Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/0c4b16-6b94-4080-9165-b853567da0ea/1/g47DlCgT0_NTbBJ-GoIb--9tsqQ.mft
File: g47DlCgT0_NTbBJ-GoIb--9tsqQ.mft (raw, json)
Hash identifier: G9rSKguHwatWnmmsGWQzqBR0I11H4g4yf2pZ6SuqWCQ=
Subject key identifier: 4F:E1:37:23:40:85:4F:58:B0:6C:34:89:DC:EB:93:24:71:CE:DB:71
Authority key identifier: 83:8E:C3:94:28:13:D3:F3:53:6C:12:7E:1A:82:1B:FB:EF:6D:B2:A4
Certificate issuer: /CN=838ec3942813d3f3536c127e1a821bfbef6db2a4
Certificate serial: 019A71B77A5BF00C7936F1356A9E1CB462BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g47DlCgT0_NTbBJ-GoIb--9tsqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/0c4b16-6b94-4080-9165-b853567da0ea/1/g47DlCgT0_NTbBJ-GoIb--9tsqQ.mft
Manifest number: 1237
Signing time: Tue 11 Nov 2025 07:00:40 +0000
Manifest this update: Tue 11 Nov 2025 07:00:40 +0000
Manifest next update: Wed 12 Nov 2025 07:00:40 +0000
Files and hashes: 1: W3rPvUkflCFuxF0ug4dEXW6S2Kc.roa (hash: 3G2s7uZotQeaUTGQLu0pJAmRVfSsV9ARqhmMaAPkMDY=)
2: g47DlCgT0_NTbBJ-GoIb--9tsqQ.crl (hash: LricH0CmzPhU9wldLRGNF9bUQSvyL7YQ30CEUxkqpQs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/0c4b16-6b94-4080-9165-b853567da0ea/1/g47DlCgT0_NTbBJ-GoIb--9tsqQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/0c4b16-6b94-4080-9165-b853567da0ea/1/g47DlCgT0_NTbBJ-GoIb--9tsqQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/g47DlCgT0_NTbBJ-GoIb--9tsqQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:7a:5b:f0:0c:79:36:f1:35:6a:9e:1c:b4:62:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=838ec3942813d3f3536c127e1a821bfbef6db2a4
Validity
Not Before: Nov 11 07:00:40 2025 GMT
Not After : Nov 12 07:00:40 2025 GMT
Subject: CN=4fe1372340854f58b06c3489dceb932471cedb71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:92:c4:49:06:03:4b:a2:d5:e4:23:0c:6b:63:
90:89:82:04:d0:bf:02:2e:8d:f9:26:19:2c:81:cf:
f3:7f:55:8c:10:08:b2:ae:1b:d3:eb:88:24:4e:b8:
e4:6b:65:04:81:4c:8b:a7:f1:28:19:05:df:94:8c:
73:bf:4a:8e:23:52:f6:cc:10:cb:c7:7b:b6:83:1c:
da:47:c7:66:a3:bf:87:d6:cf:ff:27:d2:79:64:4c:
a4:3e:70:ae:47:f9:4d:07:4a:5b:2d:d1:12:09:cb:
5f:16:0b:d2:21:c3:b9:10:b3:d3:2e:41:03:2b:df:
7b:7e:7c:76:2e:b8:2a:59:2e:38:2d:8d:2d:3c:b3:
e7:af:3f:b2:b3:0a:f6:cd:41:20:1b:71:29:8f:43:
23:9d:ab:9f:ba:e3:75:06:43:bd:4f:d1:0a:5d:a4:
da:cb:fe:b5:d5:5e:3a:76:48:39:c8:71:b8:db:f8:
62:c6:8f:79:24:3d:95:75:0f:58:40:42:cf:2b:43:
f7:6a:d8:6d:ec:f5:95:fe:58:fe:2d:30:50:6c:ab:
e7:b5:1d:be:d1:33:6f:d9:10:5b:3c:d6:66:b7:4d:
d9:fb:6d:06:78:2e:ae:12:3e:c1:55:0a:f3:a3:06:
f6:03:fe:82:48:67:cf:15:6a:da:ce:b4:f0:7e:e7:
7b:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:E1:37:23:40:85:4F:58:B0:6C:34:89:DC:EB:93:24:71:CE:DB:71
X509v3 Authority Key Identifier:
keyid:83:8E:C3:94:28:13:D3:F3:53:6C:12:7E:1A:82:1B:FB:EF:6D:B2:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g47DlCgT0_NTbBJ-GoIb--9tsqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/0c4b16-6b94-4080-9165-b853567da0ea/1/g47DlCgT0_NTbBJ-GoIb--9tsqQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/0c4b16-6b94-4080-9165-b853567da0ea/1/g47DlCgT0_NTbBJ-GoIb--9tsqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:db:5d:85:68:b7:5d:37:1f:ed:28:14:15:99:b1:54:c1:e2:
a5:b1:ed:74:7e:3b:2f:32:18:ca:4e:9f:4c:f3:40:28:90:94:
e5:90:21:42:26:8b:35:b5:96:8e:a7:7e:69:7e:b5:be:1a:90:
b8:0c:fa:4c:ce:ce:3e:d7:d0:48:b2:f4:17:5e:ba:a9:94:e8:
66:b6:ab:ce:6c:9b:87:28:91:83:d0:f4:bd:17:8f:0e:0e:b8:
b0:6e:27:7c:9d:08:8e:d8:7a:bf:0d:48:a3:01:a8:95:b2:2c:
e0:5a:c6:e0:9c:ac:8e:4f:1d:07:52:22:eb:30:30:4d:0c:d9:
70:d4:66:01:65:31:0f:a6:7a:0f:83:8d:8d:7c:de:6d:eb:66:
f3:a6:6c:45:a1:32:30:3d:ee:5b:ed:4b:a5:75:2b:ec:14:50:
22:e0:e9:04:14:0e:2f:ec:91:53:3d:78:b7:ac:12:80:39:f1:
1f:55:ce:0d:35:24:b0:65:43:85:78:00:23:06:6c:9c:3c:1b:
1e:b3:ff:c2:be:c8:9a:ca:51:8d:19:a1:e7:a4:7a:56:51:25:
b7:fc:34:47:85:a4:c7:a0:54:c7:9d:f8:12:ef:1c:78:47:09:
17:14:f7:e7:89:06:a9:15:44:9e:e9:07:ba:33:ad:37:4c:8a:
af:e8:28:e1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxt3pb8Ax5NvE1ap4ctGK7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzOGVjMzk0MjgxM2QzZjM1MzZjMTI3ZTFhODIxYmZiZWY2
ZGIyYTQwHhcNMjUxMTExMDcwMDQwWhcNMjUxMTEyMDcwMDQwWjAzMTEwLwYDVQQD
Eyg0ZmUxMzcyMzQwODU0ZjU4YjA2YzM0ODlkY2ViOTMyNDcxY2VkYjcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0JLESQYDS6LV5CMMa2OQiYIE0L8C
Lo35Jhksgc/zf1WMEAiyrhvT64gkTrjka2UEgUyLp/EoGQXflIxzv0qOI1L2zBDL
x3u2gxzaR8dmo7+H1s//J9J5ZEykPnCuR/lNB0pbLdESCctfFgvSIcO5ELPTLkED
K997fnx2LrgqWS44LY0tPLPnrz+yswr2zUEgG3Epj0MjnaufuuN1BkO9T9EKXaTa
y/611V46dkg5yHG42/hixo95JD2VdQ9YQELPK0P3atht7PWV/lj+LTBQbKvntR2+
0TNv2RBbPNZmt03Z+20GeC6uEj7BVQrzowb2A/6CSGfPFWrazrTwfud7ZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE/hNyNAhU9YsGw0idzrkyRxzttxMB8GA1UdIwQY
MBaAFIOOw5QoE9PzU2wSfhqCG/vvbbKkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZzQ3RGxDZ1QwX05UYkJKLUdvSWItLTl0c3FRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC8wYzRiMTYtNmI5NC00MDgwLTkxNjUt
Yjg1MzU2N2RhMGVhLzEvZzQ3RGxDZ1QwX05UYkJKLUdvSWItLTl0c3FRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC8wYzRiMTYtNmI5NC00MDgwLTkxNjUtYjg1MzU2N2RhMGVh
LzEvZzQ3RGxDZ1QwX05UYkJKLUdvSWItLTl0c3FRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARttdhWi3
XTcf7SgUFZmxVMHipbHtdH47LzIYyk6fTPNAKJCU5ZAhQiaLNbWWjqd+aX61vhqQ
uAz6TM7OPtfQSLL0F166qZToZrarzmybhyiRg9D0vRePDg64sG4nfJ0Ijth6vw1I
owGolbIs4FrG4Jysjk8dB1Ii6zAwTQzZcNRmAWUxD6Z6D4ONjXzebetm86ZsRaEy
MD3uW+1LpXUr7BRQIuDpBBQOL+yRUz14t6wSgDnxH1XODTUksGVDhXgAIwZsnDwb
HrP/wr7ImspRjRmh56R6VlElt/w0R4Wkx6BUx534Eu8ceEcJFxT354kGqRVEnukH
ujOtN0yKr+go4Q==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:48:29 2025 by rpki-client