Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/68195e-9902-4958-a507-fda9cdc90fe3/1/GhSy7j_ZgZQB2sukPsCsIAspWcA.mft
File: GhSy7j_ZgZQB2sukPsCsIAspWcA.mft (raw, json)
Hash identifier: t15cBrDujTAWMxpyBqQ1hpD44LlK7GsjYF7as5UFuCA=
Subject key identifier: E3:95:37:90:EC:E2:1C:51:82:7A:52:AE:3D:B3:6B:8B:8C:98:86:24
Authority key identifier: 1A:14:B2:EE:3F:D9:81:94:01:DA:CB:A4:3E:C0:AC:20:0B:29:59:C0
Certificate issuer: /CN=1a14b2ee3fd9819401dacba43ec0ac200b2959c0
Certificate serial: 019A72CA37D7510FDCCEB4B8D93872280B97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GhSy7j_ZgZQB2sukPsCsIAspWcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/68195e-9902-4958-a507-fda9cdc90fe3/1/GhSy7j_ZgZQB2sukPsCsIAspWcA.mft
Manifest number: 07FA
Signing time: Tue 11 Nov 2025 12:00:46 +0000
Manifest this update: Tue 11 Nov 2025 12:00:46 +0000
Manifest next update: Wed 12 Nov 2025 12:00:46 +0000
Files and hashes: 1: GhSy7j_ZgZQB2sukPsCsIAspWcA.crl (hash: fzcqkjKt4Ud/QK7XltGltBfKo9OnjPW5QF2uPRCzuZM=)
2: YdrEYumUdtVM8J8IIs8UcIvimLU.roa (hash: Q1VxicqBbCeOUqKh1Ex9vJAFuLnRZwsg3d3+Cv9fZao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/68195e-9902-4958-a507-fda9cdc90fe3/1/GhSy7j_ZgZQB2sukPsCsIAspWcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/68195e-9902-4958-a507-fda9cdc90fe3/1/GhSy7j_ZgZQB2sukPsCsIAspWcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/GhSy7j_ZgZQB2sukPsCsIAspWcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:37:d7:51:0f:dc:ce:b4:b8:d9:38:72:28:0b:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a14b2ee3fd9819401dacba43ec0ac200b2959c0
Validity
Not Before: Nov 11 12:00:46 2025 GMT
Not After : Nov 12 12:00:46 2025 GMT
Subject: CN=e3953790ece21c51827a52ae3db36b8b8c988624
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:94:ad:6b:6f:5e:44:33:97:37:15:d9:27:7a:
35:2d:cb:a5:b6:64:07:bf:ec:56:2e:6f:cc:3f:ec:
7a:1e:93:aa:99:55:d4:8a:43:f4:29:32:b7:40:21:
7f:0f:70:f3:83:fd:44:67:28:56:e9:6a:26:83:b3:
dd:3b:16:dd:e8:56:3b:9a:5c:40:2b:56:dd:68:4c:
3f:5b:c0:0c:ff:70:79:c9:8d:c0:86:2d:8c:26:e4:
98:3b:d3:97:9e:dc:c2:ad:7d:33:12:a5:47:e4:4e:
9a:f3:b9:92:7b:59:e4:36:d7:42:7e:ae:16:3b:b1:
6c:22:18:70:3f:37:84:85:14:b0:69:83:79:56:76:
3a:6f:25:22:d4:4a:dc:28:ac:2d:50:b3:16:a8:ef:
52:c8:dc:8c:d7:f1:83:7b:44:91:33:c5:b2:18:58:
9b:b6:39:70:ff:41:97:05:5f:0e:fd:74:9c:20:a0:
ec:41:bf:3e:ea:ce:d9:b8:1c:00:24:2e:57:04:5d:
69:f9:7f:d5:94:d9:31:1a:94:e2:3a:b8:75:ef:fc:
89:63:a5:59:c4:27:74:6c:d3:fd:e3:b9:ca:5c:46:
27:76:eb:54:72:bb:99:36:c3:cb:6b:0e:69:b5:d6:
af:50:09:11:66:ca:e5:bf:be:1a:63:91:36:de:66:
28:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:95:37:90:EC:E2:1C:51:82:7A:52:AE:3D:B3:6B:8B:8C:98:86:24
X509v3 Authority Key Identifier:
