Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/4d4eef-7246-460e-b946-ece7826787b4/1/GcvQpBNilCFbHCQ7DwIYz91WXVc.mft
File: GcvQpBNilCFbHCQ7DwIYz91WXVc.mft (raw, json)
Hash identifier: 7jgWFD2MnjuV0V4Vf03k1GJTgg1dbjrZKvksPRZLWL8=
Subject key identifier: 0C:B2:79:E1:14:A4:EA:D5:E7:D2:C1:FF:76:57:C5:63:5B:13:19:AB
Authority key identifier: 19:CB:D0:A4:13:62:94:21:5B:1C:24:3B:0F:02:18:CF:DD:56:5D:57
Certificate issuer: /CN=19cbd0a4136294215b1c243b0f0218cfdd565d57
Certificate serial: 019A71EED59188D2A4B057B4E986D6871FD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GcvQpBNilCFbHCQ7DwIYz91WXVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/4d4eef-7246-460e-b946-ece7826787b4/1/GcvQpBNilCFbHCQ7DwIYz91WXVc.mft
Manifest number: 088F
Signing time: Tue 11 Nov 2025 08:01:08 +0000
Manifest this update: Tue 11 Nov 2025 08:01:08 +0000
Manifest next update: Wed 12 Nov 2025 08:01:08 +0000
Files and hashes: 1: GcvQpBNilCFbHCQ7DwIYz91WXVc.crl (hash: Ql2jp5kgza3MH7iCGZzVunDMqj4Mlm3rcAPpk06BEpg=)
2: huXjug4okmW8bDkW7ag2OpB5lfQ.roa (hash: NmvkpViuxunQ3md2JciCN3UvTfoukD516vD3ICV2HKQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/4d4eef-7246-460e-b946-ece7826787b4/1/GcvQpBNilCFbHCQ7DwIYz91WXVc.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/4d4eef-7246-460e-b946-ece7826787b4/1/GcvQpBNilCFbHCQ7DwIYz91WXVc.mft
rsync://rpki.ripe.net/repository/DEFAULT/GcvQpBNilCFbHCQ7DwIYz91WXVc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:d5:91:88:d2:a4:b0:57:b4:e9:86:d6:87:1f:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19cbd0a4136294215b1c243b0f0218cfdd565d57
Validity
Not Before: Nov 11 08:01:08 2025 GMT
Not After : Nov 12 08:01:08 2025 GMT
Subject: CN=0cb279e114a4ead5e7d2c1ff7657c5635b1319ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c2:fb:cf:c4:95:95:9b:b4:8c:ef:46:53:f7:
87:02:8c:f0:d5:ee:a4:a5:73:b9:e8:08:3a:96:04:
c2:ba:66:3b:23:a9:04:73:fa:d1:66:01:b3:e4:ac:
ab:9c:6e:1e:60:9e:46:7e:10:cc:2c:98:4d:dd:e3:
d6:34:72:57:a0:8b:bd:15:dc:2b:51:da:65:58:26:
90:09:4c:b2:b2:a5:ac:eb:7c:64:24:a6:82:01:96:
6e:d8:cf:f0:1c:1e:7f:31:b8:c4:c2:6d:1c:d8:5f:
9e:6f:e9:ea:3d:58:bd:9f:06:eb:96:ff:0f:3c:4a:
d9:77:23:7b:3c:57:21:45:1a:b1:07:6d:f4:24:09:
6f:0f:9a:9e:10:62:db:38:f3:6f:d4:63:9b:89:f2:
20:b9:81:0d:c5:ad:49:5a:fc:21:7e:07:f9:66:c5:
1b:4b:b2:41:68:cf:e2:86:81:49:95:ec:b2:4e:e2:
2f:9a:eb:70:8b:e9:2e:88:7a:a5:f9:02:07:97:7b:
ff:87:90:62:35:39:98:44:fe:98:0e:48:63:15:0c:
93:70:77:ce:8f:a1:38:06:1d:4d:72:eb:7b:39:ad:
e4:36:38:49:e7:b1:35:4f:76:5e:45:2b:62:6a:6e:
52:8a:a6:96:c1:40:d9:3c:93:58:1a:81:8b:4b:14:
7e:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:B2:79:E1:14:A4:EA:D5:E7:D2:C1:FF:76:57:C5:63:5B:13:19:AB
X509v3 Authority Key Identifier:
