Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/35064b-7a5a-4c74-8743-fd8660c4fd6e/1/g7zjVWH1Qb2pfnd-aHmh1wTntC8.mft
File: g7zjVWH1Qb2pfnd-aHmh1wTntC8.mft (raw, json)
Hash identifier: i+3eTIaabf0VOCpplWg6AqDM8YBmUcPI38WD24ZE4cI=
Subject key identifier: AD:CC:22:FD:FE:C6:81:19:1F:9F:11:EE:B5:9E:F2:4A:CB:D8:E2:63
Authority key identifier: 83:BC:E3:55:61:F5:41:BD:A9:7E:77:7E:68:79:A1:D7:04:E7:B4:2F
Certificate issuer: /CN=83bce35561f541bda97e777e6879a1d704e7b42f
Certificate serial: 019A725CB968205F62E373839129A0E50539
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g7zjVWH1Qb2pfnd-aHmh1wTntC8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/35064b-7a5a-4c74-8743-fd8660c4fd6e/1/g7zjVWH1Qb2pfnd-aHmh1wTntC8.mft
Manifest number: 13B9
Signing time: Tue 11 Nov 2025 10:01:10 +0000
Manifest this update: Tue 11 Nov 2025 10:01:10 +0000
Manifest next update: Wed 12 Nov 2025 10:01:10 +0000
Files and hashes: 1: O_Wh7DXILbeq2pJ7lbo670WPHcI.roa (hash: 9coM5+TGNwqDkXBfhIBTqYZ9wRzRhg/kPk42ppbDqL4=)
2: g7zjVWH1Qb2pfnd-aHmh1wTntC8.crl (hash: 8w/Q+mqDJmvITJT0/sBE2Y+7lDxgBgUNzMikDpUpXMg=)
3: wurW9HScl5J6v9_HgJ6iitJiiYY.roa (hash: M+hjHy8mpb8e2lyHR4XP7A/L1pzrBL572LaM0RnZ+tY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/35064b-7a5a-4c74-8743-fd8660c4fd6e/1/g7zjVWH1Qb2pfnd-aHmh1wTntC8.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/35064b-7a5a-4c74-8743-fd8660c4fd6e/1/g7zjVWH1Qb2pfnd-aHmh1wTntC8.mft
rsync://rpki.ripe.net/repository/DEFAULT/g7zjVWH1Qb2pfnd-aHmh1wTntC8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:b9:68:20:5f:62:e3:73:83:91:29:a0:e5:05:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83bce35561f541bda97e777e6879a1d704e7b42f
Validity
Not Before: Nov 11 10:01:10 2025 GMT
Not After : Nov 12 10:01:10 2025 GMT
Subject: CN=adcc22fdfec681191f9f11eeb59ef24acbd8e263
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:45:b6:14:76:fb:8a:f0:ed:c0:be:77:fa:79:
67:a3:cb:89:7c:da:6a:ee:b4:6a:0f:53:1c:4b:81:
90:2d:c5:1f:b5:a6:24:4b:af:1d:4a:ee:09:97:bd:
ef:9d:3d:81:89:35:f7:ff:5b:11:05:1e:f9:cf:e2:
68:a7:54:94:1f:47:f4:0a:6f:74:b4:b3:c5:f9:07:
1a:9b:f1:21:f5:b0:52:28:e6:aa:c6:47:0b:06:1d:
45:6b:f8:30:36:d7:5f:5a:de:32:38:48:2c:07:a5:
7b:6a:21:08:c0:b8:97:8e:a0:b2:54:a2:b8:1f:49:
f4:a5:7b:8f:11:87:51:56:ef:b0:b1:17:e6:d6:bc:
91:ae:d9:4e:e5:36:96:87:c6:09:43:f5:e0:1a:53:
9f:25:58:ac:62:96:50:46:c7:22:e8:49:80:34:25:
64:8c:86:66:5b:d8:68:99:68:66:10:75:be:bc:dc:
d9:45:95:16:13:a5:ce:9e:62:9e:89:fc:a8:c1:5f:
f8:57:cc:56:60:19:c8:51:fe:30:73:55:03:41:aa:
85:f7:f6:d3:3e:26:d0:53:ff:78:9c:14:f2:a5:ef:
c9:e3:62:99:95:dd:f1:ea:1e:dc:a3:89:46:6b:79:
4a:52:32:09:b1:1f:bc:3d:f6:de:ae:2b:1d:60:f5:
37:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:CC:22:FD:FE:C6:81:19:1F:9F:11:EE:B5:9E:F2:4A:CB:D8:E2:63
X509v3 Authority Key Identifier:
