Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/69ed29-af4e-4524-adfb-e15437380099/1/g5ka_NRV6xsXT8-J-OEOr39ws1U.mft
File: g5ka_NRV6xsXT8-J-OEOr39ws1U.mft (raw, json)
Hash identifier: BysbMvUnXXFcUIWv6RUOrQ9/9eRLLWSYXqnuEG6X8QA=
Subject key identifier: 38:B0:84:BF:B1:01:9A:25:93:D3:AE:E8:48:AE:DE:00:E8:8D:5C:1E
Authority key identifier: 83:99:1A:FC:D4:55:EB:1B:17:4F:CF:89:F8:E1:0E:AF:7F:70:B3:55
Certificate issuer: /CN=83991afcd455eb1b174fcf89f8e10eaf7f70b355
Certificate serial: 019A53ACA461175711818892110DD6C90F12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g5ka_NRV6xsXT8-J-OEOr39ws1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/69ed29-af4e-4524-adfb-e15437380099/1/g5ka_NRV6xsXT8-J-OEOr39ws1U.mft
Manifest number: 172F
Signing time: Wed 05 Nov 2025 11:00:14 +0000
Manifest this update: Wed 05 Nov 2025 11:00:14 +0000
Manifest next update: Thu 06 Nov 2025 11:00:14 +0000
Files and hashes: 1: JTjIGaNjpzftNO-kFk1BOWWIlR0.roa (hash: QhcjtouUn5V8upOm/6e13CmIXaLDrm57wRtRFJI8pfQ=)
2: RDn2kmSbVnJw7wdF-wZa8vdfrGk.roa (hash: PPPp3w62aTSvX+pwPQUqMdFImPKU9XLCtHdMFcqqr1A=)
3: Udl4Y8sRVjim2rAFzxKQuecnclg.roa (hash: OhoAEIIYExt/Quqv/8KIxubBzRvH8hZ7uh526RWh78k=)
4: g5ka_NRV6xsXT8-J-OEOr39ws1U.crl (hash: M7SzwAF0DuU28bhh+SpTkzF0DaejbWaMtmyh+2T2nSo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/69ed29-af4e-4524-adfb-e15437380099/1/g5ka_NRV6xsXT8-J-OEOr39ws1U.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/69ed29-af4e-4524-adfb-e15437380099/1/g5ka_NRV6xsXT8-J-OEOr39ws1U.mft
rsync://rpki.ripe.net/repository/DEFAULT/g5ka_NRV6xsXT8-J-OEOr39ws1U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 11:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:ac:a4:61:17:57:11:81:88:92:11:0d:d6:c9:0f:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83991afcd455eb1b174fcf89f8e10eaf7f70b355
Validity
Not Before: Nov 5 11:00:14 2025 GMT
Not After : Nov 6 11:00:14 2025 GMT
Subject: CN=38b084bfb1019a2593d3aee848aede00e88d5c1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:05:64:5c:9b:58:5e:5e:dd:5d:87:07:d4:4d:
fe:16:d2:f9:7a:87:2a:15:51:13:6d:ca:91:71:4f:
f5:6c:a7:14:5f:fe:9d:c3:40:ea:37:73:39:4c:ed:
d9:de:6c:9d:59:cf:46:0a:cf:52:34:b0:3d:53:26:
5a:91:55:6b:e5:7e:59:c4:66:77:76:d0:f9:fc:18:
af:86:8d:08:01:96:5b:9f:76:18:0b:43:f1:f0:85:
95:f9:ba:26:d9:54:25:39:6a:fb:18:65:e0:40:de:
98:5b:5f:ae:b1:9a:8a:49:e4:c0:2d:b8:44:c7:4f:
ef:ab:cb:69:65:97:c9:f2:2f:63:f7:8e:6d:fc:1d:
3c:af:53:18:bc:d4:bb:f8:a1:3a:e2:0c:42:ed:18:
9a:45:b5:08:4b:95:54:a1:d8:0e:74:07:0e:44:fd:
8c:cb:c2:64:dd:c4:ea:2d:02:92:0f:78:81:d8:f2:
f7:f9:0b:1b:a2:52:96:4a:b5:5a:7c:0e:46:23:6f:
f9:88:38:81:e8:ad:8b:d9:7a:19:80:58:69:78:c9:
db:3a:78:0c:c5:52:56:8d:fe:47:4f:cb:cd:1e:b6:
ae:7a:d5:93:18:4f:ea:8c:2c:10:da:37:ee:41:0e:
ac:9e:08:a5:35:19:d7:39:79:d2:ed:cd:02:d1:92:
e3:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:B0:84:BF:B1:01:9A:25:93:D3:AE:E8:48:AE:DE:00:E8:8D:5C:1E
X509v3 Authority Key Identifier:
keyid:83:99:1A:FC:D4:55:EB:1B:17:4F:CF:89:F8:E1:0E:AF:7F:70:B3:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g5ka_NRV6xsXT8-J-OEOr39ws1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/69ed29-af4e-4524-adfb-e15437380099/1/g5ka_NRV6xsXT8-J-OEOr39ws1U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/69ed29-af4e-4524-adfb-e15437380099/1/g5ka_NRV6xsXT8-J-OEOr39ws1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:d5:0d:89:1f:94:03:f3:c8:ee:a5:be:ae:c1:3b:a7:76:c2:
30:dc:91:e6:ab:3b:05:3f:7a:b7:57:6f:fc:b4:2e:3b:bd:69:
8a:97:1a:0b:76:d7:c5:96:8e:d2:65:e4:4b:ae:40:08:ac:6a:
db:65:ac:f4:8d:0b:d1:ac:e3:ea:59:a5:77:78:f4:cd:81:85:
b5:2d:a3:e8:98:ce:73:54:3f:50:5b:dd:ac:0e:f3:8e:d3:d9:
65:4b:3c:e8:1d:6b:5b:39:15:62:37:28:b1:25:f2:d5:c8:59:
1b:e4:a4:3c:1b:4e:02:57:ef:b8:aa:1e:ba:c3:0f:9f:b9:6c:
bb:7f:55:7d:29:dd:ad:1d:ca:3e:a2:71:d5:f0:3d:a7:3c:34:
b5:97:7c:83:ac:a7:ae:da:ce:2e:8b:10:d7:60:8a:09:b0:f8:
83:6b:56:d4:70:9c:32:ff:6b:02:d0:0d:29:01:64:24:72:e7:
fb:07:86:ed:4e:ac:7f:32:eb:d8:5d:c1:66:10:0b:20:81:00:
ea:d8:cc:ba:e9:0c:d0:55:88:dc:22:c7:0d:83:f4:25:a3:e3:
16:8b:ce:26:8d:b0:8c:20:43:b8:33:4f:39:eb:a1:76:e4:a4:
a9:69:b1:e7:cc:47:18:53:8e:e5:2b:80:10:dc:9e:de:7c:07:
19:a0:2d:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 14:44:34 2025 by rpki-client