Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/68d724-d62e-4689-998a-e14388e6145d/1/gyVb16Los8d3SMPFajBDu8ESbEE.mft
File: gyVb16Los8d3SMPFajBDu8ESbEE.mft (raw, json)
Hash identifier: BAipb/mo1zqK2bIGKfrOqYhep+XuPQZ06fWlvW3/6KU=
Subject key identifier: 88:0F:C4:2A:FA:18:A6:FE:64:CA:E3:74:3F:B8:82:15:DA:ED:8A:54
Authority key identifier: 83:25:5B:D7:A2:E8:B3:C7:77:48:C3:C5:6A:30:43:BB:C1:12:6C:41
Certificate issuer: /CN=83255bd7a2e8b3c77748c3c56a3043bbc1126c41
Certificate serial: 019A70A4EBA5309FD1DCC6252082F9ED5F75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gyVb16Los8d3SMPFajBDu8ESbEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/68d724-d62e-4689-998a-e14388e6145d/1/gyVb16Los8d3SMPFajBDu8ESbEE.mft
Manifest number: 044F
Signing time: Tue 11 Nov 2025 02:00:47 +0000
Manifest this update: Tue 11 Nov 2025 02:00:47 +0000
Manifest next update: Wed 12 Nov 2025 02:00:47 +0000
Files and hashes: 1: DSVZ5LWHMvVEjx2Ly8HogvfGbeg.roa (hash: 00oXnXEmoCajVRqJ5SAY3Z4mponT7rL20+QYAvfx80c=)
2: gyVb16Los8d3SMPFajBDu8ESbEE.crl (hash: VnrLj57nZpm1QQ+NBLXOl8qRaW7kR9MZm7LEt+mfYnU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/68d724-d62e-4689-998a-e14388e6145d/1/gyVb16Los8d3SMPFajBDu8ESbEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/68d724-d62e-4689-998a-e14388e6145d/1/gyVb16Los8d3SMPFajBDu8ESbEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/gyVb16Los8d3SMPFajBDu8ESbEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a4:eb:a5:30:9f:d1:dc:c6:25:20:82:f9:ed:5f:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83255bd7a2e8b3c77748c3c56a3043bbc1126c41
Validity
Not Before: Nov 11 02:00:47 2025 GMT
Not After : Nov 12 02:00:47 2025 GMT
Subject: CN=880fc42afa18a6fe64cae3743fb88215daed8a54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:2c:a5:2d:2c:8d:87:1e:0d:81:a7:d9:da:4a:
77:36:68:bf:53:7e:eb:81:77:85:71:66:e0:df:85:
cd:87:23:07:24:60:dc:62:50:76:20:8a:b2:ef:db:
78:34:11:12:04:e3:db:70:fb:30:5e:9f:ce:3c:b7:
c7:c8:dc:25:ae:56:01:0e:3f:90:19:95:80:10:d1:
7e:6e:ae:a6:05:bc:f4:2e:5e:b8:e8:34:28:43:a0:
9f:c5:ac:8c:e6:e0:0a:8f:0e:58:24:65:e6:54:d3:
4c:e5:90:38:2d:5e:36:ec:24:12:93:9f:7e:49:b4:
fa:ad:be:4d:5b:b3:32:61:af:01:93:79:04:5d:5a:
0b:0d:42:9d:f5:13:e1:be:48:2c:16:6c:8f:3b:53:
d4:79:4a:2d:c7:25:36:5d:dd:00:69:2c:47:71:ab:
0f:82:b9:8f:a8:8f:e9:70:a1:4e:01:58:57:de:d0:
d9:96:b3:32:4a:5a:00:56:0c:ee:1e:60:de:d4:18:
10:d2:5c:8b:b6:8e:fa:bf:df:fb:2e:dc:7c:df:29:
1b:7a:68:3d:ee:94:a9:51:f3:6e:03:93:3b:75:8c:
ae:d5:f6:ee:20:c3:1c:e2:64:65:8b:bc:95:ed:9a:
bb:63:a9:a0:1b:96:9d:fb:03:4d:7c:ab:75:4c:e1:
c1:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:0F:C4:2A:FA:18:A6:FE:64:CA:E3:74:3F:B8:82:15:DA:ED:8A:54
X509v3 Authority Key Identifier:
keyid:83:25:5B:D7:A2:E8:B3:C7:77:48:C3:C5:6A:30:43:BB:C1:12:6C:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gyVb16Los8d3SMPFajBDu8ESbEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/68d724-d62e-4689-998a-e14388e6145d/1/gyVb16Los8d3SMPFajBDu8ESbEE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/68d724-d62e-4689-998a-e14388e6145d/1/gyVb16Los8d3SMPFajBDu8ESbEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:82:dd:09:e2:ec:50:98:f8:5b:c7:4d:13:8a:b0:04:a9:91:
7b:03:f0:72:c5:cd:4f:c0:09:e0:66:71:95:b0:1a:0c:59:2e:
1f:c9:db:c4:93:b9:90:a8:17:73:d4:51:62:10:51:b7:ef:9c:
db:2e:ea:63:35:e7:c7:de:44:0d:01:b4:0b:4e:7e:ba:6c:ea:
c3:e2:e2:b7:d2:83:f5:e2:77:5f:b4:b9:2d:53:da:5d:7e:16:
39:a3:87:77:a1:5a:05:39:11:26:ec:96:42:65:f3:e5:2d:9f:
12:a4:e8:40:67:4e:95:bd:48:c6:3b:1f:47:3a:a7:c6:44:07:
b1:78:e5:fb:7c:7d:4a:41:5b:a5:0f:e3:3c:2e:aa:4e:7e:66:
67:32:df:12:85:57:e2:13:c9:17:69:58:12:63:ef:96:ba:c5:
a2:e4:38:de:aa:f9:01:09:7f:4d:1d:9c:2f:f3:5b:63:68:79:
8a:f9:d5:49:e0:25:1c:7c:18:1d:15:cc:f5:27:09:36:2c:5d:
b3:99:97:2c:22:1b:f2:b7:f2:4d:fe:9f:65:fa:69:e0:cf:2d:
01:35:23:2d:01:86:19:32:88:2c:bb:e2:b7:a5:d7:a7:63:cd:
02:51:1d:f2:e9:7d:97:f8:4f:83:8c:36:dc:79:b0:57:1d:2c:
5b:00:3a:b8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpwpOulMJ/R3MYlIIL57V91MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzMjU1YmQ3YTJlOGIzYzc3NzQ4YzNjNTZhMzA0M2JiYzEx
MjZjNDEwHhcNMjUxMTExMDIwMDQ3WhcNMjUxMTEyMDIwMDQ3WjAzMTEwLwYDVQQD
Eyg4ODBmYzQyYWZhMThhNmZlNjRjYWUzNzQzZmI4ODIxNWRhZWQ4YTU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmiylLSyNhx4NgafZ2kp3Nmi/U37r
gXeFcWbg34XNhyMHJGDcYlB2IIqy79t4NBESBOPbcPswXp/OPLfHyNwlrlYBDj+Q
GZWAENF+bq6mBbz0Ll646DQoQ6CfxayM5uAKjw5YJGXmVNNM5ZA4LV427CQSk59+
SbT6rb5NW7MyYa8Bk3kEXVoLDUKd9RPhvkgsFmyPO1PUeUotxyU2Xd0AaSxHcasP
grmPqI/pcKFOAVhX3tDZlrMySloAVgzuHmDe1BgQ0lyLto76v9/7Ltx83ykbemg9
7pSpUfNuA5M7dYyu1fbuIMMc4mRli7yV7Zq7Y6mgG5ad+wNNfKt1TOHBDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIgPxCr6GKb+ZMrjdD+4ghXa7YpUMB8GA1UdIwQY
MBaAFIMlW9ei6LPHd0jDxWowQ7vBEmxBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3lWYjE2TG9zOGQzU01QRmFqQkR1OEVTYkVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC82OGQ3MjQtZDYyZS00Njg5LTk5OGEt
ZTE0Mzg4ZTYxNDVkLzEvZ3lWYjE2TG9zOGQzU01QRmFqQkR1OEVTYkVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC82OGQ3MjQtZDYyZS00Njg5LTk5OGEtZTE0Mzg4ZTYxNDVk
LzEvZ3lWYjE2TG9zOGQzU01QRmFqQkR1OEVTYkVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh4LdCeLs
UJj4W8dNE4qwBKmRewPwcsXNT8AJ4GZxlbAaDFkuH8nbxJO5kKgXc9RRYhBRt++c
2y7qYzXnx95EDQG0C05+umzqw+Lit9KD9eJ3X7S5LVPaXX4WOaOHd6FaBTkRJuyW
QmXz5S2fEqToQGdOlb1IxjsfRzqnxkQHsXjl+3x9SkFbpQ/jPC6qTn5mZzLfEoVX
4hPJF2lYEmPvlrrFouQ43qr5AQl/TR2cL/NbY2h5ivnVSeAlHHwYHRXM9ScJNixd
s5mXLCIb8rfyTf6fZfpp4M8tATUjLQGGGTKILLvit6XXp2PNAlEd8ul9l/hPg4w2
3HmwVx0sWwA6uA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:47:33 2025 by rpki-client