Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/69ed29-af4e-4524-adfb-e15437380099/1/g5ka_NRV6xsXT8-J-OEOr39ws1U.mft
File: g5ka_NRV6xsXT8-J-OEOr39ws1U.mft (raw, json)
Hash identifier: VrXAGgqoBZztdFh8aUSg1wRL2iX+ggQoGfIj/3z3YWM=
Subject key identifier: CF:ED:82:CE:E1:EA:E5:F0:68:CC:CA:12:38:F3:68:A9:EE:77:E5:E8
Authority key identifier: 83:99:1A:FC:D4:55:EB:1B:17:4F:CF:89:F8:E1:0E:AF:7F:70:B3:55
Certificate issuer: /CN=83991afcd455eb1b174fcf89f8e10eaf7f70b355
Certificate serial: 019A25536149E2A5326CBA30BE9ED543B6DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g5ka_NRV6xsXT8-J-OEOr39ws1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/69ed29-af4e-4524-adfb-e15437380099/1/g5ka_NRV6xsXT8-J-OEOr39ws1U.mft
Manifest number: 1717
Signing time: Mon 27 Oct 2025 11:00:12 +0000
Manifest this update: Mon 27 Oct 2025 11:00:12 +0000
Manifest next update: Tue 28 Oct 2025 11:00:12 +0000
Files and hashes: 1: JTjIGaNjpzftNO-kFk1BOWWIlR0.roa (hash: QhcjtouUn5V8upOm/6e13CmIXaLDrm57wRtRFJI8pfQ=)
2: RDn2kmSbVnJw7wdF-wZa8vdfrGk.roa (hash: PPPp3w62aTSvX+pwPQUqMdFImPKU9XLCtHdMFcqqr1A=)
3: Udl4Y8sRVjim2rAFzxKQuecnclg.roa (hash: OhoAEIIYExt/Quqv/8KIxubBzRvH8hZ7uh526RWh78k=)
4: g5ka_NRV6xsXT8-J-OEOr39ws1U.crl (hash: w9ywMuUGM4Aw5yLgJVaS3kQ05fZwqgNDkT+NQqNshuQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/69ed29-af4e-4524-adfb-e15437380099/1/g5ka_NRV6xsXT8-J-OEOr39ws1U.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/69ed29-af4e-4524-adfb-e15437380099/1/g5ka_NRV6xsXT8-J-OEOr39ws1U.mft
rsync://rpki.ripe.net/repository/DEFAULT/g5ka_NRV6xsXT8-J-OEOr39ws1U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 08:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:25:53:61:49:e2:a5:32:6c:ba:30:be:9e:d5:43:b6:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83991afcd455eb1b174fcf89f8e10eaf7f70b355
Validity
Not Before: Oct 27 11:00:12 2025 GMT
Not After : Oct 28 11:00:12 2025 GMT
Subject: CN=cfed82cee1eae5f068ccca1238f368a9ee77e5e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:6e:5f:77:eb:91:f1:44:d6:0f:92:1e:1d:0a:
b4:1e:bc:fa:b8:6a:9d:ea:79:16:e8:5d:77:37:44:
31:98:40:fb:00:0e:6a:f6:6b:3f:4c:7f:aa:aa:77:
fa:92:d0:aa:e4:cd:27:fb:90:a4:4a:73:77:07:62:
ab:c5:17:9f:8b:5d:f7:c9:ce:eb:a0:51:3f:81:47:
59:26:1c:8d:90:f6:af:3f:b0:80:a6:cc:d0:76:a1:
5a:b2:31:89:06:49:fb:f9:74:59:89:0d:3e:7c:de:
d6:28:7a:0e:fd:26:b4:6d:a0:b2:dc:1d:5e:39:ae:
58:f8:cc:8d:8d:23:15:06:67:b2:1c:ba:5a:a0:62:
af:fd:6f:18:ce:40:71:96:00:fc:4f:45:be:c6:ea:
88:69:52:3a:2e:13:42:1c:5c:82:42:ab:d6:b3:73:
1b:f9:48:c6:9c:b2:8f:f5:9f:cd:7c:5d:f9:34:53:
87:0d:16:2a:14:d7:6f:60:8c:c8:6e:6c:20:ef:15:
99:5e:d5:46:d5:30:57:6e:30:e8:6c:87:09:de:70:
0d:7d:86:01:e7:42:b7:21:40:cb:2f:c9:fd:49:61:
9f:2b:75:d9:18:07:14:49:be:7d:d0:c1:a5:34:c7:
78:86:48:dc:96:91:82:73:09:ff:b9:91:9f:00:32:
40:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:ED:82:CE:E1:EA:E5:F0:68:CC:CA:12:38:F3:68:A9:EE:77:E5:E8
X509v3 Authority Key Identifier:
keyid:83:99:1A:FC:D4:55:EB:1B:17:4F:CF:89:F8:E1:0E:AF:7F:70:B3:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g5ka_NRV6xsXT8-J-OEOr39ws1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/69ed29-af4e-4524-adfb-e15437380099/1/g5ka_NRV6xsXT8-J-OEOr39ws1U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/69ed29-af4e-4524-adfb-e15437380099/1/g5ka_NRV6xsXT8-J-OEOr39ws1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:78:b6:1c:00:a7:9b:7c:ab:1a:8c:73:5a:ff:e4:6c:7d:a8:
3c:fe:38:46:44:52:9b:fa:c4:1b:42:4d:e0:50:d5:d0:34:59:
fc:3f:23:23:93:8d:45:16:25:b4:ea:8b:9d:a2:9a:f4:31:26:
f4:79:9e:f1:9c:91:15:df:e5:0a:47:0f:41:5f:2e:54:91:c5:
86:6c:ec:a2:64:d0:13:e7:5b:87:f5:16:1a:9b:4c:89:3f:b2:
96:fa:11:7a:a6:35:be:e5:9d:57:fb:cd:a0:6e:9b:63:86:61:
13:55:de:17:44:2b:6c:17:00:ca:c9:ff:37:35:bd:28:16:d3:
cc:57:5d:d9:e6:96:49:d2:ad:e2:79:2f:1f:30:24:e6:11:ce:
c1:c6:71:fb:fc:e3:d5:c5:16:d2:61:47:86:aa:62:97:13:b0:
5b:5c:db:c9:f9:c9:2f:b9:b9:73:d3:34:a1:aa:e2:28:d9:b3:
f7:c0:cb:66:1a:a4:33:9c:f5:bd:82:4c:7a:d5:84:99:ce:07:
fc:f5:b2:85:a5:69:b5:a3:17:6c:78:85:22:40:0f:43:ff:5b:
7b:98:ea:1a:90:bc:b6:b1:80:1b:21:c6:cd:db:f9:af:91:72:
09:3c:42:9f:c1:4f:2d:da:a0:b9:c3:5d:a6:70:e6:a9:4e:02:
2f:90:e6:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 12:32:08 2025 by rpki-client