Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/767bd0-b0ef-4114-a58e-ff86bf881648/1/g5qaG34R_ed-Th9X_xGGTO4h8WU.mft
File: g5qaG34R_ed-Th9X_xGGTO4h8WU.mft (raw, json)
Hash identifier: O8Nq5lCVLM+QLWSZGmrMCkxbZ2ORQHCpa4plOlczjkw=
Subject key identifier: 1A:68:C5:FD:1C:76:74:93:FA:70:FE:E2:C7:A2:97:9C:AB:28:16:F2
Authority key identifier: 83:9A:9A:1B:7E:11:FD:E7:7E:4E:1F:57:FF:11:86:4C:EE:21:F1:65
Certificate issuer: /CN=839a9a1b7e11fde77e4e1f57ff11864cee21f165
Certificate serial: 019A522C642E8F1FCA0667C43AD9C81C65B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g5qaG34R_ed-Th9X_xGGTO4h8WU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/767bd0-b0ef-4114-a58e-ff86bf881648/1/g5qaG34R_ed-Th9X_xGGTO4h8WU.mft
Manifest number: 1711
Signing time: Wed 05 Nov 2025 04:00:32 +0000
Manifest this update: Wed 05 Nov 2025 04:00:32 +0000
Manifest next update: Thu 06 Nov 2025 04:00:32 +0000
Files and hashes: 1: FiNVX28gYght-QYZJvZkKvA8mpg.roa (hash: OWl23RYTlTMxZtrywernX3ASfukLtRAzCghbHPY5Zmc=)
2: az8f5PX7dUfhI93pu-mhMPohiUw.roa (hash: PF7qRr/GcrYr8KFAg2buvtd67qe7aScIHbVhVBnD8/M=)
3: g5qaG34R_ed-Th9X_xGGTO4h8WU.crl (hash: 1hd4lT6quGebAlpvrngNKeiYCFm1ufGQkf4MHbwIrZU=)
4: pnar3nU7lsWpYfObm0kbhWvk0to.roa (hash: YBfwP3uxI+fMAH4sE5yvO7xnTJh4Fd6ScTYz4RruI/U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/767bd0-b0ef-4114-a58e-ff86bf881648/1/g5qaG34R_ed-Th9X_xGGTO4h8WU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/767bd0-b0ef-4114-a58e-ff86bf881648/1/g5qaG34R_ed-Th9X_xGGTO4h8WU.mft
rsync://rpki.ripe.net/repository/DEFAULT/g5qaG34R_ed-Th9X_xGGTO4h8WU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:2c:64:2e:8f:1f:ca:06:67:c4:3a:d9:c8:1c:65:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=839a9a1b7e11fde77e4e1f57ff11864cee21f165
Validity
Not Before: Nov 5 04:00:32 2025 GMT
Not After : Nov 6 04:00:32 2025 GMT
Subject: CN=1a68c5fd1c767493fa70fee2c7a2979cab2816f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:55:1c:40:dc:58:1e:76:34:13:25:b3:c1:67:
6f:49:e3:bc:a8:9d:4f:13:3c:21:7a:9d:ae:29:8a:
19:f7:99:2a:62:3e:e3:c0:3f:9f:0b:fb:e6:14:e6:
dd:f6:11:f2:7c:f5:bd:99:7b:de:7e:40:4b:1a:d8:
d5:61:4c:76:33:16:7e:28:f1:06:77:32:44:96:b5:
1e:dc:74:69:ae:30:71:e3:d7:d1:65:24:4a:76:e4:
90:ff:9d:7d:3f:e2:27:e5:92:f4:c6:14:b2:db:6c:
36:d3:c1:8b:8a:5f:3e:09:c8:23:a2:23:c8:18:32:
e4:67:9b:71:ad:c9:f8:20:2c:93:8d:0e:56:6d:58:
1d:43:98:1a:c8:1b:11:52:17:75:5f:0a:2a:7c:92:
b9:db:bb:ac:06:30:1a:d1:48:ae:d5:56:81:9d:8d:
06:dc:d8:13:8b:2c:fa:0d:f1:49:2d:af:df:13:e7:
5f:1b:18:29:1a:92:72:80:4b:7a:b4:39:a7:bd:23:
6a:7b:f9:4d:47:2d:09:7f:77:5a:9b:c9:2a:46:f7:
6f:91:35:23:86:a0:08:60:a1:76:4d:f1:f6:e0:3c:
40:fc:9e:2a:a3:2b:0b:94:0f:e5:40:9f:34:54:49:
0c:df:0c:39:d9:9e:48:45:fa:d2:6a:53:35:82:37:
08:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:68:C5:FD:1C:76:74:93:FA:70:FE:E2:C7:A2:97:9C:AB:28:16:F2
X509v3 Authority Key Identifier:
keyid:83:9A:9A:1B:7E:11:FD:E7:7E:4E:1F:57:FF:11:86:4C:EE:21:F1:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g5qaG34R_ed-Th9X_xGGTO4h8WU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/767bd0-b0ef-4114-a58e-ff86bf881648/1/g5qaG34R_ed-Th9X_xGGTO4h8WU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/767bd0-b0ef-4114-a58e-ff86bf881648/1/g5qaG34R_ed-Th9X_xGGTO4h8WU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:fa:c0:99:6c:7e:eb:73:76:f4:aa:ec:ec:e4:f8:76:a5:f4:
c3:81:40:64:00:34:de:06:dd:10:5f:c1:6d:23:21:3e:36:93:
36:80:55:b7:f1:53:13:d2:34:b7:81:2c:87:9f:25:1c:52:e9:
21:29:9c:50:e6:51:de:22:a6:69:2a:1b:9f:3e:c5:76:d4:b9:
54:b2:56:57:8b:da:1d:94:32:d2:f2:cc:16:3a:b0:6c:b5:ba:
d1:9e:3c:dc:b8:f9:66:e7:bf:d7:b3:45:33:e8:02:85:58:bd:
d2:d3:44:55:0d:8a:d2:38:14:aa:03:99:2a:ad:75:81:99:b7:
05:c5:b8:8e:8c:c5:84:7b:b0:0d:d7:09:7c:ad:73:d9:4d:a3:
18:89:56:18:fe:27:fa:63:e9:d7:1c:f1:eb:0b:5c:92:6d:67:
73:ac:08:3e:1b:ce:4b:3d:94:71:08:df:43:da:c4:f5:40:4e:
02:14:cd:16:eb:cb:10:5f:97:0b:c9:71:5a:b5:1d:cb:82:02:
cb:6f:f9:47:ee:82:b0:a8:37:d6:a0:50:21:48:e5:36:04:cf:
12:e4:36:b5:33:29:98:aa:b8:5f:6e:9f:d0:47:04:3f:5f:89:
57:30:99:b6:d9:0c:16:7e:cd:61:7d:f7:5e:c5:e5:2d:39:aa:
71:79:04:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 12:13:48 2025 by rpki-client