Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/48506a-33dc-4574-80f3-bde24a2a9ff5/1/_gp5GaPtexO12rOchuBKepcjFHM.mft
File: _gp5GaPtexO12rOchuBKepcjFHM.mft (raw, json)
Hash identifier: 8IuMRZvvzjRIPJjN7xYRanvNHfEY3a5dNEGxwiYT87U=
Subject key identifier: 5C:F0:36:3B:13:54:16:BF:EF:01:01:6F:70:E6:18:C0:E5:CD:F2:F0
Authority key identifier: FE:0A:79:19:A3:ED:7B:13:B5:DA:B3:9C:86:E0:4A:7A:97:23:14:73
Certificate issuer: /CN=fe0a7919a3ed7b13b5dab39c86e04a7a97231473
Certificate serial: 0199FFFEBD527AC41FB0D0D304C8125E8024
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_gp5GaPtexO12rOchuBKepcjFHM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/48506a-33dc-4574-80f3-bde24a2a9ff5/1/_gp5GaPtexO12rOchuBKepcjFHM.mft
Manifest number: 1431
Signing time: Mon 20 Oct 2025 05:01:48 +0000
Manifest this update: Mon 20 Oct 2025 05:01:48 +0000
Manifest next update: Tue 21 Oct 2025 05:01:48 +0000
Files and hashes: 1: AIlfpG57oaa0IcaTUnoTGn0e-MU.roa (hash: doNG5v78wDg1ZSRUc5huAPyd+QjLPudy5eWVSUSR05g=)
2: HT7grAARmQeTl9rgD_I5_Dh0UNk.roa (hash: lbOrIFQ1pfBggQZzBgBo0lXjKP8U8v/LXvuvO53enSU=)
3: _gp5GaPtexO12rOchuBKepcjFHM.crl (hash: bi0C96OctY7S8HNAC9v3s6UPiHEHUAzo33Cz4AZpX0w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/48506a-33dc-4574-80f3-bde24a2a9ff5/1/_gp5GaPtexO12rOchuBKepcjFHM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/48506a-33dc-4574-80f3-bde24a2a9ff5/1/_gp5GaPtexO12rOchuBKepcjFHM.mft
rsync://rpki.ripe.net/repository/DEFAULT/_gp5GaPtexO12rOchuBKepcjFHM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:fe:bd:52:7a:c4:1f:b0:d0:d3:04:c8:12:5e:80:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe0a7919a3ed7b13b5dab39c86e04a7a97231473
Validity
Not Before: Oct 20 05:01:48 2025 GMT
Not After : Oct 21 05:01:48 2025 GMT
Subject: CN=5cf0363b135416bfef01016f70e618c0e5cdf2f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ad:ff:42:db:60:ff:fe:13:89:a4:f1:78:8f:
79:c3:7f:3e:26:e4:7e:de:36:5a:9c:46:00:d1:bb:
6d:d7:c9:84:49:b6:4c:3e:11:33:00:a1:52:0a:21:
a5:9e:5d:ed:04:2b:21:d0:7d:c1:b7:6f:22:76:0c:
f3:81:86:04:77:33:e4:d9:f7:db:9c:62:c3:3b:5b:
4a:7b:83:3a:96:61:91:e8:03:f4:67:da:d3:7d:b1:
f6:ba:49:7f:e9:b6:00:68:3a:70:cf:6a:bb:49:f4:
ac:58:ac:cb:ff:f3:dd:18:c4:44:ca:a3:32:21:44:
42:59:81:fe:cc:c1:a2:59:85:58:94:51:8e:02:f3:
53:6f:c2:64:b7:66:c4:b9:5f:0e:05:62:0a:ac:24:
26:4f:6e:3e:1f:aa:9b:74:25:39:3e:9b:f4:69:d6:
22:85:14:2e:1b:fb:fb:75:0a:1c:c4:0f:75:a7:3d:
d6:a7:a2:42:6b:29:97:4c:ab:48:80:37:f0:d3:7a:
49:cf:47:a3:2c:42:74:c6:c0:51:c7:7d:65:3a:e6:
41:07:a0:7f:d1:03:61:e2:5f:23:83:0f:0d:70:af:
1b:69:b3:74:6c:61:e7:38:4b:6c:f2:07:8d:15:18:
95:40:fb:65:e2:67:1e:c7:3e:a0:0e:ed:f2:94:23:
da:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:F0:36:3B:13:54:16:BF:EF:01:01:6F:70:E6:18:C0:E5:CD:F2:F0
X509v3 Authority Key Identifier:
keyid:FE:0A:79:19:A3:ED:7B:13:B5:DA:B3:9C:86:E0:4A:7A:97:23:14:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_gp5GaPtexO12rOchuBKepcjFHM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/48506a-33dc-4574-80f3-bde24a2a9ff5/1/_gp5GaPtexO12rOchuBKepcjFHM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/48506a-33dc-4574-80f3-bde24a2a9ff5/1/_gp5GaPtexO12rOchuBKepcjFHM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:a7:cd:c0:22:8c:7a:d6:23:d2:47:7e:5c:09:3c:6f:1d:e9:
b3:aa:35:c8:26:b1:5f:50:5a:9e:c3:22:fe:cf:7f:74:58:95:
f9:dc:96:3a:6c:36:ca:e3:fe:a6:44:34:5e:e1:70:1a:dd:5d:
70:a6:20:2f:9e:02:38:56:68:f4:7e:ca:1f:ba:91:0e:66:90:
35:f9:da:db:d3:17:7c:ce:97:b0:8c:25:f6:66:30:31:d3:dc:
8b:c8:c5:27:4d:ad:85:33:6b:35:f6:7b:23:ce:c2:a8:a2:cc:
56:21:dc:e2:55:e3:5f:ea:53:54:72:b9:9a:45:83:b7:61:8f:
25:03:a6:21:74:77:b9:d7:e8:72:d1:bc:44:e3:a9:39:86:ba:
62:60:95:e2:df:7d:8b:c2:73:32:85:a6:85:56:f8:30:f1:74:
8e:98:63:55:96:ed:4b:2e:51:dd:e4:b2:62:0f:7a:66:79:05:
aa:82:8d:06:6b:27:7d:02:e5:10:e7:cf:05:4f:82:ef:09:45:
af:d9:4b:53:5b:e2:e3:0c:95:ba:9e:61:2a:da:1d:08:d7:bd:
fa:32:b1:46:e8:27:ba:13:3a:6b:c6:eb:3f:53:aa:44:c9:0c:
01:c4:3c:4d:84:fc:7d:3a:20:34:a6:c9:bf:5c:88:c8:cd:db:
11:2a:c1:20
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn//r1SesQfsNDTBMgSXoAkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlMGE3OTE5YTNlZDdiMTNiNWRhYjM5Yzg2ZTA0YTdhOTcy
MzE0NzMwHhcNMjUxMDIwMDUwMTQ4WhcNMjUxMDIxMDUwMTQ4WjAzMTEwLwYDVQQD
Eyg1Y2YwMzYzYjEzNTQxNmJmZWYwMTAxNmY3MGU2MThjMGU1Y2RmMmYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzq3/Qttg//4TiaTxeI95w38+JuR+
3jZanEYA0btt18mESbZMPhEzAKFSCiGlnl3tBCsh0H3Bt28idgzzgYYEdzPk2ffb
nGLDO1tKe4M6lmGR6AP0Z9rTfbH2ukl/6bYAaDpwz2q7SfSsWKzL//PdGMREyqMy
IURCWYH+zMGiWYVYlFGOAvNTb8Jkt2bEuV8OBWIKrCQmT24+H6qbdCU5Ppv0adYi
hRQuG/v7dQocxA91pz3Wp6JCaymXTKtIgDfw03pJz0ejLEJ0xsBRx31lOuZBB6B/
0QNh4l8jgw8NcK8babN0bGHnOEts8geNFRiVQPtl4mcexz6gDu3ylCPalQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFzwNjsTVBa/7wEBb3DmGMDlzfLwMB8GA1UdIwQY
MBaAFP4KeRmj7XsTtdqznIbgSnqXIxRzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX2dwNUdhUHRleE8xMnJPY2h1QktlcGNqRkhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS80ODUwNmEtMzNkYy00NTc0LTgwZjMt
YmRlMjRhMmE5ZmY1LzEvX2dwNUdhUHRleE8xMnJPY2h1QktlcGNqRkhNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS80ODUwNmEtMzNkYy00NTc0LTgwZjMtYmRlMjRhMmE5ZmY1
LzEvX2dwNUdhUHRleE8xMnJPY2h1QktlcGNqRkhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN6fNwCKM
etYj0kd+XAk8bx3ps6o1yCaxX1BansMi/s9/dFiV+dyWOmw2yuP+pkQ0XuFwGt1d
cKYgL54COFZo9H7KH7qRDmaQNfna29MXfM6XsIwl9mYwMdPci8jFJ02thTNrNfZ7
I87CqKLMViHc4lXjX+pTVHK5mkWDt2GPJQOmIXR3udfoctG8ROOpOYa6YmCV4t99
i8JzMoWmhVb4MPF0jphjVZbtSy5R3eSyYg96ZnkFqoKNBmsnfQLlEOfPBU+C7wlF
r9lLU1vi4wyVup5hKtodCNe9+jKxRugnuhM6a8brP1OqRMkMAcQ8TYT8fTogNKbJ
v1yIyM3bESrBIA==
-----END CERTIFICATE-----
Generated at Mon Oct 20 08:36:00 2025 by rpki-client