Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/880df4-e334-4a77-8f4a-7dfde8b12e2c/1/gQ5Q-L4h5lVqKjteYOHedlrgLU4.mft
File: gQ5Q-L4h5lVqKjteYOHedlrgLU4.mft (raw, json)
Hash identifier: ODEVQvJ2d/WO9aJkGyAZCVtFRiBNeXHfBLKYIHd3nDI=
Subject key identifier: 30:2D:24:15:72:BF:8F:65:96:EB:BD:80:D2:C4:76:28:52:6E:24:BC
Authority key identifier: 81:0E:50:F8:BE:21:E6:55:6A:2A:3B:5E:60:E1:DE:76:5A:E0:2D:4E
Certificate issuer: /CN=810e50f8be21e6556a2a3b5e60e1de765ae02d4e
Certificate serial: 019A53080C470A6F557BC7D4B2452CE2FB05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gQ5Q-L4h5lVqKjteYOHedlrgLU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/880df4-e334-4a77-8f4a-7dfde8b12e2c/1/gQ5Q-L4h5lVqKjteYOHedlrgLU4.mft
Manifest number: 012D
Signing time: Wed 05 Nov 2025 08:00:27 +0000
Manifest this update: Wed 05 Nov 2025 08:00:27 +0000
Manifest next update: Thu 06 Nov 2025 08:00:27 +0000
Files and hashes: 1: LstQmx0npx1wBzXFQnWiCMni4rU.roa (hash: P0DAqw5mgnz/NGIMrf6y81li0lGZ6anTPEV88CrVJ8o=)
2: gQ5Q-L4h5lVqKjteYOHedlrgLU4.crl (hash: quOYlk+gxRPulapSn31s+zef/TlmlqJAIgQ4z3oHzLw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/880df4-e334-4a77-8f4a-7dfde8b12e2c/1/gQ5Q-L4h5lVqKjteYOHedlrgLU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/880df4-e334-4a77-8f4a-7dfde8b12e2c/1/gQ5Q-L4h5lVqKjteYOHedlrgLU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/gQ5Q-L4h5lVqKjteYOHedlrgLU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:08:0c:47:0a:6f:55:7b:c7:d4:b2:45:2c:e2:fb:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=810e50f8be21e6556a2a3b5e60e1de765ae02d4e
Validity
Not Before: Nov 5 08:00:27 2025 GMT
Not After : Nov 6 08:00:27 2025 GMT
Subject: CN=302d241572bf8f6596ebbd80d2c47628526e24bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:2b:fe:4a:8c:4b:0f:74:77:9a:7d:55:e6:b3:
2e:95:91:ed:ad:01:1a:84:65:1f:16:19:56:c4:58:
c7:02:01:a4:f3:5d:58:13:9f:33:c0:4f:ac:b2:60:
c6:0e:8f:47:97:ae:4d:72:5c:8b:9b:90:52:64:51:
02:d6:bf:a1:91:29:63:40:18:7e:3b:fa:e3:24:6e:
b5:eb:b0:13:d0:24:89:89:7f:34:d6:b8:06:e4:8c:
bc:ac:42:91:1d:65:1e:aa:23:e3:4a:f8:f0:af:0e:
de:80:1b:3f:37:e4:96:8f:a6:8b:1d:c8:55:3f:c0:
5a:3c:cf:d0:93:3a:40:8c:07:b1:d8:2a:78:43:d6:
46:51:fe:ea:ff:14:87:dd:4b:39:09:74:c0:9d:9f:
17:b8:1a:be:6d:f3:6a:38:2b:31:a7:af:73:34:96:
86:2f:0d:e3:dd:83:05:5e:25:3a:6c:a7:0d:34:bf:
32:3a:b1:bb:88:d2:2d:62:1d:e3:b0:4a:26:2b:c7:
71:c4:11:f0:07:23:5b:b6:8c:fb:8d:d1:64:86:7e:
9d:a6:14:33:9e:3c:58:92:80:bc:39:ac:a2:26:d4:
22:00:35:16:58:07:63:52:2a:bd:6d:de:24:05:aa:
82:80:57:d4:54:4f:22:32:e6:56:64:b4:1a:54:1c:
0d:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:2D:24:15:72:BF:8F:65:96:EB:BD:80:D2:C4:76:28:52:6E:24:BC
X509v3 Authority Key Identifier:
keyid:81:0E:50:F8:BE:21:E6:55:6A:2A:3B:5E:60:E1:DE:76:5A:E0:2D:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gQ5Q-L4h5lVqKjteYOHedlrgLU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/880df4-e334-4a77-8f4a-7dfde8b12e2c/1/gQ5Q-L4h5lVqKjteYOHedlrgLU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/880df4-e334-4a77-8f4a-7dfde8b12e2c/1/gQ5Q-L4h5lVqKjteYOHedlrgLU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:0b:69:cf:90:b9:a4:66:d6:77:aa:ef:46:8a:a7:5c:91:bd:
37:f4:fb:1f:58:dc:9c:b1:44:4d:d4:2c:b0:47:ce:25:25:65:
04:c1:9f:14:33:56:8a:cc:7e:df:ad:ad:0a:77:03:7d:1f:7b:
48:d5:0b:f6:47:a9:93:50:ad:33:3f:9b:6a:3c:8f:47:40:34:
bc:7b:58:bf:1f:78:67:99:81:b1:0e:b4:4b:be:c6:a7:e5:8c:
27:c5:dd:19:c4:c0:cc:20:79:b1:ce:ca:5b:39:47:74:3e:86:
2e:79:73:41:ab:53:f4:ec:5d:a6:fb:bb:c7:62:ed:93:80:c6:
6a:80:d0:21:f5:36:5b:34:06:1a:14:69:bd:6c:36:54:73:4b:
42:1c:7d:b7:6c:eb:3c:c1:8e:2a:3b:7f:49:40:f6:77:92:61:
ab:6d:e6:e8:11:15:b0:55:3c:f3:d0:22:b6:0e:c9:6e:35:a2:
1f:f0:86:a9:16:24:a8:e3:35:8f:06:3c:9b:9a:4d:40:80:e3:
89:3e:ed:ea:c1:e6:93:40:8d:f9:38:10:2e:d6:e1:fe:6e:4c:
e5:fa:8a:c8:53:b2:92:9f:36:2a:19:fc:cc:bf:46:c7:1c:fa:
d5:4a:c1:88:89:ec:bf:35:68:e6:d5:7d:86:76:26:4a:19:d6:
24:86:31:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 16:59:10 2025 by rpki-client