Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/d808c5-4064-4e8c-8766-49fa58fedff3/1/g5DhBCut2I6W5jnqoK0CMofqUH8.mft
File: g5DhBCut2I6W5jnqoK0CMofqUH8.mft (raw, json)
Hash identifier: uD+PSju2tWEhMhgpWF/UeK0yqbyyyJutxRmfZv83pR8=
Subject key identifier: 03:A4:37:18:BF:C0:12:01:C2:C7:FF:B4:82:2D:AA:40:3C:0F:F7:28
Authority key identifier: 83:90:E1:04:2B:AD:D8:8E:96:E6:39:EA:A0:AD:02:32:87:EA:50:7F
Certificate issuer: /CN=8390e1042badd88e96e639eaa0ad023287ea507f
Certificate serial: 019A24AEC69169A86D6E97BCACDA5A51F9DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g5DhBCut2I6W5jnqoK0CMofqUH8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/d808c5-4064-4e8c-8766-49fa58fedff3/1/g5DhBCut2I6W5jnqoK0CMofqUH8.mft
Manifest number: 16F6
Signing time: Mon 27 Oct 2025 08:00:25 +0000
Manifest this update: Mon 27 Oct 2025 08:00:25 +0000
Manifest next update: Tue 28 Oct 2025 08:00:25 +0000
Files and hashes: 1: L07o_vv656M9OEJjc4BFj7rpTc8.roa (hash: RSQDee8PToqw8SZNKDk+n8QFVV+DzoM0xmaXuyUh35A=)
2: g5DhBCut2I6W5jnqoK0CMofqUH8.crl (hash: vRpbU4yfFhJ6DOqzRpC2GL+l0f6VOvM8WCmfBZifFYo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/d808c5-4064-4e8c-8766-49fa58fedff3/1/g5DhBCut2I6W5jnqoK0CMofqUH8.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/d808c5-4064-4e8c-8766-49fa58fedff3/1/g5DhBCut2I6W5jnqoK0CMofqUH8.mft
rsync://rpki.ripe.net/repository/DEFAULT/g5DhBCut2I6W5jnqoK0CMofqUH8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 08:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:24:ae:c6:91:69:a8:6d:6e:97:bc:ac:da:5a:51:f9:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8390e1042badd88e96e639eaa0ad023287ea507f
Validity
Not Before: Oct 27 08:00:25 2025 GMT
Not After : Oct 28 08:00:25 2025 GMT
Subject: CN=03a43718bfc01201c2c7ffb4822daa403c0ff728
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:6b:ea:58:55:08:b9:00:8b:55:7a:86:df:2d:
b8:86:8a:57:b1:1d:5f:84:66:53:f7:e6:d0:5a:cb:
d2:4b:55:66:42:cc:a0:65:2d:34:6f:4d:d1:8a:71:
09:2e:6d:87:0e:fb:be:aa:f9:50:81:2f:02:5f:3b:
18:1f:b4:21:6f:10:1c:6b:84:f2:08:35:80:42:fe:
6e:7a:2d:5c:aa:d3:df:7a:2f:4f:16:43:30:4d:7b:
e8:d0:e7:12:aa:73:ad:ca:68:c4:6b:54:1f:8c:8e:
98:bd:37:e1:e4:c4:4d:e2:60:e8:e2:66:cf:c1:95:
0d:bd:ae:93:11:81:bb:2d:e2:b0:db:de:c7:b1:32:
39:79:df:6f:06:a4:2b:e4:84:64:61:2d:f8:58:94:
48:71:34:61:4c:ca:36:bd:cd:4d:ab:f8:fb:0c:5d:
69:c1:b7:71:5b:63:19:01:86:b1:42:87:ca:a0:05:
2f:81:d8:eb:9a:7b:06:58:52:b8:e5:29:0c:bf:3b:
2a:ba:ee:75:78:af:b2:d5:70:bf:a1:ce:81:c2:2b:
a2:2f:10:40:ae:0a:65:bc:28:49:33:fa:5e:9a:4d:
8e:9c:f5:be:ed:10:aa:ae:c3:89:20:be:d9:7b:23:
58:56:3b:06:29:e8:41:52:dc:6e:1f:1d:55:dd:21:
1f:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:A4:37:18:BF:C0:12:01:C2:C7:FF:B4:82:2D:AA:40:3C:0F:F7:28
X509v3 Authority Key Identifier:
keyid:83:90:E1:04:2B:AD:D8:8E:96:E6:39:EA:A0:AD:02:32:87:EA:50:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g5DhBCut2I6W5jnqoK0CMofqUH8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/d808c5-4064-4e8c-8766-49fa58fedff3/1/g5DhBCut2I6W5jnqoK0CMofqUH8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/d808c5-4064-4e8c-8766-49fa58fedff3/1/g5DhBCut2I6W5jnqoK0CMofqUH8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:b0:e4:c1:af:1c:58:00:77:60:c3:32:19:29:e7:9f:6b:89:
a9:42:58:62:1b:78:58:cd:eb:ca:6a:3d:2f:72:2c:54:78:8a:
7d:e7:bc:dd:a3:94:19:90:25:8e:fe:53:4c:fb:e0:d2:c8:95:
a3:53:e5:73:69:8f:de:48:40:ad:59:63:37:59:69:4c:16:25:
df:c0:b1:53:e6:c0:4d:7d:c1:2e:7a:f4:2e:e9:30:cd:0b:66:
40:b3:8d:39:29:df:f4:da:f2:85:4b:7b:2e:08:b6:6c:34:43:
3b:4b:17:fd:3d:01:b8:c1:54:d4:24:c2:a0:8b:d6:8c:fa:f9:
f6:7d:f7:ae:8b:ce:c9:91:af:90:8a:5b:86:e8:08:39:0c:9a:
3e:3d:a2:c9:a9:dc:b1:26:03:e5:39:58:aa:04:4a:45:e9:f2:
17:69:2e:4a:59:4a:01:7b:4e:76:85:7b:20:a6:22:43:27:f8:
2e:3d:a7:8b:88:27:76:8b:43:c8:12:02:09:e5:6c:4a:cc:15:
f4:6d:b6:4d:9e:ec:0e:6e:1d:67:d4:17:33:2e:c0:8b:2e:88:
bc:ca:03:05:c4:7f:1b:8b:8f:d2:72:9f:19:15:09:ef:50:8a:
d1:af:7c:43:d4:22:6d:a7:15:2c:b8:58:3e:8f:bd:e0:2d:15:
9d:22:61:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 18:21:28 2025 by rpki-client