Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/4c0de9-42a3-44dc-998e-523d20925dad/1/GWCuZmpoK0JPbJlKsuAU3Dxk-88.mft
File: GWCuZmpoK0JPbJlKsuAU3Dxk-88.mft (raw, json)
Hash identifier: 0/FxQzIBbNauE1uT+wOQLbwaf5f3dcA7l4uGLXhYFt0=
Subject key identifier: DE:C1:66:DB:D4:C7:26:D8:71:C0:14:28:B7:DE:3C:FA:93:4F:64:57
Authority key identifier: 19:60:AE:66:6A:68:2B:42:4F:6C:99:4A:B2:E0:14:DC:3C:64:FB:CF
Certificate issuer: /CN=1960ae666a682b424f6c994ab2e014dc3c64fbcf
Certificate serial: 019A71B7B7C0B83986BD46F1474F6A8733B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GWCuZmpoK0JPbJlKsuAU3Dxk-88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/4c0de9-42a3-44dc-998e-523d20925dad/1/GWCuZmpoK0JPbJlKsuAU3Dxk-88.mft
Manifest number: 05FE
Signing time: Tue 11 Nov 2025 07:00:56 +0000
Manifest this update: Tue 11 Nov 2025 07:00:56 +0000
Manifest next update: Wed 12 Nov 2025 07:00:56 +0000
Files and hashes: 1: E9TifD1sfMQN679LyLG0hiwKeX4.roa (hash: 7SvhO02KqCz55FUneR+KgndNdPdJd/1FqEb2wmvkStA=)
2: GWCuZmpoK0JPbJlKsuAU3Dxk-88.crl (hash: OfUimJuAxKL4v1Sz+2+ytHbKI/ykuwkpv1yCk4i+zLs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/4c0de9-42a3-44dc-998e-523d20925dad/1/GWCuZmpoK0JPbJlKsuAU3Dxk-88.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/4c0de9-42a3-44dc-998e-523d20925dad/1/GWCuZmpoK0JPbJlKsuAU3Dxk-88.mft
rsync://rpki.ripe.net/repository/DEFAULT/GWCuZmpoK0JPbJlKsuAU3Dxk-88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:b7:c0:b8:39:86:bd:46:f1:47:4f:6a:87:33:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1960ae666a682b424f6c994ab2e014dc3c64fbcf
Validity
Not Before: Nov 11 07:00:56 2025 GMT
Not After : Nov 12 07:00:56 2025 GMT
Subject: CN=dec166dbd4c726d871c01428b7de3cfa934f6457
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:0f:8a:34:b0:df:ce:01:b8:a0:22:6a:8a:10:
a0:67:5d:f3:2d:cf:2a:2f:bf:1c:96:f7:55:6f:10:
db:49:bb:c9:f0:5c:5b:23:e7:97:eb:0f:05:26:f9:
dc:f4:20:ad:34:a2:71:af:80:85:ce:14:da:c7:6d:
cb:3a:aa:ec:eb:b3:30:3e:12:91:a2:79:27:05:69:
8c:b7:b6:46:88:02:a9:18:78:d1:cd:d3:35:c8:a3:
49:7d:ac:8c:bf:17:b8:ae:dd:88:a9:fb:9e:60:85:
a2:df:35:2c:aa:4e:74:5b:56:82:6f:ff:e8:e8:36:
91:e0:43:1f:75:c5:4e:94:06:17:ac:53:57:53:69:
23:b9:47:ed:e9:14:65:c5:f5:37:48:0f:26:43:a3:
6c:d3:fe:d4:00:de:b1:58:bb:8d:e0:b7:64:08:a4:
79:df:30:f9:b6:6c:9a:85:b3:7f:ec:1f:d7:05:89:
53:d8:4a:90:df:34:07:02:27:60:20:e4:1c:77:0d:
d4:d9:b8:31:f8:42:76:19:97:3e:01:4a:89:07:8b:
d3:98:ed:98:0c:14:a5:0b:8f:42:d6:2d:67:bc:ff:
e6:27:06:02:8e:ac:fd:3a:9d:0d:9a:94:da:f2:0c:
01:70:f2:80:dc:5e:d3:50:93:ac:1a:9e:2a:54:23:
57:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:C1:66:DB:D4:C7:26:D8:71:C0:14:28:B7:DE:3C:FA:93:4F:64:57
X509v3 Authority Key Identifier:
