Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/24cab4-0125-4383-85fa-3d388606da12/1/5ag7QLP019MfszaNr6yhGZpEmJI.mft
File: 5ag7QLP019MfszaNr6yhGZpEmJI.mft (raw, json)
Hash identifier: 1PcjsaHFh65YHVaQEAeG11bFa50rq5ZhAjjRajZWpmI=
Subject key identifier: BC:7B:B1:12:74:48:2B:34:21:C9:C9:E0:95:E5:15:E2:1B:76:22:A9
Authority key identifier: E5:A8:3B:40:B3:F4:D7:D3:1F:B3:36:8D:AF:AC:A1:19:9A:44:98:92
Certificate issuer: /CN=e5a83b40b3f4d7d31fb3368dafaca1199a449892
Certificate serial: 019A4F6261A5D5DDEC629E2E027131EED1ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5ag7QLP019MfszaNr6yhGZpEmJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/24cab4-0125-4383-85fa-3d388606da12/1/5ag7QLP019MfszaNr6yhGZpEmJI.mft
Manifest number: 0720
Signing time: Tue 04 Nov 2025 15:00:38 +0000
Manifest this update: Tue 04 Nov 2025 15:00:38 +0000
Manifest next update: Wed 05 Nov 2025 15:00:38 +0000
Files and hashes: 1: 5ag7QLP019MfszaNr6yhGZpEmJI.crl (hash: Hk8js2h1WF1JZJJGOtnZBxRlSN/B1VGpGE91ovjNFI8=)
2: dFZMO2VP4AqySbEQh3NK_Is5BKQ.roa (hash: ROKbXrppvP4A8pHGDyWRJNx07Y7g4bd+83JBnGx3icI=)
3: g6-XvIXV3Eql3Coxvc-nq6Kly9Y.roa (hash: 2JhAFiPl0wmw6ysVFMQAoRoFcSMoEuXFJFM5vnLJ2+M=)
4: h1oyUSQHfCUnNhv3GPjMusMqBOQ.roa (hash: zVnvi6OzjNH5JWYjXPv16C0I43oqAW042jfOToOeKNM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/24cab4-0125-4383-85fa-3d388606da12/1/5ag7QLP019MfszaNr6yhGZpEmJI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/24cab4-0125-4383-85fa-3d388606da12/1/5ag7QLP019MfszaNr6yhGZpEmJI.mft
rsync://rpki.ripe.net/repository/DEFAULT/5ag7QLP019MfszaNr6yhGZpEmJI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:61:a5:d5:dd:ec:62:9e:2e:02:71:31:ee:d1:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5a83b40b3f4d7d31fb3368dafaca1199a449892
Validity
Not Before: Nov 4 15:00:38 2025 GMT
Not After : Nov 5 15:00:38 2025 GMT
Subject: CN=bc7bb11274482b3421c9c9e095e515e21b7622a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:a0:e1:26:49:90:b4:6b:d9:99:66:50:1c:81:
29:58:26:a8:bf:dd:7a:a6:ac:0d:09:66:ed:73:20:
9f:16:bc:58:79:05:0c:12:d6:06:19:99:47:02:e8:
17:c7:af:39:62:be:50:d1:4d:2e:88:cb:0d:3a:5f:
a7:8e:c2:eb:04:6d:91:20:94:c1:2a:6e:9f:b1:ae:
a7:d2:db:38:0e:01:92:fd:5c:da:cf:96:f9:4f:2e:
68:c9:88:bd:e5:71:e4:e0:e6:21:27:92:7a:76:f6:
86:c9:65:11:72:59:fc:c1:4f:d2:ea:90:6b:b9:31:
c2:7b:96:4c:ab:06:6b:de:60:73:60:2f:22:b2:d9:
e1:1f:d9:1b:8c:7a:a5:b3:74:ce:2b:ee:e5:00:cf:
81:0a:33:46:1d:f5:cb:c2:05:65:89:52:e2:1c:4d:
d4:25:8e:7d:b0:0c:c6:3c:ce:b2:6c:2d:af:d5:91:
7c:35:68:26:f0:67:06:98:0d:cb:c9:5f:c8:e9:2b:
09:5d:f1:f7:17:3a:87:20:d3:c4:18:db:14:24:b6:
ed:bc:b7:f8:80:06:42:61:d4:a1:b2:a5:e9:43:cf:
c4:bf:42:b3:f9:da:77:cd:c9:35:d0:08:16:62:55:
3c:df:6e:e1:32:59:00:c8:7b:b7:05:26:49:86:c0:
b8:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:7B:B1:12:74:48:2B:34:21:C9:C9:E0:95:E5:15:E2:1B:76:22:A9
X509v3 Authority Key Identifier:
keyid:E5:A8:3B:40:B3:F4:D7:D3:1F:B3:36:8D:AF:AC:A1:19:9A:44:98:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5ag7QLP019MfszaNr6yhGZpEmJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/24cab4-0125-4383-85fa-3d388606da12/1/5ag7QLP019MfszaNr6yhGZpEmJI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/24cab4-0125-4383-85fa-3d388606da12/1/5ag7QLP019MfszaNr6yhGZpEmJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:df:f8:39:5e:43:be:b9:ba:ef:95:e2:f1:17:d5:62:05:8b:
69:42:19:aa:0c:8a:49:c5:8f:dd:79:f7:23:d5:f4:08:1a:3f:
0a:aa:73:9c:aa:11:53:48:d3:5e:d8:4c:fd:66:3e:3e:57:13:
8c:d5:33:f0:19:cc:3b:3c:2b:e7:18:40:0e:3d:f8:57:53:7d:
f5:7b:94:86:ad:06:46:45:19:83:54:1b:fd:87:40:b2:29:a2:
ca:44:9a:b5:34:78:73:f6:2b:08:a1:e2:be:cc:f0:00:44:44:
d8:e6:c4:91:ff:cf:85:a6:13:f4:32:80:a0:4f:93:c4:d6:6e:
81:31:c6:8c:64:b2:8b:ab:29:db:25:17:7f:2f:b1:fc:b2:58:
86:71:e2:db:c4:c5:b2:3b:03:f3:5c:38:30:e8:b7:58:24:82:
fb:7a:a5:01:63:50:c7:1c:cf:f9:f8:46:2f:4a:95:f6:91:1c:
93:b2:fa:c7:69:ab:5c:ef:97:9f:25:8e:91:c2:66:97:5f:5e:
46:27:42:5c:ec:99:b2:9f:e3:92:72:3e:7a:66:3f:1c:28:da:
30:95:ac:1f:02:54:eb:4e:61:f1:19:e3:75:57:e8:73:58:11:
e8:48:45:e3:2a:bf:6f:8d:99:c2:fa:82:51:0a:5d:06:54:86:
dc:77:6a:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:50:46 2025 by rpki-client