Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/4ba5ff-562e-4354-9600-f762929f1f08/1/gPq1UNgnot7w1NJhYGFCXC9pTIQ.mft
File: gPq1UNgnot7w1NJhYGFCXC9pTIQ.mft (raw, json)
Hash identifier: ji9JI+h+wCJud+D9qnqxfslEYnz6eg4RQykiCVKvBIw=
Subject key identifier: 6E:E1:58:F1:FC:5E:E4:79:73:1F:DE:AE:BA:4A:A6:99:DE:DA:4C:E1
Authority key identifier: 80:FA:B5:50:D8:27:A2:DE:F0:D4:D2:61:60:61:42:5C:2F:69:4C:84
Certificate issuer: /CN=80fab550d827a2def0d4d2616061425c2f694c84
Certificate serial: 019A4F98C4B964B1D5E255903810463DBBB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gPq1UNgnot7w1NJhYGFCXC9pTIQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/4ba5ff-562e-4354-9600-f762929f1f08/1/gPq1UNgnot7w1NJhYGFCXC9pTIQ.mft
Manifest number: 0A50
Signing time: Tue 04 Nov 2025 16:00:03 +0000
Manifest this update: Tue 04 Nov 2025 16:00:03 +0000
Manifest next update: Wed 05 Nov 2025 16:00:03 +0000
Files and hashes: 1: NmyYIbuzbIXUj9jJPjF3BR9optE.roa (hash: wSdjb/vMyeBBwt44mj9k7sBn6y3WZbUfXBs3kYVLtv8=)
2: gPq1UNgnot7w1NJhYGFCXC9pTIQ.crl (hash: YRfPwe0WaecyjsZuP7GqOeWco3dTKkIr2A0w5xASuDk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/4ba5ff-562e-4354-9600-f762929f1f08/1/gPq1UNgnot7w1NJhYGFCXC9pTIQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/4ba5ff-562e-4354-9600-f762929f1f08/1/gPq1UNgnot7w1NJhYGFCXC9pTIQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/gPq1UNgnot7w1NJhYGFCXC9pTIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:98:c4:b9:64:b1:d5:e2:55:90:38:10:46:3d:bb:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80fab550d827a2def0d4d2616061425c2f694c84
Validity
Not Before: Nov 4 16:00:03 2025 GMT
Not After : Nov 5 16:00:03 2025 GMT
Subject: CN=6ee158f1fc5ee479731fdeaeba4aa699deda4ce1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:58:16:b5:d4:00:42:f6:6a:00:bb:c0:67:12:
a2:1e:2f:f1:f7:00:1c:fd:2f:16:f6:89:ba:4b:4d:
a7:92:17:8f:44:1e:7e:11:d0:df:08:07:e1:37:28:
f4:bf:a0:78:27:78:29:28:c5:b2:99:21:38:9f:dc:
ef:46:25:da:77:21:4f:4d:74:54:1d:61:ae:0d:fd:
5a:2d:ca:28:e7:7e:75:00:92:46:9c:0a:e3:b8:4e:
70:32:ab:d8:87:0f:6e:54:fb:f0:31:ba:ba:cc:a5:
8d:8a:5f:ba:ec:b6:8b:d9:48:47:35:93:68:7d:e3:
f0:35:70:23:50:ce:b3:ca:5b:7c:b1:6e:fc:04:24:
f7:c8:c1:e2:b7:fb:f2:99:99:ed:1b:9e:39:10:1a:
2d:dd:53:ce:16:b5:35:59:c8:32:cc:3b:34:f2:71:
2f:c8:26:5d:3d:70:cc:51:9a:79:8a:3c:fc:e1:9f:
0d:da:5b:ab:17:64:5f:dd:43:5a:16:b6:36:89:44:
ac:8b:50:7c:b5:3e:18:e5:32:e5:41:6a:fb:f8:c5:
93:d5:f8:a6:9d:09:13:31:2a:ad:1d:43:40:22:be:
33:ad:f5:ed:f8:4e:02:90:bc:e8:f4:f1:1e:f3:a4:
ab:5d:37:b2:e0:4a:23:1a:20:3d:ab:8c:be:bb:0e:
fd:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:E1:58:F1:FC:5E:E4:79:73:1F:DE:AE:BA:4A:A6:99:DE:DA:4C:E1
X509v3 Authority Key Identifier:
keyid:80:FA:B5:50:D8:27:A2:DE:F0:D4:D2:61:60:61:42:5C:2F:69:4C:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gPq1UNgnot7w1NJhYGFCXC9pTIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/4ba5ff-562e-4354-9600-f762929f1f08/1/gPq1UNgnot7w1NJhYGFCXC9pTIQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/4ba5ff-562e-4354-9600-f762929f1f08/1/gPq1UNgnot7w1NJhYGFCXC9pTIQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:78:47:36:90:77:2c:f6:66:c4:e5:cd:f0:c0:2f:0c:ee:18:
0c:22:09:d0:c1:f0:da:d0:80:f3:74:cd:30:db:dd:3a:cd:53:
1c:d8:e6:e4:08:26:22:70:e8:f2:f8:fd:4b:bf:e4:1b:d0:21:
7c:83:63:3b:25:9e:65:25:86:0c:b6:c4:78:91:2d:88:4d:9d:
ee:03:4e:0a:0f:cc:08:c7:8b:1b:41:32:11:cd:ad:bb:99:07:
8f:e7:73:e8:86:d5:c9:d3:7e:11:3d:4b:4c:41:51:30:7f:a0:
92:84:82:b3:2e:7c:7b:0f:39:be:29:be:77:32:25:4d:58:61:
7a:14:11:06:a2:7d:c3:09:7e:48:86:83:0e:67:e9:4e:bd:bb:
38:5c:0e:48:53:07:25:bc:77:2d:ec:12:53:61:19:f8:80:c9:
f7:f3:60:c2:31:a7:6f:ef:2e:2c:ba:a9:31:d5:59:38:f4:10:
b8:80:64:8e:58:e5:c7:1e:7c:9b:49:52:67:f3:64:78:b2:fb:
e0:4b:21:f8:aa:ca:a2:85:0c:29:5f:08:6c:d7:88:d0:89:05:
2e:70:62:6d:97:db:97:81:75:d5:4c:3d:e5:5f:2c:76:59:14:
fe:0a:06:fd:30:d4:72:d0:8a:93:9d:c1:33:7f:24:70:b0:db:
02:66:fe:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:18:20 2025 by rpki-client