Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/9062af-676f-45d9-80f4-a576f0a145ba/1/GgnLrFf8xsDKtzok0g8Bb2hrdiY.mft
File: GgnLrFf8xsDKtzok0g8Bb2hrdiY.mft (raw, json)
Hash identifier: orWfv3xJ0gisur11Tz9uj7kK9P5ilWd+wSbhfgpG5vs=
Subject key identifier: AA:EF:E2:B3:08:32:58:19:11:20:F9:FD:86:2D:10:4B:A5:E7:79:A7
Authority key identifier: 1A:09:CB:AC:57:FC:C6:C0:CA:B7:3A:24:D2:0F:01:6F:68:6B:76:26
Certificate issuer: /CN=1a09cbac57fcc6c0cab73a24d20f016f686b7626
Certificate serial: 019A70DC4039B1424E2435B3C1E534393EA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GgnLrFf8xsDKtzok0g8Bb2hrdiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/9062af-676f-45d9-80f4-a576f0a145ba/1/GgnLrFf8xsDKtzok0g8Bb2hrdiY.mft
Manifest number: 171C
Signing time: Tue 11 Nov 2025 03:01:13 +0000
Manifest this update: Tue 11 Nov 2025 03:01:13 +0000
Manifest next update: Wed 12 Nov 2025 03:01:13 +0000
Files and hashes: 1: GgnLrFf8xsDKtzok0g8Bb2hrdiY.crl (hash: vRyJeAASNaEeAX9SKitE61wfE0tfukp5Bc0+gq60pX0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/9062af-676f-45d9-80f4-a576f0a145ba/1/GgnLrFf8xsDKtzok0g8Bb2hrdiY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/9062af-676f-45d9-80f4-a576f0a145ba/1/GgnLrFf8xsDKtzok0g8Bb2hrdiY.mft
rsync://rpki.ripe.net/repository/DEFAULT/GgnLrFf8xsDKtzok0g8Bb2hrdiY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:dc:40:39:b1:42:4e:24:35:b3:c1:e5:34:39:3e:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a09cbac57fcc6c0cab73a24d20f016f686b7626
Validity
Not Before: Nov 11 03:01:13 2025 GMT
Not After : Nov 12 03:01:13 2025 GMT
Subject: CN=aaefe2b3083258191120f9fd862d104ba5e779a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d4:97:7a:61:f6:59:d7:25:d3:1f:eb:2c:a7:
7a:24:68:10:1c:29:ac:8e:21:79:44:19:d6:96:5d:
4a:ff:04:81:55:70:da:22:a5:e0:91:db:5f:cc:d3:
48:ae:2b:e6:15:94:71:c8:8d:25:6a:b8:ad:e0:c1:
ca:bc:3f:ec:31:e8:27:a8:2b:36:c4:e7:65:0f:b0:
bc:5e:3f:5c:08:1b:12:e8:64:f2:31:98:37:34:90:
b7:ba:22:83:68:94:42:db:29:cb:b3:53:3b:4e:20:
e3:1b:33:ad:0a:4a:b0:c0:87:ee:c6:fd:dc:6e:0b:
28:f6:08:6c:c0:b8:e2:30:0b:ce:2c:a5:ce:63:e5:
92:bf:2a:f3:0f:0f:4b:4a:fc:73:ef:04:33:e6:58:
1d:65:43:a2:e6:80:57:21:a6:e9:5e:ea:6d:8f:26:
75:fd:59:ad:f1:1e:a9:a9:d7:56:bb:fa:15:84:8e:
90:83:cf:a8:ff:6d:07:ae:6b:26:6b:0d:2b:58:d9:
96:fe:44:12:a9:50:9e:e6:4a:be:0b:d9:c5:ca:d0:
69:e1:27:4f:de:16:04:7d:1d:d1:f4:9c:21:ca:c7:
62:1e:a0:7f:2d:ae:28:67:8f:43:18:60:e7:20:0d:
fb:26:02:e6:c0:f9:bb:31:5c:7b:cc:1d:e7:f1:b7:
65:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:EF:E2:B3:08:32:58:19:11:20:F9:FD:86:2D:10:4B:A5:E7:79:A7
X509v3 Authority Key Identifier:
keyid:1A:09:CB:AC:57:FC:C6:C0:CA:B7:3A:24:D2:0F:01:6F:68:6B:76:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GgnLrFf8xsDKtzok0g8Bb2hrdiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/9062af-676f-45d9-80f4-a576f0a145ba/1/GgnLrFf8xsDKtzok0g8Bb2hrdiY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/9062af-676f-45d9-80f4-a576f0a145ba/1/GgnLrFf8xsDKtzok0g8Bb2hrdiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:32:a4:33:d9:65:59:6e:bc:dc:52:5d:99:1e:4e:74:59:dd:
30:ef:76:1b:72:07:f9:f4:b9:d7:ec:54:51:16:93:dd:3a:d1:
ce:cc:d4:7f:bd:40:13:2e:ad:82:a4:cc:bd:cb:0f:61:a9:0a:
3e:fe:14:5e:f0:9b:62:40:7d:bf:b7:d6:11:a8:50:a3:cb:4d:
52:90:af:2f:16:3b:3f:24:4f:75:9f:be:8f:8b:5a:fc:1b:1b:
af:63:59:7d:80:db:41:6a:26:97:68:94:b4:bf:80:1d:04:a6:
d8:17:04:a5:d8:86:84:6e:8f:74:d8:d4:3a:d5:d0:3d:a8:48:
4f:d5:23:88:1a:60:6a:c6:84:99:75:01:2f:0d:18:c7:fe:02:
08:9d:6e:68:1c:f8:54:1b:3d:74:3b:49:b2:f0:84:06:63:fb:
d0:f4:3e:57:36:b9:7d:6c:b0:f8:58:ea:60:3f:c0:73:44:70:
d5:64:2c:16:ca:0c:c9:5a:1c:35:a1:f8:4e:c5:7a:b8:ad:5f:
fd:2a:a7:ff:e1:b8:74:5a:aa:e6:b0:15:bb:87:d7:63:d2:68:
c9:fe:70:b0:94:5d:0b:e3:9f:4d:85:bd:c1:ea:84:00:6d:bb:
e2:c2:92:af:47:96:c0:42:23:51:98:75:6d:b0:78:f1:7c:42:
1f:cb:5e:43
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpw3EA5sUJOJDWzweU0OT6mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhMDljYmFjNTdmY2M2YzBjYWI3M2EyNGQyMGYwMTZmNjg2
Yjc2MjYwHhcNMjUxMTExMDMwMTEzWhcNMjUxMTEyMDMwMTEzWjAzMTEwLwYDVQQD
EyhhYWVmZTJiMzA4MzI1ODE5MTEyMGY5ZmQ4NjJkMTA0YmE1ZTc3OWE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtNSXemH2Wdcl0x/rLKd6JGgQHCms
jiF5RBnWll1K/wSBVXDaIqXgkdtfzNNIrivmFZRxyI0larit4MHKvD/sMegnqCs2
xOdlD7C8Xj9cCBsS6GTyMZg3NJC3uiKDaJRC2ynLs1M7TiDjGzOtCkqwwIfuxv3c
bgso9ghswLjiMAvOLKXOY+WSvyrzDw9LSvxz7wQz5lgdZUOi5oBXIabpXuptjyZ1
/Vmt8R6pqddWu/oVhI6Qg8+o/20Hrmsmaw0rWNmW/kQSqVCe5kq+C9nFytBp4SdP
3hYEfR3R9JwhysdiHqB/La4oZ49DGGDnIA37JgLmwPm7MVx7zB3n8bdl2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKrv4rMIMlgZESD5/YYtEEul53mnMB8GA1UdIwQY
MBaAFBoJy6xX/MbAyrc6JNIPAW9oa3YmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2duTHJGZjh4c0RLdHpvazBnOEJiMmhyZGlZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS85MDYyYWYtNjc2Zi00NWQ5LTgwZjQt
YTU3NmYwYTE0NWJhLzEvR2duTHJGZjh4c0RLdHpvazBnOEJiMmhyZGlZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS85MDYyYWYtNjc2Zi00NWQ5LTgwZjQtYTU3NmYwYTE0NWJh
LzEvR2duTHJGZjh4c0RLdHpvazBnOEJiMmhyZGlZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsTKkM9ll
WW683FJdmR5OdFndMO92G3IH+fS51+xUURaT3TrRzszUf71AEy6tgqTMvcsPYakK
Pv4UXvCbYkB9v7fWEahQo8tNUpCvLxY7PyRPdZ++j4ta/Bsbr2NZfYDbQWoml2iU
tL+AHQSm2BcEpdiGhG6PdNjUOtXQPahIT9UjiBpgasaEmXUBLw0Yx/4CCJ1uaBz4
VBs9dDtJsvCEBmP70PQ+Vza5fWyw+FjqYD/Ac0Rw1WQsFsoMyVocNaH4TsV6uK1f
/Sqn/+G4dFqq5rAVu4fXY9Joyf5wsJRdC+OfTYW9weqEAG274sKSr0eWwEIjUZh1
bbB48XxCH8teQw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:59:01 2025 by rpki-client