Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.mft
File: gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.mft (raw, json)
Hash identifier: wM0M2FC9KI9/mut7e8mFwBIkoZN3RUSlFr8OZo2Z9lg=
Subject key identifier: 97:66:B8:A1:CC:2A:D4:F5:C7:8B:C9:50:EF:CF:A8:D7:58:02:0A:46
Authority key identifier: 81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
Certificate issuer: /CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Certificate serial: 019A202D3B810FFA600283208DDC1727B027
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.mft
Manifest number: 1788
Signing time: Sun 26 Oct 2025 11:00:26 +0000
Manifest this update: Sun 26 Oct 2025 11:00:26 +0000
Manifest next update: Mon 27 Oct 2025 11:00:26 +0000
Files and hashes: 1: TVTY8940R-JLK3g0bC-55INlCR4.roa (hash: G8fybb1dVxSY3d5NiOJGlSrI9zs27WohVNGxcPiP+KM=)
2: XVwZQRv1vz6JSSnd8P8GyNHVWKI.roa (hash: UKsEAKn0FU1wyu4cVCRnP9Y8nY4SlsAm5Omp7LeDq8o=)
3: gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.crl (hash: mcsN3Us81vWw517MD+MPLi1FJJtDlJd72kUEdmUBNxY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.mft
rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 05:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:20:2d:3b:81:0f:fa:60:02:83:20:8d:dc:17:27:b0:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Validity
Not Before: Oct 26 11:00:26 2025 GMT
Not After : Oct 27 11:00:26 2025 GMT
Subject: CN=9766b8a1cc2ad4f5c78bc950efcfa8d758020a46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:4c:95:8a:e2:02:9d:6b:b4:0e:d9:e4:b4:bc:
c2:d1:ee:fa:f3:35:ef:4a:21:39:7b:db:e9:57:a5:
25:ab:4b:4e:1c:30:59:23:6e:57:d3:ed:5d:f4:74:
37:21:39:4b:50:86:ac:b1:89:1e:a3:93:f4:3a:7a:
8f:55:11:43:a9:a9:64:1f:11:a2:52:3c:47:03:68:
89:69:d8:01:11:7d:8a:d4:9a:e4:3f:b0:67:aa:75:
b6:3a:9d:02:cb:5f:57:03:60:56:85:4b:af:42:2b:
4c:87:b2:b7:f7:c5:ec:39:24:fb:8a:7e:3d:62:36:
0f:e0:cd:2c:f1:b4:3e:b9:79:39:96:bf:97:43:92:
60:69:70:03:66:b7:65:2b:95:08:9a:6b:97:ad:fb:
1b:92:ed:30:bb:f3:ff:ce:52:2d:f0:2a:ee:75:d7:
fc:07:70:15:cd:c9:d5:52:ab:8a:7b:8d:74:0b:5a:
4d:fc:42:c7:85:39:92:2d:62:44:ef:d0:ff:82:5e:
62:77:d8:ba:27:df:38:41:64:2b:25:50:a4:db:87:
63:0c:09:40:92:49:b9:4f:b3:25:95:fe:69:96:ed:
6b:82:6f:90:05:17:ab:8f:e6:b7:01:cf:48:78:be:
09:29:d8:e0:60:a8:22:45:62:65:d0:85:02:7e:1f:
96:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:66:B8:A1:CC:2A:D4:F5:C7:8B:C9:50:EF:CF:A8:D7:58:02:0A:46
X509v3 Authority Key Identifier:
