Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/3f9ad1-6be5-4fa4-9e56-d701dc69863f/1/gP5WmKEnlkzA5M6OP9yYXiolpmM.mft
File: gP5WmKEnlkzA5M6OP9yYXiolpmM.mft (raw, json)
Hash identifier: itRXfNIfy2CIAY4pmNcRSj1JId3CxyHG8/3R8svKE1Y=
Subject key identifier: 80:40:E1:42:90:FD:CC:C7:DD:17:D3:24:D2:3A:CD:7F:E5:92:3D:4B
Authority key identifier: 80:FE:56:98:A1:27:96:4C:C0:E4:CE:8E:3F:DC:98:5E:2A:25:A6:63
Certificate issuer: /CN=80fe5698a127964cc0e4ce8e3fdc985e2a25a663
Certificate serial: 0199FC21828068786EA62DDC10F5C65B9894
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gP5WmKEnlkzA5M6OP9yYXiolpmM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/3f9ad1-6be5-4fa4-9e56-d701dc69863f/1/gP5WmKEnlkzA5M6OP9yYXiolpmM.mft
Manifest number: 05AA
Signing time: Sun 19 Oct 2025 11:01:18 +0000
Manifest this update: Sun 19 Oct 2025 11:01:18 +0000
Manifest next update: Mon 20 Oct 2025 11:01:18 +0000
Files and hashes: 1: MWh5oxD0mlPfv3wl5DDlIllo7IY.roa (hash: hCUe3UqGLfLJn0/ykpo1moRqC/s0I/1a6u8vKsOmeBg=)
2: gP5WmKEnlkzA5M6OP9yYXiolpmM.crl (hash: QIyjvpE22WrD77BEfQoEgFJSyRiL+brqiWjoOGL0mkA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/3f9ad1-6be5-4fa4-9e56-d701dc69863f/1/gP5WmKEnlkzA5M6OP9yYXiolpmM.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/3f9ad1-6be5-4fa4-9e56-d701dc69863f/1/gP5WmKEnlkzA5M6OP9yYXiolpmM.mft
rsync://rpki.ripe.net/repository/DEFAULT/gP5WmKEnlkzA5M6OP9yYXiolpmM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:82:80:68:78:6e:a6:2d:dc:10:f5:c6:5b:98:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80fe5698a127964cc0e4ce8e3fdc985e2a25a663
Validity
Not Before: Oct 19 11:01:18 2025 GMT
Not After : Oct 20 11:01:18 2025 GMT
Subject: CN=8040e14290fdccc7dd17d324d23acd7fe5923d4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:a7:8c:80:e5:8f:6a:86:11:63:dd:4b:93:7d:
e5:1c:bc:04:ed:be:be:68:16:5b:bf:33:91:29:3f:
5a:3a:cb:90:3a:4c:ac:f7:1c:3b:29:ac:99:fb:9b:
cb:cd:40:75:7a:13:57:0b:15:d0:57:20:b8:d5:2f:
72:89:59:71:bc:98:cf:39:29:69:be:db:d6:93:19:
f0:3b:69:6a:bd:61:52:8a:8d:06:58:20:53:7c:bd:
75:53:36:13:83:b9:47:67:f7:ea:41:fb:27:aa:48:
8e:5d:b9:cd:08:2b:ff:5e:f2:ea:da:03:4b:3f:17:
24:f6:ee:4e:07:08:24:94:08:fe:7f:85:f5:20:58:
1e:07:09:50:20:5a:36:d9:db:cf:aa:29:3f:d4:96:
59:f9:90:27:cd:a2:a9:a6:62:f6:61:8c:cd:9c:16:
c5:d9:db:69:9a:5f:4a:c7:94:3d:a9:9a:95:c5:9e:
0a:2a:05:d5:42:c0:7f:4a:f1:4c:6f:53:d4:50:61:
38:cb:5a:d0:69:48:a2:54:3c:af:17:44:f7:e5:4b:
fa:34:2a:b0:0e:07:84:91:ab:1d:44:07:01:8f:e9:
8f:b5:56:da:29:30:2c:74:07:5c:35:f1:96:d1:9f:
d7:48:48:b8:0e:90:0d:9b:ed:99:50:36:f0:01:9b:
ef:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:40:E1:42:90:FD:CC:C7:DD:17:D3:24:D2:3A:CD:7F:E5:92:3D:4B
X509v3 Authority Key Identifier:
keyid:80:FE:56:98:A1:27:96:4C:C0:E4:CE:8E:3F:DC:98:5E:2A:25:A6:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gP5WmKEnlkzA5M6OP9yYXiolpmM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/3f9ad1-6be5-4fa4-9e56-d701dc69863f/1/gP5WmKEnlkzA5M6OP9yYXiolpmM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/3f9ad1-6be5-4fa4-9e56-d701dc69863f/1/gP5WmKEnlkzA5M6OP9yYXiolpmM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:63:ca:37:f6:80:34:b0:38:05:94:b5:3e:fe:4d:f3:96:46:
44:28:6d:d0:cc:3a:ad:a2:60:93:b7:28:b5:1f:78:d0:d9:ff:
fe:e8:0a:d7:de:95:58:9b:85:64:bb:52:33:9f:54:97:fa:0e:
d7:32:e4:f6:5d:87:7f:f8:eb:56:62:f4:fc:4a:cb:06:f0:24:
07:01:23:18:7d:6b:5d:b3:b4:49:93:d0:c9:b8:1b:ec:cc:5a:
c2:d5:7a:e0:65:12:90:c5:ee:8b:2a:7a:c5:c7:16:51:2f:e4:
e5:71:a1:17:76:5a:cc:0e:f5:94:c9:18:41:ff:81:d5:7d:6d:
4a:75:8e:b9:7e:59:76:b4:08:02:53:36:36:61:24:d8:fb:78:
a0:1f:57:ff:e4:6e:d6:a4:7b:cf:9d:33:d1:62:a2:07:3f:64:
9f:19:d9:fc:b4:f1:f9:38:d5:3d:ef:17:21:44:3e:d8:ac:21:
c5:a1:3a:a9:c9:38:15:48:67:d6:52:12:3b:a2:d2:2e:37:bb:
44:01:54:4d:25:3b:0e:42:0b:6a:fc:01:ca:7e:38:12:13:d6:
6f:5d:18:73:51:9d:91:02:89:a3:85:2b:50:ce:1f:1d:44:45:
2b:c4:8c:fe:07:13:c1:0e:9e:2f:ab:c3:41:47:b1:44:61:cc:
68:d8:bb:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:05:06 2025 by rpki-client