06:41:2A:13:78:70:BF:DE:3B:17:0D:E0:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/ca34eb-8e20-4bf1-b1b2-5872109b67a8/1/5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/ca34eb-8e20-4bf1-b1b2-5872109b67a8/1/5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:f0:b5:2c:65:65:11:72:10:30:eb:02:2a:53:14:5b:7a:39:
0f:cb:c4:bb:eb:9e:0d:0a:40:15:2d:1d:10:3f:91:c6:a0:6e:
67:f7:93:db:12:89:4c:62:b0:36:67:41:cd:d8:6b:7e:b5:b4:
b4:5c:06:fd:0e:4f:79:b6:53:36:13:38:c9:b6:fe:22:b7:f8:
4f:5c:d2:ef:21:d7:b1:0d:0a:7a:45:d5:9f:f8:b4:a0:5a:1b:
d1:cf:16:4d:33:7f:30:84:eb:fc:09:fe:d7:f6:6f:7a:70:8a:
35:aa:f2:46:93:92:e8:40:86:ca:d5:f0:e9:79:27:8b:12:5f:
7f:b0:78:dd:d0:c0:40:3c:b2:da:33:a0:5d:e5:53:17:f0:0f:
f4:a6:27:f7:84:90:5a:4c:aa:0e:1c:55:0e:ba:b5:c0:fd:11:
13:be:28:1b:da:07:c4:4d:9d:da:2e:ab:46:dd:16:ae:47:b3:
46:9c:3b:44:28:34:6d:fb:85:8d:1b:59:18:dc:df:4b:10:75:
ce:0c:0f:01:d7:32:44:06:51:95:ad:03:47:90:89:dc:f0:0f:
35:ff:9b:13:a2:bb:df:72:a7:ac:fb:eb:f6:7a:53:df:87:f4:
24:1b:56:39:a1:a6:e7:31:02:ae:ed:5c:3a:97:c8:94:aa:98:
ba:30:61:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:48:10 2025 by rpki-client