Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/c2cf4c-78e2-49b5-80e7-57b0dcd7e8af/1/GI8TycwU9V7iIgtEl2mS0R1d6HE.mft
File: GI8TycwU9V7iIgtEl2mS0R1d6HE.mft (raw, json)
Hash identifier: wUgtwl82+ZU6BvhNyC2KWqaP/fZrF7rrv9NtZlQC+2w=
Subject key identifier: 8C:22:05:90:FE:CB:88:63:87:9F:14:07:32:CC:EE:F1:A8:C3:E1:17
Authority key identifier: 18:8F:13:C9:CC:14:F5:5E:E2:22:0B:44:97:69:92:D1:1D:5D:E8:71
Certificate issuer: /CN=188f13c9cc14f55ee2220b44976992d11d5de871
Certificate serial: 019A70DC0844F316D532F2DFBC14537F0A4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GI8TycwU9V7iIgtEl2mS0R1d6HE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/c2cf4c-78e2-49b5-80e7-57b0dcd7e8af/1/GI8TycwU9V7iIgtEl2mS0R1d6HE.mft
Manifest number: 15
Signing time: Tue 11 Nov 2025 03:00:59 +0000
Manifest this update: Tue 11 Nov 2025 03:00:59 +0000
Manifest next update: Wed 12 Nov 2025 03:00:59 +0000
Files and hashes: 1: AGfqt0Fez0MZXwHxBwMvHI2laJc.roa (hash: 3flR0vw+7HV07hNU6MM3VzWxFgugACGxcRcbeKB+uUo=)
2: GI8TycwU9V7iIgtEl2mS0R1d6HE.crl (hash: cauqOEsEbQENye5wzveR/PTJ897ItC7DkhNzKhHTNRk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/c2cf4c-78e2-49b5-80e7-57b0dcd7e8af/1/GI8TycwU9V7iIgtEl2mS0R1d6HE.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/c2cf4c-78e2-49b5-80e7-57b0dcd7e8af/1/GI8TycwU9V7iIgtEl2mS0R1d6HE.mft
rsync://rpki.ripe.net/repository/DEFAULT/GI8TycwU9V7iIgtEl2mS0R1d6HE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:dc:08:44:f3:16:d5:32:f2:df:bc:14:53:7f:0a:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=188f13c9cc14f55ee2220b44976992d11d5de871
Validity
Not Before: Nov 11 03:00:59 2025 GMT
Not After : Nov 12 03:00:59 2025 GMT
Subject: CN=8c220590fecb8863879f140732cceef1a8c3e117
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d9:54:a5:a3:c0:e7:4b:7c:71:bd:52:ae:2f:
01:97:7f:2b:5f:91:7b:7f:84:80:6c:31:ff:b2:0d:
7a:2f:32:90:95:28:58:e2:db:0a:70:77:2c:fe:2b:
eb:53:31:e8:e4:32:07:9b:37:22:ca:26:ed:38:50:
c6:10:dd:27:fa:05:06:ae:e1:be:0c:7c:8d:4d:86:
87:fc:cc:21:71:cd:42:24:12:93:25:8b:90:29:c2:
c8:cb:17:e3:9f:21:51:eb:1c:e9:3a:04:22:9f:d0:
ca:bb:c1:b2:60:cc:e3:6e:2f:04:ce:95:ed:a3:83:
51:81:59:a5:1d:62:11:36:60:06:f2:d4:f1:a3:33:
e5:6f:c1:8a:4a:0f:04:d3:e0:ad:bb:a3:4f:6a:28:
c8:a7:d4:62:a8:0b:67:31:11:bb:3d:58:51:34:51:
01:23:8d:00:3b:59:79:6f:ad:e8:a4:4e:75:3e:a3:
93:bd:61:ac:18:23:8d:d3:21:d7:6e:78:d7:78:c5:
93:8e:4d:79:f7:dc:81:61:a2:43:c6:c0:09:95:e6:
ba:6c:2d:dd:f7:93:da:27:67:e5:0e:ed:6f:73:57:
95:d1:df:9f:d3:a3:3a:a6:94:ed:c0:c0:fc:c3:f1:
89:11:4e:38:a3:17:ba:5d:c5:fb:51:5f:10:e2:6d:
8c:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:22:05:90:FE:CB:88:63:87:9F:14:07:32:CC:EE:F1:A8:C3:E1:17
X509v3 Authority Key Identifier:
