Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/6c3cd4-5896-425e-95db-ffed50baa0da/1/GNtfz9wY74Qh4mUfGybBZaAdU_E.mft
File: GNtfz9wY74Qh4mUfGybBZaAdU_E.mft (raw, json)
Hash identifier: IKxjUpLwh06ayROWNAbb13ff/PcBuhdnc7r3F2VFaJc=
Subject key identifier: 35:28:43:98:D3:56:C6:DD:B0:BF:54:67:64:F6:04:E0:82:99:3F:9A
Authority key identifier: 18:DB:5F:CF:DC:18:EF:84:21:E2:65:1F:1B:26:C1:65:A0:1D:53:F1
Certificate issuer: /CN=18db5fcfdc18ef8421e2651f1b26c165a01d53f1
Certificate serial: 019A72258984499DAAE67A3B37C8D023CF72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GNtfz9wY74Qh4mUfGybBZaAdU_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/6c3cd4-5896-425e-95db-ffed50baa0da/1/GNtfz9wY74Qh4mUfGybBZaAdU_E.mft
Manifest number: 171D
Signing time: Tue 11 Nov 2025 09:00:53 +0000
Manifest this update: Tue 11 Nov 2025 09:00:53 +0000
Manifest next update: Wed 12 Nov 2025 09:00:53 +0000
Files and hashes: 1: GNtfz9wY74Qh4mUfGybBZaAdU_E.crl (hash: SSCBp4h4NMl58ZJ3JkyQ4qMYXxiCQcQwya4KZ8I1FXQ=)
2: H0c0iaohuwDRjCnDKysbTdg-WUw.roa (hash: Zx3G3ayX4XbzK0AXVUgC4/4zmj6zDADWp3kxeG6+h7k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/6c3cd4-5896-425e-95db-ffed50baa0da/1/GNtfz9wY74Qh4mUfGybBZaAdU_E.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/6c3cd4-5896-425e-95db-ffed50baa0da/1/GNtfz9wY74Qh4mUfGybBZaAdU_E.mft
rsync://rpki.ripe.net/repository/DEFAULT/GNtfz9wY74Qh4mUfGybBZaAdU_E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:89:84:49:9d:aa:e6:7a:3b:37:c8:d0:23:cf:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18db5fcfdc18ef8421e2651f1b26c165a01d53f1
Validity
Not Before: Nov 11 09:00:53 2025 GMT
Not After : Nov 12 09:00:53 2025 GMT
Subject: CN=35284398d356c6ddb0bf546764f604e082993f9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:07:ec:87:05:c0:1c:dc:ee:84:df:21:06:db:
24:c6:88:39:58:37:da:f9:63:5e:ee:7d:64:6f:43:
17:f4:32:aa:98:18:c2:bf:4a:7f:c3:58:03:05:b5:
fa:cb:6d:5f:00:3f:99:c0:73:62:10:cb:ad:f8:3c:
05:b9:13:b1:d0:71:d3:05:1c:87:4d:f2:3b:49:1d:
9a:6b:32:33:eb:e3:67:e3:15:91:00:58:62:50:89:
c9:94:22:b1:b4:11:0e:ae:e8:38:6a:1f:de:28:eb:
02:c0:9c:ac:81:75:84:6b:c9:bb:0b:5c:be:6f:01:
13:b1:64:8e:bc:27:14:2f:2b:78:fb:c4:e2:76:f7:
5e:b5:cf:38:f1:92:82:7d:7e:e6:b4:b7:94:ca:56:
1b:74:a5:f2:0d:a3:65:a1:a6:a1:70:04:fb:4d:57:
7e:b2:17:48:6b:8a:ce:39:3c:3d:35:51:f6:f3:b0:
c7:95:7d:3d:2d:7b:af:9d:d2:7d:79:85:40:a6:07:
9c:d8:64:af:40:7d:22:79:81:ea:25:af:b6:3a:5b:
48:69:c1:96:ca:49:53:7f:2c:43:b2:66:83:e3:ec:
ef:4c:2b:24:5c:47:cb:ff:22:de:79:c6:ac:57:cc:
91:aa:ee:11:af:2d:08:f5:9f:67:ec:f7:bc:aa:c6:
37:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:28:43:98:D3:56:C6:DD:B0:BF:54:67:64:F6:04:E0:82:99:3F:9A
X509v3 Authority Key Identifier:
keyid:18:DB:5F:CF:DC:18:EF:84:21:E2:65:1F:1B:26:C1:65:A0:1D:53:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GNtfz9wY74Qh4mUfGybBZaAdU_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/6c3cd4-5896-425e-95db-ffed50baa0da/1/GNtfz9wY74Qh4mUfGybBZaAdU_E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/6c3cd4-5896-425e-95db-ffed50baa0da/1/GNtfz9wY74Qh4mUfGybBZaAdU_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:10:1b:e6:a4:0c:38:c6:e4:4d:97:ac:2c:11:33:c9:43:30:
c3:44:06:4f:34:25:93:7a:2b:9f:4c:f6:7e:0a:4d:d8:9e:5f:
eb:2c:ce:78:cc:27:26:cf:8a:12:16:0e:99:b3:78:cf:16:07:
c3:54:95:f1:16:1c:0d:bf:00:04:d6:2f:94:39:5e:14:4e:a9:
a7:f2:bb:4e:e9:9c:e3:d2:e5:40:8c:66:f0:6d:b6:8b:d1:7f:
5d:28:4b:20:b0:e5:b6:62:c4:22:e5:41:29:77:fa:40:cc:24:
f3:1e:ed:d9:9f:6b:4c:7e:00:9f:0b:6a:fe:63:f8:a9:fd:a8:
4c:16:4e:60:20:f0:3a:bc:b3:2d:38:61:4c:e7:bc:c5:c5:b1:
bc:cd:ae:62:17:72:b8:e7:0e:21:18:3a:e0:10:82:a8:68:a0:
d3:bd:19:8b:5e:65:8a:47:30:c3:b8:86:eb:23:32:cb:02:96:
e4:07:80:1f:d8:ae:86:c0:dd:e7:78:83:47:6e:6f:20:54:ca:
45:81:d3:14:bf:73:97:39:12:4b:78:03:56:e2:00:59:19:30:
b6:df:3c:aa:a8:f2:d4:2c:b3:b7:88:7e:fe:78:17:ad:81:be:
f3:0f:9b:3c:82:dc:a8:e3:c4:58:f8:5e:4b:66:65:93:30:36:
7f:80:60:1b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyJYmESZ2q5no7N8jQI89yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE4ZGI1ZmNmZGMxOGVmODQyMWUyNjUxZjFiMjZjMTY1YTAx
ZDUzZjEwHhcNMjUxMTExMDkwMDUzWhcNMjUxMTEyMDkwMDUzWjAzMTEwLwYDVQQD
EygzNTI4NDM5OGQzNTZjNmRkYjBiZjU0Njc2NGY2MDRlMDgyOTkzZjlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1gfshwXAHNzuhN8hBtskxog5WDfa
+WNe7n1kb0MX9DKqmBjCv0p/w1gDBbX6y21fAD+ZwHNiEMut+DwFuROx0HHTBRyH
TfI7SR2aazIz6+Nn4xWRAFhiUInJlCKxtBEOrug4ah/eKOsCwJysgXWEa8m7C1y+
bwETsWSOvCcULyt4+8Tidvdetc848ZKCfX7mtLeUylYbdKXyDaNloaahcAT7TVd+
shdIa4rOOTw9NVH287DHlX09LXuvndJ9eYVApgec2GSvQH0ieYHqJa+2OltIacGW
yklTfyxDsmaD4+zvTCskXEfL/yLeecasV8yRqu4Rry0I9Z9n7Pe8qsY3twIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDUoQ5jTVsbdsL9UZ2T2BOCCmT+aMB8GA1UdIwQY
MBaAFBjbX8/cGO+EIeJlHxsmwWWgHVPxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR050Zno5d1k3NFFoNG1VZkd5YkJaYUFkVV9FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC82YzNjZDQtNTg5Ni00MjVlLTk1ZGIt
ZmZlZDUwYmFhMGRhLzEvR050Zno5d1k3NFFoNG1VZkd5YkJaYUFkVV9FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC82YzNjZDQtNTg5Ni00MjVlLTk1ZGItZmZlZDUwYmFhMGRh
LzEvR050Zno5d1k3NFFoNG1VZkd5YkJaYUFkVV9FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMxAb5qQM
OMbkTZesLBEzyUMww0QGTzQlk3orn0z2fgpN2J5f6yzOeMwnJs+KEhYOmbN4zxYH
w1SV8RYcDb8ABNYvlDleFE6pp/K7Tumc49LlQIxm8G22i9F/XShLILDltmLEIuVB
KXf6QMwk8x7t2Z9rTH4Anwtq/mP4qf2oTBZOYCDwOryzLThhTOe8xcWxvM2uYhdy
uOcOIRg64BCCqGig070Zi15likcww7iG6yMyywKW5AeAH9iuhsDd53iDR25vIFTK
RYHTFL9zlzkSS3gDVuIAWRkwtt88qqjy1Cyzt4h+/ngXrYG+8w+bPILcqOPEWPhe
S2ZlkzA2f4BgGw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:53:39 2025 by rpki-client