Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/fe7b79-1568-4eb6-bc0f-5489e22cab81/1/gPPzEUyqjpJigXJfcn1gjZM5URg.mft
File: gPPzEUyqjpJigXJfcn1gjZM5URg.mft (raw, json)
Hash identifier: TeEth5mNHNs8OoE21RJGu9bcPdm4drM5xa0sCbhHnjM=
Subject key identifier: 38:EC:8C:0B:5E:25:62:D2:64:4F:DD:CE:EE:74:4E:07:72:8E:40:98
Authority key identifier: 80:F3:F3:11:4C:AA:8E:92:62:81:72:5F:72:7D:60:8D:93:39:51:18
Certificate issuer: /CN=80f3f3114caa8e926281725f727d608d93395118
Certificate serial: 0199FE0FEA5A85A20571F43728DC20ED86DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gPPzEUyqjpJigXJfcn1gjZM5URg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/fe7b79-1568-4eb6-bc0f-5489e22cab81/1/gPPzEUyqjpJigXJfcn1gjZM5URg.mft
Manifest number: 032E
Signing time: Sun 19 Oct 2025 20:01:19 +0000
Manifest this update: Sun 19 Oct 2025 20:01:19 +0000
Manifest next update: Mon 20 Oct 2025 20:01:19 +0000
Files and hashes: 1: gPPzEUyqjpJigXJfcn1gjZM5URg.crl (hash: jC4kLQhvJuz6MZYF5vspQXu57GZLYWxli5gAAYpeBgA=)
2: qQBsyu_cVKZnC2YtWnBhQBpOfUQ.roa (hash: TjgATufRss8r1iBf8Y/PyScO/pIDEQWkrsAtyOXWrVM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/fe7b79-1568-4eb6-bc0f-5489e22cab81/1/gPPzEUyqjpJigXJfcn1gjZM5URg.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/fe7b79-1568-4eb6-bc0f-5489e22cab81/1/gPPzEUyqjpJigXJfcn1gjZM5URg.mft
rsync://rpki.ripe.net/repository/DEFAULT/gPPzEUyqjpJigXJfcn1gjZM5URg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:0f:ea:5a:85:a2:05:71:f4:37:28:dc:20:ed:86:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80f3f3114caa8e926281725f727d608d93395118
Validity
Not Before: Oct 19 20:01:19 2025 GMT
Not After : Oct 20 20:01:19 2025 GMT
Subject: CN=38ec8c0b5e2562d2644fddceee744e07728e4098
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:15:2d:c9:2b:37:29:4d:c4:44:ef:85:11:47:
fa:ce:99:61:79:2f:4f:3b:1a:55:ed:2a:4d:02:09:
8f:ea:07:1e:52:fe:32:dc:90:f8:b4:5a:91:af:77:
2c:60:1b:ce:a7:0f:12:18:df:3d:9c:24:63:dd:82:
a6:aa:6d:dc:15:3f:6a:36:9f:0f:c4:ba:ac:79:c6:
c7:79:7b:a3:6a:07:27:a8:0e:a1:70:8f:aa:ce:26:
b6:56:f1:10:63:45:9e:b3:7f:11:84:13:ee:c0:18:
11:4e:d5:0c:07:f3:3e:f9:b9:c9:98:45:e0:fc:ef:
a1:d2:c1:c9:48:80:68:5c:7a:f6:f2:84:be:00:7f:
47:77:d8:dc:6f:90:1b:43:9c:04:f3:52:22:a3:7a:
ea:e1:60:01:a5:72:3e:96:3b:2d:cb:0e:88:1b:58:
82:5c:8d:51:54:ef:94:35:2c:32:fb:db:91:b2:aa:
4e:ff:6e:65:eb:d8:d0:43:de:0f:5e:45:03:c6:dc:
d0:e7:7a:53:6b:c2:b4:b6:9d:44:17:15:89:47:ef:
7a:8c:88:70:f5:d9:b6:1c:2f:d0:9e:3f:de:12:15:
21:77:e1:f4:f0:18:ef:81:5f:92:1c:9b:e6:e6:b0:
64:95:24:f4:9d:0b:bb:95:b7:44:d5:94:60:37:50:
8c:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:EC:8C:0B:5E:25:62:D2:64:4F:DD:CE:EE:74:4E:07:72:8E:40:98
X509v3 Authority Key Identifier:
keyid:80:F3:F3:11:4C:AA:8E:92:62:81:72:5F:72:7D:60:8D:93:39:51:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gPPzEUyqjpJigXJfcn1gjZM5URg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/fe7b79-1568-4eb6-bc0f-5489e22cab81/1/gPPzEUyqjpJigXJfcn1gjZM5URg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/fe7b79-1568-4eb6-bc0f-5489e22cab81/1/gPPzEUyqjpJigXJfcn1gjZM5URg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:0b:3f:da:f9:7e:47:97:e8:9a:af:e0:3f:02:ed:39:0c:fc:
4f:a8:ef:3c:0f:1b:ff:e6:3c:7a:61:e8:6b:2b:59:bd:32:ef:
b8:56:99:3f:0e:31:9c:a9:0a:5f:33:dd:6f:ce:82:23:9a:91:
44:ea:71:a1:e4:65:42:7d:b9:d4:be:61:42:68:ef:e2:3d:62:
d4:83:95:f4:0f:f2:0d:f8:b7:4e:5a:64:2a:1d:3c:6c:24:92:
75:50:69:0b:8c:28:dd:86:9b:f6:08:cf:60:62:d7:6b:7c:8e:
37:7e:d3:a6:cf:4c:34:63:21:f4:b1:13:4e:49:fa:82:f0:bb:
cb:a8:63:5f:d6:54:ff:db:97:f4:10:2e:bd:22:ff:b9:1a:ea:
bc:c6:95:9c:98:b5:ca:b0:b5:6c:a8:9b:cd:31:70:c7:c1:bc:
d9:9b:a9:d4:b7:c3:d8:e2:d1:e7:61:25:13:c1:df:52:12:51:
32:20:5b:b5:0f:79:98:bf:6e:c2:73:3a:99:ac:18:7b:f6:41:
bb:13:ea:32:ca:86:81:4b:02:58:6b:05:a3:ba:6e:ff:60:93:
09:f1:74:0a:77:8e:72:5f:5c:ed:9c:00:3d:17:89:32:26:be:
04:ad:1a:4d:9b:5c:76:ec:df:b0:02:98:6f:74:c9:44:2a:be:
e6:e8:ba:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:02:21 2025 by rpki-client