Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/dc9082-5a9f-41ee-8d44-618cd0682b10/1/gXS2uiCeYit5ihT86qlEdi-nYpo.mft
File: gXS2uiCeYit5ihT86qlEdi-nYpo.mft (raw, json)
Hash identifier: OlOaja+RM0fQ3YDUTSEOQNM2ahdS2/ADYS1N6lhp30E=
Subject key identifier: 26:5A:01:BA:2F:F5:27:DF:E9:85:C6:72:0B:DE:76:1A:F6:D4:0F:60
Authority key identifier: 81:74:B6:BA:20:9E:62:2B:79:8A:14:FC:EA:A9:44:76:2F:A7:62:9A
Certificate issuer: /CN=8174b6ba209e622b798a14fceaa944762fa7629a
Certificate serial: 019A706E30E01E147700AC938EE23C2EF33A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gXS2uiCeYit5ihT86qlEdi-nYpo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/dc9082-5a9f-41ee-8d44-618cd0682b10/1/gXS2uiCeYit5ihT86qlEdi-nYpo.mft
Manifest number: 01DD
Signing time: Tue 11 Nov 2025 01:01:00 +0000
Manifest this update: Tue 11 Nov 2025 01:01:00 +0000
Manifest next update: Wed 12 Nov 2025 01:01:00 +0000
Files and hashes: 1: gXS2uiCeYit5ihT86qlEdi-nYpo.crl (hash: F4c6p23jI/VOxfATlizzbv+Hp0hj8kXOflxi9VqDKRk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/dc9082-5a9f-41ee-8d44-618cd0682b10/1/gXS2uiCeYit5ihT86qlEdi-nYpo.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/dc9082-5a9f-41ee-8d44-618cd0682b10/1/gXS2uiCeYit5ihT86qlEdi-nYpo.mft
rsync://rpki.ripe.net/repository/DEFAULT/gXS2uiCeYit5ihT86qlEdi-nYpo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 01:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:6e:30:e0:1e:14:77:00:ac:93:8e:e2:3c:2e:f3:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8174b6ba209e622b798a14fceaa944762fa7629a
Validity
Not Before: Nov 11 01:01:00 2025 GMT
Not After : Nov 12 01:01:00 2025 GMT
Subject: CN=265a01ba2ff527dfe985c6720bde761af6d40f60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:91:a3:76:88:06:11:97:dc:49:dc:0f:59:4d:
c1:41:46:0d:7f:bf:64:c9:46:5a:31:a0:95:55:ee:
59:8f:11:b6:ae:2d:29:ca:46:2f:7d:01:39:08:8b:
ac:3b:c3:3e:9f:6b:bf:58:b1:97:0f:58:c2:f8:ec:
5a:f2:91:fc:c6:90:4c:8d:28:89:ba:50:da:33:72:
05:33:e9:c8:9e:c4:a6:75:67:d6:71:1c:2c:31:86:
53:5f:77:23:7a:fc:b7:96:c4:9b:15:78:5a:59:cf:
a2:2b:9d:ba:ae:fa:aa:19:96:b8:cc:c1:fd:bd:91:
04:f2:64:1c:2b:7c:2e:53:88:81:04:69:18:65:d0:
93:01:cb:d3:52:c3:9f:46:9a:21:01:e8:23:4c:bc:
64:cc:25:36:06:9b:a0:f2:e9:6e:ef:41:d6:9a:f6:
68:fc:3b:a0:61:d2:0e:00:2b:a6:ff:f6:a0:65:78:
50:b1:72:05:b6:f3:e5:09:af:0b:fa:5d:32:33:66:
14:fe:b1:1c:48:04:a3:3d:96:a9:94:e2:ad:b7:09:
04:19:6e:2e:24:79:1d:eb:1f:1c:0d:d8:80:1d:96:
6d:eb:93:0c:5a:23:05:69:37:64:4f:25:73:7d:a1:
74:94:19:40:38:d0:6d:62:b2:dd:e8:e1:c3:7b:34:
9e:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:5A:01:BA:2F:F5:27:DF:E9:85:C6:72:0B:DE:76:1A:F6:D4:0F:60
X509v3 Authority Key Identifier:
