Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/007297-c443-427e-a0e7-7dc0057ed96d/1/gc-3wMI0noD-5RtHgxU1Es2dodI.mft
File: gc-3wMI0noD-5RtHgxU1Es2dodI.mft (raw, json)
Hash identifier: 5aWQ8BgOeQzDiOa8g4vDgufDpaFj9wWG+atiY89PuSk=
Subject key identifier: 18:57:F5:85:14:37:85:56:73:02:EB:B8:E9:E7:EF:D1:85:16:06:5C
Authority key identifier: 81:CF:B7:C0:C2:34:9E:80:FE:E5:1B:47:83:15:35:12:CD:9D:A1:D2
Certificate issuer: /CN=81cfb7c0c2349e80fee51b4783153512cd9da1d2
Certificate serial: 019A71EEA66628454FDF40886BB4A0CDA6FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gc-3wMI0noD-5RtHgxU1Es2dodI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/007297-c443-427e-a0e7-7dc0057ed96d/1/gc-3wMI0noD-5RtHgxU1Es2dodI.mft
Manifest number: 32
Signing time: Tue 11 Nov 2025 08:00:56 +0000
Manifest this update: Tue 11 Nov 2025 08:00:56 +0000
Manifest next update: Wed 12 Nov 2025 08:00:56 +0000
Files and hashes: 1: 1tP7MN3eKeKtm53rAKSfnbkNmmg.roa (hash: mXaQQJLZCqFGrov9mkF92azLvy6kGuslWIYPm+eaW+k=)
2: gc-3wMI0noD-5RtHgxU1Es2dodI.crl (hash: Zo1sSgVn/D/TWU/nmzsXcHjQ6CzUVnQCzzx/NdNLVLs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/007297-c443-427e-a0e7-7dc0057ed96d/1/gc-3wMI0noD-5RtHgxU1Es2dodI.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/007297-c443-427e-a0e7-7dc0057ed96d/1/gc-3wMI0noD-5RtHgxU1Es2dodI.mft
rsync://rpki.ripe.net/repository/DEFAULT/gc-3wMI0noD-5RtHgxU1Es2dodI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:a6:66:28:45:4f:df:40:88:6b:b4:a0:cd:a6:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81cfb7c0c2349e80fee51b4783153512cd9da1d2
Validity
Not Before: Nov 11 08:00:56 2025 GMT
Not After : Nov 12 08:00:56 2025 GMT
Subject: CN=1857f585143785567302ebb8e9e7efd18516065c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:2e:e3:c0:c6:dc:ab:ed:ab:ec:7d:62:c0:62:
b2:d8:16:37:96:00:a2:c0:a2:1a:ce:97:19:7c:07:
d6:f5:c7:a9:a8:ee:00:f2:a6:6e:4d:84:5a:71:92:
f5:8b:8f:9b:30:58:cf:70:da:81:87:4a:6b:43:93:
2d:4f:b1:da:66:f0:1d:43:7b:bb:f0:44:c2:37:f5:
9b:e0:53:10:9d:b4:9d:95:95:17:b7:01:c5:90:9c:
34:58:24:96:64:49:d5:41:38:38:13:b1:c1:96:a8:
0f:62:5f:fd:89:9c:c7:08:a6:4a:e3:dc:f4:75:12:
fe:a4:ff:89:a7:5c:71:c8:2c:ed:4c:46:e3:9c:54:
97:59:8f:be:b9:8e:32:37:da:79:97:a8:d8:73:8c:
27:d3:c6:7a:1e:cf:a3:11:f9:eb:b1:90:80:c4:ae:
23:c2:49:b1:b5:f2:65:30:b6:db:a0:6c:fe:c8:2a:
43:75:5d:9c:16:49:d3:8d:cf:00:d9:98:b2:6c:66:
b5:1f:51:5a:c7:4e:86:c8:07:e7:1a:aa:da:a3:99:
57:ff:a8:67:4a:8e:a9:ff:24:3c:17:ed:0f:5c:74:
0f:08:8f:ef:e9:c2:d3:6f:f6:9d:3c:b3:76:f5:79:
f2:1e:a1:7c:f1:13:13:fb:46:74:f3:07:ae:b0:84:
65:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:57:F5:85:14:37:85:56:73:02:EB:B8:E9:E7:EF:D1:85:16:06:5C
X509v3 Authority Key Identifier:
keyid:81:CF:B7:C0:C2:34:9E:80:FE:E5:1B:47:83:15:35:12:CD:9D:A1:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gc-3wMI0noD-5RtHgxU1Es2dodI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/007297-c443-427e-a0e7-7dc0057ed96d/1/gc-3wMI0noD-5RtHgxU1Es2dodI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/007297-c443-427e-a0e7-7dc0057ed96d/1/gc-3wMI0noD-5RtHgxU1Es2dodI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:b9:50:b1:8c:38:89:ac:1b:20:ed:c3:52:d0:0b:a6:a2:10:
69:79:85:e1:b3:84:6d:97:f5:25:6c:95:2c:d7:aa:b0:f3:fc:
60:09:ae:06:c6:3b:8d:78:f1:ce:f2:0c:54:6d:19:e1:31:44:
0a:64:2b:e8:dc:18:6d:10:3c:33:9d:cd:b4:aa:12:55:91:64:
5d:da:26:29:c5:a3:8e:85:01:53:7f:59:c9:ad:36:97:17:0f:
0b:e4:bc:63:3c:7f:d1:b1:36:3f:60:e1:9a:f8:26:14:fc:7e:
d5:71:37:6d:3e:cc:2d:88:08:6e:8b:e6:44:cd:01:9b:1e:9c:
23:12:c6:53:b9:32:fc:82:22:ed:57:b6:7e:b7:36:4e:50:11:
ef:01:d8:f0:85:8f:fa:9d:42:f0:27:8d:61:21:cb:e6:6a:ac:
cd:d3:ca:60:cf:75:75:66:51:58:61:3a:48:5f:1b:20:a2:ac:
2d:4e:f2:6c:2e:3f:fd:83:a8:25:3e:f1:25:4b:78:a4:56:43:
1f:ed:99:4b:3b:6b:6d:41:f6:38:8a:3d:27:e5:c4:7f:77:bc:
8e:37:dc:39:17:65:83:df:d5:c3:96:dc:cc:15:c5:be:4b:9a:
9a:ac:99:34:53:0c:0b:69:5e:b9:83:70:75:93:f8:72:e8:0b:
6b:09:1f:fb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpx7qZmKEVP30CIa7Sgzab/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxY2ZiN2MwYzIzNDllODBmZWU1MWI0NzgzMTUzNTEyY2Q5
ZGExZDIwHhcNMjUxMTExMDgwMDU2WhcNMjUxMTEyMDgwMDU2WjAzMTEwLwYDVQQD
EygxODU3ZjU4NTE0Mzc4NTU2NzMwMmViYjhlOWU3ZWZkMTg1MTYwNjVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuC7jwMbcq+2r7H1iwGKy2BY3lgCi
wKIazpcZfAfW9cepqO4A8qZuTYRacZL1i4+bMFjPcNqBh0prQ5MtT7HaZvAdQ3u7
8ETCN/Wb4FMQnbSdlZUXtwHFkJw0WCSWZEnVQTg4E7HBlqgPYl/9iZzHCKZK49z0
dRL+pP+Jp1xxyCztTEbjnFSXWY++uY4yN9p5l6jYc4wn08Z6Hs+jEfnrsZCAxK4j
wkmxtfJlMLbboGz+yCpDdV2cFknTjc8A2ZiybGa1H1Fax06GyAfnGqrao5lX/6hn
So6p/yQ8F+0PXHQPCI/v6cLTb/adPLN29XnyHqF88RMT+0Z08weusIRlCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBhX9YUUN4VWcwLruOnn79GFFgZcMB8GA1UdIwQY
MBaAFIHPt8DCNJ6A/uUbR4MVNRLNnaHSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ2MtM3dNSTBub0QtNVJ0SGd4VTFFczJkb2RJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy8wMDcyOTctYzQ0My00MjdlLWEwZTct
N2RjMDA1N2VkOTZkLzEvZ2MtM3dNSTBub0QtNVJ0SGd4VTFFczJkb2RJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy8wMDcyOTctYzQ0My00MjdlLWEwZTctN2RjMDA1N2VkOTZk
LzEvZ2MtM3dNSTBub0QtNVJ0SGd4VTFFczJkb2RJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT7lQsYw4
iawbIO3DUtALpqIQaXmF4bOEbZf1JWyVLNeqsPP8YAmuBsY7jXjxzvIMVG0Z4TFE
CmQr6NwYbRA8M53NtKoSVZFkXdomKcWjjoUBU39Zya02lxcPC+S8Yzx/0bE2P2Dh
mvgmFPx+1XE3bT7MLYgIbovmRM0Bmx6cIxLGU7ky/IIi7Ve2frc2TlAR7wHY8IWP
+p1C8CeNYSHL5mqszdPKYM91dWZRWGE6SF8bIKKsLU7ybC4//YOoJT7xJUt4pFZD
H+2ZSztrbUH2OIo9J+XEf3e8jjfcORdlg9/Vw5bczBXFvkuamqyZNFMMC2leuYNw
dZP4cugLawkf+w==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:37:33 2025 by rpki-client