Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/12349e-5282-472a-ae52-2a06223623e0/1/a5LPM5DKpYeedZcpzZAIxuylWic.mft
File: a5LPM5DKpYeedZcpzZAIxuylWic.mft (raw, json)
Hash identifier: XbLXMe9BItwfAK/24Su/VkmA7i34pAERaML8FKh/NVk=
Subject key identifier: 50:EC:81:A5:C6:AE:01:3B:7A:21:18:80:05:C0:EB:9E:A7:E7:73:DF
Authority key identifier: 6B:92:CF:33:90:CA:A5:87:9E:75:97:29:CD:90:08:C6:EC:A5:5A:27
Certificate issuer: /CN=6b92cf3390caa5879e759729cd9008c6eca55a27
Certificate serial: 019A5074F5BCADE3EC35ED9615621C54040F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a5LPM5DKpYeedZcpzZAIxuylWic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/12349e-5282-472a-ae52-2a06223623e0/1/a5LPM5DKpYeedZcpzZAIxuylWic.mft
Manifest number: 073C
Signing time: Tue 04 Nov 2025 20:00:33 +0000
Manifest this update: Tue 04 Nov 2025 20:00:33 +0000
Manifest next update: Wed 05 Nov 2025 20:00:33 +0000
Files and hashes: 1: FXli7IVxfRti4qt1ad27nRecqaM.roa (hash: u1NhxzgiSWTpvPzqFkEG54wTsIn/+oZByZ4cbRuTRXA=)
2: H4J_7ypAJ4hgBEB4fVDKFhXluIE.roa (hash: BtWyDIO/zf/0LXUY6FzALBn7OXPRy7qH7floDc9wE5g=)
3: a5LPM5DKpYeedZcpzZAIxuylWic.crl (hash: lzR8gz20xoiIFcWrOruQGx8hjkak415W12Z6piK1NTo=)
4: nHW9BLq4zRW7_GDpHKk8LDtfSmI.roa (hash: wgNVfFr1EUmSTQMiYZD3CFdfwE6KU5e+fnSwgZEt6SA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/12349e-5282-472a-ae52-2a06223623e0/1/a5LPM5DKpYeedZcpzZAIxuylWic.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/12349e-5282-472a-ae52-2a06223623e0/1/a5LPM5DKpYeedZcpzZAIxuylWic.mft
rsync://rpki.ripe.net/repository/DEFAULT/a5LPM5DKpYeedZcpzZAIxuylWic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:74:f5:bc:ad:e3:ec:35:ed:96:15:62:1c:54:04:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b92cf3390caa5879e759729cd9008c6eca55a27
Validity
Not Before: Nov 4 20:00:33 2025 GMT
Not After : Nov 5 20:00:33 2025 GMT
Subject: CN=50ec81a5c6ae013b7a21188005c0eb9ea7e773df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:1f:c2:22:6f:f2:19:22:d1:ce:01:97:40:7a:
c3:a4:2a:f1:5c:2f:6c:11:3f:67:87:24:79:3e:c1:
2e:c1:9d:10:43:d6:76:64:d8:63:80:e5:dd:9e:ab:
3d:ec:8b:89:4e:8d:18:ed:d7:c5:e9:03:7e:95:6d:
62:2c:b7:1b:3f:c3:37:81:d6:4c:84:aa:5d:e2:34:
6e:e4:95:9b:c9:63:b5:47:45:b1:8b:b2:a2:00:64:
6f:d3:ea:a9:9a:9d:90:f6:da:ee:70:d1:d7:0b:02:
90:ce:12:a8:af:51:ea:95:63:cf:24:09:84:f7:0b:
02:87:77:3d:66:ec:bd:0a:10:a7:f0:39:c0:13:75:
9f:11:9e:59:4f:af:31:e9:64:13:a1:f2:02:16:ed:
3a:94:c1:3f:2b:ba:38:66:df:b3:72:b0:07:5b:6c:
45:a6:c9:20:c7:87:3b:05:23:ef:6d:57:3c:ff:77:
5b:3b:44:e3:d4:3d:d8:56:5a:e4:77:42:44:68:b3:
d5:f3:dd:11:a1:3d:4c:83:63:b4:83:d5:5a:5e:68:
68:9e:be:fb:b3:b8:66:d7:4f:71:19:bd:50:6b:7a:
28:12:70:e4:5b:07:16:37:1e:4d:49:94:3f:b6:69:
47:aa:96:f6:6c:98:cd:b8:bf:9e:01:d6:e2:8b:5a:
a6:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:EC:81:A5:C6:AE:01:3B:7A:21:18:80:05:C0:EB:9E:A7:E7:73:DF
X509v3 Authority Key Identifier:
keyid:6B:92:CF:33:90:CA:A5:87:9E:75:97:29:CD:90:08:C6:EC:A5:5A:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5LPM5DKpYeedZcpzZAIxuylWic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/12349e-5282-472a-ae52-2a06223623e0/1/a5LPM5DKpYeedZcpzZAIxuylWic.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/12349e-5282-472a-ae52-2a06223623e0/1/a5LPM5DKpYeedZcpzZAIxuylWic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:94:7e:c8:37:f2:40:bf:cb:e4:ad:1e:4b:1d:2a:51:c9:fd:
dd:e0:74:45:4c:7d:cf:aa:a4:e9:59:64:0b:83:6d:a2:7e:b9:
30:4a:f6:78:a3:b6:cb:3c:68:83:2e:68:f8:e0:93:04:3f:8e:
21:a8:61:48:6c:38:95:54:74:60:20:80:46:09:6e:40:99:6a:
53:d6:da:5b:6e:d7:c8:60:cf:14:9f:ec:a8:0e:6e:7a:00:a2:
1e:93:70:35:7f:5d:cf:a4:4a:4f:29:de:b9:a4:66:30:49:d6:
c3:76:f7:64:14:6e:8a:d1:3d:36:ec:5e:f8:44:6f:d0:ef:f2:
1e:58:b9:0d:11:72:84:7a:e1:12:93:5b:2d:0e:9c:ff:f5:2c:
b9:52:47:85:88:1f:ad:49:74:99:93:33:0f:d5:3e:12:9f:b9:
ca:dd:71:e0:3b:63:23:11:79:94:20:4b:1a:ec:50:dd:08:41:
97:06:e7:a5:3f:2c:c8:c7:ba:8f:90:f6:06:c8:f1:b5:bb:24:
e5:88:7a:aa:03:7e:7f:01:a2:82:11:f9:ca:13:20:53:7e:a3:
c0:70:48:43:be:1c:38:e2:83:6c:b9:fd:f3:8f:84:1e:f9:62:
92:5b:e9:91:6a:b9:3b:c7:66:9d:87:97:10:a5:e9:c0:51:73:
69:f9:79:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:35:29 2025 by rpki-client