Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/0f0c61-202c-467c-82df-53cd0269eb55/1/GqwOVjNDfnAN-YWImWKGzydis5c.mft
File: GqwOVjNDfnAN-YWImWKGzydis5c.mft (raw, json)
Hash identifier: jftd8875vLVdBfTUSA7nsJU35tP09pnhZxBflg05jAs=
Subject key identifier: ED:31:D8:E2:24:37:BB:03:BF:33:51:E9:C7:B5:87:E0:71:8F:4B:A6
Authority key identifier: 1A:AC:0E:56:33:43:7E:70:0D:F9:85:88:99:62:86:CF:27:62:B3:97
Certificate issuer: /CN=1aac0e5633437e700df98588996286cf2762b397
Certificate serial: 019A733834AEFEE014A1142441CF72F8FD02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GqwOVjNDfnAN-YWImWKGzydis5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/0f0c61-202c-467c-82df-53cd0269eb55/1/GqwOVjNDfnAN-YWImWKGzydis5c.mft
Manifest number: 01D4
Signing time: Tue 11 Nov 2025 14:00:54 +0000
Manifest this update: Tue 11 Nov 2025 14:00:54 +0000
Manifest next update: Wed 12 Nov 2025 14:00:54 +0000
Files and hashes: 1: GqwOVjNDfnAN-YWImWKGzydis5c.crl (hash: 7asXfEEFwqOz1AMaIVdp26bk6f3y6EZjvjtkxuYOWWI=)
2: Z7scd0bqOcooSWNO6P1-J8lD1ZI.roa (hash: KdiHC1KssZd8y+s+NZVmdEHh2GbufRCimiylYpM1VS8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/0f0c61-202c-467c-82df-53cd0269eb55/1/GqwOVjNDfnAN-YWImWKGzydis5c.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/0f0c61-202c-467c-82df-53cd0269eb55/1/GqwOVjNDfnAN-YWImWKGzydis5c.mft
rsync://rpki.ripe.net/repository/DEFAULT/GqwOVjNDfnAN-YWImWKGzydis5c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:38:34:ae:fe:e0:14:a1:14:24:41:cf:72:f8:fd:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1aac0e5633437e700df98588996286cf2762b397
Validity
Not Before: Nov 11 14:00:54 2025 GMT
Not After : Nov 12 14:00:54 2025 GMT
Subject: CN=ed31d8e22437bb03bf3351e9c7b587e0718f4ba6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:66:e5:82:e6:9b:8e:4e:95:c1:6e:ee:3d:da:
84:da:15:f7:4b:61:21:b7:93:46:70:39:f8:ba:c7:
a5:bb:e8:d6:2c:7d:67:2d:ed:b5:c5:80:31:e8:a2:
5d:f8:f8:76:b3:42:51:04:fc:9c:ab:de:d0:98:43:
22:54:69:22:6e:54:c6:be:c7:03:22:cc:ed:f8:2a:
d2:a5:bb:bb:82:9e:67:7e:92:81:1d:bc:50:8c:ca:
02:bc:57:73:d0:ea:9d:3e:3a:79:0a:a0:c0:73:2e:
0e:a0:8d:d5:4e:11:25:bc:e3:fd:f4:bb:39:49:8f:
ca:72:0b:18:39:f0:e6:04:dc:e5:26:d7:b3:a5:f7:
5b:80:36:7a:41:a9:f9:c7:46:8b:bc:be:9b:ca:91:
fe:93:a9:f1:c7:96:da:f1:04:82:19:7d:cc:66:98:
98:ed:93:e3:06:94:09:3d:02:76:aa:15:84:ad:f3:
e6:0b:04:3e:2a:8f:0e:90:9b:91:d1:32:ed:39:e5:
ca:1e:d3:2a:74:8d:c9:ad:75:02:f6:b3:86:5a:d4:
2f:1c:bd:af:45:b5:45:4c:17:cb:df:e4:7d:fc:d3:
d5:34:49:d7:56:ac:03:1c:7c:48:42:a3:7f:0d:f3:
e1:4b:15:05:bd:a3:1d:b3:f0:76:e6:a1:0f:27:cc:
78:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:31:D8:E2:24:37:BB:03:BF:33:51:E9:C7:B5:87:E0:71:8F:4B:A6
X509v3 Authority Key Identifier:
keyid:1A:AC:0E:56:33:43:7E:70:0D:F9:85:88:99:62:86:CF:27:62:B3:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GqwOVjNDfnAN-YWImWKGzydis5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/0f0c61-202c-467c-82df-53cd0269eb55/1/GqwOVjNDfnAN-YWImWKGzydis5c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/0f0c61-202c-467c-82df-53cd0269eb55/1/GqwOVjNDfnAN-YWImWKGzydis5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
f4:50:d9:83:b0:ed:ff:02:3a:3f:81:5d:36:0f:f0:28:b2:7c:
80:a5:4d:5d:56:a9:61:b9:7b:2f:2b:d0:70:43:ad:53:f4:e7:
75:e8:db:e3:cd:5e:6a:d9:fa:5d:44:ee:b5:9b:83:68:1d:4d:
6f:51:cf:de:dc:4c:93:f1:3f:9d:72:56:c3:bb:b3:c4:6e:3b:
9c:a2:ac:2a:99:14:9a:45:74:be:9e:ec:ca:aa:c8:49:b1:27:
65:c8:29:10:f7:49:f8:96:6c:c4:b0:03:e1:00:4a:b7:fb:2b:
81:e6:57:7b:27:8c:bc:03:2d:7d:70:19:71:1d:ea:37:e4:0a:
f5:2e:52:ab:7f:b8:d4:52:e6:dd:d7:ef:79:c4:d9:dd:a7:f6:
e0:9e:2c:44:ed:85:de:8f:b6:3a:38:77:a7:a8:9a:88:04:4b:
cf:1c:ba:db:f9:33:a7:74:66:cb:56:f7:73:79:00:11:3f:05:
c0:89:85:a9:b6:25:d8:20:4f:ee:4d:ab:2d:c7:17:51:4a:95:
3f:c5:1e:ec:2e:79:32:c2:30:1c:85:af:46:fd:7e:4e:73:da:
49:19:d4:78:ce:18:a7:c9:54:94:52:1d:98:fe:0c:f1:b7:a2:
a8:81:bf:6d:ed:a1:6b:f0:40:d6:a5:29:15:a6:f7:e9:86:d8:
eb:9e:0c:37
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpzODSu/uAUoRQkQc9y+P0CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhYWMwZTU2MzM0MzdlNzAwZGY5ODU4ODk5NjI4NmNmMjc2
MmIzOTcwHhcNMjUxMTExMTQwMDU0WhcNMjUxMTEyMTQwMDU0WjAzMTEwLwYDVQQD
EyhlZDMxZDhlMjI0MzdiYjAzYmYzMzUxZTljN2I1ODdlMDcxOGY0YmE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwmblguabjk6VwW7uPdqE2hX3S2Eh
t5NGcDn4uselu+jWLH1nLe21xYAx6KJd+Ph2s0JRBPycq97QmEMiVGkiblTGvscD
Iszt+CrSpbu7gp5nfpKBHbxQjMoCvFdz0OqdPjp5CqDAcy4OoI3VThElvOP99Ls5
SY/KcgsYOfDmBNzlJtezpfdbgDZ6Qan5x0aLvL6bypH+k6nxx5ba8QSCGX3MZpiY
7ZPjBpQJPQJ2qhWErfPmCwQ+Ko8OkJuR0TLtOeXKHtMqdI3JrXUC9rOGWtQvHL2v
RbVFTBfL3+R9/NPVNEnXVqwDHHxIQqN/DfPhSxUFvaMds/B25qEPJ8x4FwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO0x2OIkN7sDvzNR6ce1h+Bxj0umMB8GA1UdIwQY
MBaAFBqsDlYzQ35wDfmFiJlihs8nYrOXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3F3T1ZqTkRmbkFOLVlXSW1XS0d6eWRpczVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8wZjBjNjEtMjAyYy00NjdjLTgyZGYt
NTNjZDAyNjllYjU1LzEvR3F3T1ZqTkRmbkFOLVlXSW1XS0d6eWRpczVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS8wZjBjNjEtMjAyYy00NjdjLTgyZGYtNTNjZDAyNjllYjU1
LzEvR3F3T1ZqTkRmbkFOLVlXSW1XS0d6eWRpczVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA9FDZg7Dt
/wI6P4FdNg/wKLJ8gKVNXVapYbl7LyvQcEOtU/Tndejb481eatn6XUTutZuDaB1N
b1HP3txMk/E/nXJWw7uzxG47nKKsKpkUmkV0vp7syqrISbEnZcgpEPdJ+JZsxLAD
4QBKt/srgeZXeyeMvAMtfXAZcR3qN+QK9S5Sq3+41FLm3dfvecTZ3af24J4sRO2F
3o+2Ojh3p6iaiARLzxy62/kzp3Rmy1b3c3kAET8FwImFqbYl2CBP7k2rLccXUUqV
P8Ue7C55MsIwHIWvRv1+TnPaSRnUeM4Yp8lUlFIdmP4M8beiqIG/be2ha/BA1qUp
Fab36YbY654MNw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 16:52:35 2025 by rpki-client