Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/3f9ad1-6be5-4fa4-9e56-d701dc69863f/1/gP5WmKEnlkzA5M6OP9yYXiolpmM.mft
File: gP5WmKEnlkzA5M6OP9yYXiolpmM.mft (raw, json)
Hash identifier: ERywkrnz55ADIaIVZcBnHnpwfqvS4/Bff+izOhvz5H0=
Subject key identifier: 20:74:75:5F:3F:3B:A1:FA:6C:CF:8F:23:A3:84:97:72:C5:8B:8B:00
Authority key identifier: 80:FE:56:98:A1:27:96:4C:C0:E4:CE:8E:3F:DC:98:5E:2A:25:A6:63
Certificate issuer: /CN=80fe5698a127964cc0e4ce8e3fdc985e2a25a663
Certificate serial: 0198D4A7B4AB20D120C71461B5AF42526525
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gP5WmKEnlkzA5M6OP9yYXiolpmM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/3f9ad1-6be5-4fa4-9e56-d701dc69863f/1/gP5WmKEnlkzA5M6OP9yYXiolpmM.mft
Manifest number: 0511
Signing time: Sat 23 Aug 2025 02:00:17 +0000
Manifest this update: Sat 23 Aug 2025 02:00:17 +0000
Manifest next update: Sun 24 Aug 2025 02:00:17 +0000
Files and hashes: 1: MWh5oxD0mlPfv3wl5DDlIllo7IY.roa (hash: hCUe3UqGLfLJn0/ykpo1moRqC/s0I/1a6u8vKsOmeBg=)
2: gP5WmKEnlkzA5M6OP9yYXiolpmM.crl (hash: hFinzujiVWYujWPpkzFuxVnLt2lOTmRgUJCbeR+Obys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/3f9ad1-6be5-4fa4-9e56-d701dc69863f/1/gP5WmKEnlkzA5M6OP9yYXiolpmM.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/3f9ad1-6be5-4fa4-9e56-d701dc69863f/1/gP5WmKEnlkzA5M6OP9yYXiolpmM.mft
rsync://rpki.ripe.net/repository/DEFAULT/gP5WmKEnlkzA5M6OP9yYXiolpmM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:b4:ab:20:d1:20:c7:14:61:b5:af:42:52:65:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80fe5698a127964cc0e4ce8e3fdc985e2a25a663
Validity
Not Before: Aug 23 02:00:17 2025 GMT
Not After : Aug 24 02:00:17 2025 GMT
Subject: CN=2074755f3f3ba1fa6ccf8f23a3849772c58b8b00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:8b:61:4e:cc:fa:0c:79:e8:e9:3e:29:eb:a8:
eb:1b:44:31:2c:b3:3a:a8:b1:19:1b:b6:0b:71:d5:
55:7e:96:36:1f:2c:89:8d:fc:d5:4e:64:ff:a0:d5:
f7:99:3d:61:9b:dc:0d:a3:e9:13:17:d8:0c:68:d1:
2d:cb:61:1d:d4:ad:d4:14:50:14:c8:d7:63:a7:17:
51:13:70:95:f0:dc:82:ca:0b:7f:32:68:9b:9c:91:
8a:f9:33:54:77:19:be:73:09:de:81:02:5b:3b:7c:
96:57:fb:34:b5:70:f0:3b:f7:ac:29:8f:aa:9c:a9:
04:ec:c6:39:d5:cc:f6:c4:1a:73:d2:b2:24:0b:34:
e0:6f:c6:2e:ed:71:d6:4f:32:06:13:dd:87:aa:0a:
da:6e:fb:4b:e9:5c:a4:e1:5e:a4:79:8e:b9:b9:ea:
70:49:05:fd:cc:9b:af:6b:17:34:67:bc:67:13:35:
c3:92:ed:b2:9a:06:c0:0b:c3:df:52:74:47:15:be:
a8:da:fb:87:7e:66:6e:c7:14:98:bc:54:4c:75:9a:
61:fb:13:88:2f:df:6f:1f:7a:48:6e:25:cd:66:fd:
83:2a:2d:9a:aa:fb:84:d2:49:bb:7d:0b:08:69:39:
61:23:42:11:24:f7:a3:da:b0:3e:fd:7d:d3:40:35:
d7:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:74:75:5F:3F:3B:A1:FA:6C:CF:8F:23:A3:84:97:72:C5:8B:8B:00
X509v3 Authority Key Identifier:
keyid:80:FE:56:98:A1:27:96:4C:C0:E4:CE:8E:3F:DC:98:5E:2A:25:A6:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gP5WmKEnlkzA5M6OP9yYXiolpmM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/3f9ad1-6be5-4fa4-9e56-d701dc69863f/1/gP5WmKEnlkzA5M6OP9yYXiolpmM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/3f9ad1-6be5-4fa4-9e56-d701dc69863f/1/gP5WmKEnlkzA5M6OP9yYXiolpmM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:97:72:d7:c1:17:a7:17:4e:63:e7:8a:c1:60:25:67:d5:5c:
d1:e6:ad:d8:39:73:ac:e1:cd:a4:d9:9e:45:7d:61:c3:11:22:
a3:a5:42:0c:5e:9d:ae:ec:45:57:68:2a:2e:8b:f2:60:06:be:
7d:d9:16:6b:39:f6:2f:3e:29:64:97:98:3e:b4:48:aa:3d:d1:
37:93:84:ef:30:c5:0a:ec:5c:b1:bd:9c:99:fe:5b:7e:17:c1:
3b:3e:34:10:73:95:71:96:59:b2:05:0a:e5:8c:ba:4f:b3:14:
c7:42:3f:50:53:e2:d4:8b:50:02:1f:e4:a2:70:38:35:a5:ca:
02:4c:10:74:c6:49:40:e5:d9:ac:1d:57:72:7f:ac:1b:8c:ef:
6b:63:23:ca:8d:8d:50:d2:a3:97:43:45:0f:fe:42:6d:c4:f6:
6e:3b:b9:4e:82:ca:98:5e:c2:2c:9b:5b:c5:0e:b9:46:27:6b:
eb:16:bf:8b:de:d4:cc:1f:f5:cf:26:61:02:bc:ec:05:09:f7:
75:e8:08:8b:64:1a:de:90:c0:dd:1c:f0:37:62:33:51:82:14:
cf:c4:0f:5f:68:20:00:2f:33:c2:25:38:06:ae:19:18:2b:f7:
7a:bc:d9:ef:9d:6b:86:7e:f7:75:f7:e4:a9:a0:80:53:fb:98:
a4:5e:03:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:29:05 2025 by rpki-client