Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/13bdba-0715-4e26-b076-af5867476309/1/G8GZTqY9UNvItDrOytKEK03BV1k.mft
File: G8GZTqY9UNvItDrOytKEK03BV1k.mft (raw, json)
Hash identifier: e31CABlL8RhMGpCaG8xYORQc/IWB/j/5nqPIwN8OhK4=
Subject key identifier: A9:BD:BA:2D:A7:54:96:57:87:3A:46:0F:3F:6E:B2:CC:BD:17:FA:62
Authority key identifier: 1B:C1:99:4E:A6:3D:50:DB:C8:B4:3A:CE:CA:D2:84:2B:4D:C1:57:59
Certificate issuer: /CN=1bc1994ea63d50dbc8b43acecad2842b4dc15759
Certificate serial: 019A4DE159997D0CC6221C8A4F8F9FD72315
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G8GZTqY9UNvItDrOytKEK03BV1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/13bdba-0715-4e26-b076-af5867476309/1/G8GZTqY9UNvItDrOytKEK03BV1k.mft
Manifest number: 1452
Signing time: Tue 04 Nov 2025 08:00:05 +0000
Manifest this update: Tue 04 Nov 2025 08:00:05 +0000
Manifest next update: Wed 05 Nov 2025 08:00:05 +0000
Files and hashes: 1: 7LJ9xawxzsvCYv_ns8BJ_8ldo2M.roa (hash: f0+qr316tmp0FcJIZdHHGP/bQ0+RaN5V5m4qk2p7tRk=)
2: G8GZTqY9UNvItDrOytKEK03BV1k.crl (hash: kx0vZFNreQH/nb2sdY5vuVxoWMTFJhYlra9m/dJPdwk=)
3: PnNWpVBdWoAd7atmJEGFvS64Mws.roa (hash: tnccYlmQkpOSmjFbn8qMQEzLxuwoQXHA9SM9r5ZMjAk=)
4: VUW_CECBbTHdD7KnSWpCp7f6Uls.roa (hash: dGtVeAhKlKvD4goyS7nYKPSCr10+/VHRE76M3fcZW0M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/13bdba-0715-4e26-b076-af5867476309/1/G8GZTqY9UNvItDrOytKEK03BV1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/13bdba-0715-4e26-b076-af5867476309/1/G8GZTqY9UNvItDrOytKEK03BV1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/G8GZTqY9UNvItDrOytKEK03BV1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:59:99:7d:0c:c6:22:1c:8a:4f:8f:9f:d7:23:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bc1994ea63d50dbc8b43acecad2842b4dc15759
Validity
Not Before: Nov 4 08:00:05 2025 GMT
Not After : Nov 5 08:00:05 2025 GMT
Subject: CN=a9bdba2da7549657873a460f3f6eb2ccbd17fa62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:69:08:ee:64:6b:b3:6e:ad:ae:18:6b:5c:b5:
9c:4e:ef:9a:b5:d5:95:ad:d6:08:87:ed:50:b0:40:
e0:71:ea:af:ef:71:61:eb:00:ea:07:00:4f:e3:94:
dd:bc:f7:2c:22:55:13:b9:e1:e1:d3:03:32:c3:34:
b8:b3:ed:6d:51:76:38:e7:f8:10:7f:52:3d:37:17:
3e:77:6a:c5:27:c2:54:cb:19:4c:d8:ff:72:e3:39:
25:e4:01:40:5d:68:bc:e1:c4:ca:8c:1b:bb:91:33:
01:c6:46:ca:96:1b:b8:43:8b:f9:b3:55:5c:ed:8b:
8d:2b:82:35:1a:15:66:2b:d3:10:63:bb:65:bd:a7:
71:af:07:bc:57:bb:ba:49:a6:88:90:1d:81:e0:2f:
c9:4c:19:4d:38:c4:4f:0b:98:ca:19:a1:57:ba:12:
38:cc:fe:33:41:55:ba:1b:86:73:ea:14:38:5e:0e:
25:6a:21:ab:ab:fd:36:3c:5b:c9:cc:9c:c5:bb:53:
ef:4e:bf:11:53:8b:4a:58:b5:9f:92:ea:c4:42:5a:
3c:1d:e3:33:08:86:99:89:f8:3a:07:2c:85:d0:85:
2e:6a:69:0d:b7:1e:0f:24:53:14:8f:a7:a4:a5:fa:
35:ff:f3:9a:1f:70:0a:06:51:4f:1a:5c:ac:de:05:
a5:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:BD:BA:2D:A7:54:96:57:87:3A:46:0F:3F:6E:B2:CC:BD:17:FA:62
X509v3 Authority Key Identifier:
keyid:1B:C1:99:4E:A6:3D:50:DB:C8:B4:3A:CE:CA:D2:84:2B:4D:C1:57:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G8GZTqY9UNvItDrOytKEK03BV1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/13bdba-0715-4e26-b076-af5867476309/1/G8GZTqY9UNvItDrOytKEK03BV1k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/13bdba-0715-4e26-b076-af5867476309/1/G8GZTqY9UNvItDrOytKEK03BV1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:e3:2e:2e:aa:ca:a2:bd:41:0b:82:c9:c5:a9:3a:0f:58:ac:
9c:e6:1a:fd:29:d0:aa:53:30:bf:59:1d:73:2f:cd:fd:d2:c0:
19:98:f5:50:ab:ae:0c:7c:ba:92:0e:a4:e0:95:a0:5a:c0:ef:
83:c1:fb:cf:9c:be:e2:74:41:82:1d:18:25:77:94:c0:49:fb:
bd:06:10:1a:1d:a8:86:23:1f:15:95:95:3f:c9:47:4a:37:9b:
95:aa:51:ed:16:04:6f:bb:3c:e1:1d:f2:eb:16:b0:ee:41:37:
cb:76:33:20:0b:0a:cf:c7:d4:58:bc:c2:5d:6a:14:c5:4a:40:
31:a0:14:dc:62:e0:da:db:90:2f:ba:ba:ea:ec:36:92:3c:b1:
c0:32:95:f0:6e:23:cc:92:a1:bf:4f:47:55:c8:93:87:d8:29:
23:d3:1a:20:d6:23:1b:a7:89:64:18:0a:d3:bb:f5:7e:43:9c:
d5:46:e6:ef:76:c7:f2:10:e1:fe:db:fe:0d:4e:22:e4:7a:9b:
85:ca:08:f4:36:30:81:f2:f7:9d:04:1b:e9:0d:72:54:fa:c0:
77:e6:be:9e:f6:e8:52:85:3d:5d:5a:25:84:12:b6:ea:69:79:
69:b2:24:f4:cf:4a:59:27:d1:b4:ab:c0:d2:ee:8d:48:b9:68:
7e:82:ae:19
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpN4VmZfQzGIhyKT4+f1yMVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiYzE5OTRlYTYzZDUwZGJjOGI0M2FjZWNhZDI4NDJiNGRj
MTU3NTkwHhcNMjUxMTA0MDgwMDA1WhcNMjUxMTA1MDgwMDA1WjAzMTEwLwYDVQQD
EyhhOWJkYmEyZGE3NTQ5NjU3ODczYTQ2MGYzZjZlYjJjY2JkMTdmYTYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwGkI7mRrs26trhhrXLWcTu+atdWV
rdYIh+1QsEDgceqv73Fh6wDqBwBP45TdvPcsIlUTueHh0wMywzS4s+1tUXY45/gQ
f1I9Nxc+d2rFJ8JUyxlM2P9y4zkl5AFAXWi84cTKjBu7kTMBxkbKlhu4Q4v5s1Vc
7YuNK4I1GhVmK9MQY7tlvadxrwe8V7u6SaaIkB2B4C/JTBlNOMRPC5jKGaFXuhI4
zP4zQVW6G4Zz6hQ4Xg4laiGrq/02PFvJzJzFu1PvTr8RU4tKWLWfkurEQlo8HeMz
CIaZifg6ByyF0IUuamkNtx4PJFMUj6ekpfo1//OaH3AKBlFPGlys3gWlFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKm9ui2nVJZXhzpGDz9ussy9F/piMB8GA1UdIwQY
MBaAFBvBmU6mPVDbyLQ6zsrShCtNwVdZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRzhHWlRxWTlVTnZJdERyT3l0S0VLMDNCVjFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC8xM2JkYmEtMDcxNS00ZTI2LWIwNzYt
YWY1ODY3NDc2MzA5LzEvRzhHWlRxWTlVTnZJdERyT3l0S0VLMDNCVjFrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC8xM2JkYmEtMDcxNS00ZTI2LWIwNzYtYWY1ODY3NDc2MzA5
LzEvRzhHWlRxWTlVTnZJdERyT3l0S0VLMDNCVjFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuuMuLqrK
or1BC4LJxak6D1isnOYa/SnQqlMwv1kdcy/N/dLAGZj1UKuuDHy6kg6k4JWgWsDv
g8H7z5y+4nRBgh0YJXeUwEn7vQYQGh2ohiMfFZWVP8lHSjeblapR7RYEb7s84R3y
6xaw7kE3y3YzIAsKz8fUWLzCXWoUxUpAMaAU3GLg2tuQL7q66uw2kjyxwDKV8G4j
zJKhv09HVciTh9gpI9MaINYjG6eJZBgK07v1fkOc1Ubm73bH8hDh/tv+DU4i5Hqb
hcoI9DYwgfL3nQQb6Q1yVPrAd+a+nvboUoU9XVolhBK26ml5abIk9M9KWSfRtKvA
0u6NSLlofoKuGQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:17:01 2025 by rpki-client