Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/f79cbc-848d-4f3e-8dc1-d51141ccdc06/1/gPI_QpUEIDwYlzeiB05T8u_GT8c.mft
File: gPI_QpUEIDwYlzeiB05T8u_GT8c.mft (raw, json)
Hash identifier: w7jmiU+1YLOP7QuP4E2jJYrqKnQ7PPqb7bAcX0jyHv4=
Subject key identifier: 8D:A8:C1:E6:33:FB:87:ED:5F:28:04:BB:D1:2D:F6:87:EA:2B:D0:7A
Authority key identifier: 80:F2:3F:42:95:04:20:3C:18:97:37:A2:07:4E:53:F2:EF:C6:4F:C7
Certificate issuer: /CN=80f23f429504203c189737a2074e53f2efc64fc7
Certificate serial: 0197B6D7A0CC1FB0D848E9420706B2648D16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gPI_QpUEIDwYlzeiB05T8u_GT8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/f79cbc-848d-4f3e-8dc1-d51141ccdc06/1/gPI_QpUEIDwYlzeiB05T8u_GT8c.mft
Manifest number: 5A
Signing time: Sat 28 Jun 2025 14:01:14 +0000
Manifest this update: Sat 28 Jun 2025 14:01:14 +0000
Manifest next update: Sun 29 Jun 2025 14:01:14 +0000
Files and hashes: 1: 5v0hUEBxgEJ_Wz85dg0QD5wiMr4.roa (hash: AOgJD9izw5WZn+hE7i6Z6aoy52p5jFj9e/Qz0bGyFWk=)
2: gPI_QpUEIDwYlzeiB05T8u_GT8c.crl (hash: 1mqOIS4xO9ik3o3vNy6cryRwNuu5MH8jFBF/ixLMXRw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/f79cbc-848d-4f3e-8dc1-d51141ccdc06/1/gPI_QpUEIDwYlzeiB05T8u_GT8c.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/f79cbc-848d-4f3e-8dc1-d51141ccdc06/1/gPI_QpUEIDwYlzeiB05T8u_GT8c.mft
rsync://rpki.ripe.net/repository/DEFAULT/gPI_QpUEIDwYlzeiB05T8u_GT8c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:a0:cc:1f:b0:d8:48:e9:42:07:06:b2:64:8d:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80f23f429504203c189737a2074e53f2efc64fc7
Validity
Not Before: Jun 28 14:01:14 2025 GMT
Not After : Jun 29 14:01:14 2025 GMT
Subject: CN=8da8c1e633fb87ed5f2804bbd12df687ea2bd07a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:35:2d:86:37:4f:4d:84:e3:99:cf:a7:34:94:
84:c1:3a:00:8b:08:63:0c:d4:cc:39:61:d1:57:19:
93:10:35:2c:33:64:7a:7f:11:91:d0:ff:d5:6d:b0:
f4:a7:cb:28:48:f6:ed:d1:cb:e6:01:e9:7d:4b:ce:
87:ab:46:97:17:ca:b2:57:8f:7b:65:cf:39:b2:f6:
b4:31:63:09:70:b8:a5:0f:52:72:ab:f3:a8:8f:9c:
3a:f9:43:17:dc:9c:ec:c8:a6:9f:a3:db:a3:e5:14:
d1:93:84:22:b6:33:41:64:2e:22:ac:a9:0d:ad:cf:
d0:97:18:a6:37:70:6d:b4:2a:e9:94:83:f4:d5:63:
db:fa:01:1d:f9:df:1e:b0:ed:96:d0:78:e1:21:0c:
d3:44:40:f1:39:d0:91:b5:f7:f6:31:7a:b7:73:80:
e9:1b:d3:2c:69:06:6b:ec:0d:ca:e7:1d:09:84:44:
1a:b0:ea:49:dd:53:08:2c:89:87:a7:73:2a:35:29:
bc:de:9f:8c:1f:74:73:61:63:87:fc:c7:b0:ad:ed:
ab:9e:55:fa:df:69:87:b5:cc:b6:98:2e:e7:06:8b:
36:56:e6:d0:80:b1:b6:d1:65:ef:49:48:ca:8a:2b:
31:ed:4b:47:89:bb:fa:b3:9a:d5:f0:7c:29:46:a8:
f9:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:A8:C1:E6:33:FB:87:ED:5F:28:04:BB:D1:2D:F6:87:EA:2B:D0:7A
X509v3 Authority Key Identifier:
keyid:80:F2:3F:42:95:04:20:3C:18:97:37:A2:07:4E:53:F2:EF:C6:4F:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gPI_QpUEIDwYlzeiB05T8u_GT8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f79cbc-848d-4f3e-8dc1-d51141ccdc06/1/gPI_QpUEIDwYlzeiB05T8u_GT8c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f79cbc-848d-4f3e-8dc1-d51141ccdc06/1/gPI_QpUEIDwYlzeiB05T8u_GT8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:e3:70:eb:3c:93:20:0a:63:85:6c:e6:81:cf:0d:6e:cf:52:
a7:4d:2f:0d:c2:6b:7c:f6:c5:53:09:63:27:55:f2:92:f7:f7:
4b:aa:29:dd:13:e6:ab:e9:7f:96:d0:91:00:8f:b1:cf:04:4e:
6d:63:79:4f:d6:c0:99:44:df:0c:37:6e:57:06:36:b3:75:b9:
af:6b:a3:ac:a6:9c:f7:72:57:1c:01:81:49:c6:79:c6:6a:94:
c2:43:bd:21:9f:13:b9:7a:f6:4a:c4:a7:62:dd:07:d1:03:d2:
8a:8c:96:46:22:4d:1c:ee:43:94:25:e3:31:26:57:c2:ce:1f:
dc:aa:4d:e2:d8:87:df:91:49:01:c6:4b:09:f6:32:ed:54:97:
f8:df:82:5b:a2:8d:c9:ef:99:c6:34:33:bb:0c:79:6b:f8:b7:
08:7f:07:29:32:93:2d:b1:ae:5f:7e:9f:8a:84:11:2d:9b:c9:
b3:6e:b8:63:bd:89:4e:7d:a5:e1:09:75:00:20:76:0a:71:c0:
27:ee:8b:8b:61:49:10:23:28:94:64:b1:96:04:f3:6e:29:96:
bb:57:60:38:e0:8d:6c:fb:03:2e:37:c4:d2:4e:66:5e:2c:a7:
21:e2:09:e3:51:98:b2:a8:26:45:24:c3:f3:40:fc:54:91:5c:
af:a5:0e:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:31:29 2025 by rpki-client