Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/52cf99-e798-4cab-a303-a3b06d4e4775/1/5Go_g4aIhDdY0oBXAH3GzSiY7Mo.mft
File: 5Go_g4aIhDdY0oBXAH3GzSiY7Mo.mft (raw, json)
Hash identifier: kadmRyfQ4HXbtB4iM/X3IEvISwLBFZlhu4XYiaSRtVE=
Subject key identifier: 32:43:43:57:2F:D8:E1:38:67:B8:7D:C7:5E:83:5B:DB:B7:55:E6:DD
Authority key identifier: E4:6A:3F:83:86:88:84:37:58:D2:80:57:00:7D:C6:CD:28:98:EC:CA
Certificate issuer: /CN=e46a3f838688843758d28057007dc6cd2898ecca
Certificate serial: 019A722642CB719A63ACD5851478F1D28296
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Go_g4aIhDdY0oBXAH3GzSiY7Mo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/52cf99-e798-4cab-a303-a3b06d4e4775/1/5Go_g4aIhDdY0oBXAH3GzSiY7Mo.mft
Manifest number: 142D
Signing time: Tue 11 Nov 2025 09:01:40 +0000
Manifest this update: Tue 11 Nov 2025 09:01:40 +0000
Manifest next update: Wed 12 Nov 2025 09:01:40 +0000
Files and hashes: 1: 0x1lqWA0KZOHOORQhJDoeRssVQ0.roa (hash: 7p6FxiYzO+LvJNJvXWwPz8wlUJ/sKTNUZeXhx0HXHCY=)
2: 5Go_g4aIhDdY0oBXAH3GzSiY7Mo.crl (hash: WFKYoiR/bqCJaAnb+d7ZrbGJ128jl5CxE5gsSe12/Nc=)
3: K79jAuNL4y91z3YYrxbmadc1H3A.roa (hash: Ce4Ha+miko3MGw4iNBYx8goUwnDzuBC5+eb8kUBjaGo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/52cf99-e798-4cab-a303-a3b06d4e4775/1/5Go_g4aIhDdY0oBXAH3GzSiY7Mo.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/52cf99-e798-4cab-a303-a3b06d4e4775/1/5Go_g4aIhDdY0oBXAH3GzSiY7Mo.mft
rsync://rpki.ripe.net/repository/DEFAULT/5Go_g4aIhDdY0oBXAH3GzSiY7Mo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:42:cb:71:9a:63:ac:d5:85:14:78:f1:d2:82:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e46a3f838688843758d28057007dc6cd2898ecca
Validity
Not Before: Nov 11 09:01:40 2025 GMT
Not After : Nov 12 09:01:40 2025 GMT
Subject: CN=324343572fd8e13867b87dc75e835bdbb755e6dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:e4:cd:42:11:40:e2:42:a4:80:6e:66:b3:fc:
6c:a6:4c:09:35:98:6f:51:45:52:3f:90:ea:9a:b5:
d4:da:e1:45:8d:f2:b8:3d:1a:42:d9:22:4e:7c:c3:
8b:33:3b:8d:60:83:1b:dd:db:3c:ce:b4:5d:7a:2e:
ec:d1:49:5a:d4:ae:ca:13:b1:b8:8a:92:2a:40:13:
a3:b4:c3:b4:4b:99:5e:67:c2:06:fc:3c:32:e3:4e:
6b:d0:9b:c8:07:e9:be:7d:c8:97:78:7d:f4:db:67:
20:24:ad:39:a2:ae:53:de:8d:95:d7:28:08:73:ab:
18:88:8f:d9:3a:e7:cf:2e:25:b1:74:df:6a:e8:5a:
d5:15:6b:cf:9f:94:7b:86:fe:1c:f4:35:a8:87:a7:
5e:96:84:c3:ad:89:92:c7:15:52:9c:12:85:f1:16:
98:f3:16:2f:b0:4a:c5:6f:e6:47:87:79:7c:56:ec:
68:27:bb:0e:9f:3f:be:6a:a5:00:ca:57:e8:1f:b1:
4f:f2:c4:42:ca:5d:1f:ef:04:37:98:21:25:55:2f:
86:ab:04:1a:4b:95:34:87:a4:8f:c1:02:4a:e4:fd:
fd:09:a7:ba:78:1d:83:ff:e9:e3:2e:45:65:8a:f9:
da:10:54:f4:1b:70:e1:50:fe:a2:f6:b5:88:74:c7:
71:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:43:43:57:2F:D8:E1:38:67:B8:7D:C7:5E:83:5B:DB:B7:55:E6:DD
X509v3 Authority Key Identifier:
keyid:E4:6A:3F:83:86:88:84:37:58:D2:80:57:00:7D:C6:CD:28:98:EC:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Go_g4aIhDdY0oBXAH3GzSiY7Mo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/52cf99-e798-4cab-a303-a3b06d4e4775/1/5Go_g4aIhDdY0oBXAH3GzSiY7Mo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/52cf99-e798-4cab-a303-a3b06d4e4775/1/5Go_g4aIhDdY0oBXAH3GzSiY7Mo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:0d:18:33:22:a7:74:3c:19:7c:00:11:3e:ed:ed:4f:f0:1a:
9c:8c:72:3a:f1:3a:d3:30:6d:b4:ef:d8:f6:5e:76:ff:5d:b3:
f7:2e:24:bb:95:aa:d1:51:36:de:6e:29:25:11:81:60:bd:f5:
4e:e3:4a:ba:e5:b6:2f:0d:c9:67:f3:8b:f6:c6:71:6e:46:f1:
74:02:fd:25:0e:f6:7b:6f:02:a8:d9:1e:ea:f3:61:5f:44:ec:
f6:20:08:e9:60:77:c0:a2:70:24:ac:e6:cc:c4:b1:18:ff:a0:
40:1e:24:af:d6:cc:0b:e0:9d:8b:6b:24:49:eb:b6:5f:76:a2:
e4:66:98:fe:b2:62:90:31:ca:bf:fb:2c:fe:36:e4:19:87:14:
1c:79:92:01:d0:28:36:e5:a6:47:8d:60:a4:a2:08:c9:59:9e:
cb:7e:0f:bb:20:ab:0f:3f:c4:ce:85:e5:71:d7:d7:61:17:e6:
76:a2:12:a9:4d:09:f5:de:bd:ef:d0:20:05:6e:38:85:f3:e7:
c8:81:57:a7:fa:fe:df:1c:41:30:d9:07:44:04:95:58:a9:38:
63:2c:9c:d7:43:7c:16:a5:b2:b8:2c:0e:10:ab:7c:cb:e0:07:
2c:5e:72:d4:ea:74:09:72:95:b6:62:0d:d1:26:83:32:19:2b:
13:d3:7a:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:51:48 2025 by rpki-client