keyid:19:CB:D0:A4:13:62:94:21:5B:1C:24:3B:0F:02:18:CF:DD:56:5D:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GcvQpBNilCFbHCQ7DwIYz91WXVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/4d4eef-7246-460e-b946-ece7826787b4/1/GcvQpBNilCFbHCQ7DwIYz91WXVc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/4d4eef-7246-460e-b946-ece7826787b4/1/GcvQpBNilCFbHCQ7DwIYz91WXVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:f8:a4:57:1a:17:d8:9a:56:fa:60:d6:65:8e:70:3b:74:60:
64:66:b0:80:27:29:03:80:12:d2:99:1b:65:6f:46:a0:af:36:
f2:62:e4:fe:89:2d:0e:47:d9:e3:58:a1:ec:69:d3:1c:8c:c9:
2b:c2:c3:f5:e5:dc:ab:de:d7:b0:bb:0c:4f:e9:7b:96:67:25:
0b:07:51:f6:6a:65:91:e1:b5:d9:05:05:85:c7:7c:50:1a:c8:
70:97:17:e9:41:64:7d:47:c7:e0:af:b0:24:e9:c7:9a:e9:8c:
70:3e:0b:44:c9:51:51:aa:14:a2:07:96:94:93:b0:9f:20:43:
c8:99:a2:80:2f:e4:92:6d:3b:20:72:99:e7:bd:6b:6f:05:a6:
ce:f4:dd:22:e8:4c:3f:7e:15:e4:08:c8:21:45:c2:63:e4:31:
d4:3f:ff:28:9a:fd:c4:e6:95:ae:3f:5c:75:64:4c:a2:80:5b:
5e:bf:e3:65:fc:36:ce:2b:5b:82:c2:f8:29:5c:8d:42:d4:d5:
77:be:cc:71:38:b7:89:c0:d3:76:e8:a1:da:04:34:d0:6a:95:
61:51:9f:3c:e8:09:d7:9f:03:74:ce:5b:79:b2:d0:cd:44:56:
f2:7f:59:d9:12:bf:51:0a:cc:20:ce:9c:e2:8c:e4:c2:d7:7e:
74:70:4c:28
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpx7tWRiNKksFe06YbWhx/ZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5Y2JkMGE0MTM2Mjk0MjE1YjFjMjQzYjBmMDIxOGNmZGQ1
NjVkNTcwHhcNMjUxMTExMDgwMTA4WhcNMjUxMTEyMDgwMTA4WjAzMTEwLwYDVQQD
EygwY2IyNzllMTE0YTRlYWQ1ZTdkMmMxZmY3NjU3YzU2MzViMTMxOWFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs8L7z8SVlZu0jO9GU/eHAozw1e6k
pXO56Ag6lgTCumY7I6kEc/rRZgGz5KyrnG4eYJ5GfhDMLJhN3ePWNHJXoIu9Fdwr
UdplWCaQCUyysqWs63xkJKaCAZZu2M/wHB5/MbjEwm0c2F+eb+nqPVi9nwbrlv8P
PErZdyN7PFchRRqxB230JAlvD5qeEGLbOPNv1GObifIguYENxa1JWvwhfgf5ZsUb
S7JBaM/ihoFJleyyTuIvmutwi+kuiHql+QIHl3v/h5BiNTmYRP6YDkhjFQyTcHfO
j6E4Bh1Ncut7Oa3kNjhJ57E1T3ZeRStiam5SiqaWwUDZPJNYGoGLSxR+fQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAyyeeEUpOrV59LB/3ZXxWNbExmrMB8GA1UdIwQY
MBaAFBnL0KQTYpQhWxwkOw8CGM/dVl1XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2N2UXBCTmlsQ0ZiSENRN0R3SVl6OTFXWFZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC80ZDRlZWYtNzI0Ni00NjBlLWI5NDYt
ZWNlNzgyNjc4N2I0LzEvR2N2UXBCTmlsQ0ZiSENRN0R3SVl6OTFXWFZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC80ZDRlZWYtNzI0Ni00NjBlLWI5NDYtZWNlNzgyNjc4N2I0
LzEvR2N2UXBCTmlsQ0ZiSENRN0R3SVl6OTFXWFZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVfikVxoX
2JpW+mDWZY5wO3RgZGawgCcpA4AS0pkbZW9GoK828mLk/oktDkfZ41ih7GnTHIzJ
K8LD9eXcq97XsLsMT+l7lmclCwdR9mplkeG12QUFhcd8UBrIcJcX6UFkfUfH4K+w
JOnHmumMcD4LRMlRUaoUogeWlJOwnyBDyJmigC/kkm07IHKZ571rbwWmzvTdIuhM
P34V5AjIIUXCY+Qx1D//KJr9xOaVrj9cdWRMooBbXr/jZfw2zitbgsL4KVyNQtTV
d77McTi3icDTduih2gQ00GqVYVGfPOgJ158DdM5bebLQzURW8n9Z2RK/UQrMIM6c
4ozkwtd+dHBMKA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:47:38 2025 by rpki-client