Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/f79cbc-848d-4f3e-8dc1-d51141ccdc06/1/gPI_QpUEIDwYlzeiB05T8u_GT8c.mft
File: gPI_QpUEIDwYlzeiB05T8u_GT8c.mft (raw, json)
Hash identifier: US9meJPf/UProeuWKC5hwdYSeOrpx1SClZUgY+KcCfk=
Subject key identifier: 12:D6:31:F6:E8:22:4C:E9:6E:E5:F2:51:E7:EB:52:70:0A:2A:ED:07
Authority key identifier: 80:F2:3F:42:95:04:20:3C:18:97:37:A2:07:4E:53:F2:EF:C6:4F:C7
Certificate issuer: /CN=80f23f429504203c189737a2074e53f2efc64fc7
Certificate serial: 019A58D3C70C834F1AE4B7B4034D89374D86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gPI_QpUEIDwYlzeiB05T8u_GT8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/f79cbc-848d-4f3e-8dc1-d51141ccdc06/1/gPI_QpUEIDwYlzeiB05T8u_GT8c.mft
Manifest number: 01B7
Signing time: Thu 06 Nov 2025 11:01:05 +0000
Manifest this update: Thu 06 Nov 2025 11:01:05 +0000
Manifest next update: Fri 07 Nov 2025 11:01:05 +0000
Files and hashes: 1: 5v0hUEBxgEJ_Wz85dg0QD5wiMr4.roa (hash: AOgJD9izw5WZn+hE7i6Z6aoy52p5jFj9e/Qz0bGyFWk=)
2: gPI_QpUEIDwYlzeiB05T8u_GT8c.crl (hash: l7uBbgZi1TSxUwAMueExhYv2iGFOHspiWDlGQFyJV1w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/f79cbc-848d-4f3e-8dc1-d51141ccdc06/1/gPI_QpUEIDwYlzeiB05T8u_GT8c.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/f79cbc-848d-4f3e-8dc1-d51141ccdc06/1/gPI_QpUEIDwYlzeiB05T8u_GT8c.mft
rsync://rpki.ripe.net/repository/DEFAULT/gPI_QpUEIDwYlzeiB05T8u_GT8c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 07 Nov 2025 11:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:58:d3:c7:0c:83:4f:1a:e4:b7:b4:03:4d:89:37:4d:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80f23f429504203c189737a2074e53f2efc64fc7
Validity
Not Before: Nov 6 11:01:05 2025 GMT
Not After : Nov 7 11:01:05 2025 GMT
Subject: CN=12d631f6e8224ce96ee5f251e7eb52700a2aed07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:23:b6:61:0c:e1:1c:37:79:1b:5e:0d:10:34:
c9:3b:56:fb:a2:28:53:60:0c:44:8a:93:34:a0:66:
52:2a:91:c4:a1:9d:6d:4b:4c:7a:e9:3e:59:81:44:
19:41:a8:01:10:9d:c4:af:af:9f:10:ff:66:45:50:
22:fb:5b:ca:d7:c4:b2:18:82:08:30:1e:31:5d:c6:
c1:43:00:58:73:91:b8:be:55:8c:62:d4:52:22:0f:
25:40:8e:3d:f4:47:b3:c9:37:cf:1b:16:a5:45:f1:
41:be:b4:97:f4:c0:8e:6c:7d:02:3a:3d:94:c9:cd:
d7:5a:d7:cf:68:20:dc:64:ef:58:1b:cc:b0:db:4e:
8e:db:67:4f:54:da:a8:e6:65:f2:74:20:85:0b:df:
b9:9e:b8:ed:08:ea:5e:9e:52:6b:db:e9:4e:d7:b0:
0f:8a:b8:90:5f:43:d4:fb:6f:26:d6:32:b0:4e:95:
29:69:84:59:f6:b6:42:92:65:7d:6c:03:a3:2e:dc:
11:91:f3:d3:5e:54:70:bb:08:e3:e1:df:76:8d:fe:
55:3c:ac:42:20:3d:0b:a4:76:41:b1:f4:58:85:b8:
b4:52:f2:c8:30:62:08:04:dd:7f:34:97:9b:bd:7e:
e6:82:89:8b:33:56:00:8a:e4:a1:60:d2:8e:86:74:
13:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:D6:31:F6:E8:22:4C:E9:6E:E5:F2:51:E7:EB:52:70:0A:2A:ED:07
X509v3 Authority Key Identifier:
keyid:80:F2:3F:42:95:04:20:3C:18:97:37:A2:07:4E:53:F2:EF:C6:4F:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gPI_QpUEIDwYlzeiB05T8u_GT8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f79cbc-848d-4f3e-8dc1-d51141ccdc06/1/gPI_QpUEIDwYlzeiB05T8u_GT8c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f79cbc-848d-4f3e-8dc1-d51141ccdc06/1/gPI_QpUEIDwYlzeiB05T8u_GT8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:06:29:23:fd:f4:c1:45:f1:e5:c5:62:69:31:dc:18:61:ca:
72:5f:d4:bd:d6:89:23:81:7a:93:03:ae:53:b2:da:d0:bf:64:
07:8f:27:99:98:7b:e6:28:67:1a:0f:ad:31:cc:60:ff:a6:04:
1c:90:f6:09:63:39:6d:da:3b:50:7d:02:08:ad:62:d9:8c:c2:
96:fc:4a:c7:68:23:63:5c:f9:c2:8e:06:a2:2f:41:f4:b9:58:
b1:9b:e5:d4:2b:d1:29:93:31:81:e1:ad:f0:8f:ca:83:f4:a2:
20:ba:67:f1:c5:a4:cb:da:08:be:0a:fa:75:39:26:ee:97:98:
0f:3b:d0:9a:b8:14:8c:00:b5:8f:a6:5a:16:04:5b:e0:7d:bc:
09:6f:3e:d2:ba:df:d1:a2:b0:70:1b:e5:d4:83:b2:8b:fe:35:
41:48:08:23:17:a8:85:d6:4e:d4:0c:17:10:6b:b5:a4:00:d1:
8e:bc:ae:6b:77:35:97:6f:2b:69:46:ad:c9:e7:6e:f0:42:03:
fd:67:10:40:ee:9f:07:94:0c:a0:3b:98:3f:f5:75:3f:0e:84:
05:8e:4c:9b:d7:6f:dd:1a:9a:12:e6:db:1c:eb:a3:fe:63:30:
40:56:ac:66:42:c9:7a:35:b4:fe:c1:2c:ae:d9:94:4d:21:55:
f6:fc:75:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 20:56:50 2025 by rpki-client