keyid:81:74:B6:BA:20:9E:62:2B:79:8A:14:FC:EA:A9:44:76:2F:A7:62:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gXS2uiCeYit5ihT86qlEdi-nYpo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/dc9082-5a9f-41ee-8d44-618cd0682b10/1/gXS2uiCeYit5ihT86qlEdi-nYpo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/dc9082-5a9f-41ee-8d44-618cd0682b10/1/gXS2uiCeYit5ihT86qlEdi-nYpo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:f9:e7:1c:44:c2:17:7e:e1:64:55:da:0a:ce:6d:36:ad:77:
be:65:bf:d0:35:9b:5b:16:5b:0f:c7:57:7c:a2:cf:ec:b7:0e:
53:d4:37:3b:d8:d8:92:ec:a5:ac:47:4f:48:10:21:84:5b:3d:
14:33:d4:95:78:06:9b:ed:bd:45:ae:65:df:d6:cf:ef:a9:42:
2e:54:65:e5:c0:e9:08:b2:77:c1:16:c2:18:03:55:62:28:42:
2c:3f:c0:da:cc:a3:da:e4:b8:66:bd:83:7e:db:cf:55:bc:71:
b6:32:d8:3b:b0:4b:22:24:f5:0c:31:07:ab:02:4e:a1:4f:07:
70:26:d1:cf:4e:b9:03:cd:07:28:a5:17:4e:40:1a:a8:4d:3d:
52:c1:e6:9c:36:74:70:cf:db:d0:76:61:fd:4d:75:3a:2f:55:
79:30:70:46:dd:5b:19:90:2b:00:cd:49:88:d5:da:6a:2d:ff:
04:2a:f8:bc:15:71:1d:80:7f:6c:fb:2f:15:e3:d9:b6:5d:3b:
ec:10:11:39:f8:01:59:83:13:be:1a:59:4b:26:c4:aa:de:aa:
37:01:da:86:ec:d9:55:7b:dd:1c:79:8a:64:05:ec:54:93:0a:
26:9c:4d:06:cf:da:d6:4b:30:97:a9:71:21:b8:1d:fa:b5:b2:
a7:fc:71:83
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpwbjDgHhR3AKyTjuI8LvM6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxNzRiNmJhMjA5ZTYyMmI3OThhMTRmY2VhYTk0NDc2MmZh
NzYyOWEwHhcNMjUxMTExMDEwMTAwWhcNMjUxMTEyMDEwMTAwWjAzMTEwLwYDVQQD
EygyNjVhMDFiYTJmZjUyN2RmZTk4NWM2NzIwYmRlNzYxYWY2ZDQwZjYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm5GjdogGEZfcSdwPWU3BQUYNf79k
yUZaMaCVVe5ZjxG2ri0pykYvfQE5CIusO8M+n2u/WLGXD1jC+Oxa8pH8xpBMjSiJ
ulDaM3IFM+nInsSmdWfWcRwsMYZTX3cjevy3lsSbFXhaWc+iK526rvqqGZa4zMH9
vZEE8mQcK3wuU4iBBGkYZdCTAcvTUsOfRpohAegjTLxkzCU2Bpug8ulu70HWmvZo
/DugYdIOACum//agZXhQsXIFtvPlCa8L+l0yM2YU/rEcSASjPZaplOKttwkEGW4u
JHkd6x8cDdiAHZZt65MMWiMFaTdkTyVzfaF0lBlAONBtYrLd6OHDezSedQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCZaAbov9Sff6YXGcgvedhr21A9gMB8GA1UdIwQY
MBaAFIF0trognmIreYoU/OqpRHYvp2KaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ1hTMnVpQ2VZaXQ1aWhUODZxbEVkaS1uWXBvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS9kYzkwODItNWE5Zi00MWVlLThkNDQt
NjE4Y2QwNjgyYjEwLzEvZ1hTMnVpQ2VZaXQ1aWhUODZxbEVkaS1uWXBvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS9kYzkwODItNWE5Zi00MWVlLThkNDQtNjE4Y2QwNjgyYjEw
LzEvZ1hTMnVpQ2VZaXQ1aWhUODZxbEVkaS1uWXBvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN/nnHETC
F37hZFXaCs5tNq13vmW/0DWbWxZbD8dXfKLP7LcOU9Q3O9jYkuylrEdPSBAhhFs9
FDPUlXgGm+29Ra5l39bP76lCLlRl5cDpCLJ3wRbCGANVYihCLD/A2syj2uS4Zr2D
ftvPVbxxtjLYO7BLIiT1DDEHqwJOoU8HcCbRz065A80HKKUXTkAaqE09UsHmnDZ0
cM/b0HZh/U11Oi9VeTBwRt1bGZArAM1JiNXaai3/BCr4vBVxHYB/bPsvFePZtl07
7BAROfgBWYMTvhpZSybEqt6qNwHahuzZVXvdHHmKZAXsVJMKJpxNBs/a1kswl6lx
Ibgd+rWyp/xxgw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:43:57 2025 by rpki-client