Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/4ba5ff-562e-4354-9600-f762929f1f08/1/gPq1UNgnot7w1NJhYGFCXC9pTIQ.mft
File: gPq1UNgnot7w1NJhYGFCXC9pTIQ.mft (raw, json)
Hash identifier: L6enDYDyCUwIjMNAa1vpba6nm2m5Ib6nh97vVECknjw=
Subject key identifier: 97:7C:32:0C:53:43:91:15:E9:89:6C:44:1C:2A:67:1C:DF:49:30:8A
Authority key identifier: 80:FA:B5:50:D8:27:A2:DE:F0:D4:D2:61:60:61:42:5C:2F:69:4C:84
Certificate issuer: /CN=80fab550d827a2def0d4d2616061425c2f694c84
Certificate serial: 019A4DAACA1D84D5C0CB97D6BBD4B0E1A4A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gPq1UNgnot7w1NJhYGFCXC9pTIQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/4ba5ff-562e-4354-9600-f762929f1f08/1/gPq1UNgnot7w1NJhYGFCXC9pTIQ.mft
Manifest number: 0A4F
Signing time: Tue 04 Nov 2025 07:00:29 +0000
Manifest this update: Tue 04 Nov 2025 07:00:29 +0000
Manifest next update: Wed 05 Nov 2025 07:00:29 +0000
Files and hashes: 1: NmyYIbuzbIXUj9jJPjF3BR9optE.roa (hash: wSdjb/vMyeBBwt44mj9k7sBn6y3WZbUfXBs3kYVLtv8=)
2: gPq1UNgnot7w1NJhYGFCXC9pTIQ.crl (hash: ggzi5dSUvbeIKQdwBfdqwZBBgCEDrtE+5130At0lhXI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/4ba5ff-562e-4354-9600-f762929f1f08/1/gPq1UNgnot7w1NJhYGFCXC9pTIQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/4ba5ff-562e-4354-9600-f762929f1f08/1/gPq1UNgnot7w1NJhYGFCXC9pTIQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/gPq1UNgnot7w1NJhYGFCXC9pTIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:aa:ca:1d:84:d5:c0:cb:97:d6:bb:d4:b0:e1:a4:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80fab550d827a2def0d4d2616061425c2f694c84
Validity
Not Before: Nov 4 07:00:29 2025 GMT
Not After : Nov 5 07:00:29 2025 GMT
Subject: CN=977c320c53439115e9896c441c2a671cdf49308a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f5:05:4c:f6:13:29:78:71:c0:10:31:af:a7:
46:19:02:9a:a4:c3:bd:ee:4b:70:ac:5b:94:3b:95:
6d:db:be:93:ac:23:e4:2f:97:46:28:97:71:a2:48:
c5:54:95:81:75:fd:bc:5b:cb:ef:d6:43:96:aa:c8:
a0:21:73:a1:65:c9:c2:09:b3:f1:9a:6b:84:95:a2:
8e:8b:06:ed:2e:f9:aa:ff:20:e7:b7:5d:aa:74:b0:
6d:f5:2d:c7:ab:c6:03:41:48:4b:80:a8:02:c1:61:
60:c1:04:41:3b:ec:7c:51:0d:e2:d3:85:6a:66:a3:
3d:ae:53:b6:cf:a7:09:ab:de:ee:08:48:81:91:c5:
e7:d4:ac:ec:f5:d8:52:d6:34:8a:df:83:ec:43:49:
5a:29:58:81:7a:03:6d:0e:8d:22:ad:8b:14:b7:c6:
08:d0:e3:68:fe:2c:6d:92:75:b6:80:a7:da:7c:dd:
46:79:ec:ac:62:d2:4b:63:c2:09:d6:d2:43:fe:dd:
44:a5:ed:00:47:07:33:fd:68:7e:e0:3b:49:5d:e7:
bb:33:71:2b:03:95:a5:b8:0c:eb:b6:26:a5:7c:38:
ad:77:49:3e:5b:b3:ff:d0:9c:69:ea:87:3c:28:d0:
e0:57:6e:7e:38:0e:34:db:8f:99:9f:73:3f:a0:7c:
f0:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:7C:32:0C:53:43:91:15:E9:89:6C:44:1C:2A:67:1C:DF:49:30:8A
X509v3 Authority Key Identifier:
keyid:80:FA:B5:50:D8:27:A2:DE:F0:D4:D2:61:60:61:42:5C:2F:69:4C:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gPq1UNgnot7w1NJhYGFCXC9pTIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/4ba5ff-562e-4354-9600-f762929f1f08/1/gPq1UNgnot7w1NJhYGFCXC9pTIQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/4ba5ff-562e-4354-9600-f762929f1f08/1/gPq1UNgnot7w1NJhYGFCXC9pTIQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:70:b3:a7:83:a0:45:f1:2e:45:d1:6a:cf:da:c0:b1:52:60:
10:3e:f5:4a:c0:e5:66:64:c3:37:b5:99:eb:1f:df:07:67:61:
26:2f:ca:de:d2:2d:a8:e1:f9:32:c1:39:45:5a:29:71:20:03:
32:39:79:07:74:78:c4:5d:b7:1b:97:1f:af:da:75:7a:aa:b7:
6d:40:75:64:0c:c9:53:85:b9:a3:e7:cd:7c:bd:9d:4b:f5:51:
d0:84:3e:ff:65:90:72:e9:b6:c3:9e:f8:d6:bc:64:f7:9d:77:
56:8e:2b:4a:5c:ac:46:37:aa:a6:9e:8f:58:da:2d:a2:20:d7:
8b:9a:12:c5:65:00:9e:ed:3f:3f:ca:5c:78:3f:0a:d3:32:df:
bf:db:22:ba:ff:44:92:25:77:12:52:fd:20:d2:f3:84:89:b0:
7e:ab:6c:ac:c7:9e:61:bc:ee:3b:e2:e9:39:2f:cf:cb:17:87:
14:19:f2:00:55:f4:ab:f6:d1:b8:e9:3f:60:c5:cb:ee:cd:4a:
55:0d:59:be:7c:e9:e9:f6:6c:7b:2a:35:fe:16:56:9b:68:3b:
31:e1:92:77:11:f4:96:7c:01:58:7a:bf:22:e6:ab:98:d9:40:
c8:99:c3:60:72:e5:63:62:e8:5f:63:f8:ed:cd:a9:55:9c:ce:
96:c3:3b:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:01:32 2025 by rpki-client