Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a51c75-ef7b-48ab-870f-460cbe688ce5/1/g5JNIiU91reGmbxdCgEQJ5E-X3A.mft
File: g5JNIiU91reGmbxdCgEQJ5E-X3A.mft (raw, json)
Hash identifier: JmxUMRM+BHffFXbl8AMd/Fr3m70ufAInXcVD9pEiJQA=
Subject key identifier: 5D:C2:37:44:D4:1C:E9:98:E8:C7:D5:A0:03:73:89:8D:E9:63:83:ED
Authority key identifier: 83:92:4D:22:25:3D:D6:B7:86:99:BC:5D:0A:01:10:27:91:3E:5F:70
Certificate issuer: /CN=83924d22253dd6b78699bc5d0a011027913e5f70
Certificate serial: 019921E79B8B8C7EE62732EEC1192F8F168B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g5JNIiU91reGmbxdCgEQJ5E-X3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a51c75-ef7b-48ab-870f-460cbe688ce5/1/g5JNIiU91reGmbxdCgEQJ5E-X3A.mft
Manifest number: 05A8
Signing time: Sun 07 Sep 2025 02:00:50 +0000
Manifest this update: Sun 07 Sep 2025 02:00:50 +0000
Manifest next update: Mon 08 Sep 2025 02:00:50 +0000
Files and hashes: 1: g5JNIiU91reGmbxdCgEQJ5E-X3A.crl (hash: slxEnqwaZdeUpd2fPAIfrLCKe09B/iTjCLlCBmswUzc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a51c75-ef7b-48ab-870f-460cbe688ce5/1/g5JNIiU91reGmbxdCgEQJ5E-X3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/a51c75-ef7b-48ab-870f-460cbe688ce5/1/g5JNIiU91reGmbxdCgEQJ5E-X3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/g5JNIiU91reGmbxdCgEQJ5E-X3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 02:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:e7:9b:8b:8c:7e:e6:27:32:ee:c1:19:2f:8f:16:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83924d22253dd6b78699bc5d0a011027913e5f70
Validity
Not Before: Sep 7 02:00:50 2025 GMT
Not After : Sep 8 02:00:50 2025 GMT
Subject: CN=5dc23744d41ce998e8c7d5a00373898de96383ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:0c:52:af:4c:73:24:5c:a2:03:44:a1:d7:b2:
e1:31:6c:ea:af:de:3d:25:33:36:45:1c:09:3c:a9:
26:3b:37:0d:74:84:28:c0:a6:31:18:87:89:1d:92:
30:96:7f:0e:0c:dd:a3:8f:fd:0c:8e:c3:0f:46:02:
a0:fb:5f:f6:97:b1:d0:46:d5:69:93:20:e4:9a:de:
18:ae:5f:08:28:9c:8a:a8:81:9d:0f:10:18:db:cd:
e0:8c:b6:e7:ca:77:82:bd:22:75:6b:71:94:a0:68:
7b:23:1a:25:d5:34:cf:05:ea:a4:5e:15:c3:c9:7c:
a9:27:8a:64:5f:19:df:a0:75:78:83:f4:c2:c6:33:
a5:64:c7:24:31:66:67:92:8e:a2:55:b5:1b:8f:82:
4c:34:de:1f:ef:20:27:9d:d8:21:b9:a6:f0:f3:b4:
47:b1:3a:b4:32:19:77:13:3f:fd:64:47:01:38:af:
4d:b0:b3:6d:d2:c9:8d:4b:a5:66:0a:81:1b:e9:57:
5e:b6:44:f9:d6:9b:50:2c:67:35:47:00:db:0e:8a:
9d:80:60:8a:f2:d3:48:37:18:6c:47:48:57:f7:cc:
8b:7c:38:f1:b7:b4:3c:24:9e:e2:85:e7:fb:af:5d:
99:0e:52:92:8d:c5:9a:eb:f5:a5:ce:21:43:91:16:
e8:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:C2:37:44:D4:1C:E9:98:E8:C7:D5:A0:03:73:89:8D:E9:63:83:ED
X509v3 Authority Key Identifier:
keyid:83:92:4D:22:25:3D:D6:B7:86:99:BC:5D:0A:01:10:27:91:3E:5F:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g5JNIiU91reGmbxdCgEQJ5E-X3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a51c75-ef7b-48ab-870f-460cbe688ce5/1/g5JNIiU91reGmbxdCgEQJ5E-X3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a51c75-ef7b-48ab-870f-460cbe688ce5/1/g5JNIiU91reGmbxdCgEQJ5E-X3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:6b:8a:c6:31:6a:89:44:af:67:4b:70:d5:67:90:4e:65:b6:
7a:a4:bb:b3:88:2f:ad:86:69:0e:e2:f7:a6:c3:82:90:ed:9c:
70:4a:9f:dc:11:52:14:02:e3:6b:57:88:2d:4b:bb:c1:6a:b8:
ae:81:97:61:fd:c1:70:50:4d:f8:df:f2:6c:a4:37:0f:0f:88:
56:b9:6a:89:00:3d:ca:8e:09:0a:4b:00:1d:da:bb:e7:75:e1:
0a:ff:6b:4f:e1:67:b9:1a:75:bc:de:7f:18:4b:e5:dc:ef:53:
ee:85:11:a4:91:70:f0:9b:c1:71:46:35:f8:f1:dc:e4:13:dc:
d8:0d:05:19:5a:a5:0f:4e:17:3e:ea:13:16:04:0e:5b:8f:a9:
88:ee:1b:8b:79:58:f1:5e:1e:b3:b1:2d:52:ff:c7:95:35:54:
f2:57:7c:8b:ce:3e:ba:34:6a:2f:9a:8f:ac:8d:eb:7f:9c:37:
01:81:e7:21:9d:e9:61:a6:66:2e:4d:c9:23:cc:6a:33:cf:c5:
7c:12:f7:3c:6d:e9:2b:4e:19:6a:b9:ca:4c:bd:5b:21:43:08:
e7:2f:39:8d:15:aa:ff:30:6a:5a:e8:a8:04:57:ad:98:a6:43:
59:8a:90:b4:bb:33:c8:93:97:7a:ed:85:5f:fe:11:88:76:7d:
a4:0e:d2:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:09:30 2025 by rpki-client