Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/57cb04-58ce-433b-93ab-10bc59d8ff8d/1/g0hoQbT0rcViZMWWMIUYKiIORtQ.mft
File: g0hoQbT0rcViZMWWMIUYKiIORtQ.mft (raw, json)
Hash identifier: OntFMNhbgih+tV7VO2t0+gzw8bNXdICa2DvfAWtUuP0=
Subject key identifier: 6D:16:60:F0:69:40:D2:F5:77:60:6F:36:C9:92:14:6D:4B:9A:31:EB
Authority key identifier: 83:48:68:41:B4:F4:AD:C5:62:64:C5:96:30:85:18:2A:22:0E:46:D4
Certificate issuer: /CN=83486841b4f4adc56264c5963085182a220e46d4
Certificate serial: 0199C5698ADB76BA1492B35516F0CF8CCCBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g0hoQbT0rcViZMWWMIUYKiIORtQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/57cb04-58ce-433b-93ab-10bc59d8ff8d/1/g0hoQbT0rcViZMWWMIUYKiIORtQ.mft
Manifest number: 05C3
Signing time: Wed 08 Oct 2025 20:00:52 +0000
Manifest this update: Wed 08 Oct 2025 20:00:52 +0000
Manifest next update: Thu 09 Oct 2025 20:00:52 +0000
Files and hashes: 1: 5hNBi4pOh8tuQ2-hbUmZAAcoj0g.roa (hash: bvf6+FGQm47HOMj5UevrWk1RDXzOnQeu8ZcjR9Z2g1E=)
2: VnV_NALClcugVnJ8tM0-ssB-Wvo.roa (hash: i5vFppJbIjgrNIbkedUgagHC+ZhmU+v4i2sVl3277z4=)
3: g0hoQbT0rcViZMWWMIUYKiIORtQ.crl (hash: 3F7krDcDpGGz26QrJ33JfzP5/3dcgu57jqgZ2/XodBU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/57cb04-58ce-433b-93ab-10bc59d8ff8d/1/g0hoQbT0rcViZMWWMIUYKiIORtQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/57cb04-58ce-433b-93ab-10bc59d8ff8d/1/g0hoQbT0rcViZMWWMIUYKiIORtQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/g0hoQbT0rcViZMWWMIUYKiIORtQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 13:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c5:69:8a:db:76:ba:14:92:b3:55:16:f0:cf:8c:cc:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83486841b4f4adc56264c5963085182a220e46d4
Validity
Not Before: Oct 8 20:00:52 2025 GMT
Not After : Oct 9 20:00:52 2025 GMT
Subject: CN=6d1660f06940d2f577606f36c992146d4b9a31eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c4:e1:c4:cf:ec:9b:27:05:e5:82:b1:82:56:
8e:80:70:b0:ff:8e:7c:eb:b4:e6:41:a8:a2:a6:eb:
f9:97:45:54:4d:fd:5b:3b:44:95:d6:9f:26:b0:84:
4b:1a:a0:8c:7e:0f:db:06:ad:93:64:59:a7:b2:67:
89:12:7e:e7:20:75:ff:b3:71:d6:9a:09:de:5c:b0:
46:b3:b0:1c:0e:73:70:aa:ca:98:83:26:38:0e:88:
5e:26:4b:17:32:2b:0d:f0:8a:c2:56:75:14:28:84:
47:9e:59:ad:23:c9:79:5a:a2:ea:ec:f0:07:09:e7:
a3:b1:3e:7a:95:8c:57:02:2e:21:1d:d5:00:8f:11:
8d:1e:4c:81:ff:58:d3:de:b4:d3:4f:1d:a8:1a:0a:
4b:d3:30:26:db:de:3e:24:66:41:06:92:48:15:dd:
e2:41:d8:fd:85:81:09:e3:12:40:d2:91:4e:b1:a8:
b9:1f:5a:69:c1:c0:27:aa:33:61:74:c5:c4:db:85:
bc:0c:b3:ff:24:eb:31:a8:b8:ae:79:6c:0a:e1:1d:
45:84:be:5c:25:d9:c2:95:f9:ba:f5:c7:21:12:d2:
43:13:c0:9b:f3:d4:b0:01:99:08:1c:66:43:a4:5b:
d4:85:71:e6:a6:5a:3e:dd:c4:14:b4:6e:a4:7a:92:
fc:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:16:60:F0:69:40:D2:F5:77:60:6F:36:C9:92:14:6D:4B:9A:31:EB
X509v3 Authority Key Identifier:
keyid:83:48:68:41:B4:F4:AD:C5:62:64:C5:96:30:85:18:2A:22:0E:46:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g0hoQbT0rcViZMWWMIUYKiIORtQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/57cb04-58ce-433b-93ab-10bc59d8ff8d/1/g0hoQbT0rcViZMWWMIUYKiIORtQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/57cb04-58ce-433b-93ab-10bc59d8ff8d/1/g0hoQbT0rcViZMWWMIUYKiIORtQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:65:ce:5e:dd:cd:03:45:41:70:f3:62:49:b8:bc:4a:e6:d3:
0d:9f:bf:9b:69:c2:6d:f3:cb:ba:6d:44:47:47:7b:cf:c8:28:
ea:eb:05:59:86:af:cb:9a:3c:3e:87:c4:ea:5e:cf:50:48:c3:
02:ab:e3:86:80:a7:5a:75:cf:60:72:f3:2a:9d:f0:fb:07:ff:
18:c4:c9:25:03:f0:3a:6d:5a:64:61:3e:94:4a:05:c8:be:85:
1a:50:00:93:b3:cf:1a:60:f9:23:61:f7:36:83:3b:42:05:2d:
54:1c:3b:e1:00:b8:8a:2b:99:a8:72:0e:6e:3a:47:df:e0:ad:
f0:fc:73:cc:03:f7:cb:ac:99:8a:ce:b6:c3:6f:64:65:34:34:
72:0f:62:1d:26:7a:e2:95:c2:8a:69:d0:74:f9:7a:7e:82:63:
77:d6:2b:a0:7b:b1:cf:a6:37:1f:15:bf:3a:20:c3:bf:f4:68:
42:2c:d9:54:c2:cc:72:37:ec:b4:6e:a5:27:a3:35:5d:bd:d8:
28:a6:35:9c:5b:aa:0d:eb:38:46:17:13:ee:fc:ba:6b:64:1a:
13:be:23:f3:9e:09:47:9d:7e:e8:ad:4c:c5:40:7b:aa:71:7a:
ab:05:c6:2c:fb:fb:7c:29:6b:af:7e:c9:4d:1c:cb:28:14:59:
67:e6:2d:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 21:30:54 2025 by rpki-client