Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/3f9ad1-6be5-4fa4-9e56-d701dc69863f/1/gP5WmKEnlkzA5M6OP9yYXiolpmM.mft
File: gP5WmKEnlkzA5M6OP9yYXiolpmM.mft (raw, json)
Hash identifier: lAtT1Lm/KG1W5ZHe2gsN51y0iomQiysTqD+oLE+NRKM=
Subject key identifier: C7:9C:74:1B:94:BC:A6:7E:C3:69:CE:B9:D5:B8:08:12:91:74:D7:0E
Authority key identifier: 80:FE:56:98:A1:27:96:4C:C0:E4:CE:8E:3F:DC:98:5E:2A:25:A6:63
Certificate issuer: /CN=80fe5698a127964cc0e4ce8e3fdc985e2a25a663
Certificate serial: 019A4F2B612D5E21F2F05008406AA4A81B44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gP5WmKEnlkzA5M6OP9yYXiolpmM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/3f9ad1-6be5-4fa4-9e56-d701dc69863f/1/gP5WmKEnlkzA5M6OP9yYXiolpmM.mft
Manifest number: 05D5
Signing time: Tue 04 Nov 2025 14:00:34 +0000
Manifest this update: Tue 04 Nov 2025 14:00:34 +0000
Manifest next update: Wed 05 Nov 2025 14:00:34 +0000
Files and hashes: 1: MWh5oxD0mlPfv3wl5DDlIllo7IY.roa (hash: hCUe3UqGLfLJn0/ykpo1moRqC/s0I/1a6u8vKsOmeBg=)
2: gP5WmKEnlkzA5M6OP9yYXiolpmM.crl (hash: SBmM5wCm5IPOCWMT1875z/vmhP3FlTC4MrzTQx5EzPg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/3f9ad1-6be5-4fa4-9e56-d701dc69863f/1/gP5WmKEnlkzA5M6OP9yYXiolpmM.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/3f9ad1-6be5-4fa4-9e56-d701dc69863f/1/gP5WmKEnlkzA5M6OP9yYXiolpmM.mft
rsync://rpki.ripe.net/repository/DEFAULT/gP5WmKEnlkzA5M6OP9yYXiolpmM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 14:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2b:61:2d:5e:21:f2:f0:50:08:40:6a:a4:a8:1b:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80fe5698a127964cc0e4ce8e3fdc985e2a25a663
Validity
Not Before: Nov 4 14:00:34 2025 GMT
Not After : Nov 5 14:00:34 2025 GMT
Subject: CN=c79c741b94bca67ec369ceb9d5b808129174d70e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d7:8b:05:d1:ba:d8:e3:1c:42:81:ca:a5:38:
7d:68:9e:19:36:d7:70:bd:db:b7:d1:43:2d:bf:ae:
d6:3f:8b:8b:45:0c:e6:7f:f4:b3:48:61:6c:3d:68:
85:14:06:c6:fb:25:5a:27:82:b7:4d:48:7c:c9:1a:
22:e2:22:a6:c0:eb:1d:3d:7e:bc:01:d0:a9:3c:be:
f3:2c:c5:6c:b0:7b:32:6a:f0:e6:55:a0:6e:78:9a:
de:c7:e9:f8:26:9a:0d:d6:e9:af:1f:37:42:78:8c:
87:8e:6f:ee:b4:f8:19:e1:9d:e3:71:70:c4:8c:42:
4d:75:c7:d4:b0:f6:bd:8e:7d:45:15:17:d8:b7:73:
07:37:20:c1:3b:52:39:fd:0e:c6:f3:0b:76:99:43:
3a:82:95:31:fe:94:05:0c:96:1b:01:1b:ce:8b:97:
a6:6d:5d:d8:ad:a3:4d:90:6f:4b:f7:d7:0f:bc:bf:
ac:06:c4:de:37:6d:eb:09:56:75:e3:b5:fb:d3:a2:
9d:72:96:40:ce:ee:9f:34:db:90:f8:19:80:27:6c:
fb:4b:ed:6d:d1:8e:53:3b:df:39:e5:8f:92:1c:5f:
d5:db:c5:1e:f3:27:ff:2e:65:a3:27:b3:17:c1:45:
c6:c2:5e:b1:14:c6:e6:39:d2:d1:9f:8a:66:ab:29:
fd:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:9C:74:1B:94:BC:A6:7E:C3:69:CE:B9:D5:B8:08:12:91:74:D7:0E
X509v3 Authority Key Identifier:
keyid:80:FE:56:98:A1:27:96:4C:C0:E4:CE:8E:3F:DC:98:5E:2A:25:A6:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gP5WmKEnlkzA5M6OP9yYXiolpmM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/3f9ad1-6be5-4fa4-9e56-d701dc69863f/1/gP5WmKEnlkzA5M6OP9yYXiolpmM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/3f9ad1-6be5-4fa4-9e56-d701dc69863f/1/gP5WmKEnlkzA5M6OP9yYXiolpmM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:27:f4:bd:fd:7c:99:06:d1:fe:15:c5:42:49:52:90:05:7a:
f7:48:3f:ef:7c:ef:c3:4b:a4:11:cb:91:f6:d9:b3:2b:f9:cb:
f6:ef:a1:4d:12:44:2c:e1:1b:45:60:ff:86:b7:e0:f9:96:7a:
90:c6:df:86:23:f7:98:cf:02:3b:3f:a2:9a:73:40:9a:97:45:
99:5b:1d:a0:01:44:b9:f7:b7:b8:c0:4d:e4:27:75:f9:ec:c5:
0e:b4:0f:c2:94:96:f0:95:29:0a:7d:27:fe:ad:1a:05:97:06:
93:a8:1a:7c:bf:ee:d9:b0:0a:5f:53:9b:04:fc:07:91:ff:f5:
b6:49:0a:a7:1a:3a:9c:f8:92:24:ec:23:a7:ec:12:ae:9d:1a:
25:05:eb:8b:0d:4b:85:c5:63:82:fa:de:47:10:14:1d:55:dd:
a0:22:86:9e:94:94:ac:06:d5:53:04:29:26:cd:8a:13:8a:be:
b0:d1:ca:66:14:b8:59:e5:74:9e:d0:97:69:94:15:59:97:a5:
14:f5:d6:ae:e8:d9:9a:b8:04:19:12:7d:07:df:ad:d8:ee:ab:
89:0e:1e:61:07:37:4c:07:70:61:d7:f4:46:ad:6d:14:d2:20:
b1:74:e6:e3:b2:c4:72:e8:1c:0e:fb:23:de:41:f3:46:ce:7d:
1e:3a:7b:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:33:01 2025 by rpki-client