Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/227e6b-02e4-4108-8b33-63dd275300bc/1/gZkBtk_iJla48tsmC0U_J5NSt9A.mft
File: gZkBtk_iJla48tsmC0U_J5NSt9A.mft (raw, json)
Hash identifier: vmuKsq3uTRm8dqdg4KR0PpX0ZenhWDLeSV8hN0RVlV8=
Subject key identifier: FD:F7:C4:69:7F:34:A4:B6:08:BF:3D:49:40:1D:97:E9:56:19:17:E6
Authority key identifier: 81:99:01:B6:4F:E2:26:56:B8:F2:DB:26:0B:45:3F:27:93:52:B7:D0
Certificate issuer: /CN=819901b64fe22656b8f2db260b453f279352b7d0
Certificate serial: 019A29674F6CF4B9D3A97E156A3E5900C258
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZkBtk_iJla48tsmC0U_J5NSt9A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/227e6b-02e4-4108-8b33-63dd275300bc/1/gZkBtk_iJla48tsmC0U_J5NSt9A.mft
Manifest number: 15BD
Signing time: Tue 28 Oct 2025 06:00:27 +0000
Manifest this update: Tue 28 Oct 2025 06:00:27 +0000
Manifest next update: Wed 29 Oct 2025 06:00:27 +0000
Files and hashes: 1: RZXIs4f4losh_NRNWSiINml7guQ.roa (hash: wfrUUqnVV1noi4VIhSwTN+c+AGJyRaUQPQbGLw8dzqs=)
2: gZkBtk_iJla48tsmC0U_J5NSt9A.crl (hash: DRgAnyQEi1swbqnjpv4q5d3WBlNGUo+eZ139WtESQP0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/227e6b-02e4-4108-8b33-63dd275300bc/1/gZkBtk_iJla48tsmC0U_J5NSt9A.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/227e6b-02e4-4108-8b33-63dd275300bc/1/gZkBtk_iJla48tsmC0U_J5NSt9A.mft
rsync://rpki.ripe.net/repository/DEFAULT/gZkBtk_iJla48tsmC0U_J5NSt9A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 06:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:29:67:4f:6c:f4:b9:d3:a9:7e:15:6a:3e:59:00:c2:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=819901b64fe22656b8f2db260b453f279352b7d0
Validity
Not Before: Oct 28 06:00:27 2025 GMT
Not After : Oct 29 06:00:27 2025 GMT
Subject: CN=fdf7c4697f34a4b608bf3d49401d97e9561917e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:82:0c:15:62:af:2c:be:4b:05:71:af:93:ac:
72:aa:b3:9c:c3:13:87:6a:f8:9c:0d:a0:d0:b3:f8:
67:56:ed:ec:7c:04:dc:39:11:eb:77:37:b0:11:0d:
e9:74:85:4f:ee:c8:98:98:fa:de:9b:ea:a9:3f:82:
a9:27:50:d8:69:94:17:fc:a7:a9:56:32:39:3d:6b:
04:21:15:3b:49:94:7d:c4:16:37:09:5d:98:b6:aa:
4d:eb:64:2e:a0:2c:18:ef:c7:70:b0:f4:c8:5a:2d:
af:89:eb:bf:58:8c:b3:61:5e:91:92:90:22:1c:2f:
df:c3:8e:30:f7:3e:35:b3:22:44:5e:c6:d4:80:1f:
43:9e:4b:06:70:f2:77:91:ea:2a:4a:d2:f8:ec:74:
fb:c6:95:df:39:f9:d6:41:6b:21:6b:08:07:22:1a:
d9:e4:c3:00:e3:b6:7a:2e:72:0f:97:de:b7:94:26:
3f:10:1e:06:d9:31:21:e9:9f:31:40:8f:4c:bd:07:
43:f0:d6:15:7f:98:b1:ad:c9:5e:2d:83:27:ed:fa:
e4:53:7f:f7:fd:74:f6:ee:29:8a:a8:6b:65:9d:53:
e2:4a:f5:02:3b:80:9a:32:dc:b9:70:92:e9:9d:0f:
76:f4:16:7b:a4:0b:06:af:e6:96:50:09:7e:05:71:
4e:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:F7:C4:69:7F:34:A4:B6:08:BF:3D:49:40:1D:97:E9:56:19:17:E6
X509v3 Authority Key Identifier:
keyid:81:99:01:B6:4F:E2:26:56:B8:F2:DB:26:0B:45:3F:27:93:52:B7:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZkBtk_iJla48tsmC0U_J5NSt9A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/227e6b-02e4-4108-8b33-63dd275300bc/1/gZkBtk_iJla48tsmC0U_J5NSt9A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/227e6b-02e4-4108-8b33-63dd275300bc/1/gZkBtk_iJla48tsmC0U_J5NSt9A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:32:12:a9:64:49:1b:55:0a:bb:cb:14:c4:7b:bd:95:1e:59:
13:7c:9d:08:60:02:4c:78:15:fd:24:56:f5:b6:30:19:05:d2:
18:a2:dc:0f:89:a2:7c:62:1a:a7:82:e1:d6:ea:58:f6:b5:d1:
af:ad:8c:5c:cf:02:56:5b:af:58:eb:b5:35:8f:ca:6c:25:b4:
73:bb:a2:54:f1:15:2f:e6:e5:d9:18:5d:9f:f3:8d:c3:c8:7f:
a8:ce:86:3a:73:4d:31:6f:8e:7c:bb:2f:67:af:87:f2:3a:b0:
71:f8:0a:e8:f2:d1:79:15:d1:ba:8b:7d:dc:ab:7b:48:96:a1:
c6:80:90:3f:f8:0f:b0:35:bc:31:68:ba:dd:ff:17:09:65:1a:
bb:bd:45:52:20:6b:84:d1:18:63:16:b9:fd:d6:26:b6:95:07:
98:a2:0a:96:8a:26:a8:7e:4e:0c:f6:e8:25:47:8b:b5:fa:00:
4f:fd:e8:88:a2:1f:7b:96:c4:e7:db:fc:7f:04:1e:44:a3:fe:
08:9e:4d:46:a0:ef:b8:65:80:c9:17:44:d1:18:23:21:88:8b:
c4:55:4d:61:14:6d:6d:2b:07:c7:8c:bb:9b:bc:cb:c3:94:6c:
3d:23:e8:23:b8:2c:a3:d5:b9:8c:9f:a2:06:61:6c:af:3b:27:
22:ae:fb:8f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZopZ09s9LnTqX4Vaj5ZAMJYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxOTkwMWI2NGZlMjI2NTZiOGYyZGIyNjBiNDUzZjI3OTM1
MmI3ZDAwHhcNMjUxMDI4MDYwMDI3WhcNMjUxMDI5MDYwMDI3WjAzMTEwLwYDVQQD
EyhmZGY3YzQ2OTdmMzRhNGI2MDhiZjNkNDk0MDFkOTdlOTU2MTkxN2U2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxIIMFWKvLL5LBXGvk6xyqrOcwxOH
avicDaDQs/hnVu3sfATcORHrdzewEQ3pdIVP7siYmPrem+qpP4KpJ1DYaZQX/Kep
VjI5PWsEIRU7SZR9xBY3CV2YtqpN62QuoCwY78dwsPTIWi2vieu/WIyzYV6RkpAi
HC/fw44w9z41syJEXsbUgB9DnksGcPJ3keoqStL47HT7xpXfOfnWQWshawgHIhrZ
5MMA47Z6LnIPl963lCY/EB4G2TEh6Z8xQI9MvQdD8NYVf5ixrcleLYMn7frkU3/3
/XT27imKqGtlnVPiSvUCO4CaMty5cJLpnQ929BZ7pAsGr+aWUAl+BXFOqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP33xGl/NKS2CL89SUAdl+lWGRfmMB8GA1UdIwQY
MBaAFIGZAbZP4iZWuPLbJgtFPyeTUrfQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ1prQnRrX2lKbGE0OHRzbUMwVV9KNU5TdDlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC8yMjdlNmItMDJlNC00MTA4LThiMzMt
NjNkZDI3NTMwMGJjLzEvZ1prQnRrX2lKbGE0OHRzbUMwVV9KNU5TdDlBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC8yMjdlNmItMDJlNC00MTA4LThiMzMtNjNkZDI3NTMwMGJj
LzEvZ1prQnRrX2lKbGE0OHRzbUMwVV9KNU5TdDlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdTISqWRJ
G1UKu8sUxHu9lR5ZE3ydCGACTHgV/SRW9bYwGQXSGKLcD4mifGIap4Lh1upY9rXR
r62MXM8CVluvWOu1NY/KbCW0c7uiVPEVL+bl2Rhdn/ONw8h/qM6GOnNNMW+OfLsv
Z6+H8jqwcfgK6PLReRXRuot93Kt7SJahxoCQP/gPsDW8MWi63f8XCWUau71FUiBr
hNEYYxa5/dYmtpUHmKIKloomqH5ODPboJUeLtfoAT/3oiKIfe5bE59v8fwQeRKP+
CJ5NRqDvuGWAyRdE0RgjIYiLxFVNYRRtbSsHx4y7m7zLw5RsPSPoI7gso9W5jJ+i
BmFsrzsnIq77jw==
-----END CERTIFICATE-----
Generated at Tue Oct 28 13:26:21 2025 by rpki-client