Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/4ba5ff-562e-4354-9600-f762929f1f08/1/gPq1UNgnot7w1NJhYGFCXC9pTIQ.mft
File: gPq1UNgnot7w1NJhYGFCXC9pTIQ.mft (raw, json)
Hash identifier: 1xZwUk2Ca7Fg24vWZ7Zx2U59RbpLh1iGIcMCmTezi7E=
Subject key identifier: 70:1F:25:87:B8:46:0F:F5:47:21:B2:E0:76:CC:3B:C7:13:36:B2:54
Authority key identifier: 80:FA:B5:50:D8:27:A2:DE:F0:D4:D2:61:60:61:42:5C:2F:69:4C:84
Certificate issuer: /CN=80fab550d827a2def0d4d2616061425c2f694c84
Certificate serial: 0199FC8FC12CBFF2B980C6B767FB9EC3C641
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gPq1UNgnot7w1NJhYGFCXC9pTIQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/4ba5ff-562e-4354-9600-f762929f1f08/1/gPq1UNgnot7w1NJhYGFCXC9pTIQ.mft
Manifest number: 0A25
Signing time: Sun 19 Oct 2025 13:01:43 +0000
Manifest this update: Sun 19 Oct 2025 13:01:43 +0000
Manifest next update: Mon 20 Oct 2025 13:01:43 +0000
Files and hashes: 1: NmyYIbuzbIXUj9jJPjF3BR9optE.roa (hash: wSdjb/vMyeBBwt44mj9k7sBn6y3WZbUfXBs3kYVLtv8=)
2: gPq1UNgnot7w1NJhYGFCXC9pTIQ.crl (hash: quHzJz5xcqHGRxD1qVEvhZou68v5805ZLaLejok5aHI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/4ba5ff-562e-4354-9600-f762929f1f08/1/gPq1UNgnot7w1NJhYGFCXC9pTIQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/4ba5ff-562e-4354-9600-f762929f1f08/1/gPq1UNgnot7w1NJhYGFCXC9pTIQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/gPq1UNgnot7w1NJhYGFCXC9pTIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:c1:2c:bf:f2:b9:80:c6:b7:67:fb:9e:c3:c6:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80fab550d827a2def0d4d2616061425c2f694c84
Validity
Not Before: Oct 19 13:01:43 2025 GMT
Not After : Oct 20 13:01:43 2025 GMT
Subject: CN=701f2587b8460ff54721b2e076cc3bc71336b254
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:fd:b3:f7:77:65:29:6e:b2:cb:ef:0c:d9:27:
23:6c:c0:0b:93:7f:de:f3:16:ba:f4:cc:7d:81:73:
a4:d7:f5:f1:68:83:87:d0:cf:16:f2:34:58:8d:a3:
48:73:4c:c1:b0:9e:00:5d:f0:64:29:3a:f8:f7:db:
15:f2:e7:33:87:55:57:92:b9:39:f6:23:e3:54:f1:
e0:5f:04:ef:a6:d1:29:74:c8:bc:1a:36:e3:59:f5:
88:5d:b2:cf:0b:b5:3b:5c:65:29:e0:c2:6e:18:10:
56:10:d3:8b:57:c2:e8:43:dc:6f:3e:60:fa:50:a1:
b1:31:3b:6f:c7:85:d2:a9:07:45:1d:fb:25:e9:1e:
79:99:54:01:e1:bc:22:7a:ce:39:08:d9:fa:67:01:
c4:63:4e:0e:ee:cb:34:68:b2:0e:79:e0:c9:77:55:
33:16:98:b4:d3:54:64:4f:67:c9:22:15:06:06:67:
7b:d7:cd:73:09:7e:73:06:53:9b:02:bb:ed:aa:f5:
7e:17:15:ff:e7:94:53:fd:ce:95:17:9f:b2:ca:a7:
62:15:7b:4d:bc:b6:7c:04:86:11:9d:67:b0:60:b8:
48:0e:08:97:3e:d2:69:b2:9d:cf:d5:04:06:54:02:
6b:f1:63:6b:49:0b:fb:53:16:d6:17:7f:11:db:91:
bf:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:1F:25:87:B8:46:0F:F5:47:21:B2:E0:76:CC:3B:C7:13:36:B2:54
X509v3 Authority Key Identifier:
keyid:80:FA:B5:50:D8:27:A2:DE:F0:D4:D2:61:60:61:42:5C:2F:69:4C:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gPq1UNgnot7w1NJhYGFCXC9pTIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/4ba5ff-562e-4354-9600-f762929f1f08/1/gPq1UNgnot7w1NJhYGFCXC9pTIQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/4ba5ff-562e-4354-9600-f762929f1f08/1/gPq1UNgnot7w1NJhYGFCXC9pTIQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:80:7e:d8:da:28:c0:3c:79:f9:1f:c5:2e:2f:b8:81:c5:e8:
97:04:2e:eb:91:2e:40:30:1f:78:95:a1:47:ff:ea:81:6d:52:
f7:26:b5:21:6b:3e:66:2f:4d:f4:5c:a9:a6:45:c2:d3:c2:88:
b1:43:07:8f:32:3a:c0:83:23:1d:39:c3:b7:23:56:80:10:1a:
b2:7b:a5:06:c9:c7:74:98:b1:d8:12:7e:db:21:d4:f1:6c:16:
c0:10:ba:ed:1e:d1:d9:c1:73:7d:95:fa:15:3a:2d:11:81:57:
1a:cc:0c:37:73:08:73:cd:64:86:01:95:91:21:f8:1b:ae:3b:
09:f5:c4:94:50:12:1a:a9:c2:e6:5c:58:23:ef:cc:1d:2f:eb:
85:c9:8c:81:95:2f:70:fc:e0:d9:7b:10:e5:53:59:ad:8a:6d:
c2:04:ed:ec:be:fd:a7:36:01:cf:dc:8e:26:1c:4e:07:26:98:
77:2a:69:e9:f0:89:5b:3e:0a:a9:3f:26:20:69:76:76:23:2c:
14:a6:37:f2:2b:be:d7:9a:17:26:0d:c5:cd:3e:44:6f:b2:a9:
ea:70:83:0b:fa:40:68:74:30:ac:d1:8c:68:74:f4:ea:6f:53:
e0:ba:bc:bc:e8:e0:ee:bf:17:b5:de:9d:66:bf:ab:45:07:47:
49:b7:04:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:07:16 2025 by rpki-client