
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/42f275-68b7-448d-b956-35bb2e6d0606/1/g5t-FhWgAaW8uW4VSnGvmgtFtdc.mft
File: g5t-FhWgAaW8uW4VSnGvmgtFtdc.mft (raw, json)
Hash identifier: CKujCOrywU88t2dpDFajDlbqVdJN6vb3V6PIiYFKXq0=
Subject key identifier: 25:80:1C:00:B0:5B:B1:0A:B9:F0:55:F5:35:8F:D1:63:D7:26:A7:06
Authority key identifier: 83:9B:7E:16:15:A0:01:A5:BC:B9:6E:15:4A:71:AF:9A:0B:45:B5:D7
Certificate issuer: /CN=839b7e1615a001a5bcb96e154a71af9a0b45b5d7
Certificate serial: 01984A77A7D36A722A94EE3C4C689F328A09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g5t-FhWgAaW8uW4VSnGvmgtFtdc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/42f275-68b7-448d-b956-35bb2e6d0606/1/g5t-FhWgAaW8uW4VSnGvmgtFtdc.mft
Manifest number: 069C
Signing time: Sun 27 Jul 2025 06:00:12 +0000
Manifest this update: Sun 27 Jul 2025 06:00:12 +0000
Manifest next update: Mon 28 Jul 2025 06:00:12 +0000
Files and hashes: 1: g5t-FhWgAaW8uW4VSnGvmgtFtdc.crl (hash: JKydGSqEx13QhIDtLZ2tU0u50qV+f6dJqGKJlUPyfO4=)
2: r0PvjEpnlWFsFe9mhlu-x7uuqW4.roa (hash: v9Sjd6VL0RkK073Ql08i5EoR8baGeigT54elfTpIto4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/42f275-68b7-448d-b956-35bb2e6d0606/1/g5t-FhWgAaW8uW4VSnGvmgtFtdc.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/42f275-68b7-448d-b956-35bb2e6d0606/1/g5t-FhWgAaW8uW4VSnGvmgtFtdc.mft
rsync://rpki.ripe.net/repository/DEFAULT/g5t-FhWgAaW8uW4VSnGvmgtFtdc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:77:a7:d3:6a:72:2a:94:ee:3c:4c:68:9f:32:8a:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=839b7e1615a001a5bcb96e154a71af9a0b45b5d7
Validity
Not Before: Jul 27 06:00:12 2025 GMT
Not After : Jul 28 06:00:12 2025 GMT
Subject: CN=25801c00b05bb10ab9f055f5358fd163d726a706
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:c7:83:e9:93:8b:4e:c2:3f:b6:9b:d5:64:15:
62:45:72:b7:07:25:d1:30:b6:aa:9e:cb:0f:82:a8:
07:ab:71:18:0f:ed:5a:04:a9:59:ab:58:cb:a4:83:
85:c0:3c:5f:a5:9c:61:35:76:78:c5:67:21:bd:dc:
1e:dd:a1:fe:84:6b:80:f1:47:bf:d5:9d:da:35:87:
28:c0:60:a7:ec:d6:a3:06:6b:ea:32:a0:95:fd:9e:
d5:90:07:55:6b:0d:f5:f1:18:dc:c5:13:32:3a:77:
d9:fa:e0:6d:aa:42:cb:71:a0:cf:5e:cb:12:0f:6d:
37:56:d6:ab:8d:ad:c7:f3:46:dc:9b:05:e2:b5:68:
53:8d:8f:b4:6f:d6:53:e3:ef:08:dd:23:b7:9a:4b:
db:73:48:95:94:ba:fe:4e:81:3b:5e:6e:d6:7d:a8:
64:8e:05:30:f1:4f:7f:32:a0:16:cf:0f:14:a7:98:
57:e1:fa:6d:7e:bb:f8:b7:d9:30:f8:50:92:32:28:
5e:5e:97:d9:36:a4:65:27:4a:a7:1d:1a:51:75:c6:
3a:6c:73:60:1f:11:6d:f6:d7:59:35:22:9d:f3:1a:
23:a7:e4:06:4a:fb:33:d2:b7:d3:36:6e:1d:ad:4b:
74:57:de:1a:aa:12:cc:95:b7:0c:1e:fc:85:28:32:
a0:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:80:1C:00:B0:5B:B1:0A:B9:F0:55:F5:35:8F:D1:63:D7:26:A7:06
X509v3 Authority Key Identifier:
keyid:83:9B:7E:16:15:A0:01:A5:BC:B9:6E:15:4A:71:AF:9A:0B:45:B5:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g5t-FhWgAaW8uW4VSnGvmgtFtdc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/42f275-68b7-448d-b956-35bb2e6d0606/1/g5t-FhWgAaW8uW4VSnGvmgtFtdc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/42f275-68b7-448d-b956-35bb2e6d0606/1/g5t-FhWgAaW8uW4VSnGvmgtFtdc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:c9:2c:c8:80:43:a4:ea:64:05:15:ef:20:92:20:06:04:18:
19:00:69:55:45:a8:d6:32:8c:28:18:d6:39:6e:12:e2:f8:eb:
02:9a:96:ac:84:3e:44:3c:f6:21:14:b8:cf:d2:81:75:5f:cb:
5b:b0:91:c7:d6:a6:5a:ce:fc:11:59:b7:01:59:36:5d:12:f6:
b8:6a:ba:19:92:c5:3e:25:e2:98:43:42:25:62:b3:4f:b8:a7:
21:62:e1:ab:bf:cd:c3:b8:40:dc:ff:38:b3:cc:35:07:de:62:
02:57:dd:c6:71:66:32:0a:a0:92:bc:38:05:83:b5:cd:49:a0:
b3:37:a6:f4:1e:1c:c6:19:3c:5b:ab:a3:8a:a6:f1:ce:77:5b:
4b:bf:ea:26:f2:d9:e8:9e:43:f8:85:19:26:37:4d:48:8f:43:
d5:5e:e6:6e:1e:e4:d5:34:6c:fb:55:a5:c9:0c:c7:9a:fe:53:
83:e0:85:3a:f6:9e:26:e0:eb:b0:9f:93:8a:bd:79:92:f8:64:
57:23:a4:2a:33:83:26:0a:01:d1:5e:24:34:6e:e7:43:9b:e9:
92:bc:9b:9b:6a:92:d2:d2:13:40:11:85:4f:0e:c6:61:05:be:
9c:3f:de:d9:e2:55:e6:21:fd:aa:81:25:57:cf:fd:09:14:71:
89:34:9c:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:34:13 2025 by rpki-client