Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/463686-ce48-487c-bc3d-a2f59eae86d0/1/g4heOKx3ysBEgptTyzslq-Yen2Q.mft
File: g4heOKx3ysBEgptTyzslq-Yen2Q.mft (raw, json)
Hash identifier: XfmxZ1fLpGlT/LOpuRRgmc0q+CECT+yV4T1qP3MfB0M=
Subject key identifier: 8B:77:13:0D:24:1C:CE:0F:79:6F:2F:1A:CC:52:1C:C7:19:D1:5A:42
Authority key identifier: 83:88:5E:38:AC:77:CA:C0:44:82:9B:53:CB:3B:25:AB:E6:1E:9F:64
Certificate issuer: /CN=83885e38ac77cac044829b53cb3b25abe61e9f64
Certificate serial: 019A183D241AE18C775F8132CE70ECCB7285
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g4heOKx3ysBEgptTyzslq-Yen2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/463686-ce48-487c-bc3d-a2f59eae86d0/1/g4heOKx3ysBEgptTyzslq-Yen2Q.mft
Manifest number: 0701
Signing time: Fri 24 Oct 2025 22:00:51 +0000
Manifest this update: Fri 24 Oct 2025 22:00:51 +0000
Manifest next update: Sat 25 Oct 2025 22:00:51 +0000
Files and hashes: 1: c8jr9RK1jYIIU9J_37XkvdpDKPQ.roa (hash: FypzDCTYnJOnd+60Jv/bTV7/TP6pt9nWegIKGFpscqo=)
2: g4heOKx3ysBEgptTyzslq-Yen2Q.crl (hash: D8vuB5ySU3bki9u+TiPQnpggFvlPhNVM8f9aW+D4qtg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/463686-ce48-487c-bc3d-a2f59eae86d0/1/g4heOKx3ysBEgptTyzslq-Yen2Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/463686-ce48-487c-bc3d-a2f59eae86d0/1/g4heOKx3ysBEgptTyzslq-Yen2Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/g4heOKx3ysBEgptTyzslq-Yen2Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Oct 2025 22:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:18:3d:24:1a:e1:8c:77:5f:81:32:ce:70:ec:cb:72:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83885e38ac77cac044829b53cb3b25abe61e9f64
Validity
Not Before: Oct 24 22:00:51 2025 GMT
Not After : Oct 25 22:00:51 2025 GMT
Subject: CN=8b77130d241cce0f796f2f1acc521cc719d15a42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:51:8f:8a:f2:76:0f:63:7d:a7:b1:2a:d7:97:
54:0c:a5:05:ae:23:b7:60:39:2e:56:12:30:94:86:
a7:44:4b:6b:80:3e:04:3d:90:5a:3d:cb:e7:f5:20:
b7:75:47:a3:68:18:7a:2a:cd:fa:7e:8b:8f:13:45:
b9:59:e2:9a:bb:b0:4e:0e:1f:b0:ce:9c:98:0c:ac:
54:1f:43:3e:c7:79:c8:79:d0:93:a5:28:23:70:b8:
a2:d4:5d:81:d7:bf:bc:82:af:02:3c:dc:bd:5c:68:
09:db:7d:1a:fb:95:58:d0:75:4b:17:c1:fb:ed:e4:
eb:2e:19:8e:5f:60:59:a1:38:af:96:d8:c5:24:64:
a6:9f:4c:90:ea:81:a6:4c:c8:e9:dd:0c:8d:9f:ca:
72:d5:fa:b5:c3:c2:0d:a2:6d:39:07:a7:c9:10:31:
76:78:c9:f4:e6:b2:9f:4d:54:de:cd:61:08:94:b7:
5b:21:15:c2:e0:ee:dd:ea:99:55:dd:61:47:30:0a:
dc:59:0b:1e:66:35:4c:37:25:ec:ef:21:17:69:25:
53:0a:fe:32:a9:c8:e0:1f:39:df:a3:75:0d:53:db:
99:07:31:1b:7b:3c:dc:96:b3:03:00:a2:07:7d:00:
a7:9b:1f:0a:69:f2:63:39:4c:82:46:5f:a0:e8:30:
de:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:77:13:0D:24:1C:CE:0F:79:6F:2F:1A:CC:52:1C:C7:19:D1:5A:42
X509v3 Authority Key Identifier:
keyid:83:88:5E:38:AC:77:CA:C0:44:82:9B:53:CB:3B:25:AB:E6:1E:9F:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g4heOKx3ysBEgptTyzslq-Yen2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/463686-ce48-487c-bc3d-a2f59eae86d0/1/g4heOKx3ysBEgptTyzslq-Yen2Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/463686-ce48-487c-bc3d-a2f59eae86d0/1/g4heOKx3ysBEgptTyzslq-Yen2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:2e:50:07:5d:a4:10:2f:e3:6c:f2:e5:a1:9e:ec:d5:56:10:
a8:09:d9:2e:55:e7:69:48:33:cc:ff:a0:21:8c:4a:4a:d6:9e:
af:ea:34:ab:b7:75:d6:60:2b:b7:c5:06:5f:2f:c4:9f:e9:35:
5a:13:9b:46:d2:55:96:3e:fe:81:2e:c1:9a:1b:a8:b8:f5:02:
a3:ea:a1:ed:94:1f:78:f1:15:28:46:b5:f9:b8:77:31:42:62:
af:10:b3:b5:51:fb:a4:26:58:9a:40:32:12:51:01:ce:c7:65:
d6:ba:81:b5:9f:01:62:37:a3:97:54:77:9c:31:5c:d0:0a:68:
3b:23:2f:0b:05:3e:bb:80:75:76:77:45:ee:b7:5f:9b:d7:38:
6e:90:21:de:64:00:5f:1a:89:35:ba:e9:06:94:bf:45:a1:bd:
83:fc:91:e5:3e:c8:c9:72:f5:2a:1d:c6:eb:c5:3d:b7:a4:0b:
0e:49:d6:fc:ff:5b:e1:8b:fb:0f:80:8e:c0:22:ce:26:53:d9:
ec:c8:6f:a9:ee:00:81:5c:37:80:3e:6a:37:ca:29:9e:e0:0e:
90:c0:0f:8f:6d:4e:67:2f:f6:ff:f9:9f:14:79:5e:64:82:c6:
90:2e:5f:cf:07:9e:bc:88:4e:17:65:3f:d9:6c:9c:27:47:b8:
c8:b6:20:91
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoYPSQa4Yx3X4EyznDsy3KFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzODg1ZTM4YWM3N2NhYzA0NDgyOWI1M2NiM2IyNWFiZTYx
ZTlmNjQwHhcNMjUxMDI0MjIwMDUxWhcNMjUxMDI1MjIwMDUxWjAzMTEwLwYDVQQD
Eyg4Yjc3MTMwZDI0MWNjZTBmNzk2ZjJmMWFjYzUyMWNjNzE5ZDE1YTQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnlGPivJ2D2N9p7Eq15dUDKUFriO3
YDkuVhIwlIanREtrgD4EPZBaPcvn9SC3dUejaBh6Ks36fouPE0W5WeKau7BODh+w
zpyYDKxUH0M+x3nIedCTpSgjcLii1F2B17+8gq8CPNy9XGgJ230a+5VY0HVLF8H7
7eTrLhmOX2BZoTivltjFJGSmn0yQ6oGmTMjp3QyNn8py1fq1w8INom05B6fJEDF2
eMn05rKfTVTezWEIlLdbIRXC4O7d6plV3WFHMArcWQseZjVMNyXs7yEXaSVTCv4y
qcjgHznfo3UNU9uZBzEbezzclrMDAKIHfQCnmx8KafJjOUyCRl+g6DDe7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIt3Ew0kHM4PeW8vGsxSHMcZ0VpCMB8GA1UdIwQY
MBaAFIOIXjisd8rARIKbU8s7JavmHp9kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZzRoZU9LeDN5c0JFZ3B0VHl6c2xxLVllbjJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC80NjM2ODYtY2U0OC00ODdjLWJjM2Qt
YTJmNTllYWU4NmQwLzEvZzRoZU9LeDN5c0JFZ3B0VHl6c2xxLVllbjJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC80NjM2ODYtY2U0OC00ODdjLWJjM2QtYTJmNTllYWU4NmQw
LzEvZzRoZU9LeDN5c0JFZ3B0VHl6c2xxLVllbjJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnS5QB12k
EC/jbPLloZ7s1VYQqAnZLlXnaUgzzP+gIYxKStaer+o0q7d11mArt8UGXy/En+k1
WhObRtJVlj7+gS7BmhuouPUCo+qh7ZQfePEVKEa1+bh3MUJirxCztVH7pCZYmkAy
ElEBzsdl1rqBtZ8BYjejl1R3nDFc0ApoOyMvCwU+u4B1dndF7rdfm9c4bpAh3mQA
XxqJNbrpBpS/RaG9g/yR5T7IyXL1Kh3G68U9t6QLDknW/P9b4Yv7D4COwCLOJlPZ
7Mhvqe4AgVw3gD5qN8opnuAOkMAPj21OZy/2//mfFHleZILGkC5fzweevIhOF2U/
2WycJ0e4yLYgkQ==
-----END CERTIFICATE-----
Generated at Sat Oct 25 04:18:41 2025 by rpki-client