Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/d6c86d-6c65-4a25-a8fa-38d4f3211896/1/Gk-AAcMMrFRuP5IQO0sScy38v1I.mft
File: Gk-AAcMMrFRuP5IQO0sScy38v1I.mft (raw, json)
Hash identifier: J4DwP3NJdFpOXnKuhg9GXyG1Z6BWomd272fjnWe/Gj0=
Subject key identifier: 24:CC:A8:96:C7:6C:56:5D:36:58:CB:9C:1E:98:1C:8D:2E:A7:50:18
Authority key identifier: 1A:4F:80:01:C3:0C:AC:54:6E:3F:92:10:3B:4B:12:73:2D:FC:BF:52
Certificate issuer: /CN=1a4f8001c30cac546e3f92103b4b12732dfcbf52
Certificate serial: 019A232E7CF4ECCF0C4E298AEC742DEC2A39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gk-AAcMMrFRuP5IQO0sScy38v1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/d6c86d-6c65-4a25-a8fa-38d4f3211896/1/Gk-AAcMMrFRuP5IQO0sScy38v1I.mft
Manifest number: 16F7
Signing time: Mon 27 Oct 2025 01:00:40 +0000
Manifest this update: Mon 27 Oct 2025 01:00:40 +0000
Manifest next update: Tue 28 Oct 2025 01:00:40 +0000
Files and hashes: 1: 03PqHmjkj4TD2ylDKAOumX_8ZTA.roa (hash: x+gVojJiPW6JgGHksggk6Pxvk6Hei1FVA2Qg8c4io0A=)
2: F9dWkDI-kpGgHo1RGxktanl_gRQ.roa (hash: BuoIxKvYOd7Wk6s+uxgqf+pVlc2a+8mJGV3BltAm2us=)
3: Gk-AAcMMrFRuP5IQO0sScy38v1I.crl (hash: LFYxuW1WCC6vWW/IyNv4+qNDUfQzcoP5XKfe+B5YBgo=)
4: eWcWfNZ-EfWW-NGvXQCC85ntpH8.roa (hash: JnQ17QGfxQtAemBJMFLXpPFmY/ueJsW7rAduSoORn4I=)
5: qa59xb1800lClBGKgPJD3m5Rw8s.roa (hash: g552CxuAT1A0kuubtT8ih3j4BuCostjRts289tICv1Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/d6c86d-6c65-4a25-a8fa-38d4f3211896/1/Gk-AAcMMrFRuP5IQO0sScy38v1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/d6c86d-6c65-4a25-a8fa-38d4f3211896/1/Gk-AAcMMrFRuP5IQO0sScy38v1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gk-AAcMMrFRuP5IQO0sScy38v1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 01:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:23:2e:7c:f4:ec:cf:0c:4e:29:8a:ec:74:2d:ec:2a:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a4f8001c30cac546e3f92103b4b12732dfcbf52
Validity
Not Before: Oct 27 01:00:40 2025 GMT
Not After : Oct 28 01:00:40 2025 GMT
Subject: CN=24cca896c76c565d3658cb9c1e981c8d2ea75018
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:92:54:63:a3:09:04:ed:94:18:f7:d5:27:6b:
28:39:14:95:77:8f:16:4c:34:7e:75:f6:03:c5:b0:
c9:94:22:c4:09:74:b6:af:99:af:7b:de:15:31:8d:
28:ad:88:0c:69:cc:62:0b:e0:4c:8a:3e:3a:30:56:
ea:20:3d:54:81:03:15:5a:d9:95:b5:b6:ce:59:fd:
9f:1d:8c:8c:b8:3b:db:b7:84:61:b3:8a:1e:c5:14:
ef:35:2c:60:51:ab:25:f1:b0:1d:9d:be:18:ec:17:
e8:64:bd:68:62:bb:03:0f:db:88:f5:3d:e2:31:55:
40:c6:12:7d:1e:03:5f:64:71:67:55:8a:c1:cc:44:
06:a9:8c:f0:40:4e:56:ca:e4:11:cd:c2:ec:06:88:
7e:fb:4f:82:74:7c:f2:cb:43:b0:9c:81:e0:04:8f:
65:52:65:46:25:f9:29:fa:15:c3:88:e9:2b:06:25:
08:92:30:82:10:f3:f5:6a:c5:4a:1e:57:93:b4:47:
d0:9e:af:a3:20:16:5b:cb:38:b2:41:c9:66:d0:30:
35:b0:6a:68:64:ed:9c:a2:a5:b5:71:fb:af:95:18:
4e:b8:76:9a:3f:4c:96:84:ae:db:3d:84:24:5d:50:
4c:f9:3e:72:49:cd:66:da:9b:c9:a9:4f:16:ef:9b:
67:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:CC:A8:96:C7:6C:56:5D:36:58:CB:9C:1E:98:1C:8D:2E:A7:50:18