keyid:83:BC:E3:55:61:F5:41:BD:A9:7E:77:7E:68:79:A1:D7:04:E7:B4:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g7zjVWH1Qb2pfnd-aHmh1wTntC8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/35064b-7a5a-4c74-8743-fd8660c4fd6e/1/g7zjVWH1Qb2pfnd-aHmh1wTntC8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/35064b-7a5a-4c74-8743-fd8660c4fd6e/1/g7zjVWH1Qb2pfnd-aHmh1wTntC8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:98:69:59:3d:8f:73:0c:76:2a:40:e0:b6:db:c5:da:92:0d:
ce:a1:2a:f3:f6:b1:1e:bd:28:2e:2c:27:b9:c8:59:75:e7:61:
8e:72:4a:87:ba:9a:3c:89:28:57:ec:4c:86:37:37:31:53:28:
a7:e1:c4:3b:c6:b6:d4:3a:ae:ab:69:6f:d8:19:f8:ac:1b:33:
f0:9b:4d:b3:fe:23:a9:27:0d:76:10:94:d0:54:c7:2e:71:c8:
61:c2:8b:08:25:18:ce:d1:5e:3e:54:48:f2:c1:56:43:35:45:
b1:c7:e0:08:92:7d:99:6a:a0:25:63:6c:e7:e7:cf:d7:b6:83:
f8:6e:b6:4d:c9:71:89:a7:17:b5:da:13:c2:33:44:24:d3:26:
71:20:4e:b8:c7:51:77:4f:72:03:49:c3:58:89:7c:b1:b2:91:
34:af:95:9f:fb:dd:f5:ba:04:13:31:c1:fa:68:74:b4:3d:ae:
76:a7:c4:b4:74:f5:22:97:91:ef:2f:44:67:54:23:4f:3a:dc:
fb:1c:0a:02:44:7c:34:91:13:5c:71:f3:69:b5:f9:94:61:71:
0f:72:cb:ce:9b:7b:1a:a3:40:92:6b:15:dc:1e:fa:b7:a8:35:
04:f9:a8:a8:ff:cb:f6:2d:23:44:bc:0d:7d:98:34:31:a6:e2:
e5:ea:47:64
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyXLloIF9i43ODkSmg5QU5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzYmNlMzU1NjFmNTQxYmRhOTdlNzc3ZTY4NzlhMWQ3MDRl
N2I0MmYwHhcNMjUxMTExMTAwMTEwWhcNMjUxMTEyMTAwMTEwWjAzMTEwLwYDVQQD
EyhhZGNjMjJmZGZlYzY4MTE5MWY5ZjExZWViNTllZjI0YWNiZDhlMjYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA20W2FHb7ivDtwL53+nlno8uJfNpq
7rRqD1McS4GQLcUftaYkS68dSu4Jl73vnT2BiTX3/1sRBR75z+Jop1SUH0f0Cm90
tLPF+Qcam/Eh9bBSKOaqxkcLBh1Fa/gwNtdfWt4yOEgsB6V7aiEIwLiXjqCyVKK4
H0n0pXuPEYdRVu+wsRfm1ryRrtlO5TaWh8YJQ/XgGlOfJVisYpZQRsci6EmANCVk
jIZmW9homWhmEHW+vNzZRZUWE6XOnmKeifyowV/4V8xWYBnIUf4wc1UDQaqF9/bT
PibQU/94nBType/J42KZld3x6h7co4lGa3lKUjIJsR+8PfberisdYPU3awIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK3MIv3+xoEZH58R7rWe8krL2OJjMB8GA1UdIwQY
MBaAFIO841Vh9UG9qX53fmh5odcE57QvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZzd6alZXSDFRYjJwZm5kLWFIbWgxd1RudEM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS8zNTA2NGItN2E1YS00Yzc0LTg3NDMt
ZmQ4NjYwYzRmZDZlLzEvZzd6alZXSDFRYjJwZm5kLWFIbWgxd1RudEM4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS8zNTA2NGItN2E1YS00Yzc0LTg3NDMtZmQ4NjYwYzRmZDZl
LzEvZzd6alZXSDFRYjJwZm5kLWFIbWgxd1RudEM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT5hpWT2P
cwx2KkDgttvF2pINzqEq8/axHr0oLiwnuchZdedhjnJKh7qaPIkoV+xMhjc3MVMo
p+HEO8a21Dquq2lv2Bn4rBsz8JtNs/4jqScNdhCU0FTHLnHIYcKLCCUYztFePlRI
8sFWQzVFscfgCJJ9mWqgJWNs5+fP17aD+G62TclxiacXtdoTwjNEJNMmcSBOuMdR
d09yA0nDWIl8sbKRNK+Vn/vd9boEEzHB+mh0tD2udqfEtHT1IpeR7y9EZ1QjTzrc
+xwKAkR8NJETXHHzabX5lGFxD3LLzpt7GqNAkmsV3B76t6g1BPmoqP/L9i0jRLwN
fZg0Mabi5epHZA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 15:36:57 2025 by rpki-client