Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/767bd0-b0ef-4114-a58e-ff86bf881648/1/g5qaG34R_ed-Th9X_xGGTO4h8WU.mft
File: g5qaG34R_ed-Th9X_xGGTO4h8WU.mft (raw, json)
Hash identifier: L+LmtpP/kT09wGV6lovwKAGQXZOxkO4sNvkgNDxsjZk=
Subject key identifier: F1:F6:51:18:E4:75:3B:5E:F0:45:DE:E7:4A:AF:3E:28:C4:B4:F8:16
Authority key identifier: 83:9A:9A:1B:7E:11:FD:E7:7E:4E:1F:57:FF:11:86:4C:EE:21:F1:65
Certificate issuer: /CN=839a9a1b7e11fde77e4e1f57ff11864cee21f165
Certificate serial: 019A657CE3A9182EC8DF9D7EA8AB23546C69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g5qaG34R_ed-Th9X_xGGTO4h8WU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/767bd0-b0ef-4114-a58e-ff86bf881648/1/g5qaG34R_ed-Th9X_xGGTO4h8WU.mft
Manifest number: 171B
Signing time: Sat 08 Nov 2025 22:01:14 +0000
Manifest this update: Sat 08 Nov 2025 22:01:14 +0000
Manifest next update: Sun 09 Nov 2025 22:01:14 +0000
Files and hashes: 1: FiNVX28gYght-QYZJvZkKvA8mpg.roa (hash: OWl23RYTlTMxZtrywernX3ASfukLtRAzCghbHPY5Zmc=)
2: az8f5PX7dUfhI93pu-mhMPohiUw.roa (hash: PF7qRr/GcrYr8KFAg2buvtd67qe7aScIHbVhVBnD8/M=)
3: g5qaG34R_ed-Th9X_xGGTO4h8WU.crl (hash: /yGITzB7faPclngxaQqJ/ZLVCdAsZHysHLYG2R0KWAY=)
4: pnar3nU7lsWpYfObm0kbhWvk0to.roa (hash: YBfwP3uxI+fMAH4sE5yvO7xnTJh4Fd6ScTYz4RruI/U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/767bd0-b0ef-4114-a58e-ff86bf881648/1/g5qaG34R_ed-Th9X_xGGTO4h8WU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/767bd0-b0ef-4114-a58e-ff86bf881648/1/g5qaG34R_ed-Th9X_xGGTO4h8WU.mft
rsync://rpki.ripe.net/repository/DEFAULT/g5qaG34R_ed-Th9X_xGGTO4h8WU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 09 Nov 2025 18:36:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:65:7c:e3:a9:18:2e:c8:df:9d:7e:a8:ab:23:54:6c:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=839a9a1b7e11fde77e4e1f57ff11864cee21f165
Validity
Not Before: Nov 8 22:01:14 2025 GMT
Not After : Nov 9 22:01:14 2025 GMT
Subject: CN=f1f65118e4753b5ef045dee74aaf3e28c4b4f816
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:8b:03:e7:95:1c:21:1e:64:40:e9:f9:f8:75:
3b:62:f3:4a:f6:ea:31:14:50:b6:0a:d5:4f:87:fe:
55:59:28:fb:23:68:29:bb:88:fa:bf:a5:83:1a:ec:
96:e6:f2:9b:cd:18:31:14:f7:ea:d5:ae:22:f1:8d:
9a:32:46:47:fb:0a:86:27:17:00:e6:c8:d6:27:d2:
9a:06:61:c1:d9:10:0d:1d:dd:d1:95:ac:ee:a7:10:
0b:76:6d:e7:f8:0a:0e:95:07:3d:d3:77:69:4c:a6:
c2:c9:16:9b:18:22:52:75:01:73:9d:ca:f7:4f:0b:
02:33:20:26:d5:ba:58:ab:f0:35:d2:b8:a9:4e:5b:
5e:58:bc:5d:6e:31:65:8c:61:5f:86:81:65:13:ed:
09:8e:47:9f:8d:7c:9a:6c:09:78:12:11:77:93:e7:
8e:02:46:f7:e9:65:a8:09:6d:db:09:60:96:a1:1c:
c3:77:be:ec:ed:87:ff:22:be:56:e1:b3:3d:fe:16:
22:ce:11:6a:0f:c1:0a:12:1c:09:ae:c8:59:37:68:
56:52:cc:03:a6:b4:e1:34:aa:d6:73:be:6b:dd:61:
24:a8:1c:6a:9a:b1:c7:d7:10:80:7e:f4:d1:ed:23:
a3:49:23:4c:e9:96:cc:09:bf:f4:7c:74:9e:76:25:
29:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:F6:51:18:E4:75:3B:5E:F0:45:DE:E7:4A:AF:3E:28:C4:B4:F8:16
X509v3 Authority Key Identifier:
keyid:83:9A:9A:1B:7E:11:FD:E7:7E:4E:1F:57:FF:11:86:4C:EE:21:F1:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g5qaG34R_ed-Th9X_xGGTO4h8WU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/767bd0-b0ef-4114-a58e-ff86bf881648/1/g5qaG34R_ed-Th9X_xGGTO4h8WU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/767bd0-b0ef-4114-a58e-ff86bf881648/1/g5qaG34R_ed-Th9X_xGGTO4h8WU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:db:80:4a:cc:70:38:53:b9:48:d4:a1:80:45:74:75:29:02:
54:37:db:01:15:fd:47:98:4a:56:2e:04:bd:7f:db:68:6d:f8:
ff:65:bb:ce:14:56:a9:73:f4:7c:c3:ad:30:17:bc:75:ca:3c:
ba:60:64:2a:d8:06:88:bd:ab:af:2b:32:6f:dd:30:93:b3:cb:
95:d9:3a:df:8e:3f:18:bf:63:cb:8e:a5:9e:07:a0:cc:d5:78:
9a:89:dd:91:d3:69:27:e3:35:00:f9:22:d0:a6:c5:2d:8a:6a:
82:ba:b4:04:4d:d6:9c:c9:58:79:ee:40:e7:b2:ca:ef:aa:7f:
a1:86:45:55:60:e5:f9:5a:58:97:26:59:42:35:6e:fe:39:33:
45:f1:aa:4a:fa:f9:a7:86:42:4f:8d:4f:da:81:88:b9:aa:b2:
10:ea:90:58:c6:f7:b2:c3:bf:3b:29:e8:ef:0c:e2:35:81:bf:
82:a9:4c:65:8b:8a:6b:fc:6d:a1:f9:1a:98:1c:f7:d9:ca:4c:
2d:5e:a6:75:bb:62:0e:2f:6f:e5:79:6b:89:a2:a4:04:c5:e6:
3d:3b:96:c4:8e:c4:80:25:03:eb:0b:a0:c4:76:0b:f5:e4:40:
0e:63:11:e0:be:4d:d7:69:5b:e2:ce:d9:6e:68:da:4c:df:ea:
3a:2b:36:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 9 03:41:39 2025 by rpki-client