Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a51c75-ef7b-48ab-870f-460cbe688ce5/1/g5JNIiU91reGmbxdCgEQJ5E-X3A.mft
File: g5JNIiU91reGmbxdCgEQJ5E-X3A.mft (raw, json)
Hash identifier: jP3iaLXms4ZKsAtpt5mBP1JzmXzO/t8osTPIFy5vwH4=
Subject key identifier: 78:61:17:F0:48:3D:9D:F1:F5:80:EC:5E:8D:2F:3F:03:34:BC:5D:B4
Authority key identifier: 83:92:4D:22:25:3D:D6:B7:86:99:BC:5D:0A:01:10:27:91:3E:5F:70
Certificate issuer: /CN=83924d22253dd6b78699bc5d0a011027913e5f70
Certificate serial: 0199FC2172FF239BE0BBE5E61679BD7C8025
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g5JNIiU91reGmbxdCgEQJ5E-X3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a51c75-ef7b-48ab-870f-460cbe688ce5/1/g5JNIiU91reGmbxdCgEQJ5E-X3A.mft
Manifest number: 0619
Signing time: Sun 19 Oct 2025 11:01:14 +0000
Manifest this update: Sun 19 Oct 2025 11:01:14 +0000
Manifest next update: Mon 20 Oct 2025 11:01:14 +0000
Files and hashes: 1: g5JNIiU91reGmbxdCgEQJ5E-X3A.crl (hash: CVy1Jy8CRjIrO+RM4q2jICGBKNexDVXuZYtUorGwyY8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a51c75-ef7b-48ab-870f-460cbe688ce5/1/g5JNIiU91reGmbxdCgEQJ5E-X3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/a51c75-ef7b-48ab-870f-460cbe688ce5/1/g5JNIiU91reGmbxdCgEQJ5E-X3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/g5JNIiU91reGmbxdCgEQJ5E-X3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:72:ff:23:9b:e0:bb:e5:e6:16:79:bd:7c:80:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83924d22253dd6b78699bc5d0a011027913e5f70
Validity
Not Before: Oct 19 11:01:14 2025 GMT
Not After : Oct 20 11:01:14 2025 GMT
Subject: CN=786117f0483d9df1f580ec5e8d2f3f0334bc5db4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:54:eb:a2:04:e9:9e:3a:f2:e8:5d:38:72:d9:
0f:ce:cd:8e:e5:75:64:02:68:bf:87:6e:7d:78:4b:
a0:a0:18:a0:ff:53:21:a1:c2:dc:44:39:ed:a6:dc:
35:89:04:94:f8:d4:c5:c5:de:08:39:b1:b3:2a:ec:
41:b6:10:a6:26:d1:e5:a0:27:da:70:5b:8f:c3:c4:
25:94:b7:d5:f0:c5:9d:79:ef:c1:85:84:85:98:4c:
91:f8:62:1f:62:8c:14:c7:6f:75:5b:90:5f:04:fe:
65:86:21:98:54:45:85:5c:59:27:78:99:a9:20:6b:
ab:88:bd:11:a3:70:53:93:2a:6d:76:cf:16:53:f9:
37:c5:38:4f:55:a6:76:be:4e:ee:e6:54:ed:bd:7f:
58:b8:e0:01:58:ca:fd:e5:52:f0:ce:74:42:64:9a:
81:2f:d3:a2:f2:ea:28:bd:3d:22:15:98:75:64:82:
81:9c:c2:d8:03:42:85:c1:0c:34:c4:60:cc:fc:47:
f4:1a:d4:cd:b6:ef:51:6b:2d:92:a1:e0:d9:39:3e:
23:fa:15:04:d2:de:fc:07:38:b8:1a:d1:c1:86:31:
ff:d4:fa:76:de:21:6f:5d:6a:a3:dd:81:35:53:66:
aa:c3:e2:0a:d8:d5:3d:62:ed:52:97:c4:06:bd:cf:
25:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:61:17:F0:48:3D:9D:F1:F5:80:EC:5E:8D:2F:3F:03:34:BC:5D:B4
X509v3 Authority Key Identifier:
keyid:83:92:4D:22:25:3D:D6:B7:86:99:BC:5D:0A:01:10:27:91:3E:5F:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g5JNIiU91reGmbxdCgEQJ5E-X3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a51c75-ef7b-48ab-870f-460cbe688ce5/1/g5JNIiU91reGmbxdCgEQJ5E-X3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a51c75-ef7b-48ab-870f-460cbe688ce5/1/g5JNIiU91reGmbxdCgEQJ5E-X3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:fd:d0:e0:62:b4:21:be:61:cc:2a:ec:bb:cc:9b:f9:01:3e:
00:5d:06:42:0c:6a:7c:1e:a8:0f:6b:72:c1:82:d5:31:29:2d:
3a:7d:31:ef:08:e9:f3:56:48:0b:a9:38:ec:fc:bb:04:d5:92:
b6:fc:bb:80:c7:34:e6:3c:04:a9:22:04:b0:f5:57:64:ec:32:
d5:6e:4d:e2:29:6c:9e:97:a8:8c:9a:6d:f0:ce:e5:5a:47:7f:
3c:aa:4a:d3:cb:ad:84:b1:05:ec:a8:c9:57:c3:bf:ff:f8:12:
f0:18:ef:e1:cb:19:10:29:38:d2:c1:25:64:50:fb:30:c9:e4:
8f:d0:4e:00:2d:a9:c5:22:e0:05:30:bc:ef:b0:85:2d:f6:90:
57:fa:86:a0:b7:ec:3c:69:73:39:71:88:38:c8:dc:46:e0:c6:
40:39:98:7e:1b:08:23:54:09:1a:f4:3c:72:b8:37:57:b6:e2:
d1:8d:98:fc:01:70:0b:22:56:40:98:2a:d1:e2:15:dc:10:4e:
87:87:bd:f1:bc:92:96:b7:0b:50:51:b2:86:23:99:c4:a3:c7:
8b:e5:34:60:61:27:5c:aa:66:fc:89:f7:57:9a:72:07:f4:8a:
cf:fb:bd:8e:00:84:0b:ae:55:3c:a3:6c:dd:d5:36:53:1f:61:
51:da:86:05
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8IXL/I5vgu+XmFnm9fIAlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzOTI0ZDIyMjUzZGQ2Yjc4Njk5YmM1ZDBhMDExMDI3OTEz
ZTVmNzAwHhcNMjUxMDE5MTEwMTE0WhcNMjUxMDIwMTEwMTE0WjAzMTEwLwYDVQQD
Eyg3ODYxMTdmMDQ4M2Q5ZGYxZjU4MGVjNWU4ZDJmM2YwMzM0YmM1ZGI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuFTrogTpnjry6F04ctkPzs2O5XVk
Ami/h259eEugoBig/1MhocLcRDntptw1iQSU+NTFxd4IObGzKuxBthCmJtHloCfa
cFuPw8QllLfV8MWdee/BhYSFmEyR+GIfYowUx291W5BfBP5lhiGYVEWFXFkneJmp
IGuriL0Ro3BTkyptds8WU/k3xThPVaZ2vk7u5lTtvX9YuOABWMr95VLwznRCZJqB
L9Oi8uoovT0iFZh1ZIKBnMLYA0KFwQw0xGDM/Ef0GtTNtu9Ray2SoeDZOT4j+hUE
0t78Bzi4GtHBhjH/1Pp23iFvXWqj3YE1U2aqw+IK2NU9Yu1Sl8QGvc8lXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHhhF/BIPZ3x9YDsXo0vPwM0vF20MB8GA1UdIwQY
MBaAFIOSTSIlPda3hpm8XQoBECeRPl9wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZzVKTklpVTkxcmVHbWJ4ZENnRVFKNUUtWDNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9hNTFjNzUtZWY3Yi00OGFiLTg3MGYt
NDYwY2JlNjg4Y2U1LzEvZzVKTklpVTkxcmVHbWJ4ZENnRVFKNUUtWDNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9hNTFjNzUtZWY3Yi00OGFiLTg3MGYtNDYwY2JlNjg4Y2U1
LzEvZzVKTklpVTkxcmVHbWJ4ZENnRVFKNUUtWDNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWP3Q4GK0
Ib5hzCrsu8yb+QE+AF0GQgxqfB6oD2tywYLVMSktOn0x7wjp81ZIC6k47Py7BNWS
tvy7gMc05jwEqSIEsPVXZOwy1W5N4ilsnpeojJpt8M7lWkd/PKpK08uthLEF7KjJ
V8O///gS8Bjv4csZECk40sElZFD7MMnkj9BOAC2pxSLgBTC877CFLfaQV/qGoLfs
PGlzOXGIOMjcRuDGQDmYfhsII1QJGvQ8crg3V7bi0Y2Y/AFwCyJWQJgq0eIV3BBO
h4e98bySlrcLUFGyhiOZxKPHi+U0YGEnXKpm/In3V5pyB/SKz/u9jgCEC65VPKNs
3dU2Ux9hUdqGBQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:23:23 2025 by rpki-client