Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/f65960-b03c-498c-b6d5-60951e97588c/1/GzaOcCad5mDLwU35x2OwGHiKH_w.mft
File: GzaOcCad5mDLwU35x2OwGHiKH_w.mft (raw, json)
Hash identifier: dRj56XzE4FtVwAGCng+/Vi0wM5J82FkoJ1qVGdJvlo8=
Subject key identifier: DD:37:82:C5:C9:AC:83:2A:3C:E2:97:A0:91:66:B8:85:EA:E4:F1:F1
Authority key identifier: 1B:36:8E:70:26:9D:E6:60:CB:C1:4D:F9:C7:63:B0:18:78:8A:1F:FC
Certificate issuer: /CN=1b368e70269de660cbc14df9c763b018788a1ffc
Certificate serial: 019A0AEF344B22C988FBDEE1CF3F8A5E6F13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GzaOcCad5mDLwU35x2OwGHiKH_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/f65960-b03c-498c-b6d5-60951e97588c/1/GzaOcCad5mDLwU35x2OwGHiKH_w.mft
Manifest number: 16EE
Signing time: Wed 22 Oct 2025 08:00:39 +0000
Manifest this update: Wed 22 Oct 2025 08:00:39 +0000
Manifest next update: Thu 23 Oct 2025 08:00:39 +0000
Files and hashes: 1: GzaOcCad5mDLwU35x2OwGHiKH_w.crl (hash: sLpamc5iYThgz81/SdyMd17GftR9fmwj8Dsf2SSD2wc=)
2: _ChMMh8gYkXb1ChgfB5-UeARN_8.roa (hash: IW3EVws4BqaOmIjFWi9xL7gifbvJ4hpYd+I96mfohIg=)
3: qhrn4XED21rcdTWtZqv2cxNR9pc.roa (hash: VjyxWUWPzC0itKJGCfRlXwbzUVrhfNTBkQCDP20QLmY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/f65960-b03c-498c-b6d5-60951e97588c/1/GzaOcCad5mDLwU35x2OwGHiKH_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/f65960-b03c-498c-b6d5-60951e97588c/1/GzaOcCad5mDLwU35x2OwGHiKH_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/GzaOcCad5mDLwU35x2OwGHiKH_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0a:ef:34:4b:22:c9:88:fb:de:e1:cf:3f:8a:5e:6f:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b368e70269de660cbc14df9c763b018788a1ffc
Validity
Not Before: Oct 22 08:00:39 2025 GMT
Not After : Oct 23 08:00:39 2025 GMT
Subject: CN=dd3782c5c9ac832a3ce297a09166b885eae4f1f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c3:0b:91:3f:27:7c:7f:69:50:e3:43:27:82:
4a:d7:69:81:01:e7:74:52:75:65:e7:d4:4a:41:0d:
c9:47:90:c1:61:34:4c:22:02:07:8f:96:f0:15:87:
8e:1f:00:65:4d:b1:54:da:38:b9:c3:19:cf:e9:f6:
59:72:66:cc:0a:31:b3:60:34:98:a7:82:5d:c1:51:
0f:17:0b:8a:fd:43:df:95:ea:4b:d2:80:3b:5d:de:
70:f0:f8:f2:60:5a:62:0c:a5:55:b0:4f:3b:75:24:
92:d2:b1:8b:fb:27:06:3a:6a:99:e6:ae:1c:d2:a4:
32:89:9a:62:06:9c:a0:9b:0c:e1:61:c1:d2:00:65:
46:08:19:96:d1:b7:88:db:89:c3:29:28:b0:80:d0:
50:6f:67:ff:9a:00:f0:79:ff:a7:68:fd:27:49:cc:
1e:f0:11:87:e5:99:10:6b:10:0b:12:a2:32:66:9e:
34:8f:b5:5e:a0:74:8e:c5:4b:86:bc:1e:e3:db:93:
58:4d:b5:87:40:c4:3d:65:67:77:46:c0:e6:4d:92:
ba:8b:bc:12:04:de:74:7e:80:7c:a2:67:88:7d:cb:
89:b3:ba:b4:8a:e0:d3:9b:47:86:9f:37:e7:bc:6e:
23:a7:22:ad:4c:14:e5:61:b1:4b:7a:b9:91:1c:a2:
73:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:37:82:C5:C9:AC:83:2A:3C:E2:97:A0:91:66:B8:85:EA:E4:F1:F1
X509v3 Authority Key Identifier:
