Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/d8793d-47d8-4d78-9ade-351bfd83fcc1/1/gPNYss4Cuo_wuhTuxfM3qNoRwNw.mft
File: gPNYss4Cuo_wuhTuxfM3qNoRwNw.mft (raw, json)
Hash identifier: X8SU2EkTemj7UIKkRQrPKd6ztRMpmanGkf9GIgB9pxA=
Subject key identifier: 69:B0:EC:91:A8:CF:5B:A5:65:47:BE:42:1E:9F:E3:97:E3:85:F7:3A
Authority key identifier: 80:F3:58:B2:CE:02:BA:8F:F0:BA:14:EE:C5:F3:37:A8:DA:11:C0:DC
Certificate issuer: /CN=80f358b2ce02ba8ff0ba14eec5f337a8da11c0dc
Certificate serial: 019A55642FB0FFC094258097FDBAFC2D7A3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gPNYss4Cuo_wuhTuxfM3qNoRwNw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/d8793d-47d8-4d78-9ade-351bfd83fcc1/1/gPNYss4Cuo_wuhTuxfM3qNoRwNw.mft
Manifest number: 03
Signing time: Wed 05 Nov 2025 19:00:20 +0000
Manifest this update: Wed 05 Nov 2025 19:00:20 +0000
Manifest next update: Thu 06 Nov 2025 19:00:20 +0000
Files and hashes: 1: ZPxgsnjv7jwo30luYis5CI0t_T4.roa (hash: EMPPfN7XNvjOmVJeUGZArk1l9zfLaFwM7b+rjzdo6CA=)
2: gPNYss4Cuo_wuhTuxfM3qNoRwNw.crl (hash: 2F2jMiZ5VFSZF8ccmQBryWgmZPd/s0MpmGlvXSfCrYE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/d8793d-47d8-4d78-9ade-351bfd83fcc1/1/gPNYss4Cuo_wuhTuxfM3qNoRwNw.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/d8793d-47d8-4d78-9ade-351bfd83fcc1/1/gPNYss4Cuo_wuhTuxfM3qNoRwNw.mft
rsync://rpki.ripe.net/repository/DEFAULT/gPNYss4Cuo_wuhTuxfM3qNoRwNw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 19:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:55:64:2f:b0:ff:c0:94:25:80:97:fd:ba:fc:2d:7a:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80f358b2ce02ba8ff0ba14eec5f337a8da11c0dc
Validity
Not Before: Nov 5 19:00:20 2025 GMT
Not After : Nov 6 19:00:20 2025 GMT
Subject: CN=69b0ec91a8cf5ba56547be421e9fe397e385f73a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:34:5d:da:24:65:23:cb:a6:4a:86:e5:2e:32:
f5:92:9a:5a:f0:2a:f8:37:3a:cc:e5:e9:1a:e3:bd:
30:17:51:eb:31:22:32:2d:61:52:9c:26:30:a2:fa:
2b:02:41:9c:d8:af:5f:b6:42:ad:95:65:fa:6a:de:
2e:97:69:a5:1e:16:de:d9:9d:c7:46:f6:ba:37:f7:
e2:43:4d:0a:da:c9:11:38:f8:5c:18:74:c5:19:97:
f0:9e:b0:a8:7b:60:e5:9c:ca:23:47:dc:7f:6e:96:
25:fc:38:c6:f6:62:ee:86:1e:49:53:ee:4a:c0:a6:
7c:96:bc:6e:d3:7c:6f:84:51:d6:3a:8f:7a:ad:71:
c2:f8:79:97:78:13:f8:81:0a:13:3e:16:83:06:55:
79:25:17:4a:c8:39:f3:d2:43:aa:28:7d:25:32:57:
69:1c:6a:fa:d7:21:12:f5:66:14:a4:59:01:1a:83:
ba:dd:7c:f1:1c:83:ad:2b:17:19:6a:df:96:75:cf:
c2:02:49:12:3b:72:20:d6:da:1d:de:49:69:10:69:
2c:3b:7e:99:03:7a:c3:a9:99:8c:85:dc:30:1e:17:
7d:c1:a6:63:d1:09:5f:c7:01:00:3a:32:70:7c:cf:
da:95:3f:99:9b:2e:dc:c6:b2:ea:bd:15:94:f3:c0:
bf:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:B0:EC:91:A8:CF:5B:A5:65:47:BE:42:1E:9F:E3:97:E3:85:F7:3A
X509v3 Authority Key Identifier:
keyid:80:F3:58:B2:CE:02:BA:8F:F0:BA:14:EE:C5:F3:37:A8:DA:11:C0:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gPNYss4Cuo_wuhTuxfM3qNoRwNw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/d8793d-47d8-4d78-9ade-351bfd83fcc1/1/gPNYss4Cuo_wuhTuxfM3qNoRwNw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/d8793d-47d8-4d78-9ade-351bfd83fcc1/1/gPNYss4Cuo_wuhTuxfM3qNoRwNw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:e8:79:aa:f3:db:1c:d0:b6:a0:f5:d6:bb:97:94:38:54:49:
8a:08:ba:f5:4f:8c:d9:33:7b:d4:94:2a:b0:4b:6f:b3:e0:ac:
45:1a:54:3b:25:5b:f9:40:40:78:4f:46:9a:2c:aa:05:79:97:
1a:10:39:93:05:93:90:33:80:cb:14:e2:d4:21:5a:cd:d4:63:
5f:12:c7:c2:34:47:25:73:35:7d:d5:92:76:75:ed:74:0d:18:
7b:23:c9:6c:92:d8:af:87:00:89:cc:77:27:d5:49:24:1a:b7:
48:bb:90:41:64:26:d1:4b:21:1a:ba:46:d3:78:b5:4c:8d:b3:
e1:d3:6c:80:33:a2:a7:43:01:60:0a:f3:ad:3d:f5:a5:02:75:
3f:65:cb:cc:ca:a9:da:89:58:47:d6:e8:dc:68:a1:b0:67:a6:
f1:5e:ca:b7:e0:53:79:95:b5:a6:66:4e:9d:d7:90:e3:97:0a:
53:f8:d8:65:4d:08:bd:2e:a0:9f:d1:60:da:6c:82:06:34:96:
5b:e7:8b:d8:34:50:37:78:5c:ac:f0:62:fd:71:2a:ea:5b:eb:
7c:7b:2e:30:c3:76:c4:3f:df:2f:9a:4e:45:66:6d:8a:84:94:
72:33:33:98:f1:90:38:0f:0d:42:6a:7c:f7:11:2e:42:35:59:
ef:45:15:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 23:15:08 2025 by rpki-client