Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/6ea16c-b92f-4041-a508-bb5893a6ac91/1/ga5w39QwUnNv6F8A0phM43a3brM.mft
File: ga5w39QwUnNv6F8A0phM43a3brM.mft (raw, json)
Hash identifier: Y6UV1UJdO/w8XHvfjZGurCNZTPoPdEgtrJNlApW8Fb4=
Subject key identifier: 73:D2:00:52:68:1C:76:7F:8A:60:B3:D2:6B:6B:23:0E:AC:DF:71:83
Authority key identifier: 81:AE:70:DF:D4:30:52:73:6F:E8:5F:00:D2:98:4C:E3:76:B7:6E:B3
Certificate issuer: /CN=81ae70dfd43052736fe85f00d2984ce376b76eb3
Certificate serial: 01993ACC472C02300D6068BC8120506282FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ga5w39QwUnNv6F8A0phM43a3brM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/6ea16c-b92f-4041-a508-bb5893a6ac91/1/ga5w39QwUnNv6F8A0phM43a3brM.mft
Manifest number: 07D9
Signing time: Thu 11 Sep 2025 22:01:30 +0000
Manifest this update: Thu 11 Sep 2025 22:01:30 +0000
Manifest next update: Fri 12 Sep 2025 22:01:30 +0000
Files and hashes: 1: PWVVCu9dDfBo5aJQ6tlPGGlV6B0.roa (hash: 7Oj98eAXsnZMzEk2r6cNh4fSjsZETDRb2EQ95CICh04=)
2: ga5w39QwUnNv6F8A0phM43a3brM.crl (hash: MTj/7isT9IQj7qdWdzVPqzvyJDFJpmCMs7SMN19HJ48=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/6ea16c-b92f-4041-a508-bb5893a6ac91/1/ga5w39QwUnNv6F8A0phM43a3brM.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/6ea16c-b92f-4041-a508-bb5893a6ac91/1/ga5w39QwUnNv6F8A0phM43a3brM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ga5w39QwUnNv6F8A0phM43a3brM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 21:31:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:3a:cc:47:2c:02:30:0d:60:68:bc:81:20:50:62:82:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81ae70dfd43052736fe85f00d2984ce376b76eb3
Validity
Not Before: Sep 11 22:01:30 2025 GMT
Not After : Sep 12 22:01:30 2025 GMT
Subject: CN=73d20052681c767f8a60b3d26b6b230eacdf7183
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:89:2e:6a:7d:f6:f1:31:f0:c7:ec:50:c4:49:
ae:ef:c6:82:2d:74:04:32:06:0c:4e:98:20:b8:7b:
de:88:5b:14:83:27:e5:6f:fe:d5:12:59:48:9e:70:
a0:a8:78:af:ed:23:ad:13:6d:3a:ad:e2:8e:f9:99:
4b:7a:21:40:9b:a7:e3:81:ae:e3:37:cb:2c:73:f5:
03:1a:98:83:bd:3b:83:8a:c1:91:0f:99:f5:14:d7:
07:38:d4:ef:c7:6f:85:4c:ac:ad:ca:3f:9e:d0:c5:
31:e6:94:3a:f5:96:86:a8:93:06:8a:f8:08:8d:ce:
d2:d8:06:19:99:dc:b2:f9:d0:69:25:42:ca:f6:87:
0c:12:9b:e3:8f:32:15:70:82:35:9b:b1:58:1d:7a:
20:34:62:19:9e:db:69:1e:bf:c8:d5:d2:d5:a2:9f:
5d:72:f8:62:de:1d:30:89:69:bb:78:5a:1e:cc:e2:
eb:f4:69:eb:d6:33:ab:db:f7:4d:f0:9c:15:fc:93:
16:9a:7c:50:ba:43:b6:51:e6:ff:2e:ca:6e:85:23:
a0:c5:70:f8:5a:c2:c3:cc:27:ce:9d:dd:bf:60:27:
e4:5a:f8:04:d9:33:7f:b0:3d:d6:50:54:ec:c0:97:
06:6e:6f:d6:6e:29:f9:6e:10:a6:69:41:98:48:a9:
8e:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:D2:00:52:68:1C:76:7F:8A:60:B3:D2:6B:6B:23:0E:AC:DF:71:83
X509v3 Authority Key Identifier:
keyid:81:AE:70:DF:D4:30:52:73:6F:E8:5F:00:D2:98:4C:E3:76:B7:6E:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ga5w39QwUnNv6F8A0phM43a3brM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/6ea16c-b92f-4041-a508-bb5893a6ac91/1/ga5w39QwUnNv6F8A0phM43a3brM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/6ea16c-b92f-4041-a508-bb5893a6ac91/1/ga5w39QwUnNv6F8A0phM43a3brM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cf:00:c8:51:2f:c9:a5:eb:d6:1c:d6:08:7c:8d:1e:5f:30:a1:
bb:30:7d:fd:7e:0c:0e:3b:17:16:2e:9a:cf:4f:4f:07:09:94:
cd:e0:06:5d:cd:b9:e2:78:09:13:16:ec:2c:4b:22:fd:8d:f3:
8f:84:15:c2:f3:94:60:40:91:96:c0:81:53:44:bc:23:12:1e:
0f:ab:25:2c:0b:bb:ad:b3:c9:0e:9b:ea:00:d0:27:d9:d3:73:
d4:dd:aa:f2:bf:c3:70:47:79:43:ef:2a:53:4e:83:74:ce:f4:
53:0f:89:7a:bc:ca:ad:57:7b:8e:1a:76:74:ce:d6:29:61:c5:
9e:d1:fd:79:cb:e5:47:41:32:48:d3:ff:fd:e2:ac:a8:25:bd:
54:61:fb:78:ad:9f:88:1c:ae:45:76:83:2e:f6:c1:27:44:85:
c5:0b:44:32:56:18:f0:ff:2b:6e:68:63:03:50:40:24:84:1c:
0d:f5:85:9b:60:86:c6:4a:3e:67:50:8d:63:2a:4a:6a:00:76:
5a:4e:82:87:86:a0:40:39:c6:21:e9:68:b6:5d:ea:ef:89:d6:
d9:da:ac:e6:93:34:3c:e0:e1:e3:78:1f:dd:91:36:c4:71:47:
79:93:07:25:b9:8a:e3:24:70:ca:e1:bd:80:27:ac:2f:93:d7:
2e:a4:a5:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 12 03:30:25 2025 by rpki-client