Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/42f275-68b7-448d-b956-35bb2e6d0606/1/g5t-FhWgAaW8uW4VSnGvmgtFtdc.mft
File: g5t-FhWgAaW8uW4VSnGvmgtFtdc.mft (raw, json)
Hash identifier: axbEjxiDv9iHqWrOQm7CpkzA1Ksu1woEmy9elG8B2ec=
Subject key identifier: 24:6A:62:13:C7:81:B1:F5:03:6F:A9:5D:F2:F2:3F:9B:17:06:D8:9B
Authority key identifier: 83:9B:7E:16:15:A0:01:A5:BC:B9:6E:15:4A:71:AF:9A:0B:45:B5:D7
Certificate issuer: /CN=839b7e1615a001a5bcb96e154a71af9a0b45b5d7
Certificate serial: 019A53E3C20D8244B1E23FB80AED6BE4F1CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g5t-FhWgAaW8uW4VSnGvmgtFtdc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/42f275-68b7-448d-b956-35bb2e6d0606/1/g5t-FhWgAaW8uW4VSnGvmgtFtdc.mft
Manifest number: 07AA
Signing time: Wed 05 Nov 2025 12:00:26 +0000
Manifest this update: Wed 05 Nov 2025 12:00:26 +0000
Manifest next update: Thu 06 Nov 2025 12:00:26 +0000
Files and hashes: 1: g5t-FhWgAaW8uW4VSnGvmgtFtdc.crl (hash: 2MMIFFfT4xg7LAjUz3RhLQo2m1y4Jzhfj+swpWbFdeg=)
2: r0PvjEpnlWFsFe9mhlu-x7uuqW4.roa (hash: v9Sjd6VL0RkK073Ql08i5EoR8baGeigT54elfTpIto4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/42f275-68b7-448d-b956-35bb2e6d0606/1/g5t-FhWgAaW8uW4VSnGvmgtFtdc.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/42f275-68b7-448d-b956-35bb2e6d0606/1/g5t-FhWgAaW8uW4VSnGvmgtFtdc.mft
rsync://rpki.ripe.net/repository/DEFAULT/g5t-FhWgAaW8uW4VSnGvmgtFtdc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:e3:c2:0d:82:44:b1:e2:3f:b8:0a:ed:6b:e4:f1:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=839b7e1615a001a5bcb96e154a71af9a0b45b5d7
Validity
Not Before: Nov 5 12:00:26 2025 GMT
Not After : Nov 6 12:00:26 2025 GMT
Subject: CN=246a6213c781b1f5036fa95df2f23f9b1706d89b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:e6:57:08:dc:93:41:46:e2:a3:fe:8f:0a:58:
ea:e4:b5:b3:2c:3f:1a:27:2f:70:97:87:54:77:44:
1f:ac:19:0c:d8:2b:c7:fe:f6:3a:e3:bf:80:12:15:
fb:f3:ff:e9:4d:bd:d4:f5:a8:2b:91:52:3d:49:7c:
60:11:6e:2e:45:d2:6e:a7:d1:20:8c:56:75:7d:13:
02:00:bf:9f:9a:d3:69:28:64:e7:a3:75:66:47:84:
54:45:be:48:e3:65:1b:0f:0f:a7:35:6d:70:1c:2f:
d3:6a:1d:83:6c:e8:e6:ba:df:0a:84:55:65:a2:ec:
e5:3d:ee:92:5e:e0:bd:20:a4:ea:85:f1:0c:14:71:
64:9e:f2:9f:39:f9:fa:f3:20:64:a5:4c:d3:e1:03:
bb:c0:d4:62:d0:e6:f7:f8:c0:7f:92:96:cb:ac:50:
b8:ff:e7:0d:2a:a6:46:c0:1c:03:d0:b9:86:78:90:
5e:cd:84:9f:17:5c:44:fe:57:55:f7:7b:82:d8:3c:
26:ad:4e:c6:b0:4c:53:c8:d9:59:66:44:d2:be:66:
e2:7c:d9:a2:92:6b:5a:eb:9c:f3:13:2a:e2:41:70:
65:19:65:cb:f0:68:45:f5:01:bb:4b:93:19:86:7c:
73:8f:81:f9:a1:3e:67:8d:63:97:7e:9e:53:60:ca:
ef:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:6A:62:13:C7:81:B1:F5:03:6F:A9:5D:F2:F2:3F:9B:17:06:D8:9B
X509v3 Authority Key Identifier:
keyid:83:9B:7E:16:15:A0:01:A5:BC:B9:6E:15:4A:71:AF:9A:0B:45:B5:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g5t-FhWgAaW8uW4VSnGvmgtFtdc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/42f275-68b7-448d-b956-35bb2e6d0606/1/g5t-FhWgAaW8uW4VSnGvmgtFtdc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/42f275-68b7-448d-b956-35bb2e6d0606/1/g5t-FhWgAaW8uW4VSnGvmgtFtdc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:86:dc:40:cb:c1:38:c7:64:c7:b6:ee:0f:d3:90:05:e1:f5:
a0:ca:bf:29:49:04:52:14:17:d8:ab:48:1a:90:57:21:f3:f0:
49:80:49:74:65:ca:55:ff:9c:e8:71:c8:70:77:47:48:3d:47:
28:f7:36:b6:e8:c8:23:e5:cc:d9:b8:b3:61:ea:9d:ee:8e:99:
98:59:e7:8d:b0:ad:65:b7:83:61:af:9f:99:a8:de:79:1d:23:
03:23:d1:0f:a6:98:76:e9:21:04:99:50:36:25:69:59:c4:54:
8d:9f:12:bf:ee:a6:1a:23:7a:7c:6e:42:a2:1f:37:7c:18:3c:
c8:72:b3:03:12:e7:d4:d4:13:4d:8b:4f:21:86:57:57:52:1d:
f1:07:62:4b:a6:14:e1:50:40:34:29:90:eb:52:50:05:51:98:
85:e6:32:0a:2d:76:8d:3c:fe:56:5d:5b:9c:45:c2:53:e7:80:
a4:5f:56:a6:fc:87:23:ad:0a:39:7e:b0:45:6a:5b:9c:45:ef:
99:83:30:b1:79:88:d2:0b:8c:66:af:d0:9c:3e:16:7c:12:89:
37:5c:7a:b7:f2:47:47:9e:ff:24:ff:d9:45:0d:78:37:34:28:
ff:ff:04:ac:fb:37:a5:14:3d:c3:ef:3a:1b:b2:ef:9b:e4:9c:
03:45:69:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 17:51:33 2025 by rpki-client