Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/af89d8-8c35-4c8c-b15d-7e46ad748484/1/G87kBAWu-22hejQO7xWc6cTRgyI.mft
File: G87kBAWu-22hejQO7xWc6cTRgyI.mft (raw, json)
Hash identifier: 7B1WW7ZcHlx1a9Kl3Q9KYRtht42G32icHWm6HjnQ360=
Subject key identifier: 00:4E:A5:93:96:A4:B2:08:FF:DE:63:B6:D0:0A:B0:1C:D2:89:74:8A
Authority key identifier: 1B:CE:E4:04:05:AE:FB:6D:A1:7A:34:0E:EF:15:9C:E9:C4:D1:83:22
Certificate issuer: /CN=1bcee40405aefb6da17a340eef159ce9c4d18322
Certificate serial: 019A2D7B0B2F49E2149D279E959D36F52E9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G87kBAWu-22hejQO7xWc6cTRgyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/af89d8-8c35-4c8c-b15d-7e46ad748484/1/G87kBAWu-22hejQO7xWc6cTRgyI.mft
Manifest number: 1414
Signing time: Wed 29 Oct 2025 01:00:29 +0000
Manifest this update: Wed 29 Oct 2025 01:00:29 +0000
Manifest next update: Thu 30 Oct 2025 01:00:29 +0000
Files and hashes: 1: 4fR3vxw-OSsx-wmaMltn3WnnQ1U.roa (hash: XDgHbRopCRJdPkCexKqjsGW1UsqeJHsTtWZ2Q7eQaYM=)
2: G87kBAWu-22hejQO7xWc6cTRgyI.crl (hash: vtVQRI89YAHQsbNqb1Ub20ogm+64r5RdRQxmHw9x+10=)
3: WUaj5fwvjt0_9HK-qsCluQyKqkc.roa (hash: bCbUT6py99S1l6vvJQ6Daw8EC7HqPQHAWbdn9H3Yo0c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/af89d8-8c35-4c8c-b15d-7e46ad748484/1/G87kBAWu-22hejQO7xWc6cTRgyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/af89d8-8c35-4c8c-b15d-7e46ad748484/1/G87kBAWu-22hejQO7xWc6cTRgyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/G87kBAWu-22hejQO7xWc6cTRgyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Oct 2025 01:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2d:7b:0b:2f:49:e2:14:9d:27:9e:95:9d:36:f5:2e:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bcee40405aefb6da17a340eef159ce9c4d18322
Validity
Not Before: Oct 29 01:00:29 2025 GMT
Not After : Oct 30 01:00:29 2025 GMT
Subject: CN=004ea59396a4b208ffde63b6d00ab01cd289748a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:fa:2b:26:03:d9:13:d1:bb:65:9b:ec:02:5e:
e0:99:20:7c:c1:31:95:b6:b7:6a:f6:18:b1:02:ef:
91:29:db:3a:33:cb:8d:6c:05:f1:27:f1:1e:ce:b4:
fe:55:b1:09:7f:a4:16:a5:52:d5:93:da:b5:67:3c:
16:5a:86:6b:a9:0c:ce:94:b9:ed:91:90:10:28:15:
4a:73:7f:7f:22:0f:9d:ec:c3:7a:75:96:a1:56:43:
0f:31:15:df:c2:d4:a8:b5:de:8c:7d:02:16:26:76:
a6:9c:79:5c:9c:ef:b6:f8:0e:44:ed:83:47:c9:dd:
28:d4:06:e6:96:97:08:3c:77:e3:d5:7c:28:f6:dc:
ee:50:10:50:6f:56:fd:1f:1a:1a:a1:0f:bb:1a:7e:
e9:b9:dd:07:08:16:a2:93:9a:5e:1f:f0:8b:e2:29:
af:80:09:15:b0:9b:98:d5:30:f9:bf:81:c6:87:37:
63:09:2d:10:bd:e8:01:d9:24:5d:78:23:44:30:7a:
33:41:86:ae:62:6a:0c:eb:62:3a:c5:2b:86:d4:35:
17:7a:47:16:67:5f:c0:0c:73:db:5a:ab:df:8c:ba:
35:9d:99:2f:57:41:b5:f1:41:2e:e6:ae:69:6f:9c:
24:d8:76:cc:4c:ec:3e:84:c8:34:56:ea:7d:45:49:
5a:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:4E:A5:93:96:A4:B2:08:FF:DE:63:B6:D0:0A:B0:1C:D2:89:74:8A
X509v3 Authority Key Identifier:
keyid:1B:CE:E4:04:05:AE:FB:6D:A1:7A:34:0E:EF:15:9C:E9:C4:D1:83:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G87kBAWu-22hejQO7xWc6cTRgyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/af89d8-8c35-4c8c-b15d-7e46ad748484/1/G87kBAWu-22hejQO7xWc6cTRgyI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/af89d8-8c35-4c8c-b15d-7e46ad748484/1/G87kBAWu-22hejQO7xWc6cTRgyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:2a:85:02:06:00:e1:ff:a4:ef:a2:d1:b1:2c:8e:56:10:c1:
25:29:80:db:66:e4:03:27:04:39:fe:b4:d2:1f:4b:f8:f0:3c:
4f:bf:e3:8e:f4:29:ee:dc:e9:1a:c6:bb:25:4f:0a:77:c3:b7:
44:a8:c8:59:75:4e:8c:4e:ec:12:bf:cb:09:12:28:28:08:aa:
34:0e:a3:46:cd:1f:b0:30:53:73:f0:3d:a6:cc:47:81:6b:7b:
07:6c:4a:eb:21:87:09:1e:59:eb:b0:d7:8a:6f:9b:39:6f:e2:
9f:89:ad:dc:cf:4c:7b:3d:99:44:8d:48:27:2b:dd:d5:c6:32:
58:d0:1d:9b:b9:cd:81:c1:25:17:10:32:6f:df:b0:19:17:b4:
fb:3c:81:c2:ed:97:6d:9b:dd:44:d4:42:73:7a:f2:3c:9b:09:
0d:75:7e:45:8f:c2:43:d6:61:20:5e:d4:6c:13:8d:49:ef:04:
84:cf:ea:4d:33:73:9c:8e:ae:87:5d:f5:4c:37:d2:ef:63:07:
d0:30:2c:05:2a:2d:81:f7:22:08:47:3a:ca:8b:f8:5d:f6:29:
cf:7c:0e:4d:a2:a2:ae:80:2a:86:99:47:6d:9b:e7:1e:a0:e5:
81:85:bc:59:50:76:38:08:cb:92:f1:1e:87:75:2d:98:16:79:
89:9c:79:fc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZotewsvSeIUnSeelZ029S6dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiY2VlNDA0MDVhZWZiNmRhMTdhMzQwZWVmMTU5Y2U5YzRk
MTgzMjIwHhcNMjUxMDI5MDEwMDI5WhcNMjUxMDMwMDEwMDI5WjAzMTEwLwYDVQQD
EygwMDRlYTU5Mzk2YTRiMjA4ZmZkZTYzYjZkMDBhYjAxY2QyODk3NDhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjforJgPZE9G7ZZvsAl7gmSB8wTGV
trdq9hixAu+RKds6M8uNbAXxJ/EezrT+VbEJf6QWpVLVk9q1ZzwWWoZrqQzOlLnt
kZAQKBVKc39/Ig+d7MN6dZahVkMPMRXfwtSotd6MfQIWJnamnHlcnO+2+A5E7YNH
yd0o1AbmlpcIPHfj1Xwo9tzuUBBQb1b9HxoaoQ+7Gn7pud0HCBaik5peH/CL4imv
gAkVsJuY1TD5v4HGhzdjCS0QvegB2SRdeCNEMHozQYauYmoM62I6xSuG1DUXekcW
Z1/ADHPbWqvfjLo1nZkvV0G18UEu5q5pb5wk2HbMTOw+hMg0Vup9RUlajwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFABOpZOWpLII/95jttAKsBzSiXSKMB8GA1UdIwQY
MBaAFBvO5AQFrvttoXo0Du8VnOnE0YMiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRzg3a0JBV3UtMjJoZWpRTzd4V2M2Y1RSZ3lJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9hZjg5ZDgtOGMzNS00YzhjLWIxNWQt
N2U0NmFkNzQ4NDg0LzEvRzg3a0JBV3UtMjJoZWpRTzd4V2M2Y1RSZ3lJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy9hZjg5ZDgtOGMzNS00YzhjLWIxNWQtN2U0NmFkNzQ4NDg0
LzEvRzg3a0JBV3UtMjJoZWpRTzd4V2M2Y1RSZ3lJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJSqFAgYA
4f+k76LRsSyOVhDBJSmA22bkAycEOf600h9L+PA8T7/jjvQp7tzpGsa7JU8Kd8O3
RKjIWXVOjE7sEr/LCRIoKAiqNA6jRs0fsDBTc/A9psxHgWt7B2xK6yGHCR5Z67DX
im+bOW/in4mt3M9Mez2ZRI1IJyvd1cYyWNAdm7nNgcElFxAyb9+wGRe0+zyBwu2X
bZvdRNRCc3ryPJsJDXV+RY/CQ9ZhIF7UbBONSe8EhM/qTTNznI6uh131TDfS72MH
0DAsBSotgfciCEc6yov4XfYpz3wOTaKiroAqhplHbZvnHqDlgYW8WVB2OAjLkvEe
h3UtmBZ5iZx5/A==
-----END CERTIFICATE-----
Generated at Wed Oct 29 10:04:01 2025 by rpki-client