Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/de64f7-39d9-4bbd-b023-bedcbc5a0174/1/gNHAtO8JDETXi3zLC_cvCdCDHzQ.mft
File: gNHAtO8JDETXi3zLC_cvCdCDHzQ.mft (raw, json)
Hash identifier: iSPD+aCBQXYA4IQeOqykuqq4p95a4B4lv0KX/aEVSK4=
Subject key identifier: 07:09:24:5D:2F:7E:B9:A9:4C:33:01:97:11:35:85:C1:6A:00:F4:29
Authority key identifier: 80:D1:C0:B4:EF:09:0C:44:D7:8B:7C:CB:0B:F7:2F:09:D0:83:1F:34
Certificate issuer: /CN=80d1c0b4ef090c44d78b7ccb0bf72f09d0831f34
Certificate serial: 019A71132ABD0347990F78726FA8E69C2DDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gNHAtO8JDETXi3zLC_cvCdCDHzQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/de64f7-39d9-4bbd-b023-bedcbc5a0174/1/gNHAtO8JDETXi3zLC_cvCdCDHzQ.mft
Manifest number: 0C83
Signing time: Tue 11 Nov 2025 04:01:12 +0000
Manifest this update: Tue 11 Nov 2025 04:01:12 +0000
Manifest next update: Wed 12 Nov 2025 04:01:12 +0000
Files and hashes: 1: gNHAtO8JDETXi3zLC_cvCdCDHzQ.crl (hash: +QnkO3hfH7qUqe3UURPMPLCr68k1Cfe3aAGiviiEYBM=)
2: gi0_EyMqvU0B6RLloJeCvIjrKZc.roa (hash: SmxwMosUzjILazIuYN/g07frRTjtu/khfxltbXPY3+0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/de64f7-39d9-4bbd-b023-bedcbc5a0174/1/gNHAtO8JDETXi3zLC_cvCdCDHzQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/de64f7-39d9-4bbd-b023-bedcbc5a0174/1/gNHAtO8JDETXi3zLC_cvCdCDHzQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/gNHAtO8JDETXi3zLC_cvCdCDHzQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:2a:bd:03:47:99:0f:78:72:6f:a8:e6:9c:2d:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80d1c0b4ef090c44d78b7ccb0bf72f09d0831f34
Validity
Not Before: Nov 11 04:01:12 2025 GMT
Not After : Nov 12 04:01:12 2025 GMT
Subject: CN=0709245d2f7eb9a94c330197113585c16a00f429
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:f5:35:5e:6a:22:07:99:d0:c7:e9:5b:9b:2a:
e8:12:a0:26:a1:27:e1:2b:39:da:81:fa:6a:d9:88:
98:a8:d3:98:f4:d1:4a:f6:14:44:9e:fd:43:69:08:
22:c6:43:12:9a:54:61:56:86:2f:3c:38:b1:5a:28:
55:c7:0b:0d:2d:43:10:05:93:68:d6:16:ed:ed:85:
54:f8:a6:6a:18:53:23:06:67:1f:54:13:64:46:22:
74:5c:cc:cb:c8:15:e8:70:61:a2:6d:14:96:b2:eb:
b3:b6:67:bf:62:26:d0:70:10:2c:e9:25:37:8c:4c:
20:07:34:f2:82:01:46:8a:bc:2c:59:61:74:d1:45:
8d:26:a1:ed:57:e4:59:90:60:6d:f9:01:09:87:e3:
89:65:f9:0c:d8:af:28:f7:75:28:19:12:8a:95:3a:
ac:38:14:28:5c:42:ae:e9:d0:eb:0c:80:ae:1d:57:
33:c9:65:4f:b9:9e:bd:0c:c8:82:15:62:ea:4d:c2:
49:2a:16:46:30:75:c7:70:32:b5:80:9e:6a:28:5f:
09:fe:03:46:41:90:b5:86:62:8b:fd:79:4c:b1:a0:
3a:2d:34:84:83:42:17:2a:75:6c:b8:9e:51:20:76:
84:57:57:2b:69:81:b1:c7:20:d8:c8:b6:97:a1:6c:
e3:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:09:24:5D:2F:7E:B9:A9:4C:33:01:97:11:35:85:C1:6A:00:F4:29
X509v3 Authority Key Identifier:
keyid:80:D1:C0:B4:EF:09:0C:44:D7:8B:7C:CB:0B:F7:2F:09:D0:83:1F:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gNHAtO8JDETXi3zLC_cvCdCDHzQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/de64f7-39d9-4bbd-b023-bedcbc5a0174/1/gNHAtO8JDETXi3zLC_cvCdCDHzQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/de64f7-39d9-4bbd-b023-bedcbc5a0174/1/gNHAtO8JDETXi3zLC_cvCdCDHzQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:96:4d:4f:d2:0e:51:e1:bb:fc:85:c4:96:01:e9:15:27:44:
51:e7:72:cd:60:e4:c9:8b:7f:96:d6:12:38:af:c9:10:aa:1f:
c4:87:3a:9a:d0:95:08:2b:11:51:a2:a0:77:05:2c:6f:e1:b6:
7f:93:e6:64:e5:4e:08:92:ab:85:ea:a5:7a:d1:98:7e:31:32:
44:05:b1:50:30:41:ce:1c:31:7c:63:d9:5d:15:c6:5f:0c:8d:
5d:37:c6:9e:f7:2b:09:a3:7a:cd:bd:60:5b:63:88:1f:9f:03:
a6:46:88:16:aa:3e:31:cb:43:f3:b6:1a:69:a6:9d:97:59:ca:
e0:1a:f8:5b:84:9d:91:b5:97:df:41:ac:cc:4d:d8:7d:e1:61:
4c:96:46:9d:43:07:76:b1:28:39:a4:fc:be:e8:cf:c2:bb:f3:
9a:30:14:1e:10:a1:a6:ae:48:ed:3a:3e:34:10:85:d6:96:ca:
6a:b8:78:13:cf:0c:63:04:cf:75:f8:ff:ca:8d:62:8f:5c:51:
1e:72:25:a9:dc:2b:8c:f1:18:00:a3:9b:e8:19:fe:63:4b:cf:
da:c9:a0:76:22:33:26:1e:53:19:74:98:0f:e6:2d:62:27:40:
38:c5:2b:72:ea:b3:13:a4:63:58:f6:92:d1:b0:ab:2f:e6:35:
14:96:26:c4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxEyq9A0eZD3hyb6jmnC3eMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgwZDFjMGI0ZWYwOTBjNDRkNzhiN2NjYjBiZjcyZjA5ZDA4
MzFmMzQwHhcNMjUxMTExMDQwMTEyWhcNMjUxMTEyMDQwMTEyWjAzMTEwLwYDVQQD
EygwNzA5MjQ1ZDJmN2ViOWE5NGMzMzAxOTcxMTM1ODVjMTZhMDBmNDI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2vU1XmoiB5nQx+lbmyroEqAmoSfh
Kznagfpq2YiYqNOY9NFK9hREnv1DaQgixkMSmlRhVoYvPDixWihVxwsNLUMQBZNo
1hbt7YVU+KZqGFMjBmcfVBNkRiJ0XMzLyBXocGGibRSWsuuztme/YibQcBAs6SU3
jEwgBzTyggFGirwsWWF00UWNJqHtV+RZkGBt+QEJh+OJZfkM2K8o93UoGRKKlTqs
OBQoXEKu6dDrDICuHVczyWVPuZ69DMiCFWLqTcJJKhZGMHXHcDK1gJ5qKF8J/gNG
QZC1hmKL/XlMsaA6LTSEg0IXKnVsuJ5RIHaEV1craYGxxyDYyLaXoWzjcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAcJJF0vfrmpTDMBlxE1hcFqAPQpMB8GA1UdIwQY
MBaAFIDRwLTvCQxE14t8ywv3LwnQgx80MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ05IQXRPOEpERVRYaTN6TENfY3ZDZENESHpRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9kZTY0ZjctMzlkOS00YmJkLWIwMjMt
YmVkY2JjNWEwMTc0LzEvZ05IQXRPOEpERVRYaTN6TENfY3ZDZENESHpRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC9kZTY0ZjctMzlkOS00YmJkLWIwMjMtYmVkY2JjNWEwMTc0
LzEvZ05IQXRPOEpERVRYaTN6TENfY3ZDZENESHpRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhZZNT9IO
UeG7/IXElgHpFSdEUedyzWDkyYt/ltYSOK/JEKofxIc6mtCVCCsRUaKgdwUsb+G2
f5PmZOVOCJKrheqletGYfjEyRAWxUDBBzhwxfGPZXRXGXwyNXTfGnvcrCaN6zb1g
W2OIH58DpkaIFqo+MctD87Yaaaadl1nK4Br4W4SdkbWX30GszE3YfeFhTJZGnUMH
drEoOaT8vujPwrvzmjAUHhChpq5I7To+NBCF1pbKarh4E88MYwTPdfj/yo1ij1xR
HnIlqdwrjPEYAKOb6Bn+Y0vP2smgdiIzJh5TGXSYD+YtYidAOMUrcuqzE6RjWPaS
0bCrL+Y1FJYmxA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:47:58 2025 by rpki-client