Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/57cb04-58ce-433b-93ab-10bc59d8ff8d/1/g0hoQbT0rcViZMWWMIUYKiIORtQ.mft
File: g0hoQbT0rcViZMWWMIUYKiIORtQ.mft (raw, json)
Hash identifier: U50GijFepYK6xu4+79NumUgZnyeQzZaErgEREl/g/O4=
Subject key identifier: 36:14:94:39:45:19:E4:BD:53:11:A3:AE:B3:4B:4F:DE:49:C0:70:40
Authority key identifier: 83:48:68:41:B4:F4:AD:C5:62:64:C5:96:30:85:18:2A:22:0E:46:D4
Certificate issuer: /CN=83486841b4f4adc56264c5963085182a220e46d4
Certificate serial: 019A5074A599D0FE4A281F33C6CA8FB98C40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g0hoQbT0rcViZMWWMIUYKiIORtQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/57cb04-58ce-433b-93ab-10bc59d8ff8d/1/g0hoQbT0rcViZMWWMIUYKiIORtQ.mft
Manifest number: 060B
Signing time: Tue 04 Nov 2025 20:00:13 +0000
Manifest this update: Tue 04 Nov 2025 20:00:13 +0000
Manifest next update: Wed 05 Nov 2025 20:00:13 +0000
Files and hashes: 1: 5hNBi4pOh8tuQ2-hbUmZAAcoj0g.roa (hash: bvf6+FGQm47HOMj5UevrWk1RDXzOnQeu8ZcjR9Z2g1E=)
2: VnV_NALClcugVnJ8tM0-ssB-Wvo.roa (hash: i5vFppJbIjgrNIbkedUgagHC+ZhmU+v4i2sVl3277z4=)
3: g0hoQbT0rcViZMWWMIUYKiIORtQ.crl (hash: dKEeyXoc6QX6gj2cV1XS2DH1LzD2ZdqLoR4r6x/57/s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/57cb04-58ce-433b-93ab-10bc59d8ff8d/1/g0hoQbT0rcViZMWWMIUYKiIORtQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/57cb04-58ce-433b-93ab-10bc59d8ff8d/1/g0hoQbT0rcViZMWWMIUYKiIORtQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/g0hoQbT0rcViZMWWMIUYKiIORtQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:74:a5:99:d0:fe:4a:28:1f:33:c6:ca:8f:b9:8c:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83486841b4f4adc56264c5963085182a220e46d4
Validity
Not Before: Nov 4 20:00:13 2025 GMT
Not After : Nov 5 20:00:13 2025 GMT
Subject: CN=361494394519e4bd5311a3aeb34b4fde49c07040
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d8:14:d5:51:41:32:01:c1:f3:36:5c:3d:ef:
bd:1b:7c:c2:a5:69:d5:ce:17:03:8c:e8:a3:91:4e:
8b:af:07:03:8d:95:f3:2f:48:27:6e:b5:a4:30:7b:
10:6b:5c:9c:3e:79:93:62:89:0c:5e:7d:88:d8:3b:
7f:12:23:81:8e:9e:13:59:58:92:69:a8:69:12:56:
49:09:b1:e3:1a:52:30:ae:5a:9c:cd:d0:ef:e1:1e:
8f:a9:91:5e:08:d5:6a:df:9c:4d:a2:ab:af:c5:87:
3b:3f:77:1b:e0:1a:d0:b5:f8:0f:89:50:a9:b7:50:
ee:4c:30:3b:58:7d:09:86:32:19:21:fd:2f:e7:d6:
24:d7:33:0a:45:43:84:df:19:5c:63:94:1a:8d:6a:
15:9b:ba:25:1c:42:c0:8e:d4:c9:28:73:ee:78:1a:
80:8d:e3:3b:3d:35:61:23:51:bb:5f:41:96:44:cf:
96:f6:50:6c:87:a8:cc:91:29:72:3d:b3:c3:75:c8:
14:dd:da:2e:7e:ae:cf:01:fd:44:f1:60:8f:19:8c:
66:3f:b7:89:2c:ee:8f:07:f1:07:23:f6:db:e9:9a:
6a:52:30:14:96:93:50:2d:d2:46:cb:a4:dc:cf:34:
37:39:92:8c:72:b1:8e:b7:96:b3:5b:fb:e9:97:06:
74:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:14:94:39:45:19:E4:BD:53:11:A3:AE:B3:4B:4F:DE:49:C0:70:40
X509v3 Authority Key Identifier:
keyid:83:48:68:41:B4:F4:AD:C5:62:64:C5:96:30:85:18:2A:22:0E:46:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g0hoQbT0rcViZMWWMIUYKiIORtQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/57cb04-58ce-433b-93ab-10bc59d8ff8d/1/g0hoQbT0rcViZMWWMIUYKiIORtQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/57cb04-58ce-433b-93ab-10bc59d8ff8d/1/g0hoQbT0rcViZMWWMIUYKiIORtQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:f9:a6:02:72:28:e5:af:f7:30:6b:47:3e:e2:1a:91:f9:ea:
7b:55:d5:e1:2d:fb:9b:b0:5e:04:45:52:ed:7d:32:9f:9a:63:
f7:6d:59:ea:06:b2:c3:8d:32:9f:8e:dc:d2:84:42:bd:2e:e0:
a4:69:34:6b:6a:00:c1:96:a6:7e:52:75:8d:26:58:89:bc:e3:
20:52:ac:19:b5:14:bc:2f:ba:cd:a3:20:e2:21:8b:ea:cc:ea:
97:ed:4b:ff:17:e9:33:67:bd:37:d5:68:c6:32:0b:de:ba:bf:
62:9e:31:c5:b4:e2:2a:c7:82:01:98:f4:8c:51:73:44:c8:73:
3c:c6:54:7c:ac:1a:aa:f4:0f:dc:b3:59:82:13:d0:13:22:34:
36:8a:52:a8:3c:01:fb:9c:6e:5a:b9:63:6f:1e:37:02:28:39:
89:f0:16:14:bc:6a:27:37:7d:7f:2f:59:e9:ce:15:54:9d:d3:
7a:39:3f:ee:15:05:50:f6:b2:8a:2f:b4:d7:b6:20:f5:8f:83:
5d:3b:3d:50:8f:78:b8:05:5d:3d:81:7b:b7:47:50:88:df:47:
09:7c:2a:4d:3b:aa:35:b6:ea:c6:18:09:31:04:d2:18:e7:bc:
57:a4:7b:c2:5b:a6:9e:b7:bb:1a:e6:9a:05:9a:ec:45:4e:47:
5a:14:7c:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:38:40 2025 by rpki-client