Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/d808c5-4064-4e8c-8766-49fa58fedff3/1/g5DhBCut2I6W5jnqoK0CMofqUH8.mft
File: g5DhBCut2I6W5jnqoK0CMofqUH8.mft (raw, json)
Hash identifier: Z00E/3IXi/julQJxnTccYgJQBYC6MzvDZ+IfONToZ8k=
Subject key identifier: 10:21:BD:90:FA:CE:BA:1F:DB:D5:37:E3:D2:32:ED:4F:32:E1:97:85
Authority key identifier: 83:90:E1:04:2B:AD:D8:8E:96:E6:39:EA:A0:AD:02:32:87:EA:50:7F
Certificate issuer: /CN=8390e1042badd88e96e639eaa0ad023287ea507f
Certificate serial: 019A5119C408DBD7CB4CD5E305ED104E34AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g5DhBCut2I6W5jnqoK0CMofqUH8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/d808c5-4064-4e8c-8766-49fa58fedff3/1/g5DhBCut2I6W5jnqoK0CMofqUH8.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 23:00:34 +0000
Manifest this update: Tue 04 Nov 2025 23:00:34 +0000
Manifest next update: Wed 05 Nov 2025 23:00:34 +0000
Files and hashes: 1: L07o_vv656M9OEJjc4BFj7rpTc8.roa (hash: RSQDee8PToqw8SZNKDk+n8QFVV+DzoM0xmaXuyUh35A=)
2: g5DhBCut2I6W5jnqoK0CMofqUH8.crl (hash: kXGzvOOHuSwwOVOhVlFsl7lu7+1U/UgxhizgDLylDZs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/d808c5-4064-4e8c-8766-49fa58fedff3/1/g5DhBCut2I6W5jnqoK0CMofqUH8.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/d808c5-4064-4e8c-8766-49fa58fedff3/1/g5DhBCut2I6W5jnqoK0CMofqUH8.mft
rsync://rpki.ripe.net/repository/DEFAULT/g5DhBCut2I6W5jnqoK0CMofqUH8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:19:c4:08:db:d7:cb:4c:d5:e3:05:ed:10:4e:34:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8390e1042badd88e96e639eaa0ad023287ea507f
Validity
Not Before: Nov 4 23:00:34 2025 GMT
Not After : Nov 5 23:00:34 2025 GMT
Subject: CN=1021bd90faceba1fdbd537e3d232ed4f32e19785
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:03:f2:e5:a9:df:7c:58:ee:f8:48:28:3e:96:
fa:1c:8e:37:64:ac:fa:09:c3:f7:d8:7e:71:16:4c:
7d:0c:7b:bd:f9:9a:23:64:ea:c0:e9:c3:f1:a5:51:
e3:a2:05:5a:4a:0f:29:0b:9d:c5:3e:d3:4c:12:ae:
0c:66:a8:97:6e:fc:ec:0b:80:e3:12:f2:8a:46:e0:
77:cf:0e:1e:1b:78:1a:8f:6a:53:d5:45:33:cb:42:
7a:c9:88:92:35:f5:cb:9f:30:3c:da:bb:22:15:50:
bb:70:71:d9:cd:c8:0a:50:91:df:ef:e9:d9:c0:de:
33:9c:62:6e:59:3a:d3:15:da:95:d1:cb:4b:4b:bd:
7d:05:65:f0:a9:59:57:41:c2:cf:5c:43:55:5a:65:
96:5b:7c:1c:91:15:e1:93:64:88:e9:5d:33:7c:6f:
c1:b0:23:93:71:00:0b:00:34:d4:87:ed:33:e7:33:
43:a6:85:07:96:ed:1e:bc:9f:51:33:79:05:ef:45:
4d:44:3f:63:63:42:d0:cb:55:31:64:d2:e8:ae:8f:
73:43:e1:c4:df:57:7c:d6:2a:40:76:f6:1e:4a:a7:
2c:41:d3:b0:cb:c9:27:10:65:13:3c:de:82:45:6f:
00:ef:ea:0e:9b:9a:e7:61:d4:4f:68:52:c8:65:97:
c2:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:21:BD:90:FA:CE:BA:1F:DB:D5:37:E3:D2:32:ED:4F:32:E1:97:85
X509v3 Authority Key Identifier:
keyid:83:90:E1:04:2B:AD:D8:8E:96:E6:39:EA:A0:AD:02:32:87:EA:50:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g5DhBCut2I6W5jnqoK0CMofqUH8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/d808c5-4064-4e8c-8766-49fa58fedff3/1/g5DhBCut2I6W5jnqoK0CMofqUH8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/d808c5-4064-4e8c-8766-49fa58fedff3/1/g5DhBCut2I6W5jnqoK0CMofqUH8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:80:d2:fd:a9:98:c8:87:55:84:a6:6b:ae:cb:e6:b8:45:2e:
41:80:f2:4c:ec:f1:2b:8f:ea:a7:1f:aa:cc:f8:09:38:e4:ac:
a3:d8:16:7d:a5:67:fb:c0:35:a1:8c:6d:cc:ac:d9:4d:43:89:
8d:47:90:54:16:7d:3d:e2:08:f1:82:9e:4a:1a:c1:a2:59:56:
2e:e9:aa:0d:a4:26:65:54:4f:0b:55:20:1e:a7:cc:83:c8:de:
d9:cc:a2:14:35:31:27:0e:e3:12:f1:00:62:bf:36:29:bc:d0:
9c:18:c4:7e:08:f2:5d:04:7f:20:03:b4:24:51:a3:b6:a5:cf:
f0:72:1c:0c:1e:63:67:cf:2f:a1:f2:86:ad:03:9c:b2:e3:fa:
e0:1b:79:ca:fa:fe:82:e4:15:5b:ec:5e:83:bb:7a:f0:32:dc:
9b:b4:b9:ba:87:02:5a:99:79:ba:f7:4b:ab:c6:ec:1b:6c:7c:
af:13:99:f9:2c:91:8f:31:da:28:f9:cd:7c:a6:a3:7e:d5:e2:
c4:a2:ee:01:9b:88:fa:89:41:5e:0e:9e:0c:57:34:1f:dc:dc:
65:24:9d:89:dd:65:9b:4e:d4:f3:8a:45:10:ce:5e:60:cd:2e:
7a:f0:b9:0e:e9:49:8c:49:a5:2d:a3:27:80:f5:67:fe:1c:85:
bc:18:44:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:10:33 2025 by rpki-client