Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/57cb04-58ce-433b-93ab-10bc59d8ff8d/1/g0hoQbT0rcViZMWWMIUYKiIORtQ.mft
File: g0hoQbT0rcViZMWWMIUYKiIORtQ.mft (raw, json)
Hash identifier: A1NMaF9Xd5J1dqsoTYGXdn5cVp3aaeqryLLf+Ya06hU=
Subject key identifier: 19:38:66:02:D6:F5:8A:28:EB:ED:17:DF:A3:1C:AE:AF:5F:13:58:07
Authority key identifier: 83:48:68:41:B4:F4:AD:C5:62:64:C5:96:30:85:18:2A:22:0E:46:D4
Certificate issuer: /CN=83486841b4f4adc56264c5963085182a220e46d4
Certificate serial: 0199FB7D077C0C7A0EF55C55AA069B7585DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g0hoQbT0rcViZMWWMIUYKiIORtQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/57cb04-58ce-433b-93ab-10bc59d8ff8d/1/g0hoQbT0rcViZMWWMIUYKiIORtQ.mft
Manifest number: 05DF
Signing time: Sun 19 Oct 2025 08:01:39 +0000
Manifest this update: Sun 19 Oct 2025 08:01:39 +0000
Manifest next update: Mon 20 Oct 2025 08:01:39 +0000
Files and hashes: 1: 5hNBi4pOh8tuQ2-hbUmZAAcoj0g.roa (hash: bvf6+FGQm47HOMj5UevrWk1RDXzOnQeu8ZcjR9Z2g1E=)
2: VnV_NALClcugVnJ8tM0-ssB-Wvo.roa (hash: i5vFppJbIjgrNIbkedUgagHC+ZhmU+v4i2sVl3277z4=)
3: g0hoQbT0rcViZMWWMIUYKiIORtQ.crl (hash: mJSrvvgllGqzaFSMzULE7/1ymw5OZY7X8K3WdRO00tg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/57cb04-58ce-433b-93ab-10bc59d8ff8d/1/g0hoQbT0rcViZMWWMIUYKiIORtQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/57cb04-58ce-433b-93ab-10bc59d8ff8d/1/g0hoQbT0rcViZMWWMIUYKiIORtQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/g0hoQbT0rcViZMWWMIUYKiIORtQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7d:07:7c:0c:7a:0e:f5:5c:55:aa:06:9b:75:85:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83486841b4f4adc56264c5963085182a220e46d4
Validity
Not Before: Oct 19 08:01:39 2025 GMT
Not After : Oct 20 08:01:39 2025 GMT
Subject: CN=19386602d6f58a28ebed17dfa31caeaf5f135807
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:80:68:c9:00:f3:fa:0e:7d:5a:c0:f8:8d:e7:
41:86:a4:57:72:77:1c:bc:19:42:2d:fd:84:66:87:
8d:77:ed:ae:4a:ea:ef:79:ef:49:89:32:1e:fb:98:
fc:d8:59:c7:e6:de:7d:15:3a:dd:00:29:e6:34:03:
c1:ce:06:e4:9e:c7:a5:49:71:d8:d3:68:5b:46:b1:
cf:47:7c:98:d5:27:ef:d1:1f:e0:01:8e:a5:2b:53:
8d:8c:18:52:9d:2b:b8:b8:89:2b:13:14:fa:92:9c:
5d:4a:b5:d9:02:14:ad:9d:b0:f9:dc:66:f3:a7:73:
dc:66:d6:a2:03:a2:3f:1f:19:21:38:a7:be:f8:81:
11:3b:02:b2:26:13:88:e7:39:64:8a:68:91:d6:89:
55:ad:1b:44:f8:85:63:5c:04:82:30:05:ef:84:dd:
40:49:78:53:88:90:34:6f:ef:93:3a:ae:1d:23:d2:
69:29:a7:ff:78:db:29:d1:1f:3d:8e:45:20:23:7d:
92:d9:71:85:13:fb:75:c9:ec:2e:dd:bb:9a:21:87:
da:ae:21:d0:42:c3:6e:21:84:0c:25:be:3a:81:8e:
89:b6:0f:2a:b3:b1:6a:67:1e:f1:bd:71:3e:77:12:
35:b0:c9:12:d7:7b:f7:08:01:50:fa:02:e5:54:94:
0d:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:38:66:02:D6:F5:8A:28:EB:ED:17:DF:A3:1C:AE:AF:5F:13:58:07
X509v3 Authority Key Identifier:
keyid:83:48:68:41:B4:F4:AD:C5:62:64:C5:96:30:85:18:2A:22:0E:46:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g0hoQbT0rcViZMWWMIUYKiIORtQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/57cb04-58ce-433b-93ab-10bc59d8ff8d/1/g0hoQbT0rcViZMWWMIUYKiIORtQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/57cb04-58ce-433b-93ab-10bc59d8ff8d/1/g0hoQbT0rcViZMWWMIUYKiIORtQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:8c:76:ab:08:ea:03:cf:2b:05:8d:b1:1c:4a:e9:69:e5:24:
76:52:1b:71:97:04:93:42:77:4a:a0:a2:78:8a:3f:cb:ae:02:
8d:58:34:65:64:38:ba:6e:d9:92:2d:6c:a4:f9:01:f0:2f:c0:
7c:99:73:0c:1e:7e:8a:32:87:89:e0:85:c3:dc:be:f7:49:e6:
a9:cd:db:5b:43:16:4b:63:f4:54:b9:96:2a:f8:86:86:bb:40:
1b:f9:50:f0:5c:47:f7:f8:f4:c6:f5:a6:29:f9:d9:9c:ad:4c:
0e:3d:82:a6:d2:b2:e6:e8:9a:ad:8c:b1:30:e2:24:ac:79:dc:
6e:6d:59:a6:9d:1a:88:0a:f0:81:c3:e9:10:af:26:d5:6f:53:
e9:53:e0:2b:c9:35:b4:89:73:16:5a:35:92:0a:77:26:b0:05:
70:e1:11:9c:eb:39:2d:87:c1:19:2c:83:76:a1:03:f2:e4:eb:
a2:da:b8:33:f0:55:8d:5e:7c:de:e9:fe:11:66:2a:52:ee:5e:
ae:fe:51:f1:67:25:71:2b:42:8a:b0:b6:c4:a7:c2:75:d6:e1:
35:20:e6:70:f4:2b:a5:65:00:4f:07:54:be:d3:5f:48:61:38:
04:68:27:84:98:ff:a0:02:c9:7a:81:8a:e5:6e:9b:9b:75:de:
51:cf:15:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:05:20 2025 by rpki-client