Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/52cf99-e798-4cab-a303-a3b06d4e4775/1/5Go_g4aIhDdY0oBXAH3GzSiY7Mo.mft
File: 5Go_g4aIhDdY0oBXAH3GzSiY7Mo.mft (raw, json)
Hash identifier: g38C0A5PrNTF6K/lXx9846sWKCMKBgpubHCOzACOy6k=
Subject key identifier: 67:35:1B:7F:6F:39:93:6A:BB:1E:81:54:ED:DA:7B:A0:42:5D:5F:0A
Authority key identifier: E4:6A:3F:83:86:88:84:37:58:D2:80:57:00:7D:C6:CD:28:98:EC:CA
Certificate issuer: /CN=e46a3f838688843758d28057007dc6cd2898ecca
Certificate serial: 019A0035B184583C8D9BC0309E2AD1464C90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Go_g4aIhDdY0oBXAH3GzSiY7Mo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/52cf99-e798-4cab-a303-a3b06d4e4775/1/5Go_g4aIhDdY0oBXAH3GzSiY7Mo.mft
Manifest number: 13F2
Signing time: Mon 20 Oct 2025 06:01:50 +0000
Manifest this update: Mon 20 Oct 2025 06:01:50 +0000
Manifest next update: Tue 21 Oct 2025 06:01:50 +0000
Files and hashes: 1: 0x1lqWA0KZOHOORQhJDoeRssVQ0.roa (hash: 7p6FxiYzO+LvJNJvXWwPz8wlUJ/sKTNUZeXhx0HXHCY=)
2: 5Go_g4aIhDdY0oBXAH3GzSiY7Mo.crl (hash: F53QpeDQzXAjS5zD11CyAYgLrwG82t07h4ujX6sEwgA=)
3: K79jAuNL4y91z3YYrxbmadc1H3A.roa (hash: Ce4Ha+miko3MGw4iNBYx8goUwnDzuBC5+eb8kUBjaGo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/52cf99-e798-4cab-a303-a3b06d4e4775/1/5Go_g4aIhDdY0oBXAH3GzSiY7Mo.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/52cf99-e798-4cab-a303-a3b06d4e4775/1/5Go_g4aIhDdY0oBXAH3GzSiY7Mo.mft
rsync://rpki.ripe.net/repository/DEFAULT/5Go_g4aIhDdY0oBXAH3GzSiY7Mo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:35:b1:84:58:3c:8d:9b:c0:30:9e:2a:d1:46:4c:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e46a3f838688843758d28057007dc6cd2898ecca
Validity
Not Before: Oct 20 06:01:50 2025 GMT
Not After : Oct 21 06:01:50 2025 GMT
Subject: CN=67351b7f6f39936abb1e8154edda7ba0425d5f0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:97:7e:07:bd:a2:ca:ff:79:df:d6:ec:28:08:
c9:ae:7c:b9:9e:a8:3b:b6:54:94:5d:33:05:1c:6d:
7d:54:b0:39:81:9a:61:21:9e:d8:f7:b4:80:27:3b:
8d:37:0b:51:32:57:7a:87:10:31:cf:1b:48:0c:bb:
6c:21:c9:69:21:36:de:69:d5:8c:e6:05:cf:22:ff:
e7:75:a7:23:00:f4:bd:a4:0d:b7:59:69:ba:47:9f:
d0:3c:55:07:0d:44:7d:5b:76:aa:6b:01:ca:82:59:
ae:59:89:a5:ac:92:d8:f3:3d:e6:b4:25:ea:29:17:
93:3b:25:6e:25:98:23:db:0f:a9:37:5a:dd:9d:19:
53:36:f6:bc:ad:2d:5e:65:fa:7c:46:7e:08:fc:43:
91:12:88:2e:7c:2c:8e:bf:ec:ee:5a:50:41:ef:79:
ec:fe:1c:04:55:5b:65:3c:95:f9:79:d6:94:0a:98:
77:0c:73:94:85:0c:a0:07:33:5b:aa:c2:d3:59:c5:
9b:fc:82:5e:63:8b:b1:3e:ea:cf:1c:dd:9e:e8:76:
eb:fc:98:29:db:56:af:d9:c7:f8:02:be:3a:6d:cb:
f9:aa:33:00:04:46:1e:ff:75:d3:dd:7b:75:79:64:
6a:d2:fb:5a:c2:14:e1:f8:de:f8:e3:33:de:5d:94:
b5:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:35:1B:7F:6F:39:93:6A:BB:1E:81:54:ED:DA:7B:A0:42:5D:5F:0A
X509v3 Authority Key Identifier:
keyid:E4:6A:3F:83:86:88:84:37:58:D2:80:57:00:7D:C6:CD:28:98:EC:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Go_g4aIhDdY0oBXAH3GzSiY7Mo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/52cf99-e798-4cab-a303-a3b06d4e4775/1/5Go_g4aIhDdY0oBXAH3GzSiY7Mo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/52cf99-e798-4cab-a303-a3b06d4e4775/1/5Go_g4aIhDdY0oBXAH3GzSiY7Mo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:1d:d1:50:d3:cc:60:72:4c:6e:2f:84:21:a1:80:cd:87:92:
ae:44:e4:aa:28:7f:4f:f4:15:cf:22:3b:b6:66:a1:ee:dd:47:
91:66:39:f1:22:21:89:cf:d0:eb:94:93:48:51:00:4a:fd:6b:
b6:48:b5:18:b5:f2:79:7d:58:2f:42:d6:23:6a:40:ce:9e:15:
18:1c:e3:ec:4f:fc:05:d8:ba:8c:48:53:2d:b8:19:df:71:f4:
db:b3:ef:ec:b7:98:25:50:03:23:be:02:cb:03:41:f4:8d:12:
a4:d5:c3:27:ea:c7:53:be:8a:a7:89:e4:b7:7b:f5:71:69:cc:
5f:14:10:93:5a:d9:e6:db:aa:53:3b:7f:1e:38:4b:41:5b:a1:
01:50:0d:90:3b:0e:ab:32:1a:34:e9:e5:53:98:5e:6e:25:2b:
0d:49:6b:98:80:9b:82:de:4b:44:36:69:91:65:b0:be:54:6f:
d5:30:17:6c:37:71:c3:cb:19:37:07:29:43:cc:4f:8f:25:5e:
9c:91:a2:95:5e:7c:9f:cb:17:9c:29:1f:1b:d9:ab:90:e8:9c:
39:fa:c0:f0:f0:01:cf:eb:2d:06:53:12:d6:01:e2:c9:15:61:
0c:c9:ad:59:df:cc:ed:ab:11:f8:ba:15:0a:34:6f:c8:32:4b:
1b:64:7e:92
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoANbGEWDyNm8AwnirRRkyQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0NmEzZjgzODY4ODg0Mzc1OGQyODA1NzAwN2RjNmNkMjg5
OGVjY2EwHhcNMjUxMDIwMDYwMTUwWhcNMjUxMDIxMDYwMTUwWjAzMTEwLwYDVQQD
Eyg2NzM1MWI3ZjZmMzk5MzZhYmIxZTgxNTRlZGRhN2JhMDQyNWQ1ZjBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAypd+B72iyv9539bsKAjJrny5nqg7
tlSUXTMFHG19VLA5gZphIZ7Y97SAJzuNNwtRMld6hxAxzxtIDLtsIclpITbeadWM
5gXPIv/ndacjAPS9pA23WWm6R5/QPFUHDUR9W3aqawHKglmuWYmlrJLY8z3mtCXq
KReTOyVuJZgj2w+pN1rdnRlTNva8rS1eZfp8Rn4I/EOREogufCyOv+zuWlBB73ns
/hwEVVtlPJX5edaUCph3DHOUhQygBzNbqsLTWcWb/IJeY4uxPurPHN2e6Hbr/Jgp
21av2cf4Ar46bcv5qjMABEYe/3XT3Xt1eWRq0vtawhTh+N744zPeXZS1wwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGc1G39vOZNqux6BVO3ae6BCXV8KMB8GA1UdIwQY
MBaAFORqP4OGiIQ3WNKAVwB9xs0omOzKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNUdvX2c0YUloRGRZMG9CWEFIM0d6U2lZN01vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC81MmNmOTktZTc5OC00Y2FiLWEzMDMt
YTNiMDZkNGU0Nzc1LzEvNUdvX2c0YUloRGRZMG9CWEFIM0d6U2lZN01vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC81MmNmOTktZTc5OC00Y2FiLWEzMDMtYTNiMDZkNGU0Nzc1
LzEvNUdvX2c0YUloRGRZMG9CWEFIM0d6U2lZN01vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApR3RUNPM
YHJMbi+EIaGAzYeSrkTkqih/T/QVzyI7tmah7t1HkWY58SIhic/Q65STSFEASv1r
tki1GLXyeX1YL0LWI2pAzp4VGBzj7E/8Bdi6jEhTLbgZ33H027Pv7LeYJVADI74C
ywNB9I0SpNXDJ+rHU76Kp4nkt3v1cWnMXxQQk1rZ5tuqUzt/HjhLQVuhAVANkDsO
qzIaNOnlU5hebiUrDUlrmICbgt5LRDZpkWWwvlRv1TAXbDdxw8sZNwcpQ8xPjyVe
nJGilV58n8sXnCkfG9mrkOicOfrA8PABz+stBlMS1gHiyRVhDMmtWd/M7asR+LoV
CjRvyDJLG2R+kg==
-----END CERTIFICATE-----
Generated at Mon Oct 20 08:48:49 2025 by rpki-client