Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/96106f-3da3-4a67-bb3c-69c4e8533521/1/GiKBg0kKxrJSPb_MCHwTgW-cJhI.mft
File: GiKBg0kKxrJSPb_MCHwTgW-cJhI.mft (raw, json)
Hash identifier: ef3qQ8rSmMGzPPsu3P0K+x9MjZ/Oowj4ewzzrjAQk9w=
Subject key identifier: EE:EE:EB:DD:AD:83:39:EC:7E:97:24:4B:EE:C3:12:5F:45:FB:EA:7E
Authority key identifier: 1A:22:81:83:49:0A:C6:B2:52:3D:BF:CC:08:7C:13:81:6F:9C:26:12
Certificate issuer: /CN=1a228183490ac6b2523dbfcc087c13816f9c2612
Certificate serial: 019A71B84448F4FD0C305761FF11AE38C3A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GiKBg0kKxrJSPb_MCHwTgW-cJhI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/96106f-3da3-4a67-bb3c-69c4e8533521/1/GiKBg0kKxrJSPb_MCHwTgW-cJhI.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 07:01:32 +0000
Manifest this update: Tue 11 Nov 2025 07:01:32 +0000
Manifest next update: Wed 12 Nov 2025 07:01:32 +0000
Files and hashes: 1: FpuR0y9APVvFEzZNqfMzupE3ra4.roa (hash: GpOZZgRFNoAGIu1wspT0GzMUn0LG62S5x4bgRa8l/A4=)
2: GiKBg0kKxrJSPb_MCHwTgW-cJhI.crl (hash: vO6DL8CzTomgetS0gbiGa0kLS+8qnCFIE5VkvL535uY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/96106f-3da3-4a67-bb3c-69c4e8533521/1/GiKBg0kKxrJSPb_MCHwTgW-cJhI.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/96106f-3da3-4a67-bb3c-69c4e8533521/1/GiKBg0kKxrJSPb_MCHwTgW-cJhI.mft
rsync://rpki.ripe.net/repository/DEFAULT/GiKBg0kKxrJSPb_MCHwTgW-cJhI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:44:48:f4:fd:0c:30:57:61:ff:11:ae:38:c3:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a228183490ac6b2523dbfcc087c13816f9c2612
Validity
Not Before: Nov 11 07:01:32 2025 GMT
Not After : Nov 12 07:01:32 2025 GMT
Subject: CN=eeeeebddad8339ec7e97244beec3125f45fbea7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:2f:af:7b:1e:28:ae:38:bf:e8:01:14:06:2b:
e4:d4:51:55:06:a5:8a:0b:51:12:01:6d:b8:2a:24:
0b:d9:47:56:27:ba:86:54:a9:b9:c6:15:52:a6:11:
3c:d4:27:05:a4:82:fe:a9:90:7d:78:5f:3d:0f:f0:
15:ad:a7:8e:d0:01:bd:3c:9f:ad:36:f0:74:f7:fd:
aa:13:b2:bc:20:89:d3:d9:16:98:dc:09:a2:20:61:
26:0d:48:19:c2:d1:07:fb:95:27:37:08:59:70:f5:
4b:30:b3:49:7c:2e:c0:2e:51:fc:51:7f:16:5f:66:
0c:e0:91:a9:49:5b:ea:9b:fb:58:ab:c5:d5:6c:5e:
0c:34:2d:16:aa:03:4e:fb:e2:81:8b:04:18:d4:fa:
e5:b6:24:8d:51:18:26:b7:1c:da:f8:09:b1:ce:7e:
c2:b7:29:bc:ff:d2:fb:93:ed:c2:20:de:3a:47:33:
b0:b5:aa:cf:c3:4b:9b:6f:1e:53:8f:99:12:9d:8c:
ac:9c:c7:eb:5f:d3:e5:9f:52:ec:62:44:3d:7d:84:
5b:aa:da:24:72:95:a1:77:53:91:de:e9:54:6c:28:
c1:d8:36:ee:05:7a:ff:ab:6c:49:0e:f2:ce:53:d3:
4f:8e:3e:07:a6:e1:a7:99:5a:d0:70:5f:83:92:7e:
a8:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:EE:EB:DD:AD:83:39:EC:7E:97:24:4B:EE:C3:12:5F:45:FB:EA:7E
X509v3 Authority Key Identifier:
keyid:1A:22:81:83:49:0A:C6:B2:52:3D:BF:CC:08:7C:13:81:6F:9C:26:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GiKBg0kKxrJSPb_MCHwTgW-cJhI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/96106f-3da3-4a67-bb3c-69c4e8533521/1/GiKBg0kKxrJSPb_MCHwTgW-cJhI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/96106f-3da3-4a67-bb3c-69c4e8533521/1/GiKBg0kKxrJSPb_MCHwTgW-cJhI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:07:5e:fb:14:34:00:55:36:61:ad:0e:84:29:cd:3f:5c:f3:
47:58:79:26:a2:4e:b4:38:95:46:b5:68:a7:c1:14:f2:c2:44:
fc:58:7c:da:84:bb:ed:02:ac:70:33:39:23:db:c3:df:3d:aa:
1f:68:8d:1d:a2:ea:19:80:05:b6:3b:12:19:6c:6c:65:02:18:
3b:7b:d4:4f:ae:46:43:de:f6:97:24:06:3f:6c:f4:53:b8:f5:
28:dc:4b:c8:cd:a2:1d:4b:78:f1:53:88:28:98:98:8f:75:bd:
47:f2:75:db:61:5c:d0:33:ed:95:3a:b6:13:9b:39:f1:35:19:
41:f5:a5:8b:f8:4a:e9:38:27:77:4f:63:b3:46:d0:b2:9a:df:
51:42:fc:48:61:09:bb:bd:1f:62:c2:44:81:ca:c6:77:57:54:
05:4a:29:04:51:84:66:70:0c:c0:0a:79:08:09:72:f1:b4:b3:
58:8e:46:2c:51:c2:08:0f:3d:92:35:d0:e5:cb:36:af:5c:01:
fa:8e:3b:4d:aa:d4:7e:a4:3f:eb:b9:41:09:36:0e:77:a9:54:
2f:38:18:11:1b:61:bd:10:a4:42:d7:4f:bd:e8:f3:2e:62:f7:
bd:ea:9f:13:56:44:25:b8:3e:07:28:30:bd:37:cb:a7:5e:01:
ef:4c:a0:63
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuERI9P0MMFdh/xGuOMOlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhMjI4MTgzNDkwYWM2YjI1MjNkYmZjYzA4N2MxMzgxNmY5
YzI2MTIwHhcNMjUxMTExMDcwMTMyWhcNMjUxMTEyMDcwMTMyWjAzMTEwLwYDVQQD
EyhlZWVlZWJkZGFkODMzOWVjN2U5NzI0NGJlZWMzMTI1ZjQ1ZmJlYTdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAry+vex4orji/6AEUBivk1FFVBqWK
C1ESAW24KiQL2UdWJ7qGVKm5xhVSphE81CcFpIL+qZB9eF89D/AVraeO0AG9PJ+t
NvB09/2qE7K8IInT2RaY3AmiIGEmDUgZwtEH+5UnNwhZcPVLMLNJfC7ALlH8UX8W
X2YM4JGpSVvqm/tYq8XVbF4MNC0WqgNO++KBiwQY1PrltiSNURgmtxza+Amxzn7C
tym8/9L7k+3CIN46RzOwtarPw0ubbx5Tj5kSnYysnMfrX9Pln1LsYkQ9fYRbqtok
cpWhd1OR3ulUbCjB2DbuBXr/q2xJDvLOU9NPjj4HpuGnmVrQcF+Dkn6oWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO7u692tgznsfpckS+7DEl9F++p+MB8GA1UdIwQY
MBaAFBoigYNJCsayUj2/zAh8E4FvnCYSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2lLQmcwa0t4ckpTUGJfTUNId1RnVy1jSmhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi85NjEwNmYtM2RhMy00YTY3LWJiM2Mt
NjljNGU4NTMzNTIxLzEvR2lLQmcwa0t4ckpTUGJfTUNId1RnVy1jSmhJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi85NjEwNmYtM2RhMy00YTY3LWJiM2MtNjljNGU4NTMzNTIx
LzEvR2lLQmcwa0t4ckpTUGJfTUNId1RnVy1jSmhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIgde+xQ0
AFU2Ya0OhCnNP1zzR1h5JqJOtDiVRrVop8EU8sJE/Fh82oS77QKscDM5I9vD3z2q
H2iNHaLqGYAFtjsSGWxsZQIYO3vUT65GQ972lyQGP2z0U7j1KNxLyM2iHUt48VOI
KJiYj3W9R/J122Fc0DPtlTq2E5s58TUZQfWli/hK6Tgnd09js0bQsprfUUL8SGEJ
u70fYsJEgcrGd1dUBUopBFGEZnAMwAp5CAly8bSzWI5GLFHCCA89kjXQ5cs2r1wB
+o47TarUfqQ/67lBCTYOd6lULzgYERthvRCkQtdPvejzLmL3veqfE1ZEJbg+Bygw
vTfLp14B70ygYw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:41:42 2025 by rpki-client