keyid:18:8F:13:C9:CC:14:F5:5E:E2:22:0B:44:97:69:92:D1:1D:5D:E8:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GI8TycwU9V7iIgtEl2mS0R1d6HE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/c2cf4c-78e2-49b5-80e7-57b0dcd7e8af/1/GI8TycwU9V7iIgtEl2mS0R1d6HE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/c2cf4c-78e2-49b5-80e7-57b0dcd7e8af/1/GI8TycwU9V7iIgtEl2mS0R1d6HE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:54:cb:d0:7e:ef:62:74:b5:45:3e:41:38:49:9c:25:0e:c4:
b9:fc:1e:5b:d8:c2:27:8b:ff:67:a2:e1:a9:04:d3:79:f7:6c:
11:d3:14:a3:6e:a6:8d:fc:6b:48:7b:79:3c:2d:11:c6:22:11:
a6:76:46:d0:90:0c:d8:7e:36:7b:95:7a:28:34:89:00:f9:d0:
d6:03:fa:5d:e5:33:06:62:a3:d0:5c:01:86:33:f9:c9:34:da:
50:d9:1e:c9:fa:0a:f0:c1:e2:86:5e:fd:31:fd:f8:d1:c4:9d:
a9:b4:67:b7:ba:ce:c8:b5:68:00:c2:58:82:0f:f9:62:2a:cb:
e8:8a:bf:ca:21:13:3a:03:7e:8d:c6:5a:ca:bb:1f:8f:b9:d7:
c1:5a:70:50:94:42:06:11:73:ee:59:3b:20:2f:e8:87:41:47:
cc:90:22:f7:65:ae:6d:f5:b0:91:6a:21:ff:54:12:86:5c:a0:
79:5d:51:40:ef:7c:c7:41:1e:eb:e2:76:22:c5:db:02:af:e0:
3c:1b:b7:3f:5b:2f:4d:cb:e8:34:6d:ec:a6:2f:55:36:76:ad:
98:6f:a2:fe:fb:24:ca:67:e4:04:21:0a:6f:7a:81:fc:d8:b1:
18:f6:8f:28:26:4a:a2:b9:d1:fc:81:96:31:58:f7:bd:3c:b1:
f5:50:f8:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpw3AhE8xbVMvLfvBRTfwpOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE4OGYxM2M5Y2MxNGY1NWVlMjIyMGI0NDk3Njk5MmQxMWQ1
ZGU4NzEwHhcNMjUxMTExMDMwMDU5WhcNMjUxMTEyMDMwMDU5WjAzMTEwLwYDVQQD
Eyg4YzIyMDU5MGZlY2I4ODYzODc5ZjE0MDczMmNjZWVmMWE4YzNlMTE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAttlUpaPA50t8cb1Sri8Bl38rX5F7
f4SAbDH/sg16LzKQlShY4tsKcHcs/ivrUzHo5DIHmzciyibtOFDGEN0n+gUGruG+
DHyNTYaH/Mwhcc1CJBKTJYuQKcLIyxfjnyFR6xzpOgQin9DKu8GyYMzjbi8EzpXt
o4NRgVmlHWIRNmAG8tTxozPlb8GKSg8E0+Ctu6NPaijIp9RiqAtnMRG7PVhRNFEB
I40AO1l5b63opE51PqOTvWGsGCON0yHXbnjXeMWTjk1599yBYaJDxsAJlea6bC3d
95PaJ2flDu1vc1eV0d+f06M6ppTtwMD8w/GJEU44oxe6XcX7UV8Q4m2MAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIwiBZD+y4hjh58UBzLM7vGow+EXMB8GA1UdIwQY
MBaAFBiPE8nMFPVe4iILRJdpktEdXehxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR0k4VHljd1U5VjdpSWd0RWwybVMwUjFkNkhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny9jMmNmNGMtNzhlMi00OWI1LTgwZTct
NTdiMGRjZDdlOGFmLzEvR0k4VHljd1U5VjdpSWd0RWwybVMwUjFkNkhFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny9jMmNmNGMtNzhlMi00OWI1LTgwZTctNTdiMGRjZDdlOGFm
LzEvR0k4VHljd1U5VjdpSWd0RWwybVMwUjFkNkhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAflTL0H7v
YnS1RT5BOEmcJQ7EufweW9jCJ4v/Z6LhqQTTefdsEdMUo26mjfxrSHt5PC0RxiIR
pnZG0JAM2H42e5V6KDSJAPnQ1gP6XeUzBmKj0FwBhjP5yTTaUNkeyfoK8MHihl79
Mf340cSdqbRnt7rOyLVoAMJYgg/5YirL6Iq/yiETOgN+jcZayrsfj7nXwVpwUJRC
BhFz7lk7IC/oh0FHzJAi92WubfWwkWoh/1QShlygeV1RQO98x0Ee6+J2IsXbAq/g
PBu3P1svTcvoNG3spi9VNnatmG+i/vskymfkBCEKb3qB/NixGPaPKCZKornR/IGW
MVj3vTyx9VD4WQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:37:29 2025 by rpki-client