Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/5b86csrW9LPcMFtMvjEIcFHZg_Y.mft
File: 5b86csrW9LPcMFtMvjEIcFHZg_Y.mft (raw, json)
Hash identifier: K//FMUyyweMYsfXR/H0RFsUKReQGb6aFJ5WG2fe6njE=
Subject key identifier: A2:B3:4A:25:FE:0E:3D:2C:20:4B:FC:84:FB:E1:94:66:90:09:96:B7
Authority key identifier: E5:BF:3A:72:CA:D6:F4:B3:DC:30:5B:4C:BE:31:08:70:51:D9:83:F6
Certificate issuer: /CN=e5bf3a72cad6f4b3dc305b4cbe31087051d983f6
Certificate serial: 019A533FB0EC70A2CD2815F694CCDE4D3C56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5b86csrW9LPcMFtMvjEIcFHZg_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/5b86csrW9LPcMFtMvjEIcFHZg_Y.mft
Manifest number: 1012
Signing time: Wed 05 Nov 2025 09:01:14 +0000
Manifest this update: Wed 05 Nov 2025 09:01:14 +0000
Manifest next update: Thu 06 Nov 2025 09:01:14 +0000
Files and hashes: 1: 0RZPruEGTKhoR1hKNPIRExdYXzg.roa (hash: Ylgp4cjK+Zluy/09si0hlIXpapeYNCr3ajFNEzNms3k=)
2: 5b86csrW9LPcMFtMvjEIcFHZg_Y.crl (hash: KdwAgUznp7JQuMPehLqOPQ9UVtWqv8XFzG5NZdmdybA=)
3: FZgBPNc92MthOGwVWSdqr1P0HSA.roa (hash: KZQtxJF/nJvZgDa2DTtteEZwkrQ1v1OtGNXAavMBEZw=)
4: VwQVaP5PIxPzgzQslxsV-wlq09Y.roa (hash: WHonlIhX4uSQGOOrCo26yMPlgaauP4nxJI/ozD4levU=)
5: XdxSdG11uJFuStkGGDZEuqDpedA.roa (hash: cY0Wtfs/4ERYCWgjaGMffb7og7Xm7Edv+oFQtm2dqsY=)
6: gjjNG2AUNgoUUT8zwJCb0qV39gA.roa (hash: gKOOsRGMh8IWKlduiqod4keZzvv275i5NBRO12AH9MA=)
7: xUGm3kpTiMAlzgkonjqufuYlmQk.roa (hash: 3q3AXsJge0KIrT2tTs/ggx0aF7QEDS7JWPpyt1gZZ38=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/5b86csrW9LPcMFtMvjEIcFHZg_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/5b86csrW9LPcMFtMvjEIcFHZg_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/5b86csrW9LPcMFtMvjEIcFHZg_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 09:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:3f:b0:ec:70:a2:cd:28:15:f6:94:cc:de:4d:3c:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5bf3a72cad6f4b3dc305b4cbe31087051d983f6
Validity
Not Before: Nov 5 09:01:14 2025 GMT
Not After : Nov 6 09:01:14 2025 GMT
Subject: CN=a2b34a25fe0e3d2c204bfc84fbe19466900996b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:87:6e:fa:fe:c7:f3:67:1b:51:ad:ec:05:13:
f3:84:f5:25:dd:76:d1:19:7e:a9:a6:b2:41:e4:2a:
d6:82:61:f6:20:c6:37:ce:a2:1f:e1:51:72:3c:c3:
81:db:8b:f7:e0:96:81:af:24:89:de:fd:c1:78:20:
96:21:82:ad:47:61:46:7b:d7:d7:9b:45:37:fa:5f:
77:4c:91:57:12:36:81:4d:a1:5c:64:df:fd:69:05:
30:a4:2a:54:08:37:11:c7:83:a1:09:c4:39:6a:85:
b6:68:63:dc:bb:fd:c5:8c:ba:55:df:4a:80:ec:eb:
5b:13:be:fb:84:28:1e:2b:27:40:e3:4e:a3:10:5d:
fe:5c:0a:e7:fc:60:78:af:73:39:31:ba:2f:23:95:
90:33:49:2d:24:46:14:c0:6a:d3:af:00:89:81:55:
60:d6:bd:98:0d:6e:9d:28:22:b0:9d:b3:e9:ae:59:
67:80:6f:33:5e:6d:35:fa:08:b7:a4:19:ad:49:90:
50:a6:7e:62:27:34:2e:01:db:3e:40:79:8f:10:88:
89:00:c8:e4:16:17:58:d9:0d:01:7a:25:e0:7d:b4:
df:03:04:be:ee:84:9c:f1:46:45:0e:7e:37:8f:4a:
1d:8f:9a:82:a2:fe:b9:91:06:94:f2:b1:e2:8d:a8:
41:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:B3:4A:25:FE:0E:3D:2C:20:4B:FC:84:FB:E1:94:66:90:09:96:B7
X509v3 Authority Key Identifier:
keyid:E5:BF:3A:72:CA:D6:F4:B3:DC:30:5B:4C:BE:31:08:70:51:D9:83:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b86csrW9LPcMFtMvjEIcFHZg_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/5b86csrW9LPcMFtMvjEIcFHZg_Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/5b86csrW9LPcMFtMvjEIcFHZg_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:94:57:db:97:ed:30:75:8c:c9:02:8d:1f:12:96:fa:e3:ba:
48:59:a7:1b:38:b5:42:86:c1:d4:7d:ae:60:9a:18:5a:b8:55:
60:c3:d7:11:2b:24:e2:a9:19:bd:41:f7:c4:1e:11:5d:da:3c:
f3:f8:95:2c:ed:ce:3c:31:a4:be:6f:8b:2b:36:50:d2:35:b3:
4b:56:21:1b:ae:2c:e5:6b:88:ff:11:36:52:bb:d7:ee:95:05:
6c:84:4e:c6:ef:51:b0:e3:70:58:8f:55:e1:bf:2e:26:a8:99:
a6:30:20:73:c7:46:89:60:ae:b6:ba:dc:fe:dd:b4:21:8a:6d:
af:a3:74:e6:99:27:68:d8:35:4a:8e:b3:74:22:43:14:4e:bc:
09:d7:17:b6:fe:ce:b6:20:22:52:15:e2:95:71:b0:3b:44:ab:
c5:e8:b9:90:c2:f9:6f:e6:88:cc:a7:ea:13:4a:c7:23:9e:51:
10:9f:28:34:a4:59:a3:58:99:ee:92:e2:29:b8:57:33:e3:43:
45:fe:bc:fd:48:c3:fe:27:87:4b:b5:b1:a2:e7:9e:22:1c:61:
b3:f8:88:d8:69:a6:2d:21:86:44:26:2f:04:9c:d7:e3:f4:08:
80:c8:d2:14:72:34:5d:c4:50:78:c3:e5:ae:2b:1a:13:ec:94:
4c:35:f7:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 14:33:48 2025 by rpki-client