Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/708b4d-a63f-439d-9cce-148abff919ad/1/G_x3OM0P0OBEf510nOajkEf9y6w.mft
File: G_x3OM0P0OBEf510nOajkEf9y6w.mft (raw, json)
Hash identifier: DvB/PT1szPi0YQx1So50B7Q9AlyxoM1pLMKLSlK/688=
Subject key identifier: D6:65:E7:37:58:D7:87:69:8F:78:65:DE:A8:E0:FB:AE:CB:29:F6:E9
Authority key identifier: 1B:FC:77:38:CD:0F:D0:E0:44:7F:9D:74:9C:E6:A3:90:47:FD:CB:AC
Certificate issuer: /CN=1bfc7738cd0fd0e0447f9d749ce6a39047fdcbac
Certificate serial: 019A288BAEA5AA02C582EEB13F18F726AF16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G_x3OM0P0OBEf510nOajkEf9y6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/708b4d-a63f-439d-9cce-148abff919ad/1/G_x3OM0P0OBEf510nOajkEf9y6w.mft
Manifest number: 16F9
Signing time: Tue 28 Oct 2025 02:00:33 +0000
Manifest this update: Tue 28 Oct 2025 02:00:33 +0000
Manifest next update: Wed 29 Oct 2025 02:00:33 +0000
Files and hashes: 1: G_x3OM0P0OBEf510nOajkEf9y6w.crl (hash: uAhVBo3m4f3Gz9by8kXSLNlKBMubL5pbaJZFOTSm4O8=)
2: Ih31sg8uCJb_KbpSa1L6Oxmc4Z8.roa (hash: 9mQ/h5Y96VB7w3Lx8Rm2UMKZ49LCZfxek1bOiFzpcfE=)
3: Y2jaKnMLOg7L7yt3a5FoJKVZD9M.roa (hash: E77+sc63md8h3e/NARC1FrCtInem3ClY6WQ72Z8aT70=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/708b4d-a63f-439d-9cce-148abff919ad/1/G_x3OM0P0OBEf510nOajkEf9y6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/708b4d-a63f-439d-9cce-148abff919ad/1/G_x3OM0P0OBEf510nOajkEf9y6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/G_x3OM0P0OBEf510nOajkEf9y6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 02:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:28:8b:ae:a5:aa:02:c5:82:ee:b1:3f:18:f7:26:af:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bfc7738cd0fd0e0447f9d749ce6a39047fdcbac
Validity
Not Before: Oct 28 02:00:33 2025 GMT
Not After : Oct 29 02:00:33 2025 GMT
Subject: CN=d665e73758d787698f7865dea8e0fbaecb29f6e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:6b:2d:fd:45:c9:95:0d:54:b1:4a:32:9e:19:
10:06:9b:50:37:25:24:ee:f9:10:95:d8:2f:7b:b7:
2f:0e:3d:8e:c9:80:33:c7:eb:d8:fe:f5:d3:d3:72:
20:87:43:68:1a:64:0b:b3:ce:5a:33:5d:80:d1:42:
65:87:7c:8e:a1:a0:76:c0:d2:cf:3b:1d:8d:ef:10:
95:2c:ec:bb:5a:95:a4:61:e5:b7:3e:5b:4a:92:59:
21:ea:b8:8f:d4:7d:94:3f:18:e4:8e:a7:87:89:a6:
c9:9f:77:b4:30:05:42:b3:d4:06:f6:8e:92:7e:88:
d4:44:40:52:72:7c:39:85:f2:2c:9f:e5:7e:8a:71:
8b:da:1b:ea:c1:39:78:be:a9:a1:28:a0:2e:97:65:
19:b1:37:c2:0c:87:94:0f:94:eb:c0:47:0a:3b:1c:
5f:87:9e:5e:3c:40:05:b9:e7:5d:b2:9c:e6:1c:3e:
ea:7c:60:f6:e6:3f:42:05:d0:b6:9b:8d:c5:25:56:
79:2b:88:40:16:f4:83:f2:d3:5a:dc:20:ef:e2:2b:
37:f4:9d:4b:1b:ac:9f:31:92:cc:6d:b8:4d:6e:80:
8a:4d:5e:e6:5f:30:60:a1:61:d2:ab:8c:06:25:c5:
46:4d:49:f2:90:4b:25:9c:78:80:68:2d:c6:af:4e:
e6:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:65:E7:37:58:D7:87:69:8F:78:65:DE:A8:E0:FB:AE:CB:29:F6:E9
X509v3 Authority Key Identifier:
keyid:1B:FC:77:38:CD:0F:D0:E0:44:7F:9D:74:9C:E6:A3:90:47:FD:CB:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G_x3OM0P0OBEf510nOajkEf9y6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/708b4d-a63f-439d-9cce-148abff919ad/1/G_x3OM0P0OBEf510nOajkEf9y6w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/708b4d-a63f-439d-9cce-148abff919ad/1/G_x3OM0P0OBEf510nOajkEf9y6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:53:58:b5:57:4b:c7:4e:27:20:39:e5:09:bd:e2:f3:b5:7a:
2a:cb:48:4e:2d:a8:65:da:5c:b0:3f:f1:d9:47:d4:5e:a2:4c:
47:c6:23:5c:68:fe:26:cd:16:ff:0b:73:54:9b:71:2a:f4:8d:
46:af:f2:47:e3:3f:b3:ab:d4:14:32:16:ca:a1:79:48:7c:9c:
e1:63:7a:07:b6:8a:7e:c8:af:78:43:c5:b1:83:4a:74:c5:a6:
6f:2f:65:ad:a0:15:1a:ec:29:61:f8:1c:10:72:e2:47:69:4c:
9f:98:ef:5e:30:e8:fb:5e:a7:c7:ce:ac:47:cb:ca:72:aa:59:
2a:8a:bf:c5:f0:10:b8:ab:94:ba:b6:3c:05:6e:0d:b0:96:24:
17:49:f0:37:bd:a3:5f:12:00:ce:11:a0:38:76:ec:9d:c6:16:
c1:34:c5:ca:10:ad:27:97:37:cb:d5:8d:23:fd:bb:3e:94:61:
b5:b6:5b:2c:7f:3c:08:0f:25:54:9e:2e:2f:90:e7:2b:76:d6:
d4:23:44:15:81:50:fb:00:50:3e:4c:22:6f:05:2b:8a:df:15:
ec:f8:8c:f1:5f:1a:ad:0d:a3:e9:5e:25:19:5f:f1:37:52:a8:
ca:8a:1a:e3:62:06:67:1c:2f:6b:b7:44:83:b2:29:2b:af:3a:
9d:74:13:4a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZooi66lqgLFgu6xPxj3Jq8WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiZmM3NzM4Y2QwZmQwZTA0NDdmOWQ3NDljZTZhMzkwNDdm
ZGNiYWMwHhcNMjUxMDI4MDIwMDMzWhcNMjUxMDI5MDIwMDMzWjAzMTEwLwYDVQQD
EyhkNjY1ZTczNzU4ZDc4NzY5OGY3ODY1ZGVhOGUwZmJhZWNiMjlmNmU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApmst/UXJlQ1UsUoynhkQBptQNyUk
7vkQldgve7cvDj2OyYAzx+vY/vXT03Igh0NoGmQLs85aM12A0UJlh3yOoaB2wNLP
Ox2N7xCVLOy7WpWkYeW3PltKklkh6riP1H2UPxjkjqeHiabJn3e0MAVCs9QG9o6S
fojUREBScnw5hfIsn+V+inGL2hvqwTl4vqmhKKAul2UZsTfCDIeUD5TrwEcKOxxf
h55ePEAFueddspzmHD7qfGD25j9CBdC2m43FJVZ5K4hAFvSD8tNa3CDv4is39J1L
G6yfMZLMbbhNboCKTV7mXzBgoWHSq4wGJcVGTUnykEslnHiAaC3Gr07m8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNZl5zdY14dpj3hl3qjg+67LKfbpMB8GA1UdIwQY
MBaAFBv8dzjND9DgRH+ddJzmo5BH/cusMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR194M09NMFAwT0JFZjUxMG5PYWprRWY5eTZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS83MDhiNGQtYTYzZi00MzlkLTljY2Ut
MTQ4YWJmZjkxOWFkLzEvR194M09NMFAwT0JFZjUxMG5PYWprRWY5eTZ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS83MDhiNGQtYTYzZi00MzlkLTljY2UtMTQ4YWJmZjkxOWFk
LzEvR194M09NMFAwT0JFZjUxMG5PYWprRWY5eTZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmVNYtVdL
x04nIDnlCb3i87V6KstITi2oZdpcsD/x2UfUXqJMR8YjXGj+Js0W/wtzVJtxKvSN
Rq/yR+M/s6vUFDIWyqF5SHyc4WN6B7aKfsiveEPFsYNKdMWmby9lraAVGuwpYfgc
EHLiR2lMn5jvXjDo+16nx86sR8vKcqpZKoq/xfAQuKuUurY8BW4NsJYkF0nwN72j
XxIAzhGgOHbsncYWwTTFyhCtJ5c3y9WNI/27PpRhtbZbLH88CA8lVJ4uL5DnK3bW
1CNEFYFQ+wBQPkwibwUrit8V7PiM8V8arQ2j6V4lGV/xN1Koyooa42IGZxwva7dE
g7IpK686nXQTSg==
-----END CERTIFICATE-----
Generated at Tue Oct 28 11:10:15 2025 by rpki-client