Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/54274b-61cb-4686-ab8a-4cf8cf4ff6cd/1/GvzYfmH5F2XCwQAgQUG1lNMsey4.mft
File: GvzYfmH5F2XCwQAgQUG1lNMsey4.mft (raw, json)
Hash identifier: wCcXFJ9RaiDOKZHtUcnTHrwTWVAtJGMoRmc2LKJ5Omo=
Subject key identifier: D5:F0:FE:1C:6B:E5:71:E5:24:B3:34:2A:27:15:86:F2:38:46:FA:65
Authority key identifier: 1A:FC:D8:7E:61:F9:17:65:C2:C1:00:20:41:41:B5:94:D3:2C:7B:2E
Certificate issuer: /CN=1afcd87e61f91765c2c100204141b594d32c7b2e
Certificate serial: 019A070A8C381C613462F24FE605A8654B08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GvzYfmH5F2XCwQAgQUG1lNMsey4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/54274b-61cb-4686-ab8a-4cf8cf4ff6cd/1/GvzYfmH5F2XCwQAgQUG1lNMsey4.mft
Manifest number: 0210
Signing time: Tue 21 Oct 2025 13:52:03 +0000
Manifest this update: Tue 21 Oct 2025 13:52:03 +0000
Manifest next update: Wed 22 Oct 2025 13:52:03 +0000
Files and hashes: 1: GvzYfmH5F2XCwQAgQUG1lNMsey4.crl (hash: R1vYTo5ze+kSSqRjhDnJcuukeFtPGTeBUepReGBQjPg=)
2: rGfdr756R5fC-L5KExb4TDe2AiU.roa (hash: 0pA9T2WOS5lidpDpCE8oBEOCaFYY8cP9PqllXsuIgTw=)
3: uNOJmAq6voVkPfj182da4gb5W7g.roa (hash: /Vgo6Tc+QicjXS2eidHAg9cx4rFLuic3fsDr6FFDDKU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/54274b-61cb-4686-ab8a-4cf8cf4ff6cd/1/GvzYfmH5F2XCwQAgQUG1lNMsey4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/54274b-61cb-4686-ab8a-4cf8cf4ff6cd/1/GvzYfmH5F2XCwQAgQUG1lNMsey4.mft
rsync://rpki.ripe.net/repository/DEFAULT/GvzYfmH5F2XCwQAgQUG1lNMsey4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Oct 2025 13:52:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:07:0a:8c:38:1c:61:34:62:f2:4f:e6:05:a8:65:4b:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1afcd87e61f91765c2c100204141b594d32c7b2e
Validity
Not Before: Oct 21 13:52:03 2025 GMT
Not After : Oct 22 13:52:03 2025 GMT
Subject: CN=d5f0fe1c6be571e524b3342a271586f23846fa65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:f5:8b:5c:75:5a:ca:1f:69:2b:65:4f:41:da:
56:2c:19:96:46:56:ce:03:e2:48:f0:3b:a9:59:89:
8c:ee:35:ce:8d:99:43:04:af:69:a5:d8:17:7f:3e:
91:92:0a:f2:5e:25:5c:c6:22:87:b6:5a:97:61:e0:
41:81:3a:f4:ab:0c:a5:bd:73:dc:13:32:e7:72:6f:
5c:9b:c1:b3:62:f0:e8:2e:84:28:20:43:bf:9f:67:
39:c0:3a:f1:00:9a:82:c2:64:66:ff:95:9a:e6:74:
3c:66:12:1d:40:da:94:a1:cd:c1:2d:29:41:fe:a3:
a6:34:81:d3:5d:10:ac:32:15:23:aa:8f:90:fd:42:
c1:0c:2d:c1:3a:c2:04:ea:b9:b9:dc:7c:57:c2:80:
9f:7f:c5:a2:3f:03:8b:a0:a9:75:7c:96:c8:cc:3a:
2e:9a:b0:8f:f6:41:82:6d:a3:4b:54:1a:50:d0:e1:
d7:53:ee:75:fc:0c:b8:1a:e9:48:8f:5d:15:ee:80:
8f:b8:a5:83:c7:c7:1b:aa:91:c3:4c:f2:14:85:0d:
e2:3d:cb:c6:7a:b5:c6:b4:ea:19:a6:ab:49:86:42:
ae:fd:da:3f:9d:7b:98:61:a7:af:fb:fe:8f:79:b7:
48:46:99:62:9a:3d:d7:3e:b9:7b:ae:91:e5:64:ea:
a4:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:F0:FE:1C:6B:E5:71:E5:24:B3:34:2A:27:15:86:F2:38:46:FA:65
X509v3 Authority Key Identifier:
keyid:1A:FC:D8:7E:61:F9:17:65:C2:C1:00:20:41:41:B5:94:D3:2C:7B:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GvzYfmH5F2XCwQAgQUG1lNMsey4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/54274b-61cb-4686-ab8a-4cf8cf4ff6cd/1/GvzYfmH5F2XCwQAgQUG1lNMsey4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/54274b-61cb-4686-ab8a-4cf8cf4ff6cd/1/GvzYfmH5F2XCwQAgQUG1lNMsey4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:cc:be:d2:4f:4f:e8:5c:3f:71:b2:8c:63:77:bd:71:7e:76:
fa:fd:b0:38:e2:d3:9a:09:7a:b6:46:66:0f:77:77:0e:26:fb:
ba:18:e5:44:32:48:5c:5b:16:44:40:84:83:cc:bc:8e:30:20:
bf:ca:2c:80:e5:34:e4:d9:57:56:38:00:cb:bc:94:d8:08:c6:
9a:fb:61:d6:a6:af:5c:91:6b:bf:08:f8:85:be:2d:30:18:89:
cf:7b:d3:21:ed:f8:4e:11:82:fb:fe:71:1b:3a:6b:09:3d:9c:
57:e7:fa:e1:79:53:57:66:7c:2c:3e:5f:42:59:96:e7:80:79:
b0:49:c4:ad:49:47:d0:06:4d:69:e0:6d:3d:e0:e1:27:35:f1:
06:ec:f8:df:e1:c2:d4:69:25:fc:04:48:32:6a:0b:d1:fd:14:
db:d4:a9:81:ff:5d:22:e5:13:66:cf:09:a2:6d:ba:cc:cc:d5:
28:b8:cc:26:d4:b5:33:2b:fb:07:73:17:38:c3:99:f2:0d:79:
3a:b6:e2:5e:09:5c:6e:51:34:c3:3a:06:28:9f:27:1e:19:e0:
6b:3e:c6:0b:b8:97:93:c4:14:9b:dd:8d:be:58:fb:9a:76:8c:
67:d2:6f:eb:21:f7:1a:44:e5:3a:e4:24:70:16:a4:bd:20:0d:
80:98:20:05
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoHCow4HGE0YvJP5gWoZUsIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhZmNkODdlNjFmOTE3NjVjMmMxMDAyMDQxNDFiNTk0ZDMy
YzdiMmUwHhcNMjUxMDIxMTM1MjAzWhcNMjUxMDIyMTM1MjAzWjAzMTEwLwYDVQQD
EyhkNWYwZmUxYzZiZTU3MWU1MjRiMzM0MmEyNzE1ODZmMjM4NDZmYTY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzPWLXHVayh9pK2VPQdpWLBmWRlbO
A+JI8DupWYmM7jXOjZlDBK9ppdgXfz6RkgryXiVcxiKHtlqXYeBBgTr0qwylvXPc
EzLncm9cm8GzYvDoLoQoIEO/n2c5wDrxAJqCwmRm/5Wa5nQ8ZhIdQNqUoc3BLSlB
/qOmNIHTXRCsMhUjqo+Q/ULBDC3BOsIE6rm53HxXwoCff8WiPwOLoKl1fJbIzDou
mrCP9kGCbaNLVBpQ0OHXU+51/Ay4GulIj10V7oCPuKWDx8cbqpHDTPIUhQ3iPcvG
erXGtOoZpqtJhkKu/do/nXuYYaev+/6PebdIRplimj3XPrl7rpHlZOqkzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNXw/hxr5XHlJLM0KicVhvI4RvplMB8GA1UdIwQY
MBaAFBr82H5h+RdlwsEAIEFBtZTTLHsuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3Z6WWZtSDVGMlhDd1FBZ1FVRzFsTk1zZXk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS81NDI3NGItNjFjYi00Njg2LWFiOGEt
NGNmOGNmNGZmNmNkLzEvR3Z6WWZtSDVGMlhDd1FBZ1FVRzFsTk1zZXk0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS81NDI3NGItNjFjYi00Njg2LWFiOGEtNGNmOGNmNGZmNmNk
LzEvR3Z6WWZtSDVGMlhDd1FBZ1FVRzFsTk1zZXk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFcy+0k9P
6Fw/cbKMY3e9cX52+v2wOOLTmgl6tkZmD3d3Dib7uhjlRDJIXFsWRECEg8y8jjAg
v8osgOU05NlXVjgAy7yU2AjGmvth1qavXJFrvwj4hb4tMBiJz3vTIe34ThGC+/5x
GzprCT2cV+f64XlTV2Z8LD5fQlmW54B5sEnErUlH0AZNaeBtPeDhJzXxBuz43+HC
1Gkl/ARIMmoL0f0U29Spgf9dIuUTZs8Jom26zMzVKLjMJtS1Myv7B3MXOMOZ8g15
OrbiXglcblE0wzoGKJ8nHhngaz7GC7iXk8QUm92Nvlj7mnaMZ9Jv6yH3GkTlOuQk
cBakvSANgJggBQ==
-----END CERTIFICATE-----
Generated at Tue Oct 21 18:10:35 2025 by rpki-client