keyid:1A:14:B2:EE:3F:D9:81:94:01:DA:CB:A4:3E:C0:AC:20:0B:29:59:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GhSy7j_ZgZQB2sukPsCsIAspWcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/68195e-9902-4958-a507-fda9cdc90fe3/1/GhSy7j_ZgZQB2sukPsCsIAspWcA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/68195e-9902-4958-a507-fda9cdc90fe3/1/GhSy7j_ZgZQB2sukPsCsIAspWcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:ac:40:17:d4:a6:c1:d2:07:81:d9:17:35:52:72:fa:43:ad:
3f:bf:f0:a1:3b:7c:29:7f:0f:e0:ee:4e:bb:76:f6:92:c0:fb:
f0:22:11:31:b9:02:bb:78:07:35:a9:af:88:26:a3:a1:c3:ea:
53:21:09:ba:ee:a0:94:2d:23:fa:e0:b0:7f:d2:0a:f4:0a:66:
64:84:7a:61:85:90:91:d9:fa:3d:69:1a:23:e9:f1:6e:6e:63:
7e:98:7e:e2:61:0d:dc:d4:46:64:d6:19:e7:f6:81:a9:08:11:
3b:8d:ad:e6:05:34:8f:92:fd:60:b5:2f:22:e8:2a:a1:88:3b:
0f:a1:1f:1a:ff:0b:02:8a:10:6f:48:70:25:0d:81:28:77:73:
44:dc:8f:2e:92:ba:13:7c:91:4b:6d:a5:51:84:8e:35:95:1f:
6a:b3:ab:3d:db:eb:2d:33:3c:ee:df:ac:dd:8c:79:0c:1e:a3:
a3:bf:a9:79:ff:64:cc:80:de:bf:38:54:f4:67:b9:ab:8f:a6:
c1:4a:67:f5:d2:81:6b:20:ad:cf:d5:1f:e3:1e:85:c9:d9:a7:
22:60:ad:46:e3:2d:f4:26:17:10:44:53:79:90:8b:38:99:41:
7e:3f:9c:aa:d3:26:6a:c5:3a:6a:f5:05:46:f6:7a:90:5c:1e:
c5:8c:a3:08
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyyjfXUQ/czrS42ThyKAuXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhMTRiMmVlM2ZkOTgxOTQwMWRhY2JhNDNlYzBhYzIwMGIy
OTU5YzAwHhcNMjUxMTExMTIwMDQ2WhcNMjUxMTEyMTIwMDQ2WjAzMTEwLwYDVQQD
EyhlMzk1Mzc5MGVjZTIxYzUxODI3YTUyYWUzZGIzNmI4YjhjOTg4NjI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzZSta29eRDOXNxXZJ3o1LcultmQH
v+xWLm/MP+x6HpOqmVXUikP0KTK3QCF/D3Dzg/1EZyhW6Womg7PdOxbd6FY7mlxA
K1bdaEw/W8AM/3B5yY3Ahi2MJuSYO9OXntzCrX0zEqVH5E6a87mSe1nkNtdCfq4W
O7FsIhhwPzeEhRSwaYN5VnY6byUi1ErcKKwtULMWqO9SyNyM1/GDe0SRM8WyGFib
tjlw/0GXBV8O/XScIKDsQb8+6s7ZuBwAJC5XBF1p+X/VlNkxGpTiOrh17/yJY6VZ
xCd0bNP947nKXEYndutUcruZNsPLaw5ptdavUAkRZsrlv74aY5E23mYo2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOOVN5Ds4hxRgnpSrj2za4uMmIYkMB8GA1UdIwQY
MBaAFBoUsu4/2YGUAdrLpD7ArCALKVnAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2hTeTdqX1pnWlFCMnN1a1BzQ3NJQXNwV2NBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi82ODE5NWUtOTkwMi00OTU4LWE1MDct
ZmRhOWNkYzkwZmUzLzEvR2hTeTdqX1pnWlFCMnN1a1BzQ3NJQXNwV2NBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi82ODE5NWUtOTkwMi00OTU4LWE1MDctZmRhOWNkYzkwZmUz
LzEvR2hTeTdqX1pnWlFCMnN1a1BzQ3NJQXNwV2NBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn6xAF9Sm
wdIHgdkXNVJy+kOtP7/woTt8KX8P4O5Ou3b2ksD78CIRMbkCu3gHNamviCajocPq
UyEJuu6glC0j+uCwf9IK9ApmZIR6YYWQkdn6PWkaI+nxbm5jfph+4mEN3NRGZNYZ
5/aBqQgRO42t5gU0j5L9YLUvIugqoYg7D6EfGv8LAooQb0hwJQ2BKHdzRNyPLpK6
E3yRS22lUYSONZUfarOrPdvrLTM87t+s3Yx5DB6jo7+pef9kzIDevzhU9Ge5q4+m
wUpn9dKBayCtz9Uf4x6FydmnImCtRuMt9CYXEERTeZCLOJlBfj+cqtMmasU6avUF
RvZ6kFwexYyjCA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 15:40:24 2025 by rpki-client