Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/f79cbc-848d-4f3e-8dc1-d51141ccdc06/1/gPI_QpUEIDwYlzeiB05T8u_GT8c.mft
File: gPI_QpUEIDwYlzeiB05T8u_GT8c.mft (raw, json)
Hash identifier: FR+4Zn9j+ULC441OGc2F0P1RdfYxrQ2mTY1KlU3u/tY=
Subject key identifier: AB:D5:30:7E:22:CC:A2:50:10:17:C0:6B:E7:B7:D6:D5:62:B7:C8:F9
Authority key identifier: 80:F2:3F:42:95:04:20:3C:18:97:37:A2:07:4E:53:F2:EF:C6:4F:C7
Certificate issuer: /CN=80f23f429504203c189737a2074e53f2efc64fc7
Certificate serial: 019A56E498D9D66D4F99D8C57AD22E1F3506
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gPI_QpUEIDwYlzeiB05T8u_GT8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/f79cbc-848d-4f3e-8dc1-d51141ccdc06/1/gPI_QpUEIDwYlzeiB05T8u_GT8c.mft
Manifest number: 01B6
Signing time: Thu 06 Nov 2025 02:00:13 +0000
Manifest this update: Thu 06 Nov 2025 02:00:13 +0000
Manifest next update: Fri 07 Nov 2025 02:00:13 +0000
Files and hashes: 1: 5v0hUEBxgEJ_Wz85dg0QD5wiMr4.roa (hash: AOgJD9izw5WZn+hE7i6Z6aoy52p5jFj9e/Qz0bGyFWk=)
2: gPI_QpUEIDwYlzeiB05T8u_GT8c.crl (hash: DAsSkmpyZXCr/abxw9YBejiP6pbG07c5KjhQH2kKnAw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/f79cbc-848d-4f3e-8dc1-d51141ccdc06/1/gPI_QpUEIDwYlzeiB05T8u_GT8c.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/f79cbc-848d-4f3e-8dc1-d51141ccdc06/1/gPI_QpUEIDwYlzeiB05T8u_GT8c.mft
rsync://rpki.ripe.net/repository/DEFAULT/gPI_QpUEIDwYlzeiB05T8u_GT8c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 21:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:56:e4:98:d9:d6:6d:4f:99:d8:c5:7a:d2:2e:1f:35:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80f23f429504203c189737a2074e53f2efc64fc7
Validity
Not Before: Nov 6 02:00:13 2025 GMT
Not After : Nov 7 02:00:13 2025 GMT
Subject: CN=abd5307e22cca2501017c06be7b7d6d562b7c8f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:7a:2c:89:27:f1:b0:fb:46:d6:e3:31:de:2e:
18:cf:e9:67:6f:61:c8:b8:d2:3d:b6:43:1d:bb:0b:
bb:f1:27:75:04:31:a9:0b:4d:60:93:c7:fd:8f:ba:
a6:e4:9b:c5:04:71:5f:c0:a7:0d:3b:62:74:56:42:
1b:f8:79:e9:d2:0f:be:05:ae:da:d6:3d:3b:23:6f:
ff:c9:b6:d6:bd:5b:d2:75:f7:02:45:08:a2:97:ab:
ee:11:27:e6:de:2a:f8:ea:05:ea:8f:52:7e:e2:50:
94:3f:7e:bf:64:ab:7b:73:d5:0f:78:17:2e:56:d2:
87:44:b7:78:8b:c0:d6:d0:cf:11:25:f6:e6:ac:82:
5c:b2:2c:0e:11:6b:26:99:93:81:3e:aa:5b:ad:bd:
3f:a8:12:ba:1b:3f:3f:f0:17:00:1c:85:fe:b4:4c:
42:bf:01:73:63:3a:c5:29:97:a0:2c:53:1f:09:14:
81:76:de:c6:98:d4:7e:f7:56:ef:a0:7f:ae:58:a6:
33:c0:1d:98:1f:13:15:48:b2:2c:95:e6:24:54:6f:
7c:64:07:0c:8a:50:b3:ed:c5:13:96:8e:0b:8b:1c:
e1:1f:05:f7:44:c4:57:95:c0:b0:70:04:cd:20:38:
23:08:f6:4c:a7:e0:b1:1a:53:12:07:8d:e4:41:99:
50:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:D5:30:7E:22:CC:A2:50:10:17:C0:6B:E7:B7:D6:D5:62:B7:C8:F9
X509v3 Authority Key Identifier:
keyid:80:F2:3F:42:95:04:20:3C:18:97:37:A2:07:4E:53:F2:EF:C6:4F:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gPI_QpUEIDwYlzeiB05T8u_GT8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f79cbc-848d-4f3e-8dc1-d51141ccdc06/1/gPI_QpUEIDwYlzeiB05T8u_GT8c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f79cbc-848d-4f3e-8dc1-d51141ccdc06/1/gPI_QpUEIDwYlzeiB05T8u_GT8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:e7:e9:69:cb:9a:ad:b0:8a:ca:16:a0:51:21:97:41:bb:88:
18:a1:4a:4d:84:c8:14:5b:ba:a2:ae:ae:5a:20:a0:56:90:79:
cf:13:d1:55:91:6d:a4:01:db:79:8d:4e:ce:33:1d:8b:8f:aa:
c0:23:89:ed:c5:23:46:03:38:af:a4:fb:8e:d2:37:d6:e4:4d:
db:58:38:fb:ae:e7:25:83:76:88:6b:d6:e9:53:f6:11:df:b5:
3a:a5:30:3e:1a:0a:07:7c:6b:4d:6a:28:dd:18:f3:bd:27:78:
47:df:49:2d:7d:d0:cc:42:74:c9:6c:69:c3:32:66:68:7b:e5:
69:2c:30:01:63:08:9b:ce:17:d7:88:59:e4:8e:a3:ce:2f:9b:
b6:b5:61:a4:74:f6:3a:75:27:e1:25:c0:66:93:58:26:91:14:
4d:b3:fd:63:fd:6f:00:ce:95:a2:35:c6:3c:f0:53:1d:ff:7b:
16:9c:4d:d8:d0:22:64:e2:02:56:04:80:1a:6d:6d:69:82:ae:
55:9f:6c:44:eb:29:83:42:bb:58:98:72:29:3a:75:90:51:30:
b0:64:09:59:18:87:41:d8:f6:5e:0b:c6:bf:46:6d:73:4b:2c:
e3:ba:4a:7b:6b:93:ce:08:2b:2c:25:5a:3b:67:08:de:59:f6:
95:01:e4:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 05:59:40 2025 by rpki-client