
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/0915cf-c6d8-4100-90b3-9d53ac2f8e7f/1/gcGu10qtBrG4XFumd5wWH0pSs8Q.mft
File: gcGu10qtBrG4XFumd5wWH0pSs8Q.mft (raw, json)
Hash identifier: Zaec4v8BFU5tJ48uJ7UJOm/JmXid9++BPOMEaqdu960=
Subject key identifier: F7:BF:BA:0F:90:FF:90:7A:9D:21:98:C8:9A:DF:FA:AF:E5:5A:C5:15
Authority key identifier: 81:C1:AE:D7:4A:AD:06:B1:B8:5C:5B:A6:77:9C:16:1F:4A:52:B3:C4
Certificate issuer: /CN=81c1aed74aad06b1b85c5ba6779c161f4a52b3c4
Certificate serial: 019A2B1E6EAD7596F3D3162AD4C35B87E314
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gcGu10qtBrG4XFumd5wWH0pSs8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/0915cf-c6d8-4100-90b3-9d53ac2f8e7f/1/gcGu10qtBrG4XFumd5wWH0pSs8Q.mft
Manifest number: 16FB
Signing time: Tue 28 Oct 2025 14:00:05 +0000
Manifest this update: Tue 28 Oct 2025 14:00:05 +0000
Manifest next update: Wed 29 Oct 2025 14:00:05 +0000
Files and hashes: 1: EgJWkP_ATvd-WaK0hqp6IaIW95g.roa (hash: Qp/vVw2n2OIqo8aQ+vDa79aTq8YN8BxSb8x/nDkT+pg=)
2: gcGu10qtBrG4XFumd5wWH0pSs8Q.crl (hash: l5raIyfnHc+1QTRsqCn4LvRaa9ymnemz1vY03UdBSfo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/0915cf-c6d8-4100-90b3-9d53ac2f8e7f/1/gcGu10qtBrG4XFumd5wWH0pSs8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/0915cf-c6d8-4100-90b3-9d53ac2f8e7f/1/gcGu10qtBrG4XFumd5wWH0pSs8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/gcGu10qtBrG4XFumd5wWH0pSs8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 14:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2b:1e:6e:ad:75:96:f3:d3:16:2a:d4:c3:5b:87:e3:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81c1aed74aad06b1b85c5ba6779c161f4a52b3c4
Validity
Not Before: Oct 28 14:00:05 2025 GMT
Not After : Oct 29 14:00:05 2025 GMT
Subject: CN=f7bfba0f90ff907a9d2198c89adffaafe55ac515
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:98:1c:e0:a4:17:ee:14:26:f0:e2:fd:63:6a:
4b:06:67:64:c2:52:e8:fa:e9:26:44:5d:c3:fe:41:
bb:6c:8a:1f:64:d4:24:07:66:c8:a0:ce:04:c6:5b:
ae:4e:7b:79:65:92:8a:80:e8:23:ee:e2:8b:73:ec:
e8:26:1e:bf:d8:ac:58:eb:2e:28:dc:8d:be:b5:34:
8b:ee:5f:78:71:fc:b0:71:a3:62:c3:e9:84:e0:67:
3a:89:68:27:0b:c3:a9:b8:07:d6:54:31:93:28:04:
2c:5f:0e:01:10:c1:02:5d:db:80:ed:aa:79:37:d9:
24:c2:f0:f8:34:41:2a:9c:88:f9:e8:bf:d8:38:6f:
8d:8b:3d:72:8c:32:ff:20:2f:79:fc:ff:75:28:76:
8f:99:d2:60:95:61:06:1d:f5:12:32:75:d3:ce:42:
63:9a:3c:f8:d4:20:e6:e1:39:e9:e7:69:5a:0c:fd:
25:2c:12:8c:9b:6e:9e:3e:ab:c8:50:06:cf:2d:8f:
5e:ac:8a:e1:ac:ba:ab:ce:db:24:d7:50:22:3b:b4:
35:dc:d4:d8:66:d6:2e:c3:c2:a2:a9:c3:6a:7e:f7:
d0:2a:0e:c7:31:77:75:d8:58:f1:34:87:82:88:e4:
f4:be:0f:38:90:0f:92:c2:bf:32:43:ce:e6:77:55:
0b:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:BF:BA:0F:90:FF:90:7A:9D:21:98:C8:9A:DF:FA:AF:E5:5A:C5:15
X509v3 Authority Key Identifier:
keyid:81:C1:AE:D7:4A:AD:06:B1:B8:5C:5B:A6:77:9C:16:1F:4A:52:B3:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gcGu10qtBrG4XFumd5wWH0pSs8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/0915cf-c6d8-4100-90b3-9d53ac2f8e7f/1/gcGu10qtBrG4XFumd5wWH0pSs8Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/0915cf-c6d8-4100-90b3-9d53ac2f8e7f/1/gcGu10qtBrG4XFumd5wWH0pSs8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:df:95:d4:ae:87:6e:d0:b3:43:04:89:56:e9:e4:ea:ba:24:
d5:51:77:11:84:78:66:12:cd:03:ac:c4:3f:87:e0:b2:d0:76:
51:c7:6a:35:a0:5c:fc:f2:39:8f:9c:e4:15:bf:c0:60:0d:df:
49:f9:13:22:16:8c:9c:60:d9:21:11:6d:45:ce:5a:3e:f4:ec:
df:a0:fa:15:bb:e0:55:71:a4:31:91:d3:aa:f9:1e:a5:83:4c:
8b:66:23:6c:15:99:95:5c:de:b4:e1:e0:30:2f:a8:e4:5b:fd:
45:50:78:7d:19:91:3d:63:c7:83:6c:ae:b9:36:54:b5:34:6f:
79:d3:57:41:01:c1:bc:40:05:3a:11:df:40:96:62:2c:cc:c3:
71:87:34:03:f0:6d:77:f2:5f:d9:50:e0:fc:69:e6:ed:26:5a:
a3:8e:21:8d:ff:d8:a6:69:50:62:5b:a1:45:58:42:99:43:13:
f1:94:46:3b:27:6e:6e:6c:2c:92:09:58:64:a0:2d:21:11:e8:
cd:09:e2:91:de:02:c6:83:f9:da:43:16:09:3c:07:54:c4:25:
0e:cd:45:fe:cb:81:11:5e:24:e8:cf:20:56:b9:ff:b0:b7:b7:
fe:5b:7f:1d:fe:dc:e2:45:ea:49:a3:0b:1a:40:fc:29:26:ad:
d2:60:c2:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZorHm6tdZbz0xYq1MNbh+MUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxYzFhZWQ3NGFhZDA2YjFiODVjNWJhNjc3OWMxNjFmNGE1
MmIzYzQwHhcNMjUxMDI4MTQwMDA1WhcNMjUxMDI5MTQwMDA1WjAzMTEwLwYDVQQD
EyhmN2JmYmEwZjkwZmY5MDdhOWQyMTk4Yzg5YWRmZmFhZmU1NWFjNTE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApJgc4KQX7hQm8OL9Y2pLBmdkwlLo
+ukmRF3D/kG7bIofZNQkB2bIoM4ExluuTnt5ZZKKgOgj7uKLc+zoJh6/2KxY6y4o
3I2+tTSL7l94cfywcaNiw+mE4Gc6iWgnC8OpuAfWVDGTKAQsXw4BEMECXduA7ap5
N9kkwvD4NEEqnIj56L/YOG+Niz1yjDL/IC95/P91KHaPmdJglWEGHfUSMnXTzkJj
mjz41CDm4Tnp52laDP0lLBKMm26ePqvIUAbPLY9erIrhrLqrztsk11AiO7Q13NTY
ZtYuw8KiqcNqfvfQKg7HMXd12FjxNIeCiOT0vg84kA+Swr8yQ87md1UL+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPe/ug+Q/5B6nSGYyJrf+q/lWsUVMB8GA1UdIwQY
MBaAFIHBrtdKrQaxuFxbpnecFh9KUrPEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ2NHdTEwcXRCckc0WEZ1bWQ1d1dIMHBTczhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS8wOTE1Y2YtYzZkOC00MTAwLTkwYjMt
OWQ1M2FjMmY4ZTdmLzEvZ2NHdTEwcXRCckc0WEZ1bWQ1d1dIMHBTczhRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS8wOTE1Y2YtYzZkOC00MTAwLTkwYjMtOWQ1M2FjMmY4ZTdm
LzEvZ2NHdTEwcXRCckc0WEZ1bWQ1d1dIMHBTczhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdd+V1K6H
btCzQwSJVunk6rok1VF3EYR4ZhLNA6zEP4fgstB2UcdqNaBc/PI5j5zkFb/AYA3f
SfkTIhaMnGDZIRFtRc5aPvTs36D6FbvgVXGkMZHTqvkepYNMi2YjbBWZlVzetOHg
MC+o5Fv9RVB4fRmRPWPHg2yuuTZUtTRvedNXQQHBvEAFOhHfQJZiLMzDcYc0A/Bt
d/Jf2VDg/Gnm7SZao44hjf/YpmlQYluhRVhCmUMT8ZRGOydubmwskglYZKAtIRHo
zQnikd4CxoP52kMWCTwHVMQlDs1F/suBEV4k6M8gVrn/sLe3/lt/Hf7c4kXqSaML
GkD8KSat0mDCPA==
-----END CERTIFICATE-----
Generated at Tue Oct 28 17:04:11 2025 by rpki-client