Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/dc573d-a3db-41f9-8c3f-867965eb50ca/1/g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.mft
File: g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.mft (raw, json)
Hash identifier: CYzspHgqnAZ9SYg3nnEfE8PiW2zTTRO5x3XxqcxZDOI=
Subject key identifier: B6:D7:5B:CA:49:2A:9A:8D:AB:75:0F:90:A9:89:03:B9:C0:1E:F3:34
Authority key identifier: 83:B5:B4:91:3C:C7:8E:40:80:3C:00:BE:C6:B1:A9:DC:48:FF:36:84
Certificate issuer: /CN=83b5b4913cc78e40803c00bec6b1a9dc48ff3684
Certificate serial: 0199FDD969962049E672DC8EE6E406564D7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/dc573d-a3db-41f9-8c3f-867965eb50ca/1/g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.mft
Manifest number: 05E8
Signing time: Sun 19 Oct 2025 19:01:47 +0000
Manifest this update: Sun 19 Oct 2025 19:01:47 +0000
Manifest next update: Mon 20 Oct 2025 19:01:47 +0000
Files and hashes: 1: BpkzhkHivYxQFrMqUVIcDVNOSXw.roa (hash: xQ6QVFjFvBzkk1wEmHHBlxpv2VqHJf0x9YCmrxgHzvI=)
2: g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.crl (hash: PzFnI66t0VR1XiYK95iY6udu1iAITnfctosPvU7LVDU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/dc573d-a3db-41f9-8c3f-867965eb50ca/1/g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/dc573d-a3db-41f9-8c3f-867965eb50ca/1/g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 19:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:69:96:20:49:e6:72:dc:8e:e6:e4:06:56:4d:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83b5b4913cc78e40803c00bec6b1a9dc48ff3684
Validity
Not Before: Oct 19 19:01:47 2025 GMT
Not After : Oct 20 19:01:47 2025 GMT
Subject: CN=b6d75bca492a9a8dab750f90a98903b9c01ef334
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:54:5d:fa:67:2a:07:e2:13:9b:2d:d5:67:50:
48:a6:7a:32:35:84:02:d1:7a:62:a5:02:3b:fc:c5:
82:92:57:d4:45:48:61:bb:af:7d:21:8a:11:18:33:
f6:e6:ff:14:17:92:b0:a5:e1:47:a4:b9:83:7b:ad:
57:61:64:5f:08:2f:f6:61:91:f0:ec:8b:14:4e:e6:
ab:66:2d:66:9a:26:15:63:50:a4:aa:51:54:76:6e:
24:70:eb:d4:91:f0:3c:50:38:d0:a1:7f:2f:99:dc:
00:d1:0d:1a:49:5b:bf:29:38:d9:8d:90:62:50:a3:
de:cf:33:68:a7:16:3c:94:8c:f2:58:53:f2:8b:b2:
60:83:10:99:2e:e1:3c:49:4d:d7:4b:3f:25:e6:64:
e6:05:92:b0:f7:30:53:15:4e:86:1c:2f:65:3e:57:
a3:dc:c2:34:68:50:0f:e5:e2:7f:7c:83:23:77:07:
f7:59:d9:ad:9e:91:1b:75:e1:b9:10:6c:ae:fa:d8:
22:6e:5a:b2:8e:c1:76:fd:7b:11:ae:a2:73:91:5b:
b5:33:d1:35:b7:fc:d7:81:e1:b2:e4:1d:77:15:0f:
c0:bf:27:c9:8d:e4:65:89:67:5c:14:00:97:5b:df:
ba:9f:a0:48:7a:ff:79:5c:34:2f:32:41:1a:a6:d7:
70:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:D7:5B:CA:49:2A:9A:8D:AB:75:0F:90:A9:89:03:B9:C0:1E:F3:34
X509v3 Authority Key Identifier:
keyid:83:B5:B4:91:3C:C7:8E:40:80:3C:00:BE:C6:B1:A9:DC:48:FF:36:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/dc573d-a3db-41f9-8c3f-867965eb50ca/1/g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/dc573d-a3db-41f9-8c3f-867965eb50ca/1/g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:e2:95:52:45:2d:b9:8a:fd:65:98:23:f7:00:bf:d8:bd:2b:
b0:88:16:55:25:6a:0b:10:cc:88:6a:ac:88:59:ac:1c:d4:72:
10:d6:d3:6a:9d:d5:bc:ce:5c:36:1e:10:80:7d:94:62:7b:ae:
03:d4:59:4b:d7:6e:4c:fb:db:c0:95:be:cf:d2:40:0f:82:4c:
d3:81:43:03:48:66:ad:86:c1:21:ff:20:df:7d:47:99:e6:0e:
49:7c:41:2d:f9:7c:1d:ff:30:d6:b3:cb:05:51:39:73:99:e3:
91:aa:61:fc:b5:e4:7b:6b:a7:fb:ed:e4:ee:f9:cb:b5:87:9f:
d2:36:96:33:a4:99:7e:a0:f6:cf:f5:b5:5a:09:2e:7f:3f:d8:
bd:2d:e5:2a:ba:20:72:48:1e:62:a0:d9:5b:f8:61:a8:58:fa:
ed:93:13:a9:b9:c3:a2:31:d2:bd:a8:d2:23:3c:b8:2e:a2:02:
2b:cb:54:c7:44:3d:04:3f:f4:86:11:8e:e9:a4:53:79:08:8c:
12:8e:de:42:9e:04:52:7b:95:d3:68:41:f9:2a:0c:fb:dd:df:
7e:dd:59:62:97:99:50:4b:08:af:9e:f7:c4:2d:64:02:43:90:
03:25:77:1f:c1:8e:bd:97:aa:03:e3:9e:b2:6b:e5:86:66:59:
2d:4d:5f:77
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn92WmWIEnmctyO5uQGVk18MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzYjViNDkxM2NjNzhlNDA4MDNjMDBiZWM2YjFhOWRjNDhm
ZjM2ODQwHhcNMjUxMDE5MTkwMTQ3WhcNMjUxMDIwMTkwMTQ3WjAzMTEwLwYDVQQD
EyhiNmQ3NWJjYTQ5MmE5YThkYWI3NTBmOTBhOTg5MDNiOWMwMWVmMzM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzVRd+mcqB+ITmy3VZ1BIpnoyNYQC
0XpipQI7/MWCklfURUhhu699IYoRGDP25v8UF5KwpeFHpLmDe61XYWRfCC/2YZHw
7IsUTuarZi1mmiYVY1CkqlFUdm4kcOvUkfA8UDjQoX8vmdwA0Q0aSVu/KTjZjZBi
UKPezzNopxY8lIzyWFPyi7JggxCZLuE8SU3XSz8l5mTmBZKw9zBTFU6GHC9lPlej
3MI0aFAP5eJ/fIMjdwf3WdmtnpEbdeG5EGyu+tgiblqyjsF2/XsRrqJzkVu1M9E1
t/zXgeGy5B13FQ/AvyfJjeRliWdcFACXW9+6n6BIev95XDQvMkEaptdwdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLbXW8pJKpqNq3UPkKmJA7nAHvM0MB8GA1UdIwQY
MBaAFIO1tJE8x45AgDwAvsaxqdxI/zaEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZzdXMGtUekhqa0NBUEFDLXhyR3AzRWpfTm9RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS9kYzU3M2QtYTNkYi00MWY5LThjM2Yt
ODY3OTY1ZWI1MGNhLzEvZzdXMGtUekhqa0NBUEFDLXhyR3AzRWpfTm9RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS9kYzU3M2QtYTNkYi00MWY5LThjM2YtODY3OTY1ZWI1MGNh
LzEvZzdXMGtUekhqa0NBUEFDLXhyR3AzRWpfTm9RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhOKVUkUt
uYr9ZZgj9wC/2L0rsIgWVSVqCxDMiGqsiFmsHNRyENbTap3VvM5cNh4QgH2UYnuu
A9RZS9duTPvbwJW+z9JAD4JM04FDA0hmrYbBIf8g331HmeYOSXxBLfl8Hf8w1rPL
BVE5c5njkaph/LXke2un++3k7vnLtYef0jaWM6SZfqD2z/W1Wgkufz/YvS3lKrog
ckgeYqDZW/hhqFj67ZMTqbnDojHSvajSIzy4LqICK8tUx0Q9BD/0hhGO6aRTeQiM
Eo7eQp4EUnuV02hB+SoM+93fft1ZYpeZUEsIr573xC1kAkOQAyV3H8GOvZeqA+Oe
smvlhmZZLU1fdw==
-----END CERTIFICATE-----
Generated at Mon Oct 20 02:29:55 2025 by rpki-client