Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/fdb398-3fb5-4b6a-a003-cfc4a676d6e0/1/A5Wt2Guvay0G_0H1Um00f3HutBA.mft
File: A5Wt2Guvay0G_0H1Um00f3HutBA.mft (raw, json)
Hash identifier: 52BaGE5DwiyATtkIewX74a7WfCXIeDnSpYmCe1/XtEo=
Subject key identifier: 83:EB:3D:11:65:B4:BB:D5:4D:C4:72:D8:50:58:BE:7C:1D:12:E2:6A
Authority key identifier: 03:95:AD:D8:6B:AF:6B:2D:06:FF:41:F5:52:6D:34:7F:71:EE:B4:10
Certificate issuer: /CN=0395add86baf6b2d06ff41f5526d347f71eeb410
Certificate serial: 01987A1B2972DCED1D1EF2248CA876E98BA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A5Wt2Guvay0G_0H1Um00f3HutBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/fdb398-3fb5-4b6a-a003-cfc4a676d6e0/1/A5Wt2Guvay0G_0H1Um00f3HutBA.mft
Manifest number: 15AC
Signing time: Tue 05 Aug 2025 12:00:56 +0000
Manifest this update: Tue 05 Aug 2025 12:00:56 +0000
Manifest next update: Wed 06 Aug 2025 12:00:56 +0000
Files and hashes: 1: 1VRLJKU_iS-J5hpp2gSlpHTKJrM.roa (hash: wMqFEiKVsvmfTXQPWnG9RRXDiwBKVCmwH1hZAvPWe5Y=)
2: A5Wt2Guvay0G_0H1Um00f3HutBA.crl (hash: U3yPclZdQtrQYlyw+0P+lwYYVYaLG0DyBoArXz5eQ6Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/fdb398-3fb5-4b6a-a003-cfc4a676d6e0/1/A5Wt2Guvay0G_0H1Um00f3HutBA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/fdb398-3fb5-4b6a-a003-cfc4a676d6e0/1/A5Wt2Guvay0G_0H1Um00f3HutBA.mft
rsync://rpki.ripe.net/repository/DEFAULT/A5Wt2Guvay0G_0H1Um00f3HutBA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 12:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7a:1b:29:72:dc:ed:1d:1e:f2:24:8c:a8:76:e9:8b:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0395add86baf6b2d06ff41f5526d347f71eeb410
Validity
Not Before: Aug 5 12:00:56 2025 GMT
Not After : Aug 6 12:00:56 2025 GMT
Subject: CN=83eb3d1165b4bbd54dc472d85058be7c1d12e26a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:4e:06:b0:2b:bd:d7:1b:b3:c9:97:a7:88:3a:
3b:6b:18:b6:f3:8c:1d:b1:a8:69:6a:cb:a2:e1:81:
0b:e1:ad:ab:7c:9f:11:39:e8:d7:0b:06:09:e1:6b:
e4:d6:32:ab:be:65:49:fa:d9:ce:d5:46:11:2d:ef:
c1:d2:dd:64:7e:90:31:4b:d6:1e:78:45:12:55:75:
48:97:10:19:ef:ba:35:79:ae:32:41:76:a9:e1:c8:
15:50:cb:71:d0:ee:1b:9c:c2:e2:41:6e:1b:2d:f0:
c5:07:c6:2a:89:d8:2a:bb:5d:81:24:14:d1:2c:70:
c0:c8:37:42:57:7f:19:13:d6:e6:b7:a6:80:c8:6a:
5f:a9:32:64:8e:28:06:08:3f:06:23:b0:b8:95:78:
3e:00:7f:5b:33:a6:6b:00:1c:44:d5:7a:69:8f:57:
0d:d6:a9:e8:1c:77:47:49:f4:2b:8f:fa:89:98:5c:
6e:34:a3:63:ee:f3:55:31:2f:0a:e6:28:6f:53:54:
37:b7:a2:9a:0b:aa:59:8c:f3:34:a9:b8:e0:7e:10:
b6:b7:75:5a:3a:e3:3e:3b:71:e2:27:5a:5d:be:ef:
84:e7:5a:0e:83:81:db:4c:08:2c:22:49:38:7f:6e:
69:bd:1a:06:b6:d8:08:67:48:b9:fc:b0:dc:5a:b7:
52:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:EB:3D:11:65:B4:BB:D5:4D:C4:72:D8:50:58:BE:7C:1D:12:E2:6A
X509v3 Authority Key Identifier:
keyid:03:95:AD:D8:6B:AF:6B:2D:06:FF:41:F5:52:6D:34:7F:71:EE:B4:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A5Wt2Guvay0G_0H1Um00f3HutBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/fdb398-3fb5-4b6a-a003-cfc4a676d6e0/1/A5Wt2Guvay0G_0H1Um00f3HutBA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/fdb398-3fb5-4b6a-a003-cfc4a676d6e0/1/A5Wt2Guvay0G_0H1Um00f3HutBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:1e:23:69:30:5d:c8:af:73:e2:4c:18:10:0b:ee:81:86:1f:
01:46:15:26:fa:60:cd:4a:f5:b2:95:42:1e:7e:64:97:42:de:
b5:5c:be:e3:be:39:eb:b6:c0:d3:81:bb:2d:82:55:01:5a:86:
21:8b:19:cd:72:36:a9:66:76:95:dd:86:d5:e5:9f:50:e4:de:
9f:01:99:51:a2:91:c8:2c:6c:59:e3:4a:b4:0d:7e:a9:cb:4e:
76:e1:f8:4e:c5:f4:6c:c6:cb:6e:71:9f:d3:bf:8a:10:be:a5:
18:ae:fc:89:06:9b:58:e4:16:57:31:a8:73:ef:c5:22:46:26:
6e:b5:fc:3c:2a:5f:fa:5f:34:02:45:7e:1c:5d:90:7e:76:20:
c2:ab:6a:09:24:a2:07:10:e3:6f:22:ee:07:d4:91:41:27:41:
15:cf:3e:a0:18:2e:ae:30:16:f6:b9:43:21:de:c0:a8:73:55:
a5:fe:2e:15:c8:0e:f4:4b:fb:77:e3:92:c6:16:94:4d:77:87:
37:65:ec:d6:cb:70:1e:b7:bf:02:f9:8a:d4:b5:c1:8b:b4:72:
87:7c:24:62:9b:49:ff:c3:c4:b6:fa:9c:b3:29:00:53:fd:4a:
e7:b8:e1:24:3c:ae:21:f3:97:37:a5:57:b9:6e:36:39:e0:86:
7f:c1:97:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 20:08:44 2025 by rpki-client