Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/53f9bd-7f54-4bd2-b5a4-e584cd5f8d11/1/j5gF9kgB3ZNZlBSmJQmxKlQC-Gg.mft
File: j5gF9kgB3ZNZlBSmJQmxKlQC-Gg.mft (raw, json)
Hash identifier: im3daw08LbS9Na45c0+k5oe5hYIXwfRw3tzDnNQ2LZ4=
Subject key identifier: F8:ED:06:53:06:CF:FE:4B:B6:B6:1A:F8:1E:99:C5:5C:24:77:05:A9
Authority key identifier: 8F:98:05:F6:48:01:DD:93:59:94:14:A6:25:09:B1:2A:54:02:F8:68
Certificate issuer: /CN=8f9805f64801dd93599414a62509b12a5402f868
Certificate serial: 019A00A361CE4A96FEB9FCF482F6B20FD9C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j5gF9kgB3ZNZlBSmJQmxKlQC-Gg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/53f9bd-7f54-4bd2-b5a4-e584cd5f8d11/1/j5gF9kgB3ZNZlBSmJQmxKlQC-Gg.mft
Manifest number: 0433
Signing time: Mon 20 Oct 2025 08:01:38 +0000
Manifest this update: Mon 20 Oct 2025 08:01:38 +0000
Manifest next update: Tue 21 Oct 2025 08:01:38 +0000
Files and hashes: 1: NCxg4iDnSPo7sNDZogY6EAQ1qnU.roa (hash: a1KXZCaEoxN1UkOcv0YA7zkHr19aSLSv8QON/lo/20Y=)
2: j5gF9kgB3ZNZlBSmJQmxKlQC-Gg.crl (hash: qWon91NpFlaU6iB4sqSuXCTem5ugj9yLyO9U+pQdQPQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/53f9bd-7f54-4bd2-b5a4-e584cd5f8d11/1/j5gF9kgB3ZNZlBSmJQmxKlQC-Gg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/53f9bd-7f54-4bd2-b5a4-e584cd5f8d11/1/j5gF9kgB3ZNZlBSmJQmxKlQC-Gg.mft
rsync://rpki.ripe.net/repository/DEFAULT/j5gF9kgB3ZNZlBSmJQmxKlQC-Gg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 08:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:a3:61:ce:4a:96:fe:b9:fc:f4:82:f6:b2:0f:d9:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f9805f64801dd93599414a62509b12a5402f868
Validity
Not Before: Oct 20 08:01:38 2025 GMT
Not After : Oct 21 08:01:38 2025 GMT
Subject: CN=f8ed065306cffe4bb6b61af81e99c55c247705a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:d9:af:08:1d:56:c7:0e:b3:49:5d:96:3a:23:
54:8e:9e:cc:e5:6c:93:e4:51:d7:c2:0f:a4:ea:f9:
ad:66:8f:a3:e7:a5:6d:30:aa:a1:a0:2c:39:d0:ec:
93:38:73:88:8e:46:d9:17:2e:3c:da:db:29:ee:b7:
3b:c1:e4:88:15:6d:1a:a6:10:cf:1f:b8:74:c5:02:
73:b6:a7:8a:69:14:26:f8:27:0b:78:a8:2f:7d:aa:
e6:f1:80:e7:80:9f:73:d9:5e:08:e3:e4:cf:ac:f0:
42:23:2e:f3:42:4e:76:03:70:fc:5b:6c:31:82:a9:
72:bb:56:b1:e3:a5:0e:55:6d:94:30:dd:a1:f0:9c:
72:10:6f:4b:a4:0c:22:83:16:b5:20:b9:6f:45:f5:
56:4c:be:37:90:83:c1:2a:3a:f9:4c:61:01:26:84:
1b:15:d6:5c:69:3d:94:05:e9:7f:cc:f4:f5:c8:1b:
29:dc:09:88:3c:fa:ee:46:58:7a:5c:96:35:5b:ed:
fe:eb:d4:86:f8:91:52:21:36:3f:d0:eb:57:b6:45:
1c:79:c8:0d:4d:47:f3:be:12:7a:c1:8c:ef:c5:9e:
0d:a9:79:3c:59:38:7d:f9:3a:f6:57:33:d2:14:51:
04:56:88:31:ec:68:15:20:58:bf:45:1c:83:76:32:
27:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:ED:06:53:06:CF:FE:4B:B6:B6:1A:F8:1E:99:C5:5C:24:77:05:A9
X509v3 Authority Key Identifier:
keyid:8F:98:05:F6:48:01:DD:93:59:94:14:A6:25:09:B1:2A:54:02:F8:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j5gF9kgB3ZNZlBSmJQmxKlQC-Gg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/53f9bd-7f54-4bd2-b5a4-e584cd5f8d11/1/j5gF9kgB3ZNZlBSmJQmxKlQC-Gg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/53f9bd-7f54-4bd2-b5a4-e584cd5f8d11/1/j5gF9kgB3ZNZlBSmJQmxKlQC-Gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:91:60:df:00:fd:c9:57:5c:26:b8:0f:f0:b0:1e:0a:7f:6d:
86:f4:d8:21:bd:cb:ba:06:0d:3c:b6:f2:c8:42:85:a0:a2:b3:
e2:cd:38:69:93:09:dc:c9:6d:ac:cf:a9:ab:1f:a9:32:55:76:
b8:9a:5f:ef:5f:8e:e9:ef:20:a8:c0:14:b8:6e:05:4f:54:3b:
90:8e:36:f8:f4:bc:e1:50:b4:27:71:e2:79:9c:ba:29:ca:0a:
78:b5:c6:48:94:ed:87:1f:65:93:df:d3:98:21:df:ab:4d:85:
7f:c5:ea:da:c8:d9:9a:68:8c:25:fb:2e:99:7d:c3:a6:d3:e0:
8d:13:de:64:8f:cb:77:c4:f4:04:88:4a:c2:7d:be:1f:99:fa:
90:f0:2a:c8:a1:99:b8:fa:cf:d5:dc:95:f2:f4:bf:37:e1:3c:
d7:7c:a6:03:1a:7f:26:23:1c:1f:6c:b7:bb:e3:62:cc:53:7b:
cc:6e:61:6d:4b:63:95:c9:95:10:69:d3:1d:a2:97:cb:ca:ba:
f3:4f:ae:eb:03:dd:6b:94:6f:e8:7c:8f:83:af:20:56:a6:7c:
2c:b9:ce:dd:d2:d9:0a:ab:45:9b:ae:ff:13:d9:be:a9:12:6c:
64:9b:02:37:f6:f4:85:a8:7d:87:2b:1a:d1:84:f6:ce:05:28:
b5:1f:b6:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:40:03 2025 by rpki-client