Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/2b7785-5da0-42dc-a221-66cc083b5669/1/GE0fQIM4P1aJXW4-c6igd63rUMs.mft
File: GE0fQIM4P1aJXW4-c6igd63rUMs.mft (raw, json)
Hash identifier: EWdEMeCPUWFHMITAXtJNNm+k31v+s2Ixv4sBBF5tKq0=
Subject key identifier: 02:FF:77:49:41:D3:57:8D:F1:5A:15:68:60:AF:47:5B:CE:5E:B4:F7
Authority key identifier: 18:4D:1F:40:83:38:3F:56:89:5D:6E:3E:73:A8:A0:77:AD:EB:50:CB
Certificate issuer: /CN=184d1f4083383f56895d6e3e73a8a077adeb50cb
Certificate serial: 019A71B7D2D2A35A6311FA6C7A7CE982B0AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GE0fQIM4P1aJXW4-c6igd63rUMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/2b7785-5da0-42dc-a221-66cc083b5669/1/GE0fQIM4P1aJXW4-c6igd63rUMs.mft
Manifest number: 0D4C
Signing time: Tue 11 Nov 2025 07:01:03 +0000
Manifest this update: Tue 11 Nov 2025 07:01:03 +0000
Manifest next update: Wed 12 Nov 2025 07:01:03 +0000
Files and hashes: 1: GE0fQIM4P1aJXW4-c6igd63rUMs.crl (hash: 8n2YqFKCQKz7UJW6DGZfhvgZZEsRCuV33+UGTjABWc0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/2b7785-5da0-42dc-a221-66cc083b5669/1/GE0fQIM4P1aJXW4-c6igd63rUMs.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/2b7785-5da0-42dc-a221-66cc083b5669/1/GE0fQIM4P1aJXW4-c6igd63rUMs.mft
rsync://rpki.ripe.net/repository/DEFAULT/GE0fQIM4P1aJXW4-c6igd63rUMs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:d2:d2:a3:5a:63:11:fa:6c:7a:7c:e9:82:b0:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=184d1f4083383f56895d6e3e73a8a077adeb50cb
Validity
Not Before: Nov 11 07:01:03 2025 GMT
Not After : Nov 12 07:01:03 2025 GMT
Subject: CN=02ff774941d3578df15a156860af475bce5eb4f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:71:46:2a:73:b7:2d:a8:9e:7f:35:c5:8e:80:
fb:3d:7c:b4:56:c8:5c:a1:13:a2:c5:b4:d9:c9:a8:
cb:d4:38:8c:cd:83:d8:b3:a2:b7:53:c7:84:54:c7:
f8:e2:f7:7b:b4:45:dd:2f:1b:a6:c2:0c:76:f7:ff:
b9:db:a1:33:3b:ef:4f:22:2c:d0:46:ef:92:d0:78:
b1:e4:de:65:40:54:31:70:70:7c:67:08:4d:ee:a3:
c4:56:4a:0f:08:03:77:97:d1:9c:12:f2:e5:d2:59:
d4:e1:2a:b3:b6:7d:7c:e9:40:69:77:27:c4:16:0d:
d6:6f:4e:c2:5d:b2:46:07:4a:4c:6a:78:ef:87:12:
0e:80:b6:9a:ec:f1:73:d5:31:62:11:18:72:e7:b7:
9e:d1:4f:3c:13:55:01:1f:22:61:30:61:d1:b4:46:
f2:34:67:7e:f7:b7:40:df:e2:b5:aa:44:e8:77:28:
9e:56:b8:86:14:39:1a:a3:61:00:7f:b5:2d:ca:cc:
4c:59:30:82:11:c0:ea:f4:c9:2f:dd:7f:b5:6d:ed:
7a:f3:1e:2a:90:13:ad:ff:5e:db:b0:fd:a1:3a:fd:
b2:3e:91:27:9b:58:30:1c:6e:ec:37:e3:9c:04:ee:
8c:9d:81:f7:85:41:9e:99:1a:12:9f:fb:8d:12:88:
45:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:FF:77:49:41:D3:57:8D:F1:5A:15:68:60:AF:47:5B:CE:5E:B4:F7
X509v3 Authority Key Identifier:
keyid:18:4D:1F:40:83:38:3F:56:89:5D:6E:3E:73:A8:A0:77:AD:EB:50:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GE0fQIM4P1aJXW4-c6igd63rUMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/2b7785-5da0-42dc-a221-66cc083b5669/1/GE0fQIM4P1aJXW4-c6igd63rUMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/2b7785-5da0-42dc-a221-66cc083b5669/1/GE0fQIM4P1aJXW4-c6igd63rUMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:76:23:9c:70:58:f9:14:22:3f:e6:e6:6f:ae:6d:71:8c:a5:
a3:29:16:2a:03:29:d2:09:0e:79:ce:23:3a:eb:bf:a9:ed:92:
04:4c:7a:7e:ea:f1:e5:26:f2:59:52:9d:79:62:5a:e8:75:67:
d4:c9:21:7c:fd:11:df:4a:8b:b6:1c:4a:72:c5:61:05:52:b2:
0f:40:12:c2:71:ce:8c:d0:e3:af:f1:8f:1d:65:2d:8c:62:6a:
27:7d:76:3d:eb:f7:1a:be:1e:ec:cb:dc:2e:b6:41:a1:02:52:
99:6c:b6:cf:72:8f:81:e6:1a:66:7f:da:da:d5:e2:f5:65:67:
7c:6a:18:07:65:e5:50:c3:19:63:50:76:ac:37:2a:23:73:9d:
54:e7:64:ef:12:fb:6a:9b:3e:0c:f4:85:42:b5:79:e0:3a:8b:
dd:86:b9:47:93:08:90:36:94:cd:30:33:23:42:96:f2:40:ea:
04:d4:18:f1:c9:84:d2:bc:66:ee:e4:0d:e8:20:b5:58:23:5b:
01:4f:c9:47:06:9a:19:ee:a4:e5:6f:34:3e:16:50:be:15:ea:
be:fc:07:fc:51:4c:0e:09:11:dc:23:c9:f0:40:10:75:aa:0c:
47:d9:88:3d:a6:df:da:fa:8e:8f:8c:4c:ff:96:0f:48:53:0c:
11:07:d4:e7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxt9LSo1pjEfpsenzpgrCvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE4NGQxZjQwODMzODNmNTY4OTVkNmUzZTczYThhMDc3YWRl
YjUwY2IwHhcNMjUxMTExMDcwMTAzWhcNMjUxMTEyMDcwMTAzWjAzMTEwLwYDVQQD
EygwMmZmNzc0OTQxZDM1NzhkZjE1YTE1Njg2MGFmNDc1YmNlNWViNGY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn3FGKnO3LaiefzXFjoD7PXy0Vshc
oROixbTZyajL1DiMzYPYs6K3U8eEVMf44vd7tEXdLxumwgx29/+526EzO+9PIizQ
Ru+S0Hix5N5lQFQxcHB8ZwhN7qPEVkoPCAN3l9GcEvLl0lnU4Sqztn186UBpdyfE
Fg3Wb07CXbJGB0pManjvhxIOgLaa7PFz1TFiERhy57ee0U88E1UBHyJhMGHRtEby
NGd+97dA3+K1qkTodyieVriGFDkao2EAf7UtysxMWTCCEcDq9Mkv3X+1be168x4q
kBOt/17bsP2hOv2yPpEnm1gwHG7sN+OcBO6MnYH3hUGemRoSn/uNEohF7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAL/d0lB01eN8VoVaGCvR1vOXrT3MB8GA1UdIwQY
MBaAFBhNH0CDOD9WiV1uPnOooHet61DLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR0UwZlFJTTRQMWFKWFc0LWM2aWdkNjNyVU1zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC8yYjc3ODUtNWRhMC00MmRjLWEyMjEt
NjZjYzA4M2I1NjY5LzEvR0UwZlFJTTRQMWFKWFc0LWM2aWdkNjNyVU1zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC8yYjc3ODUtNWRhMC00MmRjLWEyMjEtNjZjYzA4M2I1NjY5
LzEvR0UwZlFJTTRQMWFKWFc0LWM2aWdkNjNyVU1zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPHYjnHBY
+RQiP+bmb65tcYyloykWKgMp0gkOec4jOuu/qe2SBEx6furx5SbyWVKdeWJa6HVn
1MkhfP0R30qLthxKcsVhBVKyD0ASwnHOjNDjr/GPHWUtjGJqJ312Pev3Gr4e7Mvc
LrZBoQJSmWy2z3KPgeYaZn/a2tXi9WVnfGoYB2XlUMMZY1B2rDcqI3OdVOdk7xL7
aps+DPSFQrV54DqL3Ya5R5MIkDaUzTAzI0KW8kDqBNQY8cmE0rxm7uQN6CC1WCNb
AU/JRwaaGe6k5W80PhZQvhXqvvwH/FFMDgkR3CPJ8EAQdaoMR9mIPabf2vqOj4xM
/5YPSFMMEQfU5w==
-----END CERTIFICATE-----
Generated at Tue Nov 11 15:38:27 2025 by rpki-client