Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/6ea16c-b92f-4041-a508-bb5893a6ac91/1/ga5w39QwUnNv6F8A0phM43a3brM.mft
File: ga5w39QwUnNv6F8A0phM43a3brM.mft (raw, json)
Hash identifier: jbAWpsMI5YBDGKyuDzZR6JRbu7MFstpalYfamZQl2zg=
Subject key identifier: A7:C2:72:CE:C0:B9:79:CD:CE:97:FE:A4:CD:A8:5B:63:6A:85:0C:FB
Authority key identifier: 81:AE:70:DF:D4:30:52:73:6F:E8:5F:00:D2:98:4C:E3:76:B7:6E:B3
Certificate issuer: /CN=81ae70dfd43052736fe85f00d2984ce376b76eb3
Certificate serial: 019A2479593E7753D3222977011BF831F2D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ga5w39QwUnNv6F8A0phM43a3brM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/6ea16c-b92f-4041-a508-bb5893a6ac91/1/ga5w39QwUnNv6F8A0phM43a3brM.mft
Manifest number: 0852
Signing time: Mon 27 Oct 2025 07:02:03 +0000
Manifest this update: Mon 27 Oct 2025 07:02:03 +0000
Manifest next update: Tue 28 Oct 2025 07:02:03 +0000
Files and hashes: 1: PWVVCu9dDfBo5aJQ6tlPGGlV6B0.roa (hash: 7Oj98eAXsnZMzEk2r6cNh4fSjsZETDRb2EQ95CICh04=)
2: ga5w39QwUnNv6F8A0phM43a3brM.crl (hash: JbmEzkrXtQl0N0Jf3pLDV3wxrD4R9Vwi1GrsNcl87S8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/6ea16c-b92f-4041-a508-bb5893a6ac91/1/ga5w39QwUnNv6F8A0phM43a3brM.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/6ea16c-b92f-4041-a508-bb5893a6ac91/1/ga5w39QwUnNv6F8A0phM43a3brM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ga5w39QwUnNv6F8A0phM43a3brM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 07:02:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:24:79:59:3e:77:53:d3:22:29:77:01:1b:f8:31:f2:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81ae70dfd43052736fe85f00d2984ce376b76eb3
Validity
Not Before: Oct 27 07:02:03 2025 GMT
Not After : Oct 28 07:02:03 2025 GMT
Subject: CN=a7c272cec0b979cdce97fea4cda85b636a850cfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:df:fc:9f:0c:94:7a:cf:91:cd:0c:5c:46:eb:
4b:fb:e1:b6:17:98:41:f9:bf:c4:eb:c7:bc:29:91:
dd:25:fd:a0:ea:31:fd:9a:66:d6:58:2a:31:34:6d:
ad:80:e0:57:88:ab:6f:19:3e:3d:50:a5:8b:fa:22:
71:1d:d4:b0:80:af:14:13:42:27:2a:39:58:13:1f:
07:33:a9:04:21:02:b2:2f:f2:61:47:dd:bd:46:b1:
c6:83:9f:87:f1:f6:bd:90:71:91:ea:40:cc:a9:b1:
6b:de:e0:92:6e:cb:65:00:ba:85:c5:f7:a6:00:c8:
ed:64:42:88:1b:e3:db:1c:a8:6b:1f:83:26:ec:4b:
f0:c2:9c:82:cd:5f:4f:34:25:4d:21:1a:c8:51:75:
18:ac:dd:71:b7:69:51:2f:41:ff:8d:66:77:02:94:
84:48:fe:e2:86:6d:a9:be:d8:52:c1:2d:8c:dd:4b:
8a:7b:f3:2c:3e:2a:97:73:f8:ad:3c:9e:0e:27:b4:
eb:a3:3c:dd:b1:05:79:f7:44:e7:3c:42:a0:ac:82:
13:4c:a9:fc:71:da:3b:34:19:c5:5e:d7:59:f7:49:
05:7f:e7:2d:82:78:e5:d2:38:1c:6f:de:06:a9:f6:
35:ff:72:d7:2b:03:4e:6d:40:f9:f7:9e:5a:f0:f4:
59:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:C2:72:CE:C0:B9:79:CD:CE:97:FE:A4:CD:A8:5B:63:6A:85:0C:FB
X509v3 Authority Key Identifier:
keyid:81:AE:70:DF:D4:30:52:73:6F:E8:5F:00:D2:98:4C:E3:76:B7:6E:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ga5w39QwUnNv6F8A0phM43a3brM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/6ea16c-b92f-4041-a508-bb5893a6ac91/1/ga5w39QwUnNv6F8A0phM43a3brM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/6ea16c-b92f-4041-a508-bb5893a6ac91/1/ga5w39QwUnNv6F8A0phM43a3brM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:6b:1f:b9:31:c4:32:d6:34:00:99:92:43:6f:2c:9d:dd:e3:
84:4d:e1:c6:03:80:ce:c9:9c:f1:aa:e8:a1:a8:cc:c1:70:69:
23:c4:2f:f0:f2:b1:27:b7:0b:e4:5a:c2:45:27:b7:c5:ae:98:
b1:ca:c5:0f:c2:ae:1b:67:e1:95:c7:df:29:b1:44:db:7d:c7:
9d:de:4f:b3:43:d7:d3:2f:94:43:18:7c:bd:66:e0:11:9f:55:
19:f5:5e:e2:50:9c:15:a6:e3:49:d7:a5:63:90:f6:b5:5a:45:
4a:f2:55:2d:4c:21:40:dd:ad:a3:06:bd:0a:08:b2:e6:1b:e0:
be:16:4b:39:19:2a:59:4b:74:9b:96:26:93:a8:06:0f:eb:5a:
d5:c5:7a:61:35:6d:da:a6:e5:d7:ab:38:86:cb:02:b6:29:63:
9b:bd:7f:d1:8a:53:81:f6:26:e5:cd:23:3e:1a:64:20:a2:8b:
8e:0c:07:16:65:7d:b6:d6:1d:4a:8a:95:55:c5:cc:f3:4a:71:
8d:93:1e:67:f4:3e:36:cc:f3:e1:31:f6:ae:a7:40:2b:47:83:
fb:f8:6b:3b:4a:34:51:5a:89:56:68:f7:3d:a5:9d:6f:4f:83:
29:24:5b:80:96:85:2a:95:94:6d:3a:41:fa:86:bd:37:74:07:
76:ad:d2:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 09:24:42 2025 by rpki-client