X509v3 Authority Key Identifier:
keyid:1A:4F:80:01:C3:0C:AC:54:6E:3F:92:10:3B:4B:12:73:2D:FC:BF:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gk-AAcMMrFRuP5IQO0sScy38v1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/d6c86d-6c65-4a25-a8fa-38d4f3211896/1/Gk-AAcMMrFRuP5IQO0sScy38v1I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/d6c86d-6c65-4a25-a8fa-38d4f3211896/1/Gk-AAcMMrFRuP5IQO0sScy38v1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:46:1e:49:9e:8f:bd:8f:31:8a:12:62:02:69:b0:2b:af:b0:
28:d7:aa:69:b3:5c:ea:0b:8a:a5:9f:7f:35:c5:3b:13:89:da:
15:86:dc:f7:3f:e6:55:6a:0f:5d:51:93:7e:e7:11:8f:f2:ce:
c4:84:5d:80:c8:cc:7e:14:13:b6:c3:8f:67:69:3b:ff:1f:13:
38:82:c5:11:60:0a:88:13:04:2f:ff:4c:e0:45:76:38:c3:ca:
1f:cb:96:6c:73:c5:33:b0:01:27:f0:55:1f:94:53:82:1e:cb:
87:e2:bd:22:fb:fc:4c:d0:e7:e1:96:3b:f8:05:99:9c:2e:6f:
25:f4:48:d8:4e:6d:f0:4e:5d:38:dd:94:f7:a2:c8:ee:7a:7b:
bd:7a:be:2a:db:4e:b0:5c:61:d0:d7:c0:7c:96:fb:6d:c6:a3:
f8:c7:9f:de:23:38:68:5e:57:65:b5:22:29:b7:38:2d:56:2d:
e7:fc:fc:1f:3f:b8:8a:82:3c:0a:8a:36:99:d0:75:05:34:76:
92:86:2f:e8:58:31:60:ba:a7:22:63:90:23:14:7c:20:e9:6d:
a3:91:65:7c:53:ed:5d:48:1e:95:bd:a9:cc:cc:8f:05:9a:a8:
76:4f:7f:51:d1:6e:34:35:00:b9:27:75:71:2a:4f:f4:9c:1a:
0e:08:96:fa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZojLnz07M8MTimK7HQt7Co5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhNGY4MDAxYzMwY2FjNTQ2ZTNmOTIxMDNiNGIxMjczMmRm
Y2JmNTIwHhcNMjUxMDI3MDEwMDQwWhcNMjUxMDI4MDEwMDQwWjAzMTEwLwYDVQQD
EygyNGNjYTg5NmM3NmM1NjVkMzY1OGNiOWMxZTk4MWM4ZDJlYTc1MDE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZJUY6MJBO2UGPfVJ2soORSVd48W
TDR+dfYDxbDJlCLECXS2r5mve94VMY0orYgMacxiC+BMij46MFbqID1UgQMVWtmV
tbbOWf2fHYyMuDvbt4Rhs4oexRTvNSxgUasl8bAdnb4Y7BfoZL1oYrsDD9uI9T3i
MVVAxhJ9HgNfZHFnVYrBzEQGqYzwQE5WyuQRzcLsBoh++0+CdHzyy0OwnIHgBI9l
UmVGJfkp+hXDiOkrBiUIkjCCEPP1asVKHleTtEfQnq+jIBZbyziyQclm0DA1sGpo
ZO2coqW1cfuvlRhOuHaaP0yWhK7bPYQkXVBM+T5ySc1m2pvJqU8W75tnMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCTMqJbHbFZdNljLnB6YHI0up1AYMB8GA1UdIwQY
MBaAFBpPgAHDDKxUbj+SEDtLEnMt/L9SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2stQUFjTU1yRlJ1UDVJUU8wc1NjeTM4djFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9kNmM4NmQtNmM2NS00YTI1LWE4ZmEt
MzhkNGYzMjExODk2LzEvR2stQUFjTU1yRlJ1UDVJUU8wc1NjeTM4djFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS9kNmM4NmQtNmM2NS00YTI1LWE4ZmEtMzhkNGYzMjExODk2
LzEvR2stQUFjTU1yRlJ1UDVJUU8wc1NjeTM4djFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjkYeSZ6P
vY8xihJiAmmwK6+wKNeqabNc6guKpZ9/NcU7E4naFYbc9z/mVWoPXVGTfucRj/LO
xIRdgMjMfhQTtsOPZ2k7/x8TOILFEWAKiBMEL/9M4EV2OMPKH8uWbHPFM7ABJ/BV
H5RTgh7Lh+K9Ivv8TNDn4ZY7+AWZnC5vJfRI2E5t8E5dON2U96LI7np7vXq+KttO
sFxh0NfAfJb7bcaj+Mef3iM4aF5XZbUiKbc4LVYt5/z8Hz+4ioI8Coo2mdB1BTR2
koYv6FgxYLqnImOQIxR8IOlto5FlfFPtXUgelb2pzMyPBZqodk9/UdFuNDUAuSd1
cSpP9JwaDgiW+g==
-----END CERTIFICATE-----
Generated at Mon Oct 27 10:44:24 2025 by rpki-client