Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/a56723-d37c-417b-a8a1-6e22bf436304/1/G_5rmg5omKei6dhNPb9jJ7RT5mI.mft
File: G_5rmg5omKei6dhNPb9jJ7RT5mI.mft (raw, json)
Hash identifier: +d3xvz9d4qRO88ShrHukUuD1dhn67PLB0q3GTGMEpNc=
Subject key identifier: D5:33:29:BF:C1:0E:FD:CB:C7:24:B2:5F:11:4E:0A:9F:F8:92:4E:55
Authority key identifier: 1B:FE:6B:9A:0E:68:98:A7:A2:E9:D8:4D:3D:BF:63:27:B4:53:E6:62
Certificate issuer: /CN=1bfe6b9a0e6898a7a2e9d84d3dbf6327b453e662
Certificate serial: 0199FBEBA8884047C0F9A1E6454DB9CACA29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G_5rmg5omKei6dhNPb9jJ7RT5mI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/a56723-d37c-417b-a8a1-6e22bf436304/1/G_5rmg5omKei6dhNPb9jJ7RT5mI.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 10:02:29 +0000
Manifest this update: Sun 19 Oct 2025 10:02:29 +0000
Manifest next update: Mon 20 Oct 2025 10:02:29 +0000
Files and hashes: 1: EWj-IKBdi-VQbg6FFbIiaaIj7UA.roa (hash: blruzwC9IPFb7cI8V12vzE/ugdCglrr9S2cLxCpCzJI=)
2: G_5rmg5omKei6dhNPb9jJ7RT5mI.crl (hash: quUKJKBl+hNhtVbznVGHUu7zbjRvUCzlRNETwSr0oWg=)
3: l5yAXyPGwA9Y5lyLs2yb1MceJsY.roa (hash: AJ6lbq1xzcp35bTjVgiXhAuT5kBSyVNhwmMHHhgVeKo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/a56723-d37c-417b-a8a1-6e22bf436304/1/G_5rmg5omKei6dhNPb9jJ7RT5mI.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/a56723-d37c-417b-a8a1-6e22bf436304/1/G_5rmg5omKei6dhNPb9jJ7RT5mI.mft
rsync://rpki.ripe.net/repository/DEFAULT/G_5rmg5omKei6dhNPb9jJ7RT5mI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:a8:88:40:47:c0:f9:a1:e6:45:4d:b9:ca:ca:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bfe6b9a0e6898a7a2e9d84d3dbf6327b453e662
Validity
Not Before: Oct 19 10:02:29 2025 GMT
Not After : Oct 20 10:02:29 2025 GMT
Subject: CN=d53329bfc10efdcbc724b25f114e0a9ff8924e55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:1a:44:b5:7a:46:4e:5c:a0:e8:bb:42:c5:74:
3c:8c:bd:98:38:0c:ca:6f:0a:0b:1c:4f:96:9c:58:
e1:93:eb:5d:de:66:ab:6a:02:b4:78:dc:28:fc:02:
cf:4c:36:66:b7:ae:53:be:1e:06:f3:71:ec:b4:f8:
46:0b:ef:a4:5e:f4:4d:bc:c4:25:55:c5:a5:22:f6:
78:58:53:40:33:9a:d2:c8:7e:f8:d1:6d:e7:56:b6:
73:94:02:57:f6:89:e1:39:97:54:b0:f1:b4:cf:b6:
2c:25:09:69:53:09:39:ae:9e:9e:6f:20:12:a9:f9:
8a:2e:63:2c:10:5a:b4:82:18:8b:63:25:95:26:80:
77:dc:33:15:50:7a:f8:1f:74:d0:d1:e9:1c:47:0a:
0e:5f:5a:49:d8:00:6a:54:ff:08:6a:e9:d8:86:43:
be:bf:41:1c:eb:39:0d:bd:e4:d6:a5:4c:4b:89:a7:
37:19:a4:d7:cf:7f:48:ed:49:c5:a1:00:1c:80:a0:
3d:11:64:b9:b8:fe:1f:11:5c:cf:2c:fa:cb:92:09:
e4:41:e3:12:07:13:37:ca:cb:27:7f:bb:d0:78:a2:
57:b2:78:c6:7f:38:49:03:5e:b0:da:24:87:8f:d4:
4c:cb:74:c5:d4:4e:a8:70:40:e3:fb:89:9c:3b:e0:
e1:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:33:29:BF:C1:0E:FD:CB:C7:24:B2:5F:11:4E:0A:9F:F8:92:4E:55
X509v3 Authority Key Identifier:
keyid:1B:FE:6B:9A:0E:68:98:A7:A2:E9:D8:4D:3D:BF:63:27:B4:53:E6:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G_5rmg5omKei6dhNPb9jJ7RT5mI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/a56723-d37c-417b-a8a1-6e22bf436304/1/G_5rmg5omKei6dhNPb9jJ7RT5mI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/a56723-d37c-417b-a8a1-6e22bf436304/1/G_5rmg5omKei6dhNPb9jJ7RT5mI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:8e:83:80:41:31:37:b2:80:fc:60:10:d1:74:6e:8e:40:11:
94:83:7b:78:9d:de:c8:02:6c:a0:e1:c9:b0:ba:db:74:80:be:
1f:d1:29:ff:1e:7c:a1:8e:8a:c1:ba:8c:f0:8a:c1:3f:27:b9:
05:45:db:52:a8:e6:7d:76:1c:7f:c5:40:37:10:2d:fd:98:39:
6d:be:e2:8d:b9:d2:38:df:a6:77:ab:c9:03:e2:be:14:b6:9a:
fc:5b:50:c9:66:51:49:78:da:d6:d0:4b:f8:d6:6f:40:21:48:
58:2d:f1:4b:68:bc:63:9a:92:84:13:d7:3b:42:6a:ea:e0:cf:
e9:74:fc:76:0a:9c:ca:de:67:3d:1c:82:86:62:cc:24:0c:35:
0f:3f:3d:a9:db:8d:66:52:3e:80:12:a9:c1:16:cd:1a:e9:37:
df:ee:87:04:97:bd:b3:4a:4e:26:18:14:b8:c1:ad:c5:92:05:
7b:03:3d:d4:d0:60:9c:56:0e:f8:b1:74:da:e0:04:ce:b9:98:
d6:4e:61:06:96:83:9c:12:81:6f:50:f6:cb:df:bb:a1:42:34:
73:f1:5c:62:38:ee:f3:20:5a:31:93:b8:d4:c7:fd:87:9a:8f:
1c:b0:b2:eb:83:89:4c:34:81:4e:53:19:1e:8c:f7:72:2b:1d:
9d:4c:fb:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:56:11 2025 by rpki-client