Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/6ea16c-b92f-4041-a508-bb5893a6ac91/1/ga5w39QwUnNv6F8A0phM43a3brM.mft
File: ga5w39QwUnNv6F8A0phM43a3brM.mft (raw, json)
Hash identifier: rqx78YNjXrjRkVa6UMV6C/6VQI/VNBDmDQOJzC/8isg=
Subject key identifier: 5D:E7:C3:F8:E0:62:91:D8:66:C3:46:50:31:E7:9A:7E:BF:74:DA:7F
Authority key identifier: 81:AE:70:DF:D4:30:52:73:6F:E8:5F:00:D2:98:4C:E3:76:B7:6E:B3
Certificate issuer: /CN=81ae70dfd43052736fe85f00d2984ce376b76eb3
Certificate serial: 0199FBEB1470DE36305E55560727C5552B98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ga5w39QwUnNv6F8A0phM43a3brM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/6ea16c-b92f-4041-a508-bb5893a6ac91/1/ga5w39QwUnNv6F8A0phM43a3brM.mft
Manifest number: 083D
Signing time: Sun 19 Oct 2025 10:01:51 +0000
Manifest this update: Sun 19 Oct 2025 10:01:51 +0000
Manifest next update: Mon 20 Oct 2025 10:01:51 +0000
Files and hashes: 1: PWVVCu9dDfBo5aJQ6tlPGGlV6B0.roa (hash: 7Oj98eAXsnZMzEk2r6cNh4fSjsZETDRb2EQ95CICh04=)
2: ga5w39QwUnNv6F8A0phM43a3brM.crl (hash: ReLa3ip0BhLF88oOnDWDWrZjoK85ePryD9tDJT/P9Pg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/6ea16c-b92f-4041-a508-bb5893a6ac91/1/ga5w39QwUnNv6F8A0phM43a3brM.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/6ea16c-b92f-4041-a508-bb5893a6ac91/1/ga5w39QwUnNv6F8A0phM43a3brM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ga5w39QwUnNv6F8A0phM43a3brM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:14:70:de:36:30:5e:55:56:07:27:c5:55:2b:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81ae70dfd43052736fe85f00d2984ce376b76eb3
Validity
Not Before: Oct 19 10:01:51 2025 GMT
Not After : Oct 20 10:01:51 2025 GMT
Subject: CN=5de7c3f8e06291d866c3465031e79a7ebf74da7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:8c:25:92:8e:ef:bd:de:50:1c:2d:07:d9:c6:
a0:a9:89:ad:38:b1:52:49:fe:dd:fc:86:f0:06:11:
97:b5:5a:72:9e:10:41:ee:36:57:71:a5:da:f7:e7:
3a:6b:00:8e:6d:d4:eb:c0:3b:45:6c:c9:f4:5f:31:
f7:7a:e3:fe:4e:73:05:d6:d6:6d:2a:62:82:82:ca:
02:db:ff:0f:db:e8:16:d7:50:ad:e2:0d:17:84:fa:
96:ff:11:2c:4f:1c:3e:66:10:ad:03:bc:ad:25:79:
42:b7:01:ca:9c:39:86:e9:1b:bb:53:5a:42:cc:f6:
50:3f:f1:c2:cf:15:f3:6b:62:c1:8b:dd:89:78:a2:
a5:6b:02:1b:9d:8b:75:56:f3:fc:84:6a:51:77:46:
fc:4a:4d:1f:63:01:6b:e3:4d:d2:dd:4b:f1:fc:f1:
fa:24:79:68:6d:e4:28:b8:e7:88:21:7e:6f:83:b7:
c5:f2:d5:5a:d0:4e:a5:83:b7:61:43:b4:6a:8c:2a:
7d:75:d6:62:0d:18:f9:3b:94:31:26:b3:78:dd:a7:
1b:5b:ed:d1:18:74:93:cd:93:48:68:f7:38:98:08:
34:fd:bb:74:6e:0a:75:f1:7f:de:63:26:0f:3f:60:
a0:16:29:05:8c:4a:74:a4:95:69:88:68:ea:97:4b:
46:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:E7:C3:F8:E0:62:91:D8:66:C3:46:50:31:E7:9A:7E:BF:74:DA:7F
X509v3 Authority Key Identifier:
keyid:81:AE:70:DF:D4:30:52:73:6F:E8:5F:00:D2:98:4C:E3:76:B7:6E:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ga5w39QwUnNv6F8A0phM43a3brM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/6ea16c-b92f-4041-a508-bb5893a6ac91/1/ga5w39QwUnNv6F8A0phM43a3brM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/6ea16c-b92f-4041-a508-bb5893a6ac91/1/ga5w39QwUnNv6F8A0phM43a3brM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:72:52:33:a2:6d:dc:fe:b2:af:8b:19:46:4a:d5:f7:c5:f1:
36:42:8f:cf:f3:48:7b:f7:c5:35:4a:20:61:04:52:b0:af:e0:
77:34:62:b0:ee:8d:b0:73:ef:01:a5:24:3d:6a:15:37:10:ec:
d6:93:8a:ad:51:1e:6d:72:e2:ba:69:e2:9b:1c:50:37:69:5e:
50:e9:83:6b:24:37:a1:10:62:a1:e1:21:07:6e:17:4e:f1:f5:
ae:d5:df:06:4d:e1:f7:f3:73:d3:85:bf:53:fd:2f:72:7a:24:
de:9b:2f:98:c9:b3:2f:b6:dd:72:03:58:f3:a7:78:4b:03:05:
09:c7:e3:e9:4d:24:a2:31:d3:30:c4:7e:00:4a:0c:c2:ad:3a:
45:45:7d:2c:d6:cf:fd:8f:22:0d:0e:c1:a7:b7:e9:18:08:9a:
ff:c3:8f:36:f6:57:00:bf:b1:55:56:17:6a:23:a9:f6:3e:80:
5d:ff:e8:97:bb:12:7b:5d:d4:e8:1e:4e:fb:82:9a:4f:bd:98:
96:d2:e5:2b:4e:2c:15:c1:b2:89:27:d6:4f:3c:7a:e6:5c:20:
38:3c:7f:bf:11:d5:94:8a:65:c8:71:50:85:3c:41:a5:e5:d6:
c5:5f:2f:ff:2a:80:d6:01:e1:68:96:4a:98:ac:32:f0:35:a4:
1f:ce:6c:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:26:22 2025 by rpki-client