Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/861f32-81f4-4d64-8610-54de7a6cb3b1/1/g_gpRGn7euwmAbsDdy0BVvRwt00.mft
File: g_gpRGn7euwmAbsDdy0BVvRwt00.mft (raw, json)
Hash identifier: v/FTjoK9kiSQ+oFaD/IbqVJvIT7LC4Ad2SCTSV5/5x8=
Subject key identifier: C7:F3:0E:22:F0:D3:EC:EA:99:20:A3:E0:60:29:9F:DC:68:74:53:DC
Authority key identifier: 83:F8:29:44:69:FB:7A:EC:26:01:BB:03:77:2D:01:56:F4:70:B7:4D
Certificate issuer: /CN=83f8294469fb7aec2601bb03772d0156f470b74d
Certificate serial: 019A71EED90447DF87F35C873BCB83FC5887
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g_gpRGn7euwmAbsDdy0BVvRwt00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/861f32-81f4-4d64-8610-54de7a6cb3b1/1/g_gpRGn7euwmAbsDdy0BVvRwt00.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 08:01:09 +0000
Manifest this update: Tue 11 Nov 2025 08:01:09 +0000
Manifest next update: Wed 12 Nov 2025 08:01:09 +0000
Files and hashes: 1: atkABp03ezo3IQf9p_BdcUMTGKY.roa (hash: XIGewf/YhXuM1/3dqCaqTKBoy+0/E1uQhatEfe1jkfI=)
2: g_gpRGn7euwmAbsDdy0BVvRwt00.crl (hash: BSJfuUi2kXPnOGgS0EbIqt38RwASLkjRmPqxMi0ka2I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/861f32-81f4-4d64-8610-54de7a6cb3b1/1/g_gpRGn7euwmAbsDdy0BVvRwt00.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/861f32-81f4-4d64-8610-54de7a6cb3b1/1/g_gpRGn7euwmAbsDdy0BVvRwt00.mft
rsync://rpki.ripe.net/repository/DEFAULT/g_gpRGn7euwmAbsDdy0BVvRwt00.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:d9:04:47:df:87:f3:5c:87:3b:cb:83:fc:58:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83f8294469fb7aec2601bb03772d0156f470b74d
Validity
Not Before: Nov 11 08:01:09 2025 GMT
Not After : Nov 12 08:01:09 2025 GMT
Subject: CN=c7f30e22f0d3ecea9920a3e060299fdc687453dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:70:38:3a:49:3a:2b:2e:de:4d:00:13:0e:40:
9e:7e:de:ba:ee:e2:0a:d4:f4:99:fd:16:ec:a2:99:
50:b9:fb:e6:c1:6e:a0:db:4e:41:28:39:3b:96:25:
40:9c:07:8c:17:97:1e:18:97:18:42:ae:e5:6f:d5:
53:17:59:9a:b8:20:b1:97:2a:04:97:d8:96:4e:3d:
49:cd:3e:a7:31:8f:c0:c6:77:dd:3a:95:c4:5d:46:
b8:35:bc:ae:55:d1:07:d5:e5:e6:f5:bb:5c:82:e7:
dd:49:77:46:4d:c7:01:35:29:f3:4e:f2:40:a6:69:
59:2b:0e:bf:e3:f4:e4:31:5e:ed:64:fa:54:60:4f:
a2:e2:4a:e4:04:41:3b:99:88:6f:2f:f1:14:4c:ba:
63:7d:47:6f:fc:79:39:5e:59:0d:bf:dc:de:79:00:
21:f4:df:d1:fc:db:b1:75:a0:56:df:81:2d:da:07:
77:ee:41:e5:27:a0:b6:f2:f8:61:ca:f4:84:28:9b:
db:45:94:10:ee:fd:66:67:48:5a:68:8a:e5:3a:b3:
2b:66:01:62:1c:1c:31:55:eb:2e:d2:8d:30:49:39:
b7:69:36:f4:17:ea:e5:fc:71:be:61:0f:cb:f0:56:
b2:71:ff:e0:e8:c2:85:a3:ef:a6:56:4b:3e:d7:66:
40:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:F3:0E:22:F0:D3:EC:EA:99:20:A3:E0:60:29:9F:DC:68:74:53:DC
X509v3 Authority Key Identifier:
keyid:83:F8:29:44:69:FB:7A:EC:26:01:BB:03:77:2D:01:56:F4:70:B7:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g_gpRGn7euwmAbsDdy0BVvRwt00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/861f32-81f4-4d64-8610-54de7a6cb3b1/1/g_gpRGn7euwmAbsDdy0BVvRwt00.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/861f32-81f4-4d64-8610-54de7a6cb3b1/1/g_gpRGn7euwmAbsDdy0BVvRwt00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:a4:b8:78:4e:fc:e7:ca:4e:da:6b:08:8d:54:48:2c:91:33:
b9:d9:ed:a3:e4:29:bf:79:4a:54:8d:77:10:c5:d6:fa:10:a4:
5e:90:f5:aa:ea:ec:0d:63:e0:a0:f5:13:0f:e3:37:e0:43:c9:
15:ed:ec:84:1f:d8:23:19:70:7f:da:5e:7c:cd:5c:dc:ee:82:
64:c9:27:0a:1c:bd:35:d9:69:67:30:2f:78:70:fe:cb:cf:4f:
86:4f:82:47:df:f2:13:12:e9:14:22:69:04:2b:fc:ee:6d:1e:
0a:f6:2f:75:89:3b:7b:75:fc:87:e4:e9:83:32:fb:c6:05:c4:
88:de:78:4b:25:b2:df:1e:30:79:ad:cc:4b:14:b5:17:60:01:
72:d8:aa:00:62:37:11:35:4e:6c:b5:13:73:15:45:79:bc:70:
4f:fe:02:2c:da:3c:a4:e7:1a:2e:f9:42:cb:dd:e4:b9:ce:41:
8c:ec:5e:e4:d3:c8:b8:6c:04:4c:8e:6d:8b:70:90:1e:d0:b4:
20:71:3b:e0:9f:3a:ff:73:d1:df:24:37:b5:32:7d:bc:34:3d:
de:cd:4e:e6:98:8c:f0:f3:7e:50:6a:25:20:72:7d:9f:c0:88:
13:aa:da:9b:e8:d3:a3:16:0f:93:51:68:b1:2b:1d:fe:e9:82:
06:7a:6d:b9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpx7tkER9+H81yHO8uD/FiHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzZjgyOTQ0NjlmYjdhZWMyNjAxYmIwMzc3MmQwMTU2ZjQ3
MGI3NGQwHhcNMjUxMTExMDgwMTA5WhcNMjUxMTEyMDgwMTA5WjAzMTEwLwYDVQQD
EyhjN2YzMGUyMmYwZDNlY2VhOTkyMGEzZTA2MDI5OWZkYzY4NzQ1M2RjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv3A4Okk6Ky7eTQATDkCeft667uIK
1PSZ/RbsoplQufvmwW6g205BKDk7liVAnAeMF5ceGJcYQq7lb9VTF1mauCCxlyoE
l9iWTj1JzT6nMY/AxnfdOpXEXUa4NbyuVdEH1eXm9btcgufdSXdGTccBNSnzTvJA
pmlZKw6/4/TkMV7tZPpUYE+i4krkBEE7mYhvL/EUTLpjfUdv/Hk5XlkNv9zeeQAh
9N/R/NuxdaBW34Et2gd37kHlJ6C28vhhyvSEKJvbRZQQ7v1mZ0haaIrlOrMrZgFi
HBwxVesu0o0wSTm3aTb0F+rl/HG+YQ/L8Faycf/g6MKFo++mVks+12ZA8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMfzDiLw0+zqmSCj4GApn9xodFPcMB8GA1UdIwQY
MBaAFIP4KURp+3rsJgG7A3ctAVb0cLdNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ19ncFJHbjdldXdtQWJzRGR5MEJWdlJ3dDAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My84NjFmMzItODFmNC00ZDY0LTg2MTAt
NTRkZTdhNmNiM2IxLzEvZ19ncFJHbjdldXdtQWJzRGR5MEJWdlJ3dDAwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My84NjFmMzItODFmNC00ZDY0LTg2MTAtNTRkZTdhNmNiM2Ix
LzEvZ19ncFJHbjdldXdtQWJzRGR5MEJWdlJ3dDAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATKS4eE78
58pO2msIjVRILJEzudnto+Qpv3lKVI13EMXW+hCkXpD1qursDWPgoPUTD+M34EPJ
Fe3shB/YIxlwf9pefM1c3O6CZMknChy9NdlpZzAveHD+y89Phk+CR9/yExLpFCJp
BCv87m0eCvYvdYk7e3X8h+TpgzL7xgXEiN54SyWy3x4wea3MSxS1F2ABctiqAGI3
ETVObLUTcxVFebxwT/4CLNo8pOcaLvlCy93kuc5BjOxe5NPIuGwETI5ti3CQHtC0
IHE74J86/3PR3yQ3tTJ9vDQ93s1O5piM8PN+UGolIHJ9n8CIE6ram+jToxYPk1Fo
sSsd/umCBnptuQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 15:39:30 2025 by rpki-client