Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/d808c5-4064-4e8c-8766-49fa58fedff3/1/g5DhBCut2I6W5jnqoK0CMofqUH8.mft
File: g5DhBCut2I6W5jnqoK0CMofqUH8.mft (raw, json)
Hash identifier: i3IRtZR16goPzhLDkKFPrnBQ1UqiSAf/C+bJws3a2vE=
Subject key identifier: 85:0D:EC:22:C8:E0:35:4E:D1:FD:EA:A5:D5:3F:6B:76:D1:60:DD:47
Authority key identifier: 83:90:E1:04:2B:AD:D8:8E:96:E6:39:EA:A0:AD:02:32:87:EA:50:7F
Certificate issuer: /CN=8390e1042badd88e96e639eaa0ad023287ea507f
Certificate serial: 0199FE0FD26C5BC9957A80CAB2BFDD843FD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g5DhBCut2I6W5jnqoK0CMofqUH8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/d808c5-4064-4e8c-8766-49fa58fedff3/1/g5DhBCut2I6W5jnqoK0CMofqUH8.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 20:01:13 +0000
Manifest this update: Sun 19 Oct 2025 20:01:13 +0000
Manifest next update: Mon 20 Oct 2025 20:01:13 +0000
Files and hashes: 1: L07o_vv656M9OEJjc4BFj7rpTc8.roa (hash: RSQDee8PToqw8SZNKDk+n8QFVV+DzoM0xmaXuyUh35A=)
2: g5DhBCut2I6W5jnqoK0CMofqUH8.crl (hash: iK/wiU5hCs0vi7hSdzsEUhDdq8Igtp1/myiCFhMwJ7U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/d808c5-4064-4e8c-8766-49fa58fedff3/1/g5DhBCut2I6W5jnqoK0CMofqUH8.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/d808c5-4064-4e8c-8766-49fa58fedff3/1/g5DhBCut2I6W5jnqoK0CMofqUH8.mft
rsync://rpki.ripe.net/repository/DEFAULT/g5DhBCut2I6W5jnqoK0CMofqUH8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:0f:d2:6c:5b:c9:95:7a:80:ca:b2:bf:dd:84:3f:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8390e1042badd88e96e639eaa0ad023287ea507f
Validity
Not Before: Oct 19 20:01:13 2025 GMT
Not After : Oct 20 20:01:13 2025 GMT
Subject: CN=850dec22c8e0354ed1fdeaa5d53f6b76d160dd47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:26:85:78:29:dc:ab:94:a3:85:09:20:ca:f5:
f0:bc:d2:4b:cd:bc:05:7d:e9:ab:5d:d8:1c:5f:a8:
71:6f:f2:e7:b8:94:97:e0:89:c3:55:40:01:0c:76:
7f:29:fa:33:c8:52:1d:54:fe:93:2c:7d:29:16:3b:
fc:42:cf:12:ef:81:ed:be:dd:b8:ac:55:c2:ae:c7:
58:dd:6e:c0:75:4b:83:c6:45:8a:70:6a:f2:dc:b1:
1d:96:9f:18:15:8e:b3:3b:0a:b0:14:aa:75:53:cc:
ff:91:59:78:37:bc:f2:4a:21:cf:14:40:16:bc:b8:
b7:c1:4e:58:a5:48:b2:65:64:5b:0e:d1:f6:66:03:
55:c8:e0:12:ec:cb:f6:c0:14:13:46:31:76:9a:50:
47:81:4d:6c:23:1a:88:54:cf:3d:63:56:80:cb:d5:
f6:41:9f:01:20:b4:ca:86:1f:30:10:ed:05:1e:7f:
41:5d:80:0d:6c:76:58:a3:90:2a:9f:b3:39:17:9c:
8e:51:f9:3b:6a:9c:b5:5d:79:03:9a:16:25:63:c7:
eb:26:c1:04:3e:cc:0e:e0:c4:8c:4d:62:26:d1:74:
1d:3a:e6:6e:3e:0f:48:3c:cc:79:aa:bf:9b:a8:3a:
e0:42:e5:f5:e1:9a:e4:02:79:fb:25:60:51:7c:04:
33:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:0D:EC:22:C8:E0:35:4E:D1:FD:EA:A5:D5:3F:6B:76:D1:60:DD:47
X509v3 Authority Key Identifier:
keyid:83:90:E1:04:2B:AD:D8:8E:96:E6:39:EA:A0:AD:02:32:87:EA:50:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g5DhBCut2I6W5jnqoK0CMofqUH8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/d808c5-4064-4e8c-8766-49fa58fedff3/1/g5DhBCut2I6W5jnqoK0CMofqUH8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/d808c5-4064-4e8c-8766-49fa58fedff3/1/g5DhBCut2I6W5jnqoK0CMofqUH8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:d9:1e:75:7d:2c:fb:af:52:b3:56:99:94:12:3b:6d:de:72:
9d:b6:71:27:60:0a:8e:e4:af:65:12:72:4b:db:ba:39:60:53:
b8:7c:46:25:d5:b0:41:1b:25:d3:89:7e:f7:b5:1c:e9:d6:59:
1b:9a:24:dd:ed:78:f3:a4:d5:2d:86:60:81:46:62:0a:1b:2b:
21:a5:5d:4b:6b:0f:44:7f:27:cd:c4:ce:a1:cc:15:26:4a:ba:
9f:82:81:92:93:36:86:56:a9:3c:b8:04:49:c8:b6:f1:36:0f:
d7:ed:10:1f:75:55:0e:f7:90:35:e9:b0:8e:95:17:6e:dc:f0:
75:b9:d9:09:ef:7e:a7:6f:ab:a7:36:79:8b:e1:8a:39:09:e6:
af:33:23:33:4b:2b:df:99:e3:a0:5a:18:d8:4d:8a:b8:ee:95:
ac:a6:13:49:1f:84:a3:f8:a8:e3:48:8a:51:a3:df:34:fe:7b:
67:77:a3:7f:24:e2:86:b2:95:d1:d8:7d:14:84:cc:96:b7:fd:
4d:53:ae:9b:d6:8a:ee:7b:63:21:88:5f:d6:3a:72:f2:f8:80:
98:04:be:91:40:31:cb:2c:6c:68:dd:46:d2:e7:6d:29:f8:a7:
17:c0:cf:e6:01:e8:a2:62:71:b9:b7:46:3c:a3:f4:11:32:58:
06:06:2e:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:06:19 2025 by rpki-client