Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/f79cbc-848d-4f3e-8dc1-d51141ccdc06/1/gPI_QpUEIDwYlzeiB05T8u_GT8c.mft
File: gPI_QpUEIDwYlzeiB05T8u_GT8c.mft (raw, json)
Hash identifier: /4+FWnzX7VGBpP+KS6Z7hgebM0QOYQmKtDd+1Gd8Ou0=
Subject key identifier: F0:38:9E:43:95:98:6E:E3:7D:7C:5A:8E:8D:06:B5:D6:28:97:87:A9
Authority key identifier: 80:F2:3F:42:95:04:20:3C:18:97:37:A2:07:4E:53:F2:EF:C6:4F:C7
Certificate issuer: /CN=80f23f429504203c189737a2074e53f2efc64fc7
Certificate serial: 019A5307D7D8A69E5B9AA2C429824BEE5CAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gPI_QpUEIDwYlzeiB05T8u_GT8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/f79cbc-848d-4f3e-8dc1-d51141ccdc06/1/gPI_QpUEIDwYlzeiB05T8u_GT8c.mft
Manifest number: 01B4
Signing time: Wed 05 Nov 2025 08:00:14 +0000
Manifest this update: Wed 05 Nov 2025 08:00:14 +0000
Manifest next update: Thu 06 Nov 2025 08:00:14 +0000
Files and hashes: 1: 5v0hUEBxgEJ_Wz85dg0QD5wiMr4.roa (hash: AOgJD9izw5WZn+hE7i6Z6aoy52p5jFj9e/Qz0bGyFWk=)
2: gPI_QpUEIDwYlzeiB05T8u_GT8c.crl (hash: baEUfp3F4cVFP5veTF4afEZRw+dMyBFqSQIsSCZfUIs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/f79cbc-848d-4f3e-8dc1-d51141ccdc06/1/gPI_QpUEIDwYlzeiB05T8u_GT8c.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/f79cbc-848d-4f3e-8dc1-d51141ccdc06/1/gPI_QpUEIDwYlzeiB05T8u_GT8c.mft
rsync://rpki.ripe.net/repository/DEFAULT/gPI_QpUEIDwYlzeiB05T8u_GT8c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:07:d7:d8:a6:9e:5b:9a:a2:c4:29:82:4b:ee:5c:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80f23f429504203c189737a2074e53f2efc64fc7
Validity
Not Before: Nov 5 08:00:14 2025 GMT
Not After : Nov 6 08:00:14 2025 GMT
Subject: CN=f0389e4395986ee37d7c5a8e8d06b5d6289787a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:29:d4:35:f3:30:26:22:d5:c3:a9:67:29:3c:
5b:06:7c:e8:fa:26:36:e1:c9:c7:96:74:6f:0a:a4:
82:25:ca:92:7e:b9:11:99:7d:9c:a8:29:d5:56:2c:
58:ae:86:77:d9:12:7f:3f:e6:e7:91:b4:c1:00:32:
4d:6a:ef:d3:c1:3e:52:9a:4e:b4:6d:59:16:66:7c:
b8:7a:7c:16:f8:16:38:01:51:8d:7a:e0:99:a3:b9:
62:f7:a0:14:55:22:0d:60:15:f0:be:64:10:5d:c8:
dd:7c:14:70:64:f3:69:f9:4e:4b:10:c2:25:a9:df:
38:97:6a:62:1a:a3:04:d6:25:7d:44:cb:e2:c9:ac:
e6:2e:37:02:9f:88:93:e7:0e:72:64:5c:fd:e0:cb:
ae:82:7f:72:77:f3:77:cf:9f:89:bb:5e:ac:f6:95:
3b:5a:4b:3b:03:98:08:35:8c:5b:77:77:9f:f0:02:
06:c8:bc:5b:2d:1c:52:4b:d2:95:d5:7b:2d:19:63:
87:51:f3:d9:b7:a8:cb:2e:c0:10:6d:d0:12:52:0c:
cd:ea:23:54:3d:73:8f:74:ef:55:15:c4:bd:40:d0:
c3:5c:c6:54:0e:e2:51:c9:ee:ae:df:fd:eb:61:0a:
d9:28:ed:02:23:a8:90:42:a2:1e:66:3c:89:31:d3:
a6:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:38:9E:43:95:98:6E:E3:7D:7C:5A:8E:8D:06:B5:D6:28:97:87:A9
X509v3 Authority Key Identifier:
keyid:80:F2:3F:42:95:04:20:3C:18:97:37:A2:07:4E:53:F2:EF:C6:4F:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gPI_QpUEIDwYlzeiB05T8u_GT8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f79cbc-848d-4f3e-8dc1-d51141ccdc06/1/gPI_QpUEIDwYlzeiB05T8u_GT8c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f79cbc-848d-4f3e-8dc1-d51141ccdc06/1/gPI_QpUEIDwYlzeiB05T8u_GT8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:d3:73:be:88:b1:f8:2b:8a:cb:7e:1a:6f:41:3f:f1:61:aa:
9a:4b:a1:ff:48:da:08:d2:e3:95:5d:33:b4:38:50:8b:98:3d:
25:7e:0a:7d:a9:51:37:3e:5f:16:68:e6:00:94:d3:b6:9b:73:
c2:f3:59:24:94:58:9e:13:06:80:d7:7d:05:e4:4d:8a:6e:44:
8e:4f:82:93:b0:03:ec:f5:cf:7e:72:d0:ce:27:83:aa:2e:28:
85:d5:14:8a:33:93:12:f1:22:8c:c9:cb:32:c7:65:7f:72:e8:
be:fb:27:d3:66:77:3a:30:97:6d:0e:4a:ff:16:4a:d5:f7:5e:
32:ca:08:e8:c3:e8:bd:c3:05:8e:cb:b0:a5:1f:c1:18:89:15:
19:51:e4:4f:96:6b:8b:89:bc:8e:d8:e9:f0:31:5f:20:52:ea:
b9:26:58:d8:d9:c1:1e:cc:fd:ab:45:7f:a5:2a:53:f3:c9:9a:
cc:d0:6e:54:c0:9f:d8:25:c3:fa:ce:06:68:fd:3d:6e:3c:85:
c9:7c:50:50:3a:24:76:28:e6:0d:02:e6:e5:57:e2:96:36:24:
aa:cc:b9:8d:30:60:9a:ab:cd:6c:da:55:b2:d3:31:03:99:9f:
d1:4f:b9:0e:85:ca:97:80:6b:da:6c:46:50:86:91:bb:70:70:
2a:87:40:cf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpTB9fYpp5bmqLEKYJL7lyqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgwZjIzZjQyOTUwNDIwM2MxODk3MzdhMjA3NGU1M2YyZWZj
NjRmYzcwHhcNMjUxMTA1MDgwMDE0WhcNMjUxMTA2MDgwMDE0WjAzMTEwLwYDVQQD
EyhmMDM4OWU0Mzk1OTg2ZWUzN2Q3YzVhOGU4ZDA2YjVkNjI4OTc4N2E5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnCnUNfMwJiLVw6lnKTxbBnzo+iY2
4cnHlnRvCqSCJcqSfrkRmX2cqCnVVixYroZ32RJ/P+bnkbTBADJNau/TwT5Smk60
bVkWZny4enwW+BY4AVGNeuCZo7li96AUVSINYBXwvmQQXcjdfBRwZPNp+U5LEMIl
qd84l2piGqME1iV9RMviyazmLjcCn4iT5w5yZFz94Muugn9yd/N3z5+Ju16s9pU7
Wks7A5gINYxbd3ef8AIGyLxbLRxSS9KV1XstGWOHUfPZt6jLLsAQbdASUgzN6iNU
PXOPdO9VFcS9QNDDXMZUDuJRye6u3/3rYQrZKO0CI6iQQqIeZjyJMdOmgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPA4nkOVmG7jfXxajo0GtdYol4epMB8GA1UdIwQY
MBaAFIDyP0KVBCA8GJc3ogdOU/Lvxk/HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ1BJX1FwVUVJRHdZbHplaUIwNVQ4dV9HVDhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS9mNzljYmMtODQ4ZC00ZjNlLThkYzEt
ZDUxMTQxY2NkYzA2LzEvZ1BJX1FwVUVJRHdZbHplaUIwNVQ4dV9HVDhjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS9mNzljYmMtODQ4ZC00ZjNlLThkYzEtZDUxMTQxY2NkYzA2
LzEvZ1BJX1FwVUVJRHdZbHplaUIwNVQ4dV9HVDhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABNNzvoix
+CuKy34ab0E/8WGqmkuh/0jaCNLjlV0ztDhQi5g9JX4KfalRNz5fFmjmAJTTtptz
wvNZJJRYnhMGgNd9BeRNim5Ejk+Ck7AD7PXPfnLQzieDqi4ohdUUijOTEvEijMnL
Msdlf3Lovvsn02Z3OjCXbQ5K/xZK1fdeMsoI6MPovcMFjsuwpR/BGIkVGVHkT5Zr
i4m8jtjp8DFfIFLquSZY2NnBHsz9q0V/pSpT88mazNBuVMCf2CXD+s4GaP09bjyF
yXxQUDokdijmDQLm5VfiljYkqsy5jTBgmqvNbNpVstMxA5mf0U+5DoXKl4Br2mxG
UIaRu3BwKodAzw==
-----END CERTIFICATE-----
Generated at Wed Nov 5 10:44:20 2025 by rpki-client