Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/6cdb63-9cfd-4984-877e-09210212714c/1/GVmXqL_GmLjrnoco7K8SpSezV98.mft
File: GVmXqL_GmLjrnoco7K8SpSezV98.mft (raw, json)
Hash identifier: oJG1j9EE4YZrk0gjeT4zZzMySekgl1h8XwYUOLoj0z8=
Subject key identifier: 15:6B:14:49:C2:95:74:1A:7B:CA:79:CA:88:A6:62:D1:D7:E9:1B:39
Authority key identifier: 19:59:97:A8:BF:C6:98:B8:EB:9E:87:28:EC:AF:12:A5:27:B3:57:DF
Certificate issuer: /CN=195997a8bfc698b8eb9e8728ecaf12a527b357df
Certificate serial: 019A7293AC69C1A5D00A241CA0D59B9E6A59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GVmXqL_GmLjrnoco7K8SpSezV98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/6cdb63-9cfd-4984-877e-09210212714c/1/GVmXqL_GmLjrnoco7K8SpSezV98.mft
Manifest number: 0A25
Signing time: Tue 11 Nov 2025 11:01:11 +0000
Manifest this update: Tue 11 Nov 2025 11:01:11 +0000
Manifest next update: Wed 12 Nov 2025 11:01:11 +0000
Files and hashes: 1: GVmXqL_GmLjrnoco7K8SpSezV98.crl (hash: xoQVwScaKh7p7W8BWoUrS8q4kWR1am+2guBln+gGg6U=)
2: xSRj9AL7LP2z8yZaMDfviXxDydk.roa (hash: 2o2eUqaQbQdiuk4n3UmnVUKsg19YQAtxvu//olNpHNs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/6cdb63-9cfd-4984-877e-09210212714c/1/GVmXqL_GmLjrnoco7K8SpSezV98.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/6cdb63-9cfd-4984-877e-09210212714c/1/GVmXqL_GmLjrnoco7K8SpSezV98.mft
rsync://rpki.ripe.net/repository/DEFAULT/GVmXqL_GmLjrnoco7K8SpSezV98.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:ac:69:c1:a5:d0:0a:24:1c:a0:d5:9b:9e:6a:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=195997a8bfc698b8eb9e8728ecaf12a527b357df
Validity
Not Before: Nov 11 11:01:11 2025 GMT
Not After : Nov 12 11:01:11 2025 GMT
Subject: CN=156b1449c295741a7bca79ca88a662d1d7e91b39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:42:54:3d:59:7e:fe:b0:02:1c:0f:a8:16:eb:
a6:9a:23:7d:21:fd:97:e8:80:16:e7:11:9e:c4:4c:
b3:05:b2:8f:c6:9e:3a:b7:8f:ce:c2:e1:cf:31:09:
b4:f8:bc:ce:a6:5d:0b:f2:b9:29:47:cc:b0:e8:cc:
2d:2a:86:6b:ba:54:49:57:a8:b3:ec:f0:ac:b5:d0:
ef:dc:60:2b:b9:cb:a6:7d:f6:8b:3b:79:7b:7c:29:
1c:c0:a2:a6:2f:c3:47:b9:ca:92:05:0e:df:3b:af:
f8:8b:75:2f:e0:51:0b:4b:81:4f:f5:62:0a:e3:3f:
53:e2:c4:62:8a:73:78:b5:6e:77:86:8f:83:6b:68:
1d:5d:a2:c7:bf:08:11:44:55:e3:45:bb:88:ed:13:
e8:71:87:b2:ef:e4:66:9e:96:dd:e2:f0:6f:de:6a:
cd:8f:e7:71:15:c2:4a:d0:2a:bc:70:b2:06:d1:f7:
5c:9d:9a:80:f6:cd:be:47:0a:de:31:06:61:d1:f9:
c5:2b:3e:58:ae:d7:af:1e:09:dd:8c:a0:b7:c8:d4:
f7:13:51:7f:9b:52:43:53:44:d7:a7:99:75:da:fc:
6f:90:8c:e7:76:9e:7c:86:96:1a:30:aa:9b:49:85:
71:fc:2c:43:27:66:69:25:70:0e:69:8a:e5:54:e2:
0b:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:6B:14:49:C2:95:74:1A:7B:CA:79:CA:88:A6:62:D1:D7:E9:1B:39
X509v3 Authority Key Identifier:
keyid:19:59:97:A8:BF:C6:98:B8:EB:9E:87:28:EC:AF:12:A5:27:B3:57:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GVmXqL_GmLjrnoco7K8SpSezV98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/6cdb63-9cfd-4984-877e-09210212714c/1/GVmXqL_GmLjrnoco7K8SpSezV98.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/6cdb63-9cfd-4984-877e-09210212714c/1/GVmXqL_GmLjrnoco7K8SpSezV98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d3:36:7c:64:4b:b7:43:6d:01:8c:e7:9c:c4:b3:0f:79:73:a3:
94:52:09:92:eb:50:82:56:8e:d0:e2:33:ef:e6:44:7c:be:c5:
b4:e8:8b:7a:bc:d8:e0:45:d1:b1:32:f5:99:25:22:ad:0e:4e:
df:a8:53:43:84:31:e6:65:30:81:a4:e7:fb:98:17:bd:16:80:
b4:f1:d6:1f:25:5f:67:11:01:3d:b3:f2:e3:d8:6e:20:3b:a0:
52:fd:50:c9:79:54:4c:6a:f8:34:94:ca:94:05:0a:ff:19:89:
3d:84:85:a0:74:9c:25:39:47:dd:47:59:c4:36:e1:db:00:3f:
da:99:e6:b9:0c:22:e9:6e:77:ad:21:4f:75:21:1a:06:a2:47:
7a:b8:5a:c1:ba:23:4c:92:15:74:f8:04:d6:74:b8:82:97:ff:
cb:f7:95:8b:c7:10:8f:da:5e:e2:1f:70:fe:bc:e8:e4:2c:be:
25:25:fe:b5:93:00:49:52:8a:b9:ef:c9:4d:36:99:4d:9c:f3:
df:98:fa:e6:ad:f4:cf:d6:89:72:db:51:89:6a:f9:05:17:89:
67:50:ef:f6:4b:5f:7a:06:ae:b2:81:8f:fa:2c:cf:e6:e8:63:
66:41:76:ef:4f:29:ac:c4:f8:57:a5:f4:63:e0:b5:64:14:96:
1a:0e:a6:7d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyk6xpwaXQCiQcoNWbnmpZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5NTk5N2E4YmZjNjk4YjhlYjllODcyOGVjYWYxMmE1Mjdi
MzU3ZGYwHhcNMjUxMTExMTEwMTExWhcNMjUxMTEyMTEwMTExWjAzMTEwLwYDVQQD
EygxNTZiMTQ0OWMyOTU3NDFhN2JjYTc5Y2E4OGE2NjJkMWQ3ZTkxYjM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwUJUPVl+/rACHA+oFuummiN9If2X
6IAW5xGexEyzBbKPxp46t4/OwuHPMQm0+LzOpl0L8rkpR8yw6MwtKoZrulRJV6iz
7PCstdDv3GArucumffaLO3l7fCkcwKKmL8NHucqSBQ7fO6/4i3Uv4FELS4FP9WIK
4z9T4sRiinN4tW53ho+Da2gdXaLHvwgRRFXjRbuI7RPocYey7+Rmnpbd4vBv3mrN
j+dxFcJK0Cq8cLIG0fdcnZqA9s2+RwreMQZh0fnFKz5YrtevHgndjKC3yNT3E1F/
m1JDU0TXp5l12vxvkIzndp58hpYaMKqbSYVx/CxDJ2ZpJXAOaYrlVOILmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBVrFEnClXQae8p5yoimYtHX6Rs5MB8GA1UdIwQY
MBaAFBlZl6i/xpi4656HKOyvEqUns1ffMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR1ZtWHFMX0dtTGpybm9jbzdLOFNwU2V6Vjk4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi82Y2RiNjMtOWNmZC00OTg0LTg3N2Ut
MDkyMTAyMTI3MTRjLzEvR1ZtWHFMX0dtTGpybm9jbzdLOFNwU2V6Vjk4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi82Y2RiNjMtOWNmZC00OTg0LTg3N2UtMDkyMTAyMTI3MTRj
LzEvR1ZtWHFMX0dtTGpybm9jbzdLOFNwU2V6Vjk4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0zZ8ZEu3
Q20BjOecxLMPeXOjlFIJkutQglaO0OIz7+ZEfL7FtOiLerzY4EXRsTL1mSUirQ5O
36hTQ4Qx5mUwgaTn+5gXvRaAtPHWHyVfZxEBPbPy49huIDugUv1QyXlUTGr4NJTK
lAUK/xmJPYSFoHScJTlH3UdZxDbh2wA/2pnmuQwi6W53rSFPdSEaBqJHerhawboj
TJIVdPgE1nS4gpf/y/eVi8cQj9pe4h9w/rzo5Cy+JSX+tZMASVKKue/JTTaZTZzz
35j65q30z9aJcttRiWr5BReJZ1Dv9ktfegausoGP+izP5uhjZkF2708prMT4V6X0
Y+C1ZBSWGg6mfQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 16:56:45 2025 by rpki-client