Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/54b678-b2fe-449d-b326-dcae70f1c93b/1/gmGkK_ImTLXrzsbhkNAqbVU7YjM.mft
File: gmGkK_ImTLXrzsbhkNAqbVU7YjM.mft (raw, json)
Hash identifier: 2ENJXtkLRD5ioYyh68Bf3HUIt0M38qwdGoS97Ob39H0=
Subject key identifier: 74:F5:E8:FD:6E:ED:98:E6:34:93:1B:C2:99:85:1A:46:C7:CD:CE:DC
Authority key identifier: 82:61:A4:2B:F2:26:4C:B5:EB:CE:C6:E1:90:D0:2A:6D:55:3B:62:33
Certificate issuer: /CN=8261a42bf2264cb5ebcec6e190d02a6d553b6233
Certificate serial: 019A066DCD928F596EFABC71C8D6A94A3314
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gmGkK_ImTLXrzsbhkNAqbVU7YjM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/54b678-b2fe-449d-b326-dcae70f1c93b/1/gmGkK_ImTLXrzsbhkNAqbVU7YjM.mft
Manifest number: 0A5B
Signing time: Tue 21 Oct 2025 11:00:50 +0000
Manifest this update: Tue 21 Oct 2025 11:00:50 +0000
Manifest next update: Wed 22 Oct 2025 11:00:50 +0000
Files and hashes: 1: RKmtjmx8dGmZLS6fAJiBKQnORQs.roa (hash: uAM4Z/WN2c7W0xTj1SOSxZNG72uS1HvTkZghAtYIMtE=)
2: gmGkK_ImTLXrzsbhkNAqbVU7YjM.crl (hash: 1/z5UlU1fcptAyL+gwcMXv2qR6y85DTRLRFoN5unm1I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/54b678-b2fe-449d-b326-dcae70f1c93b/1/gmGkK_ImTLXrzsbhkNAqbVU7YjM.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/54b678-b2fe-449d-b326-dcae70f1c93b/1/gmGkK_ImTLXrzsbhkNAqbVU7YjM.mft
rsync://rpki.ripe.net/repository/DEFAULT/gmGkK_ImTLXrzsbhkNAqbVU7YjM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Oct 2025 11:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:06:6d:cd:92:8f:59:6e:fa:bc:71:c8:d6:a9:4a:33:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8261a42bf2264cb5ebcec6e190d02a6d553b6233
Validity
Not Before: Oct 21 11:00:50 2025 GMT
Not After : Oct 22 11:00:50 2025 GMT
Subject: CN=74f5e8fd6eed98e634931bc299851a46c7cdcedc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:a5:9e:7b:82:bd:95:67:85:1b:c2:a2:43:3d:
84:7e:4f:e6:9e:24:f5:05:60:0a:e8:5a:37:7a:98:
3b:82:9e:01:0a:94:43:1e:1c:78:98:25:5f:00:bc:
a8:31:36:93:ac:94:d0:54:17:d9:56:60:1f:9e:3b:
d6:23:2d:6c:cb:db:c3:74:15:a5:18:79:27:ea:9c:
63:5c:ff:1b:1a:3b:4d:44:e9:ea:42:75:b2:11:50:
88:f8:7b:e8:0c:c4:87:37:15:be:f0:4a:85:89:3f:
b7:24:6c:5f:4b:2f:d0:e4:f6:ed:23:22:6a:4d:41:
ec:cf:4d:a8:e5:f0:90:bb:44:5e:f7:ed:ee:87:66:
25:ca:4a:ac:b8:12:22:88:de:42:d6:cb:80:3c:1d:
83:c4:7c:c0:65:a2:62:4d:a1:67:de:ea:f6:33:8e:
85:22:71:bc:38:14:5b:d7:a1:cb:f5:d6:f5:d0:9b:
60:b8:36:16:8d:ab:44:d2:32:eb:23:18:ef:b8:ef:
ec:75:03:27:65:33:a4:43:fe:d7:47:29:cc:2a:af:
cc:6e:88:a4:a4:b0:6f:1d:49:60:93:eb:cb:3c:1c:
fe:15:b7:79:f1:60:11:49:32:9d:47:5b:c9:05:74:
93:de:de:17:98:f0:ae:d1:da:3a:ae:26:27:dc:fa:
df:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:F5:E8:FD:6E:ED:98:E6:34:93:1B:C2:99:85:1A:46:C7:CD:CE:DC
X509v3 Authority Key Identifier:
keyid:82:61:A4:2B:F2:26:4C:B5:EB:CE:C6:E1:90:D0:2A:6D:55:3B:62:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmGkK_ImTLXrzsbhkNAqbVU7YjM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/54b678-b2fe-449d-b326-dcae70f1c93b/1/gmGkK_ImTLXrzsbhkNAqbVU7YjM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/54b678-b2fe-449d-b326-dcae70f1c93b/1/gmGkK_ImTLXrzsbhkNAqbVU7YjM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:2c:4e:fa:ad:a9:12:da:a5:34:fa:54:78:52:b6:81:20:20:
c8:c4:90:7a:94:51:d9:d7:e0:c5:2e:7a:53:76:01:3a:6e:ab:
cc:64:10:0c:f5:14:5d:16:49:63:9e:43:1f:4c:d3:21:e6:6c:
11:fb:7f:4d:d6:6a:72:fb:ac:8f:f6:e9:fe:0e:2c:73:eb:3c:
f2:41:dc:ec:7a:8e:f2:1c:9a:22:37:74:98:9e:9e:b8:3c:de:
c9:f1:1b:ea:07:b1:8d:c9:1e:85:1e:81:a4:37:a0:b1:57:24:
2d:4a:8c:ab:fe:7a:59:91:61:ba:82:30:ee:14:2d:47:bf:2c:
4c:04:7c:b7:a0:af:fc:ef:9b:69:3e:44:76:4d:22:84:80:02:
d6:c9:78:0b:bc:de:07:c8:3e:14:b0:ba:10:43:1f:aa:45:52:
be:c4:be:9e:ea:98:ae:23:d6:f4:0b:02:fa:b7:7b:bd:8e:24:
5d:7e:72:0a:d2:9f:e3:af:b3:7d:fe:4e:01:d4:27:b3:12:25:
d0:f4:05:ce:e9:95:c9:40:aa:8c:a6:48:21:c1:89:14:df:ac:
b7:07:6f:df:f2:44:ee:3d:b2:5b:7e:77:f8:9d:d6:8d:f2:76:
7d:fd:21:ca:70:5f:e7:08:ce:b6:0d:37:ad:66:19:d7:44:8b:
71:62:b7:09
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoGbc2Sj1lu+rxxyNapSjMUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyNjFhNDJiZjIyNjRjYjVlYmNlYzZlMTkwZDAyYTZkNTUz
YjYyMzMwHhcNMjUxMDIxMTEwMDUwWhcNMjUxMDIyMTEwMDUwWjAzMTEwLwYDVQQD
Eyg3NGY1ZThmZDZlZWQ5OGU2MzQ5MzFiYzI5OTg1MWE0NmM3Y2RjZWRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5aWee4K9lWeFG8KiQz2Efk/mniT1
BWAK6Fo3epg7gp4BCpRDHhx4mCVfALyoMTaTrJTQVBfZVmAfnjvWIy1sy9vDdBWl
GHkn6pxjXP8bGjtNROnqQnWyEVCI+HvoDMSHNxW+8EqFiT+3JGxfSy/Q5PbtIyJq
TUHsz02o5fCQu0Re9+3uh2YlykqsuBIiiN5C1suAPB2DxHzAZaJiTaFn3ur2M46F
InG8OBRb16HL9db10JtguDYWjatE0jLrIxjvuO/sdQMnZTOkQ/7XRynMKq/Mboik
pLBvHUlgk+vLPBz+Fbd58WARSTKdR1vJBXST3t4XmPCu0do6riYn3PrfvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHT16P1u7ZjmNJMbwpmFGkbHzc7cMB8GA1UdIwQY
MBaAFIJhpCvyJky1687G4ZDQKm1VO2IzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ21Ha0tfSW1UTFhyenNiaGtOQXFiVlU3WWpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS81NGI2NzgtYjJmZS00NDlkLWIzMjYt
ZGNhZTcwZjFjOTNiLzEvZ21Ha0tfSW1UTFhyenNiaGtOQXFiVlU3WWpNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS81NGI2NzgtYjJmZS00NDlkLWIzMjYtZGNhZTcwZjFjOTNi
LzEvZ21Ha0tfSW1UTFhyenNiaGtOQXFiVlU3WWpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeSxO+q2p
EtqlNPpUeFK2gSAgyMSQepRR2dfgxS56U3YBOm6rzGQQDPUUXRZJY55DH0zTIeZs
Eft/TdZqcvusj/bp/g4sc+s88kHc7HqO8hyaIjd0mJ6euDzeyfEb6gexjckehR6B
pDegsVckLUqMq/56WZFhuoIw7hQtR78sTAR8t6Cv/O+baT5Edk0ihIAC1sl4C7ze
B8g+FLC6EEMfqkVSvsS+nuqYriPW9AsC+rd7vY4kXX5yCtKf46+zff5OAdQnsxIl
0PQFzumVyUCqjKZIIcGJFN+stwdv3/JE7j2yW353+J3WjfJ2ff0hynBf5wjOtg03
rWYZ10SLcWK3CQ==
-----END CERTIFICATE-----
Generated at Tue Oct 21 21:00:45 2025 by rpki-client