Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/880b00-58ab-47de-9728-0cad6ca7ecd7/1/gVI4iO7VMR-SoWYV7yzwF1xv5B4.mft
File: gVI4iO7VMR-SoWYV7yzwF1xv5B4.mft (raw, json)
Hash identifier: xQHQpawfvZjCvfcJ898MfAwg8sgoR5I60KsU0yB+W7o=
Subject key identifier: 4F:ED:DB:8E:F7:F9:14:27:7D:48:C0:68:CD:45:CA:B7:E0:29:6A:0A
Authority key identifier: 81:52:38:88:EE:D5:31:1F:92:A1:66:15:EF:2C:F0:17:5C:6F:E4:1E
Certificate issuer: /CN=81523888eed5311f92a16615ef2cf0175c6fe41e
Certificate serial: 019A725CA60D2CA7306BEB0A566EF0D693D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gVI4iO7VMR-SoWYV7yzwF1xv5B4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/880b00-58ab-47de-9728-0cad6ca7ecd7/1/gVI4iO7VMR-SoWYV7yzwF1xv5B4.mft
Manifest number: 0EAC
Signing time: Tue 11 Nov 2025 10:01:05 +0000
Manifest this update: Tue 11 Nov 2025 10:01:05 +0000
Manifest next update: Wed 12 Nov 2025 10:01:05 +0000
Files and hashes: 1: YTi5kVsPsdj_lVOXlLvthRcyZYk.roa (hash: yclAP/FevQD565z0O5X4lV8O1DrwrH9X8Lbd0rW1rtQ=)
2: gVI4iO7VMR-SoWYV7yzwF1xv5B4.crl (hash: Mnc/6um95JBANHfTbMXzb3U4V142SeN/VE7BLqtr5r8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/880b00-58ab-47de-9728-0cad6ca7ecd7/1/gVI4iO7VMR-SoWYV7yzwF1xv5B4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/880b00-58ab-47de-9728-0cad6ca7ecd7/1/gVI4iO7VMR-SoWYV7yzwF1xv5B4.mft
rsync://rpki.ripe.net/repository/DEFAULT/gVI4iO7VMR-SoWYV7yzwF1xv5B4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:a6:0d:2c:a7:30:6b:eb:0a:56:6e:f0:d6:93:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81523888eed5311f92a16615ef2cf0175c6fe41e
Validity
Not Before: Nov 11 10:01:05 2025 GMT
Not After : Nov 12 10:01:05 2025 GMT
Subject: CN=4feddb8ef7f914277d48c068cd45cab7e0296a0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:6b:99:99:db:fb:34:b1:5f:c5:e6:b9:a2:6d:
96:e1:38:2c:37:7d:82:7e:28:cc:24:ab:07:27:81:
c1:b6:8d:92:ea:b8:d5:80:63:07:57:11:8b:0c:43:
42:a7:ce:8f:e9:6a:79:3e:88:07:af:9d:5b:15:1e:
cb:a3:cd:ab:9d:21:c7:b3:7e:f3:71:64:25:45:37:
64:ec:75:f4:65:b8:2d:31:01:0a:85:be:02:4a:e7:
50:46:bd:56:6e:55:70:d8:1f:9c:6b:26:e9:31:16:
85:b2:a4:f8:f1:2e:d7:03:f1:aa:d6:c9:fa:03:59:
42:1f:a8:f7:19:90:cc:0b:5a:59:ab:b7:a7:b2:33:
fa:0f:11:ae:f7:f1:fb:e4:1b:8a:4c:7c:0b:f8:44:
73:4e:07:12:de:26:43:6b:08:a1:d4:fa:1d:bc:9e:
2a:18:8e:91:53:94:68:f1:20:d0:01:e5:20:3e:22:
df:33:37:ea:1e:ed:3b:a0:6d:88:68:58:b3:23:e3:
32:ee:7a:ab:72:81:a2:92:f1:c8:0e:05:c4:01:b4:
95:63:b8:6a:22:6f:7e:2f:22:22:82:2d:e3:73:c2:
b4:2c:a0:b6:f1:b5:e5:0f:b9:e8:4e:d3:83:54:03:
8e:e5:45:d7:5f:ad:5f:2b:e8:d7:f3:c9:91:d6:ec:
0f:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:ED:DB:8E:F7:F9:14:27:7D:48:C0:68:CD:45:CA:B7:E0:29:6A:0A
X509v3 Authority Key Identifier:
keyid:81:52:38:88:EE:D5:31:1F:92:A1:66:15:EF:2C:F0:17:5C:6F:E4:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gVI4iO7VMR-SoWYV7yzwF1xv5B4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/880b00-58ab-47de-9728-0cad6ca7ecd7/1/gVI4iO7VMR-SoWYV7yzwF1xv5B4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/880b00-58ab-47de-9728-0cad6ca7ecd7/1/gVI4iO7VMR-SoWYV7yzwF1xv5B4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:77:c4:9a:51:fd:ab:f7:46:8e:4f:bb:06:d6:83:09:68:e4:
af:73:12:c8:83:c6:48:9a:f2:ad:35:94:0d:53:8f:35:c3:d7:
87:4b:23:88:27:67:9c:f9:6c:5f:01:2e:fb:b6:d8:3a:23:69:
10:76:cb:ad:c1:27:7c:34:d9:ac:de:fa:f1:c1:e4:dd:22:44:
6c:17:4c:88:af:b4:a3:0c:27:62:33:13:e1:e7:eb:23:97:40:
0b:9a:88:94:fd:30:ba:43:9c:26:5a:e9:56:34:dc:98:b8:a8:
9b:7d:5e:f6:7b:c9:bf:96:cb:a9:4d:90:f9:37:f9:e3:dc:8a:
79:bf:e9:57:63:7f:10:f0:7b:7e:77:10:60:df:7d:23:ec:d0:
c0:d6:cb:bf:1f:30:39:36:5a:d5:4f:d9:45:97:5d:fa:64:cb:
61:69:f9:1f:71:db:b3:a3:0e:e3:8b:da:fb:a6:38:cc:e1:6a:
0b:05:df:49:88:65:89:cf:ab:ac:9b:7f:32:fc:b0:84:ab:0f:
8f:37:68:21:81:0f:b8:8f:52:91:1d:83:d4:43:9c:51:0a:14:
f2:b1:61:ca:e5:79:26:24:da:24:b2:9d:2e:fb:a8:66:fd:c4:
50:ed:d7:4f:71:14:ec:62:3e:75:18:d8:ff:6f:13:9a:16:1a:
7a:e6:47:99
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyXKYNLKcwa+sKVm7w1pPZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxNTIzODg4ZWVkNTMxMWY5MmExNjYxNWVmMmNmMDE3NWM2
ZmU0MWUwHhcNMjUxMTExMTAwMTA1WhcNMjUxMTEyMTAwMTA1WjAzMTEwLwYDVQQD
Eyg0ZmVkZGI4ZWY3ZjkxNDI3N2Q0OGMwNjhjZDQ1Y2FiN2UwMjk2YTBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoWuZmdv7NLFfxea5om2W4TgsN32C
fijMJKsHJ4HBto2S6rjVgGMHVxGLDENCp86P6Wp5PogHr51bFR7Lo82rnSHHs37z
cWQlRTdk7HX0ZbgtMQEKhb4CSudQRr1WblVw2B+caybpMRaFsqT48S7XA/Gq1sn6
A1lCH6j3GZDMC1pZq7ensjP6DxGu9/H75BuKTHwL+ERzTgcS3iZDawih1PodvJ4q
GI6RU5Ro8SDQAeUgPiLfMzfqHu07oG2IaFizI+My7nqrcoGikvHIDgXEAbSVY7hq
Im9+LyIigi3jc8K0LKC28bXlD7noTtODVAOO5UXXX61fK+jX88mR1uwPnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE/t2473+RQnfUjAaM1FyrfgKWoKMB8GA1UdIwQY
MBaAFIFSOIju1TEfkqFmFe8s8Bdcb+QeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ1ZJNGlPN1ZNUi1Tb1dZVjd5endGMXh2NUI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS84ODBiMDAtNThhYi00N2RlLTk3Mjgt
MGNhZDZjYTdlY2Q3LzEvZ1ZJNGlPN1ZNUi1Tb1dZVjd5endGMXh2NUI0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS84ODBiMDAtNThhYi00N2RlLTk3MjgtMGNhZDZjYTdlY2Q3
LzEvZ1ZJNGlPN1ZNUi1Tb1dZVjd5endGMXh2NUI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY3fEmlH9
q/dGjk+7BtaDCWjkr3MSyIPGSJryrTWUDVOPNcPXh0sjiCdnnPlsXwEu+7bYOiNp
EHbLrcEnfDTZrN768cHk3SJEbBdMiK+0owwnYjMT4efrI5dAC5qIlP0wukOcJlrp
VjTcmLiom31e9nvJv5bLqU2Q+Tf549yKeb/pV2N/EPB7fncQYN99I+zQwNbLvx8w
OTZa1U/ZRZdd+mTLYWn5H3Hbs6MO44va+6Y4zOFqCwXfSYhlic+rrJt/MvywhKsP
jzdoIYEPuI9SkR2D1EOcUQoU8rFhyuV5JiTaJLKdLvuoZv3EUO3XT3EU7GI+dRjY
/28TmhYaeuZHmQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:57:25 2025 by rpki-client