
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/A912092CFA11F378852F52266C793AB678233205.mft
File: A912092CFA11F378852F52266C793AB678233205.mft (raw, json)
Hash identifier: 18JoXArfzEfwBMv9WL/kDsNc4wgdPNUTwk6PiF0e5y0=
Subject key identifier: C6:52:32:42:BB:B9:04:66:E7:5A:55:36:42:F2:53:6B:70:A8:14:A0
Authority key identifier: A9:12:09:2C:FA:11:F3:78:85:2F:52:26:6C:79:3A:B6:78:23:32:05
Certificate issuer: /CN=A912092CFA11F378852F52266C793AB678233205
Certificate serial: 5B9C8F403399D8169676AD8A1077CA5E8A336801
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/A912092CFA11F378852F52266C793AB678233205.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/A912092CFA11F378852F52266C793AB678233205.mft
Manifest number: DB
Signing time: Wed 05 Nov 2025 00:01:57 +0000
Manifest this update: Tue 04 Nov 2025 23:56:57 +0000
Manifest next update: Thu 06 Nov 2025 00:12:57 +0000
Files and hashes: 1: 326130393a353463333a613166303a3a2f34342d313238203d3e20323130373936.roa (hash: m/KS3U1L5fK6/ozUyGVO/HofrXSxDH++GoaQCE6VLqY=)
2: 326130393a353463333a613230303a3a2f34302d313238203d3e20323039383734.roa (hash: bwL4xPqc/uz8Pz2knWoJ8zvpAw8HB5XXWez7oPoDaEI=)
3: 326130393a353463333a613130313a3a2f34382d313238203d3e20323135313437.roa (hash: 90FGOeqqLptd8qlXcfjJgcF07gJvM1oxc2QmHLuTM1Y=)
4: 326130393a353463333a613130323a3a2f34382d313238203d3e20323135313437.roa (hash: vs9kXuBMMWCplaNsRIcMMGKaCF4FLRTK4Bq5jqpLQYc=)
5: 3131312e3233352e3135312e302f32342d3332203d3e20323135313437.roa (hash: vew4LNWCVofm5qe2BK5sopfMvrn3w6T63/5S4aLPNx0=)
6: A912092CFA11F378852F52266C793AB678233205.crl (hash: N71eisMs0/OfMvkJ6E4z5hGu75r9S3GSeitujaHrCJM=)
7: 326130393a353463333a613030303a3a2f34302d313238203d3e20323039383734.roa (hash: ca9GKU5mOXVUfI7Du4XvHpxs7R00F6F4l3yz+1HGWmo=)
8: 326130393a353463333a393030303a3a2f33362d3438203d3e20323131303636.roa (hash: xreaSsj1MwZ82lmTtkcSGJaQcTRS3sQKh+9ELDbqOW0=)
9: 326130393a353463333a613130303a3a2f34382d313238203d3e20323135313437.roa (hash: 5vA7kcahmkhnv7Pjx7uA7TrGRG+XVrMF+mKhb2vEG5U=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/A912092CFA11F378852F52266C793AB678233205.crl
rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/A912092CFA11F378852F52266C793AB678233205.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/A912092CFA11F378852F52266C793AB678233205.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:9c:8f:40:33:99:d8:16:96:76:ad:8a:10:77:ca:5e:8a:33:68:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912092CFA11F378852F52266C793AB678233205
Validity
Not Before: Nov 4 23:56:57 2025 GMT
Not After : Nov 6 00:12:57 2025 GMT
Subject: CN=C6523242BBB90466E75A553642F2536B70A814A0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:1f:0a:2c:a4:8c:6b:21:54:1f:ff:c3:9e:d1:
83:0a:22:63:f5:4a:34:81:4f:bf:3b:a2:0e:33:44:
23:2d:25:b6:fc:d4:ee:10:d4:79:0b:9e:99:e0:a2:
81:14:21:29:af:dd:bc:58:ee:a3:43:b8:8a:29:23:
3c:9a:0f:3b:1f:b7:5b:16:c4:a5:93:d1:27:80:0d:
f6:a4:fa:b7:be:b6:30:69:11:47:83:71:26:1b:37:
4c:23:9e:6d:66:64:69:d2:5a:3e:12:b1:33:42:dc:
57:c8:01:5d:32:3d:48:33:ca:de:c1:97:c6:55:56:
00:a7:03:3f:e8:d9:4f:ae:83:19:c2:2a:bc:01:53:
99:74:3c:cb:17:9f:42:8b:ab:f7:48:2e:ef:df:ee:
ef:6f:73:1c:96:0c:4d:4d:4a:d3:25:2a:81:6b:96:
e0:f2:c5:91:25:fd:9d:e5:aa:a7:8e:e2:dd:66:6c:
61:54:ce:c9:65:a7:14:32:27:61:b5:9a:5a:1c:09:
ae:20:f0:dc:c1:54:b0:4e:53:42:7e:84:38:e3:5f:
7a:c6:19:1e:b3:85:e1:83:68:9a:71:3b:e0:f0:c6:
da:15:44:d7:18:5e:c1:e2:92:59:f9:00:50:a5:fd:
f8:0a:80:e2:3b:da:9e:60:66:9f:37:1b:06:96:99:
9c:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:52:32:42:BB:B9:04:66:E7:5A:55:36:42:F2:53:6B:70:A8:14:A0
X509v3 Authority Key Identifier:
keyid:A9:12:09:2C:FA:11:F3:78:85:2F:52:26:6C:79:3A:B6:78:23:32:05
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/A912092CFA11F378852F52266C793AB678233205.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/A912092CFA11F378852F52266C793AB678233205.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/A912092CFA11F378852F52266C793AB678233205.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:27:7d:5d:ec:1a:77:0c:06:fb:b1:17:06:ff:0f:f6:da:94:
9e:91:e9:06:84:a4:ea:b7:ef:28:ed:54:3d:3d:1e:57:80:dc:
26:c1:89:b7:c8:0a:46:73:8e:2c:b7:6f:4f:43:59:39:4a:d9:
bc:c4:35:17:bf:d1:bb:d7:76:98:12:4d:6c:03:fd:7a:35:d4:
1c:18:f9:f4:7a:2a:94:ae:d2:79:0d:72:d5:61:22:0b:fa:b1:
ee:de:ec:80:f3:0a:e4:c8:f6:7e:c5:bd:8c:6d:33:b2:01:e0:
6d:2f:e2:1f:75:62:76:39:e2:2e:8a:c5:60:40:8b:36:de:08:
04:e5:16:2d:9e:d1:c7:10:30:c5:35:3f:00:97:65:f2:c8:5d:
83:6f:81:4c:4f:f2:2d:11:d8:bb:9a:28:17:c4:fd:a6:f9:fe:
82:b3:d1:f4:a2:83:21:46:ca:bd:ed:6a:94:83:78:43:a9:c5:
ba:8c:de:bc:98:d2:a7:4b:da:89:bc:1e:3d:33:d3:b7:d5:42:
6b:46:75:31:c8:07:45:dd:a6:13:ac:ae:93:cf:3c:60:d9:8d:
3e:03:21:1c:f9:9c:81:81:f4:a2:84:5a:04:48:be:3c:5d:6c:
3a:15:7e:51:6f:c7:69:d1:50:3b:d6:aa:d6:68:91:03:e7:5e:
ab:34:2b:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 06:28:07 2025 by rpki-client