Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a51c75-ef7b-48ab-870f-460cbe688ce5/1/g5JNIiU91reGmbxdCgEQJ5E-X3A.mft
File: g5JNIiU91reGmbxdCgEQJ5E-X3A.mft (raw, json)
Hash identifier: N660/eWCX/GXRn+Y5wAyxYddmhfkBgMihiX0cTMrcR0=
Subject key identifier: 1B:A7:6B:A4:A9:5A:FE:2F:24:9E:D3:75:33:B9:90:71:A8:4C:C8:58
Authority key identifier: 83:92:4D:22:25:3D:D6:B7:86:99:BC:5D:0A:01:10:27:91:3E:5F:70
Certificate issuer: /CN=83924d22253dd6b78699bc5d0a011027913e5f70
Certificate serial: 019A71EED6303C5C21E3DEBC98E10E08864A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g5JNIiU91reGmbxdCgEQJ5E-X3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a51c75-ef7b-48ab-870f-460cbe688ce5/1/g5JNIiU91reGmbxdCgEQJ5E-X3A.mft
Manifest number: 0656
Signing time: Tue 11 Nov 2025 08:01:08 +0000
Manifest this update: Tue 11 Nov 2025 08:01:08 +0000
Manifest next update: Wed 12 Nov 2025 08:01:08 +0000
Files and hashes: 1: g5JNIiU91reGmbxdCgEQJ5E-X3A.crl (hash: zXVV+r8uop42yxQBtxzRAN/Z7uuc5R7ra4lkUVvU45g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a51c75-ef7b-48ab-870f-460cbe688ce5/1/g5JNIiU91reGmbxdCgEQJ5E-X3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/a51c75-ef7b-48ab-870f-460cbe688ce5/1/g5JNIiU91reGmbxdCgEQJ5E-X3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/g5JNIiU91reGmbxdCgEQJ5E-X3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:d6:30:3c:5c:21:e3:de:bc:98:e1:0e:08:86:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83924d22253dd6b78699bc5d0a011027913e5f70
Validity
Not Before: Nov 11 08:01:08 2025 GMT
Not After : Nov 12 08:01:08 2025 GMT
Subject: CN=1ba76ba4a95afe2f249ed37533b99071a84cc858
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:1e:cb:39:37:63:74:3b:00:57:74:9d:36:17:
fa:29:3d:f4:76:34:5f:e4:15:89:46:e2:7e:40:c8:
10:e5:da:b4:8f:5d:f9:aa:06:24:80:0f:78:98:0c:
38:44:39:b8:d0:8c:8c:ff:b7:3d:94:5b:8a:99:11:
dc:eb:df:0e:1d:bc:43:e5:69:cc:f0:d6:32:4a:f2:
e2:fb:a9:db:a5:4b:78:a7:88:6d:e7:46:94:15:0c:
ed:e2:2f:a0:20:8b:26:57:a0:25:c2:dc:9e:04:77:
77:73:4c:23:eb:fc:80:d6:a5:b7:e3:95:64:3e:01:
75:92:bd:ce:fd:88:40:2a:87:74:d0:c8:4b:ab:57:
3d:80:d6:2c:e7:a1:de:30:c9:64:b8:b1:cc:8a:64:
f6:d8:60:d5:71:ac:ed:67:32:ab:f5:38:ae:29:2e:
da:33:0b:ee:b0:01:a8:d4:2c:1c:f0:20:59:2f:81:
68:34:23:5a:6d:98:14:73:e3:bd:b1:bd:38:9c:28:
ea:70:4d:75:01:ad:ee:42:ab:1e:03:9e:98:c1:47:
c5:57:18:6e:16:c3:9f:81:8e:15:3f:14:ec:1f:28:
60:e4:d7:63:cd:15:9b:70:b2:dc:04:17:fa:80:33:
1e:9b:bc:bd:21:8e:3e:34:2d:ac:81:4e:be:0a:ad:
2f:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:A7:6B:A4:A9:5A:FE:2F:24:9E:D3:75:33:B9:90:71:A8:4C:C8:58
X509v3 Authority Key Identifier:
keyid:83:92:4D:22:25:3D:D6:B7:86:99:BC:5D:0A:01:10:27:91:3E:5F:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g5JNIiU91reGmbxdCgEQJ5E-X3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a51c75-ef7b-48ab-870f-460cbe688ce5/1/g5JNIiU91reGmbxdCgEQJ5E-X3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a51c75-ef7b-48ab-870f-460cbe688ce5/1/g5JNIiU91reGmbxdCgEQJ5E-X3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:fe:f9:6f:1f:1c:98:55:2b:20:00:3c:c0:b0:d8:4e:34:99:
55:f5:21:4e:ca:90:92:75:8a:0e:c3:53:cc:e6:4e:de:d2:8e:
81:ba:8f:5f:91:5f:87:47:36:c1:d0:26:07:28:fa:98:5a:0f:
96:49:37:36:f3:e2:41:81:e1:0e:71:c0:f9:b2:d3:f2:77:f6:
d0:fe:91:41:72:81:53:ad:70:98:0d:e6:0c:28:f4:ca:df:60:
42:c0:5f:5c:cb:98:29:b7:c3:f4:52:a2:2d:40:72:d8:fb:ef:
50:09:94:fb:55:ac:64:78:b2:5f:9a:78:ee:a3:94:b9:fd:9e:
b4:66:13:cb:5a:3c:0d:57:fe:b4:4d:96:d4:bc:c4:44:52:85:
1b:a4:60:69:ae:9b:a3:4f:7c:49:0c:49:7f:83:28:70:ba:43:
45:5f:6c:c7:ec:6d:c0:07:09:22:ad:8b:9b:13:94:1a:7e:28:
60:f5:49:9d:ab:ed:9a:6e:33:d6:14:0b:b6:46:ce:58:27:e1:
85:b5:8a:e1:0f:05:fa:48:d4:08:fe:9f:92:fb:f2:61:23:70:
13:58:ca:0d:15:61:be:84:81:41:85:37:1b:5c:2b:4f:34:2f:
9e:cd:36:cb:2d:71:cb:a4:14:03:63:5d:e8:a1:f4:ee:91:3e:
6f:0f:b8:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:19:20 2025 by rpki-client