Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/3afc81-30e6-4b8e-8d3b-57f54ea43e16/1/5aiGWRTezNyYByQf1wtrsIOkRLM.mft
File: 5aiGWRTezNyYByQf1wtrsIOkRLM.mft (raw, json)
Hash identifier: 2DLEHv1CjpallXKig4PPbRlsVm78p0JYIrFzpmfuLos=
Subject key identifier: E2:6E:F8:AD:28:AF:B4:A7:3A:E6:40:E7:FC:AB:56:BF:5C:80:0C:3D
Authority key identifier: E5:A8:86:59:14:DE:CC:DC:98:07:24:1F:D7:0B:6B:B0:83:A4:44:B3
Certificate issuer: /CN=e5a8865914deccdc9807241fd70b6bb083a444b3
Certificate serial: 019A511962E285C093D1C1701437B9C577C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5aiGWRTezNyYByQf1wtrsIOkRLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/3afc81-30e6-4b8e-8d3b-57f54ea43e16/1/5aiGWRTezNyYByQf1wtrsIOkRLM.mft
Manifest number: 108A
Signing time: Tue 04 Nov 2025 23:00:09 +0000
Manifest this update: Tue 04 Nov 2025 23:00:09 +0000
Manifest next update: Wed 05 Nov 2025 23:00:09 +0000
Files and hashes: 1: 5aiGWRTezNyYByQf1wtrsIOkRLM.crl (hash: SFB0ferz23h2W7+us6c7dQ9KjPpXCeAb+JuGNHozetM=)
2: syWGgITCZamVo-nCUcKih8Fhw7k.roa (hash: Y9UTs9CcobIoVtNfLT2NYBFUloNQFN2szm6vlcjIvRY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/3afc81-30e6-4b8e-8d3b-57f54ea43e16/1/5aiGWRTezNyYByQf1wtrsIOkRLM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/3afc81-30e6-4b8e-8d3b-57f54ea43e16/1/5aiGWRTezNyYByQf1wtrsIOkRLM.mft
rsync://rpki.ripe.net/repository/DEFAULT/5aiGWRTezNyYByQf1wtrsIOkRLM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 23:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:19:62:e2:85:c0:93:d1:c1:70:14:37:b9:c5:77:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5a8865914deccdc9807241fd70b6bb083a444b3
Validity
Not Before: Nov 4 23:00:09 2025 GMT
Not After : Nov 5 23:00:09 2025 GMT
Subject: CN=e26ef8ad28afb4a73ae640e7fcab56bf5c800c3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:97:4b:66:69:2e:73:63:70:91:21:20:b8:f0:
67:ab:cb:ca:1e:35:91:be:b0:24:e2:36:43:3e:46:
c4:a0:e2:04:23:7d:6d:b2:1a:c9:b4:5d:60:c2:16:
2d:df:64:43:b5:8e:7d:9b:73:ec:30:60:3d:44:3a:
76:8b:62:06:5d:26:b6:b8:1c:42:f6:96:64:be:2c:
15:20:d5:7f:dd:76:de:8e:eb:7f:33:bd:e1:87:67:
fc:09:2a:34:f1:8e:85:72:94:fa:a7:ec:03:d4:ac:
31:9b:ce:ff:56:1c:28:92:17:02:15:bb:3c:00:72:
69:12:03:67:53:73:92:62:16:e7:24:00:0b:64:4a:
5f:0e:07:c6:e0:e3:c4:f3:0b:8c:85:f8:66:8a:09:
fe:65:79:35:e0:54:6f:da:6b:b8:b8:58:39:c8:87:
4f:da:c5:d2:98:a5:97:da:e6:67:0e:c7:91:02:d4:
55:36:7c:58:62:62:6a:06:27:7b:95:e7:74:56:b7:
2b:9b:f0:9b:a2:0a:42:6c:45:0e:cf:9c:f4:8f:7a:
dc:bc:f7:e4:8b:b0:00:22:bd:5a:ff:c0:88:b2:d2:
d4:76:74:85:7b:ac:34:83:43:72:45:41:58:9b:c2:
01:c2:b8:ba:37:02:b4:01:22:85:d3:26:4e:db:8c:
2e:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:6E:F8:AD:28:AF:B4:A7:3A:E6:40:E7:FC:AB:56:BF:5C:80:0C:3D
X509v3 Authority Key Identifier:
keyid:E5:A8:86:59:14:DE:CC:DC:98:07:24:1F:D7:0B:6B:B0:83:A4:44:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5aiGWRTezNyYByQf1wtrsIOkRLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/3afc81-30e6-4b8e-8d3b-57f54ea43e16/1/5aiGWRTezNyYByQf1wtrsIOkRLM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/3afc81-30e6-4b8e-8d3b-57f54ea43e16/1/5aiGWRTezNyYByQf1wtrsIOkRLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:29:9f:fe:ee:63:e0:99:02:12:34:15:e7:7d:b7:32:68:12:
fe:37:32:9c:cd:1e:9d:9e:22:01:3e:a6:51:63:ba:cc:46:c4:
4e:4f:77:a3:e1:17:16:6d:65:72:48:68:36:f9:76:dd:5b:c1:
0b:b4:8e:46:89:38:ac:db:6e:f9:a8:99:9a:46:50:50:2b:f4:
84:11:b5:16:98:f7:ee:3a:61:11:d9:33:e4:e7:42:49:6a:c7:
74:0c:86:f1:51:25:b6:13:ca:9c:bf:d5:a3:e5:0b:49:c8:d6:
c9:6d:d4:a9:3b:f7:ef:ac:7d:ab:d5:88:ce:76:ee:09:80:e7:
03:95:25:ce:f0:6a:84:2b:6e:4c:c0:92:ea:c5:8f:44:b6:59:
11:f2:c9:a6:87:bc:e0:71:4f:00:c0:28:e9:ca:37:3a:0c:32:
a9:4b:76:19:09:e0:e6:e9:5c:f9:bf:b8:e8:72:21:40:8e:b8:
40:7c:c1:a1:f1:fd:79:54:73:8c:36:d7:01:bf:df:de:8e:ee:
13:a0:1e:fb:10:71:9f:e9:74:3b:39:61:15:fb:67:82:f7:15:
c1:0f:56:72:61:da:c3:be:72:01:e6:fa:ff:37:23:a8:10:8d:
00:9a:c4:5f:3b:27:01:a1:27:64:cf:43:93:6c:b9:d2:12:62:
43:53:93:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:39:24 2025 by rpki-client