Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6073c95a-aac7-43ec-818b-1f42f62275f5/0/5AFF13D5A71CFB0DA38D8D3D81E13EAF40416A74.mft
File: 5AFF13D5A71CFB0DA38D8D3D81E13EAF40416A74.mft (raw, json)
Hash identifier: zG7gZQ1wl7Lxr1V89iX2ICxmZ05I60JfuGCeGEJcFjA=
Subject key identifier: E5:B9:65:D3:F5:E3:1D:D5:C5:05:FF:6C:24:31:36:6A:46:D5:2C:1A
Authority key identifier: 5A:FF:13:D5:A7:1C:FB:0D:A3:8D:8D:3D:81:E1:3E:AF:40:41:6A:74
Certificate issuer: /CN=5aff13d5a71cfb0da38d8d3d81e13eaf40416a74
Certificate serial: 3A9B996C026A1D631E65E9EB150F59A20CB787A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wv8T1acc-w2jjY09geE-r0BBanQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6073c95a-aac7-43ec-818b-1f42f62275f5/0/5AFF13D5A71CFB0DA38D8D3D81E13EAF40416A74.mft
Manifest number: 0487
Signing time: Sun 19 Oct 2025 09:31:37 +0000
Manifest this update: Sun 19 Oct 2025 09:26:37 +0000
Manifest next update: Mon 20 Oct 2025 12:12:37 +0000
Files and hashes: 1: 5AFF13D5A71CFB0DA38D8D3D81E13EAF40416A74.crl (hash: aPvzZGCe2KkbF4T0OS9Vw3haEzLuvxFLs2xXaKCzj5A=)
2: 39312e3232392e3138302e302f32342d3234203d3e2036303739.roa (hash: +bVqrEMFd6OlmJt6OXUAm36lf7U27Wity5s8ggfbbQs=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6073c95a-aac7-43ec-818b-1f42f62275f5/0/5AFF13D5A71CFB0DA38D8D3D81E13EAF40416A74.crl
rsync://rsync.paas.rpki.ripe.net/repository/6073c95a-aac7-43ec-818b-1f42f62275f5/0/5AFF13D5A71CFB0DA38D8D3D81E13EAF40416A74.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wv8T1acc-w2jjY09geE-r0BBanQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:9b:99:6c:02:6a:1d:63:1e:65:e9:eb:15:0f:59:a2:0c:b7:87:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5aff13d5a71cfb0da38d8d3d81e13eaf40416a74
Validity
Not Before: Oct 19 09:26:37 2025 GMT
Not After : Oct 20 12:12:37 2025 GMT
Subject: CN=E5B965D3F5E31DD5C505FF6C2431366A46D52C1A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:7f:d1:2c:60:2e:de:49:bc:c9:3e:de:0c:fb:
cc:8c:b5:66:27:9b:8a:2d:cd:55:7c:91:ae:6a:1a:
36:e3:66:c7:24:cf:e5:58:c5:73:03:ca:f4:df:c0:
94:c2:7c:fe:dd:db:0b:92:cf:06:69:b6:c6:df:27:
9c:58:4c:36:6c:47:b1:9f:0a:1f:9e:57:8e:83:3d:
e5:17:06:20:d6:55:97:b1:5a:42:ae:07:8e:71:ab:
56:9e:db:28:2e:76:80:e5:a2:0e:6f:44:42:b7:b1:
59:bf:4c:a2:ba:fe:50:e9:7b:a7:9e:64:57:3c:67:
ab:8d:1c:bd:51:c7:79:f9:48:dd:1d:da:4d:00:46:
03:35:df:36:c6:cb:f2:3f:d7:41:71:92:e1:78:75:
66:36:c8:83:ff:cd:e8:bd:03:72:0a:81:50:f9:90:
67:8d:e7:32:53:98:ea:58:f7:be:c3:2d:81:ac:94:
3f:01:f4:8c:ff:c6:3e:96:ed:3d:5f:d3:3b:a9:d9:
73:84:8d:6e:23:4b:fb:ff:e8:db:a9:14:df:68:ca:
a7:6d:37:a9:00:53:72:ef:a1:38:67:59:f4:3b:4f:
e1:ea:b3:a3:ae:b3:f9:d1:2c:27:ca:23:9c:89:05:
24:96:91:67:d5:80:af:a9:b1:67:fb:38:86:aa:05:
c9:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:B9:65:D3:F5:E3:1D:D5:C5:05:FF:6C:24:31:36:6A:46:D5:2C:1A
X509v3 Authority Key Identifier:
keyid:5A:FF:13:D5:A7:1C:FB:0D:A3:8D:8D:3D:81:E1:3E:AF:40:41:6A:74
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6073c95a-aac7-43ec-818b-1f42f62275f5/0/5AFF13D5A71CFB0DA38D8D3D81E13EAF40416A74.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wv8T1acc-w2jjY09geE-r0BBanQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6073c95a-aac7-43ec-818b-1f42f62275f5/0/5AFF13D5A71CFB0DA38D8D3D81E13EAF40416A74.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:82:b5:c1:12:1e:3b:75:32:f9:0f:21:b5:ed:06:b6:77:68:
7e:18:6a:09:29:e6:76:6d:76:e9:ae:32:ed:34:71:8f:7e:80:
84:fb:5a:d9:e7:86:51:40:18:d6:65:01:76:8b:a5:c9:cd:d2:
95:f2:14:c5:ce:22:ca:6b:7e:0e:ef:d4:95:df:76:c2:60:f3:
ea:93:ba:b1:1c:07:f8:6b:a6:60:26:1a:cf:4f:49:05:a5:ed:
bc:8a:28:24:ee:a6:60:0a:88:67:1d:3b:03:c2:27:01:5f:f0:
99:dd:fe:a0:67:cb:bb:2b:7f:35:f6:92:cc:38:17:73:13:16:
24:3c:5a:0c:de:21:63:59:65:8f:9b:33:3d:e8:41:0f:c2:54:
60:86:69:2c:03:01:6f:8c:29:3e:b6:a1:3d:10:69:90:58:80:
bf:f8:cd:c2:50:ad:81:04:c7:7d:ac:55:ba:66:a2:f9:13:70:
f2:58:c3:8e:62:38:13:06:e8:dd:85:af:60:bc:97:ae:12:d4:
72:ab:48:ca:c7:41:55:a5:69:2c:94:eb:8b:7c:eb:2b:a3:40:
7e:b2:d3:a4:ac:24:6a:f6:d5:06:90:72:29:72:9b:03:84:44:
f8:b8:cb:c3:57:ed:68:f2:af:33:11:d4:a7:25:43:e6:79:f2:
8e:37:74:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 21:06:48 2025 by rpki-client