keyid:1B:36:8E:70:26:9D:E6:60:CB:C1:4D:F9:C7:63:B0:18:78:8A:1F:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GzaOcCad5mDLwU35x2OwGHiKH_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/f65960-b03c-498c-b6d5-60951e97588c/1/GzaOcCad5mDLwU35x2OwGHiKH_w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/f65960-b03c-498c-b6d5-60951e97588c/1/GzaOcCad5mDLwU35x2OwGHiKH_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:4c:8e:81:bb:5f:2e:a1:e4:78:ac:f7:7f:34:ed:f4:c8:25:
f8:18:2e:99:f8:01:81:40:f7:ae:eb:06:89:b6:d6:0e:34:f6:
1a:4c:88:d4:d1:02:b9:b2:fd:07:c6:34:77:58:93:6b:5a:0a:
5f:e0:4b:53:4e:a1:7d:e4:44:04:39:53:75:f8:d7:cc:6a:60:
2d:22:d2:5e:d9:cc:1c:9c:7c:51:7b:4f:56:7d:f8:32:4e:21:
b7:ba:47:78:0c:14:94:3a:53:86:f3:79:c3:88:d3:86:6f:d1:
14:e8:b3:2e:8e:7a:74:60:15:51:11:28:e6:8d:6f:3a:5a:2b:
5b:cb:42:ab:43:05:34:e4:27:0f:28:fa:fb:9f:6d:52:ed:6e:
a9:af:6f:55:61:87:ae:c1:35:e9:52:0d:7a:fc:e9:97:43:04:
05:25:a7:ad:55:59:ac:fd:6b:2c:73:1f:8c:d4:bb:0f:e1:3d:
76:66:a2:d3:71:b5:37:f0:4f:7b:c2:f4:2d:e4:45:60:6b:dc:
22:f1:cc:26:89:50:ed:e3:78:2f:04:20:2e:8f:d5:41:0e:51:
ac:e7:2c:20:e9:1f:48:b9:b7:1c:33:f4:06:d1:c9:4c:2a:da:
63:e9:ea:19:e8:41:67:89:7a:90:ac:81:0c:40:d1:8d:19:ff:
28:89:c6:64
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoK7zRLIsmI+97hzz+KXm8TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiMzY4ZTcwMjY5ZGU2NjBjYmMxNGRmOWM3NjNiMDE4Nzg4
YTFmZmMwHhcNMjUxMDIyMDgwMDM5WhcNMjUxMDIzMDgwMDM5WjAzMTEwLwYDVQQD
EyhkZDM3ODJjNWM5YWM4MzJhM2NlMjk3YTA5MTY2Yjg4NWVhZTRmMWYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAssMLkT8nfH9pUONDJ4JK12mBAed0
UnVl59RKQQ3JR5DBYTRMIgIHj5bwFYeOHwBlTbFU2ji5wxnP6fZZcmbMCjGzYDSY
p4JdwVEPFwuK/UPflepL0oA7Xd5w8PjyYFpiDKVVsE87dSSS0rGL+ycGOmqZ5q4c
0qQyiZpiBpygmwzhYcHSAGVGCBmW0beI24nDKSiwgNBQb2f/mgDwef+naP0nScwe
8BGH5ZkQaxALEqIyZp40j7VeoHSOxUuGvB7j25NYTbWHQMQ9ZWd3RsDmTZK6i7wS
BN50foB8omeIfcuJs7q0iuDTm0eGnzfnvG4jpyKtTBTlYbFLermRHKJzJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN03gsXJrIMqPOKXoJFmuIXq5PHxMB8GA1UdIwQY
MBaAFBs2jnAmneZgy8FN+cdjsBh4ih/8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3phT2NDYWQ1bURMd1UzNXgyT3dHSGlLSF93LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9mNjU5NjAtYjAzYy00OThjLWI2ZDUt
NjA5NTFlOTc1ODhjLzEvR3phT2NDYWQ1bURMd1UzNXgyT3dHSGlLSF93Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny9mNjU5NjAtYjAzYy00OThjLWI2ZDUtNjA5NTFlOTc1ODhj
LzEvR3phT2NDYWQ1bURMd1UzNXgyT3dHSGlLSF93LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC0yOgbtf
LqHkeKz3fzTt9Mgl+BgumfgBgUD3rusGibbWDjT2GkyI1NECubL9B8Y0d1iTa1oK
X+BLU06hfeREBDlTdfjXzGpgLSLSXtnMHJx8UXtPVn34Mk4ht7pHeAwUlDpThvN5
w4jThm/RFOizLo56dGAVUREo5o1vOlorW8tCq0MFNOQnDyj6+59tUu1uqa9vVWGH
rsE16VINevzpl0MEBSWnrVVZrP1rLHMfjNS7D+E9dmai03G1N/BPe8L0LeRFYGvc
IvHMJolQ7eN4LwQgLo/VQQ5RrOcsIOkfSLm3HDP0BtHJTCraY+nqGehBZ4l6kKyB
DEDRjRn/KInGZA==
-----END CERTIFICATE-----
Generated at Wed Oct 22 11:50:53 2025 by rpki-client