Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/5aGzZVL52sy5KsXDtEtCbWQ3SeI.mft
File: 5aGzZVL52sy5KsXDtEtCbWQ3SeI.mft (raw, json)
Hash identifier: 6S2yzmanAFn41+p2ezwPcuGIFDxHoApx+ouG/eTqcj0=
Subject key identifier: 5B:37:0D:13:2B:DC:49:33:50:C9:6C:2F:74:7B:3D:8F:A1:AB:6C:18
Authority key identifier: E5:A1:B3:65:52:F9:DA:CC:B9:2A:C5:C3:B4:4B:42:6D:64:37:49:E2
Certificate issuer: /CN=e5a1b36552f9daccb92ac5c3b44b426d643749e2
Certificate serial: 019A4F990BFE2B15C4798E4493AFA261726A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5aGzZVL52sy5KsXDtEtCbWQ3SeI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/5aGzZVL52sy5KsXDtEtCbWQ3SeI.mft
Manifest number: 1718
Signing time: Tue 04 Nov 2025 16:00:21 +0000
Manifest this update: Tue 04 Nov 2025 16:00:21 +0000
Manifest next update: Wed 05 Nov 2025 16:00:21 +0000
Files and hashes: 1: 5aGzZVL52sy5KsXDtEtCbWQ3SeI.crl (hash: Zb2/I2tdz8o/NvHM4IFu2GWRWHXxlrys+rTMHJToFKQ=)
2: Q5lprEAu1AjZg8eC8e9vCRTQc5c.roa (hash: 1TVaYcq6pwwmReP0rlqvmkebRDkja4y3qu5GJXEAYFk=)
3: ScDiG1bEMg_iYAnwZ5RqZ9iuBfE.roa (hash: M8oZJ8Uj/JF9chZaxOYRuKYLCgT5+KWo335qmSJiUXs=)
4: _jwv_lcEjeP6obJDvR7tAaQUU-k.roa (hash: 5K6HFH8TXSLWVxpMWf5RIreFCOahhdZCzVwIY3yAflg=)
5: a3iaEBF86wbe5VjQTp-OMfHJc1E.roa (hash: nuf4ev5fGHCC4PXZAB5L19yGP986oYjP7JfQB1/fdXU=)
6: a9_bN0F2h_Kug5sgN-Kpf5AuF0Y.roa (hash: f6TkQWvmEWMglWzfpXp6gmToVC7S2f1cCbDqMTnyBzg=)
7: lihzuQoSb7FSiRKzRwb1us4H1SM.roa (hash: KHb+Gcf8LKwRqmsQV3Dwa1dFj1b8D+2+U6h0xyQG13I=)
8: qi8JXs2yo200PkF0ybkWzT5gLbA.roa (hash: rDwlWPK/DQ56zjNjEs53TpTRvG/Y0OQ9Sl2iycPDuH4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/5aGzZVL52sy5KsXDtEtCbWQ3SeI.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/5aGzZVL52sy5KsXDtEtCbWQ3SeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/5aGzZVL52sy5KsXDtEtCbWQ3SeI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:99:0b:fe:2b:15:c4:79:8e:44:93:af:a2:61:72:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5a1b36552f9daccb92ac5c3b44b426d643749e2
Validity
Not Before: Nov 4 16:00:21 2025 GMT
Not After : Nov 5 16:00:21 2025 GMT
Subject: CN=5b370d132bdc493350c96c2f747b3d8fa1ab6c18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:32:19:90:02:0f:11:67:87:ef:bb:32:4b:cc:
b2:16:32:9d:c1:14:c6:81:71:45:b2:e5:f5:db:68:
60:93:09:07:f6:39:bf:36:cb:53:64:bb:8e:b0:f3:
d7:0d:ce:34:83:a5:76:b3:af:77:0f:0f:bd:14:d8:
6e:18:09:b5:c7:ab:41:b3:1c:d2:2d:e5:82:96:bc:
cd:19:2b:eb:6c:20:47:a4:c5:08:ec:66:8d:ef:e4:
ff:27:18:ad:1d:c6:6b:20:73:dd:59:89:3e:79:13:
7c:56:11:92:a9:50:32:d1:97:9e:68:48:de:4e:a0:
e8:36:31:8a:11:4b:9d:55:58:e1:55:eb:35:42:3b:
c8:6f:78:a5:fe:ef:36:f4:32:b5:c0:a0:5a:79:05:
92:05:83:db:12:39:66:70:4c:24:d1:97:18:09:e0:
a5:3a:8b:71:8a:40:2a:26:d1:62:80:5e:53:a1:be:
51:f3:90:68:a7:64:68:ef:c4:84:6c:f8:e2:15:26:
aa:84:0b:c8:f2:78:9c:ca:0c:cc:da:6a:8a:6e:39:
14:19:dd:22:2b:15:42:9f:b9:b1:9b:ef:15:1f:0a:
6c:1e:9d:a5:ed:5a:40:c9:8e:4f:8c:39:d6:00:4c:
da:ab:02:3b:64:8f:4d:4a:24:43:41:2c:45:98:2a:
35:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:37:0D:13:2B:DC:49:33:50:C9:6C:2F:74:7B:3D:8F:A1:AB:6C:18
X509v3 Authority Key Identifier:
keyid:E5:A1:B3:65:52:F9:DA:CC:B9:2A:C5:C3:B4:4B:42:6D:64:37:49:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5aGzZVL52sy5KsXDtEtCbWQ3SeI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/5aGzZVL52sy5KsXDtEtCbWQ3SeI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/5aGzZVL52sy5KsXDtEtCbWQ3SeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:df:e0:e1:02:9b:bc:c4:f1:60:63:75:52:17:44:3b:9d:95:
7f:5e:9d:59:2b:e0:22:53:10:ec:0b:47:a4:99:a9:05:0f:6c:
66:43:a9:e1:7f:b4:64:ac:ac:2b:7c:b0:33:dd:7b:8c:29:50:
9c:f7:2c:4c:92:8a:c5:e4:95:64:ac:29:ef:db:94:28:92:ab:
60:40:aa:8e:63:df:d7:42:cd:8d:29:c7:cf:cf:2f:15:96:64:
f0:d1:09:00:4a:bf:06:73:7e:9c:bf:78:f4:9b:a8:a1:64:cf:
f3:d9:ba:84:7d:b6:61:5e:62:16:a3:5c:2f:91:f1:c0:97:06:
9c:0f:43:c6:93:4b:fa:28:21:80:0a:b5:5f:5c:4d:fa:b4:97:
93:5f:56:5a:85:d2:94:42:e1:61:53:55:7b:4f:0d:67:f1:c0:
fb:a9:21:c9:cf:34:e8:e2:c4:4a:00:de:fe:76:4e:68:16:e9:
18:05:c4:2b:52:25:d0:41:53:3c:70:1f:49:51:f9:bd:84:6b:
46:b7:3e:53:67:53:5b:ea:63:43:73:61:a3:5c:f7:49:50:d6:
d4:2b:cf:da:a4:2e:bd:53:cb:4c:19:1c:9a:ee:90:81:5d:7b:
f2:fd:ca:9a:fd:eb:35:76:2d:f7:9a:70:6c:3b:6d:b8:38:ce:
d7:a8:9d:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:38:09 2025 by rpki-client