keyid:81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:e6:72:90:b1:6f:0b:b7:c6:f0:cd:75:01:8c:9a:a6:90:bc:
ce:94:1b:39:42:f0:97:2a:31:78:7d:96:51:92:9e:4e:05:18:
ce:d2:cd:a1:97:3d:3a:a4:89:08:d5:ea:fb:ae:5a:5d:73:43:
c9:1e:08:71:e4:f7:4c:79:f9:02:cb:0d:83:11:ba:44:c5:18:
97:63:f3:a1:31:f1:74:44:f1:9b:0e:fa:fc:e8:d3:35:0f:6c:
67:1f:92:1a:2a:d9:55:d4:fa:02:90:46:c0:a0:a1:ee:6a:00:
5f:5d:31:39:db:8b:36:d5:65:97:66:f8:1f:1e:4e:6f:d6:44:
c8:be:23:00:60:74:7c:fc:66:61:cf:c4:a9:e9:68:67:f8:c8:
09:ff:53:5d:22:fe:ad:5a:26:64:6f:ae:ff:05:7d:43:fc:30:
c1:b4:6f:6a:27:f6:ea:e3:cc:99:ba:2a:7f:93:d8:ef:a2:e6:
c2:1b:72:c6:21:0c:67:63:58:01:92:3e:aa:2c:ce:49:02:19:
a3:7f:e9:00:eb:27:83:7b:76:46:d5:78:d1:6c:c4:86:f4:d2:
2d:b6:10:4e:82:55:1c:7a:d4:cc:2b:11:b7:73:aa:03:ec:9d:
b9:64:42:3a:81:10:2a:fc:74:cf:5d:1d:8c:21:bf:a1:fc:8e:
5c:bd:d1:fa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZogLTuBD/pgAoMgjdwXJ7AnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxY2NhOWYxNWUxOTIxOTUzYTYyOGM4YWQyYWM0YmU5Nzdi
NmMzMDMwHhcNMjUxMDI2MTEwMDI2WhcNMjUxMDI3MTEwMDI2WjAzMTEwLwYDVQQD
Eyg5NzY2YjhhMWNjMmFkNGY1Yzc4YmM5NTBlZmNmYThkNzU4MDIwYTQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1UyViuICnWu0DtnktLzC0e768zXv
SiE5e9vpV6Ulq0tOHDBZI25X0+1d9HQ3ITlLUIassYkeo5P0OnqPVRFDqalkHxGi
UjxHA2iJadgBEX2K1JrkP7BnqnW2Op0Cy19XA2BWhUuvQitMh7K398XsOST7in49
YjYP4M0s8bQ+uXk5lr+XQ5JgaXADZrdlK5UImmuXrfsbku0wu/P/zlIt8Cruddf8
B3AVzcnVUquKe410C1pN/ELHhTmSLWJE79D/gl5id9i6J984QWQrJVCk24djDAlA
kkm5T7Mllf5plu1rgm+QBRerj+a3Ac9IeL4JKdjgYKgiRWJl0IUCfh+W3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJdmuKHMKtT1x4vJUO/PqNdYAgpGMB8GA1UdIwQY
MBaAFIHMqfFeGSGVOmKMitKsS+l3tsMDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ2N5cDhWNFpJWlU2WW95SzBxeEw2WGUyd3dNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC8xZWEyYjAtNmI5YS00NGQ3LWEyZTUt
MjIwNmNjMmU2OTFjLzEvZ2N5cDhWNFpJWlU2WW95SzBxeEw2WGUyd3dNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC8xZWEyYjAtNmI5YS00NGQ3LWEyZTUtMjIwNmNjMmU2OTFj
LzEvZ2N5cDhWNFpJWlU2WW95SzBxeEw2WGUyd3dNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc+ZykLFv
C7fG8M11AYyappC8zpQbOULwlyoxeH2WUZKeTgUYztLNoZc9OqSJCNXq+65aXXND
yR4IceT3THn5AssNgxG6RMUYl2PzoTHxdETxmw76/OjTNQ9sZx+SGirZVdT6ApBG
wKCh7moAX10xOduLNtVll2b4Hx5Ob9ZEyL4jAGB0fPxmYc/EqeloZ/jICf9TXSL+
rVomZG+u/wV9Q/wwwbRvaif26uPMmboqf5PY76LmwhtyxiEMZ2NYAZI+qizOSQIZ
o3/pAOsng3t2RtV40WzEhvTSLbYQToJVHHrUzCsRt3OqA+yduWRCOoEQKvx0z10d
jCG/ofyOXL3R+g==
-----END CERTIFICATE-----
Generated at Sun Oct 26 15:01:40 2025 by rpki-client