Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a51c75-ef7b-48ab-870f-460cbe688ce5/1/g5JNIiU91reGmbxdCgEQJ5E-X3A.mft
File: g5JNIiU91reGmbxdCgEQJ5E-X3A.mft (raw, json)
Hash identifier: gnZWqQ+XESBrV+ylqvMVMBk9kVMmVlHMqmVmoPgtwWQ=
Subject key identifier: 65:E0:49:9E:1D:E3:AA:D4:80:F4:7D:0B:45:94:7A:68:8D:EF:1E:10
Authority key identifier: 83:92:4D:22:25:3D:D6:B7:86:99:BC:5D:0A:01:10:27:91:3E:5F:70
Certificate issuer: /CN=83924d22253dd6b78699bc5d0a011027913e5f70
Certificate serial: 019A511953D4A45DA055D4FE80627F9DDD34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g5JNIiU91reGmbxdCgEQJ5E-X3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a51c75-ef7b-48ab-870f-460cbe688ce5/1/g5JNIiU91reGmbxdCgEQJ5E-X3A.mft
Manifest number: 0645
Signing time: Tue 04 Nov 2025 23:00:05 +0000
Manifest this update: Tue 04 Nov 2025 23:00:05 +0000
Manifest next update: Wed 05 Nov 2025 23:00:05 +0000
Files and hashes: 1: g5JNIiU91reGmbxdCgEQJ5E-X3A.crl (hash: mE54wbJxWLuOEUkxChCJuRYf9D7uVmS5TeS8kqJDp8A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a51c75-ef7b-48ab-870f-460cbe688ce5/1/g5JNIiU91reGmbxdCgEQJ5E-X3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/a51c75-ef7b-48ab-870f-460cbe688ce5/1/g5JNIiU91reGmbxdCgEQJ5E-X3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/g5JNIiU91reGmbxdCgEQJ5E-X3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:19:53:d4:a4:5d:a0:55:d4:fe:80:62:7f:9d:dd:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83924d22253dd6b78699bc5d0a011027913e5f70
Validity
Not Before: Nov 4 23:00:05 2025 GMT
Not After : Nov 5 23:00:05 2025 GMT
Subject: CN=65e0499e1de3aad480f47d0b45947a688def1e10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f5:26:3e:85:15:9c:26:36:c5:a7:90:f2:cb:
1d:fc:8f:59:5e:08:63:e6:68:01:d1:cb:8e:5d:6e:
28:3d:d3:be:37:85:2c:c6:32:c9:30:9e:3e:e3:c2:
7e:3c:3d:97:91:1a:cc:0e:e9:b0:47:46:01:5e:26:
de:e8:9a:d2:6d:d9:b8:4f:4b:e0:0e:c7:a8:3f:0c:
2f:cc:c0:da:56:73:26:15:c5:da:c8:47:7a:49:b7:
ff:7e:5c:b2:0d:43:03:35:7a:79:3e:e2:95:59:61:
eb:44:f7:ca:6d:8d:3d:d5:41:fb:20:2e:0a:4b:b2:
ee:bc:f3:b1:6d:03:13:53:90:cb:09:67:b8:45:15:
4c:c3:09:9f:0d:f5:b5:60:fa:9d:30:90:36:bc:04:
36:7b:53:47:ff:4a:e2:df:4c:cd:42:38:4b:09:36:
f4:ad:66:0b:77:13:67:83:7b:b9:91:87:c6:7c:0f:
2a:e5:c0:a2:1a:ee:f8:4b:12:51:e9:37:b1:19:10:
da:1e:03:e5:9d:56:56:50:87:7a:8b:ea:2b:6a:16:
f2:5c:eb:89:0b:54:d8:2d:b7:56:63:d9:7e:1b:2e:
af:6a:d0:a3:1d:4e:81:c9:2d:31:8e:76:5f:43:35:
b7:0c:0c:dd:c8:3a:81:c0:7c:c8:2f:2f:3f:93:9b:
04:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:E0:49:9E:1D:E3:AA:D4:80:F4:7D:0B:45:94:7A:68:8D:EF:1E:10
X509v3 Authority Key Identifier:
keyid:83:92:4D:22:25:3D:D6:B7:86:99:BC:5D:0A:01:10:27:91:3E:5F:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g5JNIiU91reGmbxdCgEQJ5E-X3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a51c75-ef7b-48ab-870f-460cbe688ce5/1/g5JNIiU91reGmbxdCgEQJ5E-X3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a51c75-ef7b-48ab-870f-460cbe688ce5/1/g5JNIiU91reGmbxdCgEQJ5E-X3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:4b:61:f9:9a:84:d3:ae:6e:b8:04:aa:24:61:86:99:81:74:
60:a1:96:e9:bf:06:72:71:6e:39:af:6d:ac:7e:94:85:b3:cc:
23:76:e6:e0:3d:57:c8:90:6d:50:e2:fd:4c:c5:f1:d9:fd:24:
f1:0b:e8:15:c8:31:1f:3f:58:3c:72:f1:b4:f7:13:81:8b:c4:
94:e4:a2:05:4f:f9:8b:46:ee:b1:ba:77:1a:67:91:47:ee:4f:
34:53:42:9e:3e:a2:c8:f0:0a:ed:1a:cf:9e:a8:81:bf:72:06:
6c:cf:44:d4:eb:d1:f5:ef:71:b3:9e:d7:78:1a:b3:11:2c:cf:
76:39:aa:6b:57:ff:7e:c9:1c:fb:f4:90:bd:3f:12:5e:3e:03:
1b:6e:3d:26:1a:28:d0:ca:1c:cb:41:42:2b:c7:87:81:8b:1d:
30:4f:d3:57:82:02:2e:d6:4b:3a:85:c2:73:6f:14:2e:53:94:
fd:a0:bf:1e:d8:23:c9:7b:5e:9e:15:09:3e:6f:a0:6f:19:81:
1f:14:83:11:85:fd:53:1f:0a:5b:39:e3:0a:8f:1d:19:16:93:
b6:75:0f:89:b3:17:0d:69:61:26:ca:6b:84:ed:36:6c:dc:ba:
a3:05:7a:b1:2d:4e:48:0f:48:d7:35:58:b2:b1:f9:a7:cb:88:
2a:a2:13:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:24:57 2025 by rpki-client