Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/fe7b79-1568-4eb6-bc0f-5489e22cab81/1/gPPzEUyqjpJigXJfcn1gjZM5URg.mft
File: gPPzEUyqjpJigXJfcn1gjZM5URg.mft (raw, json)
Hash identifier: n5iw+XJ3t4KgZy3tiueTgovCgjL+YX/1kaQJxBaP8xc=
Subject key identifier: 36:B2:8C:17:04:0F:E8:82:38:13:D1:36:CC:03:AE:EF:B5:65:02:5E
Authority key identifier: 80:F3:F3:11:4C:AA:8E:92:62:81:72:5F:72:7D:60:8D:93:39:51:18
Certificate issuer: /CN=80f3f3114caa8e926281725f727d608d93395118
Certificate serial: 019A71EEA2CACB87660EFD75960DE0B1CE0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gPPzEUyqjpJigXJfcn1gjZM5URg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/fe7b79-1568-4eb6-bc0f-5489e22cab81/1/gPPzEUyqjpJigXJfcn1gjZM5URg.mft
Manifest number: 036A
Signing time: Tue 11 Nov 2025 08:00:55 +0000
Manifest this update: Tue 11 Nov 2025 08:00:55 +0000
Manifest next update: Wed 12 Nov 2025 08:00:55 +0000
Files and hashes: 1: gPPzEUyqjpJigXJfcn1gjZM5URg.crl (hash: fGT56BUDF0Yqs7Dp5q3OjWi3iNoe+8gLLnZr2Jog05s=)
2: qQBsyu_cVKZnC2YtWnBhQBpOfUQ.roa (hash: TjgATufRss8r1iBf8Y/PyScO/pIDEQWkrsAtyOXWrVM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/fe7b79-1568-4eb6-bc0f-5489e22cab81/1/gPPzEUyqjpJigXJfcn1gjZM5URg.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/fe7b79-1568-4eb6-bc0f-5489e22cab81/1/gPPzEUyqjpJigXJfcn1gjZM5URg.mft
rsync://rpki.ripe.net/repository/DEFAULT/gPPzEUyqjpJigXJfcn1gjZM5URg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:a2:ca:cb:87:66:0e:fd:75:96:0d:e0:b1:ce:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80f3f3114caa8e926281725f727d608d93395118
Validity
Not Before: Nov 11 08:00:55 2025 GMT
Not After : Nov 12 08:00:55 2025 GMT
Subject: CN=36b28c17040fe8823813d136cc03aeefb565025e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:cf:8c:d3:d3:2c:ba:bd:63:e0:d9:6b:58:79:
dd:30:37:f7:3d:5d:6b:ff:18:65:66:41:5d:11:eb:
41:d1:f1:53:84:48:87:0d:ba:31:be:92:b8:ad:e7:
b8:fd:cb:4e:56:50:76:4a:9c:d8:fe:20:fd:e4:ce:
7d:52:91:d3:c3:e7:b0:96:c6:b0:56:45:f0:78:41:
7f:53:1c:66:af:37:e6:cc:77:06:f0:bc:fa:7d:23:
a8:6d:55:1c:8c:81:b4:95:6c:0c:77:4a:6c:44:c7:
3a:c2:a8:6a:77:63:e5:c2:e1:c1:79:80:a9:a2:ee:
d0:b6:ff:95:7a:79:19:8a:5a:06:ce:e3:a7:0c:14:
6b:d8:80:06:2f:35:17:97:43:4a:aa:32:90:ea:19:
bd:05:87:05:8d:41:53:cf:39:df:a0:aa:29:bb:7b:
e1:3e:5b:65:0c:f1:f9:ca:af:f5:72:15:5d:fa:00:
e8:bb:15:58:df:72:ee:e9:d3:68:5c:7e:56:43:08:
4c:90:f8:ea:0d:5d:2e:33:33:b3:0c:f1:c6:35:f8:
6c:c8:7b:cc:f6:99:fa:d2:ff:e3:1a:2d:73:1d:a2:
fa:e9:d5:2b:86:49:65:94:e9:52:69:84:ce:cc:65:
94:b5:e8:e1:e8:a2:75:d7:44:55:e0:88:a0:0b:64:
89:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:B2:8C:17:04:0F:E8:82:38:13:D1:36:CC:03:AE:EF:B5:65:02:5E
X509v3 Authority Key Identifier:
keyid:80:F3:F3:11:4C:AA:8E:92:62:81:72:5F:72:7D:60:8D:93:39:51:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gPPzEUyqjpJigXJfcn1gjZM5URg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/fe7b79-1568-4eb6-bc0f-5489e22cab81/1/gPPzEUyqjpJigXJfcn1gjZM5URg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/fe7b79-1568-4eb6-bc0f-5489e22cab81/1/gPPzEUyqjpJigXJfcn1gjZM5URg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:a2:1d:d4:ff:a5:27:91:72:dc:4b:0f:04:7e:3f:d7:8f:49:
2a:00:46:56:2c:59:c7:1f:14:4c:df:e5:10:9c:67:ef:8d:d0:
57:cb:d1:ec:5c:c7:50:ca:4a:97:48:bb:e1:59:52:62:f4:87:
b9:26:54:75:cc:e8:c2:e0:93:cd:7d:76:2d:a5:67:e9:ec:df:
00:8d:60:1f:4f:d4:43:a9:e9:a7:6c:6b:66:1c:44:83:83:47:
56:6c:27:4e:1d:34:ab:d7:65:cb:78:2b:d9:8a:3d:ec:8a:a3:
7f:2f:88:8f:11:e9:10:08:38:9b:21:ca:59:2e:8c:62:2a:90:
5e:fc:44:c9:d1:af:95:b3:c2:42:6a:56:e3:25:a2:d6:7b:2f:
1b:0f:f3:a3:4e:eb:68:96:96:89:f4:a6:33:72:19:f5:b4:67:
af:f8:6c:74:5e:7a:24:24:ad:36:ac:5b:3e:ce:df:b2:81:2e:
5e:b2:32:b3:4f:34:f1:51:25:b6:09:9e:5c:20:2c:5d:8f:d0:
72:f9:65:6e:37:0b:b9:74:15:e5:1d:c0:7e:ad:c7:79:76:a8:
89:ac:f7:6d:8c:61:3c:dd:1b:83:42:ad:64:2a:20:69:95:bf:
a0:a1:58:76:ac:21:ad:59:13:09:ed:54:28:ff:ef:8d:1f:0c:
ae:30:62:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:37:35 2025 by rpki-client