keyid:19:60:AE:66:6A:68:2B:42:4F:6C:99:4A:B2:E0:14:DC:3C:64:FB:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GWCuZmpoK0JPbJlKsuAU3Dxk-88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/4c0de9-42a3-44dc-998e-523d20925dad/1/GWCuZmpoK0JPbJlKsuAU3Dxk-88.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/4c0de9-42a3-44dc-998e-523d20925dad/1/GWCuZmpoK0JPbJlKsuAU3Dxk-88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:51:b1:95:ca:42:4b:07:40:58:78:dd:7a:fa:ee:b4:90:ff:
6d:48:73:af:63:56:0b:06:a9:34:d1:94:81:00:c1:aa:31:f4:
a4:40:30:32:1c:09:d0:82:b7:e8:7d:00:a3:73:2d:35:af:d8:
fa:b6:c7:47:a5:a2:20:2c:8c:3b:3a:93:82:5c:89:39:24:aa:
84:a0:12:3b:7f:9c:58:44:6d:16:18:5e:e5:30:39:25:58:9e:
f2:b8:35:8c:3b:e9:84:38:d7:68:ee:0d:0d:29:f8:ea:ad:d7:
91:45:1b:1f:dd:ab:38:5d:5b:22:da:58:e2:df:12:24:5f:9c:
dc:28:00:7c:eb:75:40:85:41:88:47:82:13:50:6c:43:eb:02:
50:1a:2c:0c:bb:54:7e:80:c7:c5:4d:3f:10:65:14:b9:c8:bb:
e2:75:cb:57:e1:b7:e8:72:a1:70:ba:a6:ab:5f:35:00:3a:9c:
b8:da:e9:ff:68:d1:3c:ed:7b:a9:64:01:d5:a2:10:3b:68:d0:
b3:fd:20:85:e7:a1:40:cc:a5:56:b2:05:a4:78:90:c0:7e:74:
b6:5c:81:91:48:4c:e1:ab:f9:24:73:73:fe:a1:f8:f4:b4:af:
b0:c3:9d:26:40:f3:ea:81:93:2a:77:80:20:fa:a1:0a:10:9e:
64:8e:94:47
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxt7fAuDmGvUbxR09qhzO3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5NjBhZTY2NmE2ODJiNDI0ZjZjOTk0YWIyZTAxNGRjM2M2
NGZiY2YwHhcNMjUxMTExMDcwMDU2WhcNMjUxMTEyMDcwMDU2WjAzMTEwLwYDVQQD
EyhkZWMxNjZkYmQ0YzcyNmQ4NzFjMDE0MjhiN2RlM2NmYTkzNGY2NDU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvA+KNLDfzgG4oCJqihCgZ13zLc8q
L78clvdVbxDbSbvJ8FxbI+eX6w8FJvnc9CCtNKJxr4CFzhTax23LOqrs67MwPhKR
onknBWmMt7ZGiAKpGHjRzdM1yKNJfayMvxe4rt2IqfueYIWi3zUsqk50W1aCb//o
6DaR4EMfdcVOlAYXrFNXU2kjuUft6RRlxfU3SA8mQ6Ns0/7UAN6xWLuN4LdkCKR5
3zD5tmyahbN/7B/XBYlT2EqQ3zQHAidgIOQcdw3U2bgx+EJ2GZc+AUqJB4vTmO2Y
DBSlC49C1i1nvP/mJwYCjqz9Op0NmpTa8gwBcPKA3F7TUJOsGp4qVCNX4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN7BZtvUxybYccAUKLfePPqTT2RXMB8GA1UdIwQY
MBaAFBlgrmZqaCtCT2yZSrLgFNw8ZPvPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR1dDdVptcG9LMEpQYkpsS3N1QVUzRHhrLTg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi80YzBkZTktNDJhMy00NGRjLTk5OGUt
NTIzZDIwOTI1ZGFkLzEvR1dDdVptcG9LMEpQYkpsS3N1QVUzRHhrLTg4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi80YzBkZTktNDJhMy00NGRjLTk5OGUtNTIzZDIwOTI1ZGFk
LzEvR1dDdVptcG9LMEpQYkpsS3N1QVUzRHhrLTg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIFGxlcpC
SwdAWHjdevrutJD/bUhzr2NWCwapNNGUgQDBqjH0pEAwMhwJ0IK36H0Ao3MtNa/Y
+rbHR6WiICyMOzqTglyJOSSqhKASO3+cWERtFhhe5TA5JVie8rg1jDvphDjXaO4N
DSn46q3XkUUbH92rOF1bItpY4t8SJF+c3CgAfOt1QIVBiEeCE1BsQ+sCUBosDLtU
foDHxU0/EGUUuci74nXLV+G36HKhcLqmq181ADqcuNrp/2jRPO17qWQB1aIQO2jQ
s/0gheehQMylVrIFpHiQwH50tlyBkUhM4av5JHNz/qH49LSvsMOdJkDz6oGTKneA
IPqhChCeZI6URw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:17:36 2025 by rpki-client