Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/fc282c-cd7c-435a-aab4-b25e9dcb466e/1/gmkF0cEWiypmBwmtsg80xuTAPX8.mft
File: gmkF0cEWiypmBwmtsg80xuTAPX8.mft (raw, json)
Hash identifier: FEzsJJXVzezSgDHD6LoDcYLF54Mg13pgh8clurpoHN0=
Subject key identifier: B6:0A:6A:09:9D:C9:FC:8C:70:9D:39:C8:02:5A:93:CD:10:27:AD:18
Authority key identifier: 82:69:05:D1:C1:16:8B:2A:66:07:09:AD:B2:0F:34:C6:E4:C0:3D:7F
Certificate issuer: /CN=826905d1c1168b2a660709adb20f34c6e4c03d7f
Certificate serial: 019A27E6F18289B1D382AC56BEEDE924E887
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gmkF0cEWiypmBwmtsg80xuTAPX8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/fc282c-cd7c-435a-aab4-b25e9dcb466e/1/gmkF0cEWiypmBwmtsg80xuTAPX8.mft
Manifest number: 16F9
Signing time: Mon 27 Oct 2025 23:00:37 +0000
Manifest this update: Mon 27 Oct 2025 23:00:37 +0000
Manifest next update: Tue 28 Oct 2025 23:00:37 +0000
Files and hashes: 1: YsPCa2LhHTzsReR9IeNzv5T3mos.roa (hash: LDFsTcsV1AxqY+xNyJv9Hm+hGyPSKYS1sTcP7lh9G1w=)
2: gmkF0cEWiypmBwmtsg80xuTAPX8.crl (hash: 1rekNqm5vFqJ8FuVU8Gs/lSYwsXh4IEidrl0VKv6JzA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/fc282c-cd7c-435a-aab4-b25e9dcb466e/1/gmkF0cEWiypmBwmtsg80xuTAPX8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/fc282c-cd7c-435a-aab4-b25e9dcb466e/1/gmkF0cEWiypmBwmtsg80xuTAPX8.mft
rsync://rpki.ripe.net/repository/DEFAULT/gmkF0cEWiypmBwmtsg80xuTAPX8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 23:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:27:e6:f1:82:89:b1:d3:82:ac:56:be:ed:e9:24:e8:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=826905d1c1168b2a660709adb20f34c6e4c03d7f
Validity
Not Before: Oct 27 23:00:37 2025 GMT
Not After : Oct 28 23:00:37 2025 GMT
Subject: CN=b60a6a099dc9fc8c709d39c8025a93cd1027ad18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:bb:82:a6:4c:64:1d:43:1e:1a:93:96:25:f5:
8f:79:96:c6:ad:dc:be:78:e0:5c:04:5d:76:5f:c8:
18:f3:ef:d8:5c:92:e2:ca:79:a0:82:c3:fb:66:12:
47:ab:3b:32:27:66:d6:21:bd:a8:33:54:68:34:ae:
59:73:3f:03:e2:26:11:60:a0:4d:33:07:ef:83:a3:
11:f6:5a:10:3a:1e:4f:f3:70:c4:f6:e2:48:53:4b:
83:00:fb:08:f6:99:29:fd:28:c5:ab:34:22:c1:70:
23:28:5e:e4:cc:f2:84:55:04:14:2a:b5:ea:5f:38:
f5:ef:85:77:58:07:81:e5:70:20:f8:72:3a:67:b1:
9b:5a:9d:86:be:b8:97:6c:4d:a9:1a:b5:da:c8:1b:
df:66:72:a2:25:55:57:93:23:11:a1:5b:2c:61:c8:
5e:23:95:d1:54:31:ef:91:ea:f8:b1:10:05:97:b0:
04:ba:5e:5d:de:db:54:f8:cd:3e:59:45:22:4f:43:
14:7a:80:84:04:e7:ef:8d:dc:13:fb:8b:e8:27:87:
87:ad:82:4d:b5:79:a2:c5:3f:8d:cb:4b:dd:11:e6:
1b:16:d2:05:c9:8e:68:c1:70:fc:f5:4b:23:d7:3f:
c6:73:63:74:66:db:a8:f6:1f:91:6c:0d:b0:13:1d:
92:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:0A:6A:09:9D:C9:FC:8C:70:9D:39:C8:02:5A:93:CD:10:27:AD:18
X509v3 Authority Key Identifier:
keyid:82:69:05:D1:C1:16:8B:2A:66:07:09:AD:B2:0F:34:C6:E4:C0:3D:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmkF0cEWiypmBwmtsg80xuTAPX8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/fc282c-cd7c-435a-aab4-b25e9dcb466e/1/gmkF0cEWiypmBwmtsg80xuTAPX8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/fc282c-cd7c-435a-aab4-b25e9dcb466e/1/gmkF0cEWiypmBwmtsg80xuTAPX8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:da:b9:0c:94:cd:42:18:03:df:40:ea:1f:bc:a8:12:d9:dd:
0b:88:12:2e:65:9e:fc:81:9b:8c:5e:26:ac:7c:db:ef:27:6c:
b8:e5:db:bf:52:7e:df:07:96:12:4b:9b:4b:45:ca:08:ee:ab:
93:e0:ec:9e:54:7a:cc:e0:18:98:a2:a1:9e:b9:d7:52:69:0f:
17:36:95:c6:14:d0:df:a2:b5:c0:9e:90:6d:f4:19:84:45:27:
82:c7:df:42:63:a4:30:9d:8e:8a:db:54:91:cc:a7:12:d3:23:
64:6b:ca:e5:9f:8d:51:39:6b:b4:d2:8d:0e:95:16:b4:43:52:
2e:60:5f:c8:1f:d2:87:84:3f:8b:08:04:1d:be:b7:53:d4:b5:
8a:4d:f6:27:5c:55:af:71:c6:f3:9a:e1:c4:cd:3d:83:49:eb:
b6:43:82:83:ae:95:ce:81:70:2f:b3:45:a6:9d:87:65:a0:f0:
53:18:ab:76:7e:76:76:98:4e:8f:58:87:aa:34:aa:bb:9b:4f:
d0:32:49:e8:d2:3f:32:c5:18:22:f3:6f:d3:39:f3:eb:a3:0c:
c6:99:42:70:1f:f7:4a:73:4a:c4:bf:05:c6:e5:e1:ae:bd:88:
f2:b4:04:82:af:f5:76:d6:18:c1:aa:a2:8d:21:cf:3b:7e:bd:
aa:29:2d:ca
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZon5vGCibHTgqxWvu3pJOiHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyNjkwNWQxYzExNjhiMmE2NjA3MDlhZGIyMGYzNGM2ZTRj
MDNkN2YwHhcNMjUxMDI3MjMwMDM3WhcNMjUxMDI4MjMwMDM3WjAzMTEwLwYDVQQD
EyhiNjBhNmEwOTlkYzlmYzhjNzA5ZDM5YzgwMjVhOTNjZDEwMjdhZDE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAubuCpkxkHUMeGpOWJfWPeZbGrdy+
eOBcBF12X8gY8+/YXJLiynmggsP7ZhJHqzsyJ2bWIb2oM1RoNK5Zcz8D4iYRYKBN
Mwfvg6MR9loQOh5P83DE9uJIU0uDAPsI9pkp/SjFqzQiwXAjKF7kzPKEVQQUKrXq
Xzj174V3WAeB5XAg+HI6Z7GbWp2GvriXbE2pGrXayBvfZnKiJVVXkyMRoVssYche
I5XRVDHvker4sRAFl7AEul5d3ttU+M0+WUUiT0MUeoCEBOfvjdwT+4voJ4eHrYJN
tXmixT+Ny0vdEeYbFtIFyY5owXD89Usj1z/Gc2N0Ztuo9h+RbA2wEx2S0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLYKagmdyfyMcJ05yAJak80QJ60YMB8GA1UdIwQY
MBaAFIJpBdHBFosqZgcJrbIPNMbkwD1/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ21rRjBjRVdpeXBtQndtdHNnODB4dVRBUFg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS9mYzI4MmMtY2Q3Yy00MzVhLWFhYjQt
YjI1ZTlkY2I0NjZlLzEvZ21rRjBjRVdpeXBtQndtdHNnODB4dVRBUFg4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS9mYzI4MmMtY2Q3Yy00MzVhLWFhYjQtYjI1ZTlkY2I0NjZl
LzEvZ21rRjBjRVdpeXBtQndtdHNnODB4dVRBUFg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAadq5DJTN
QhgD30DqH7yoEtndC4gSLmWe/IGbjF4mrHzb7ydsuOXbv1J+3weWEkubS0XKCO6r
k+DsnlR6zOAYmKKhnrnXUmkPFzaVxhTQ36K1wJ6QbfQZhEUngsffQmOkMJ2OittU
kcynEtMjZGvK5Z+NUTlrtNKNDpUWtENSLmBfyB/Sh4Q/iwgEHb63U9S1ik32J1xV
r3HG85rhxM09g0nrtkOCg66VzoFwL7NFpp2HZaDwUxirdn52dphOj1iHqjSqu5tP
0DJJ6NI/MsUYIvNv0znz66MMxplCcB/3SnNKxL8FxuXhrr2I8rQEgq/1dtYYwaqi
jSHPO369qiktyg==
-----END CERTIFICATE-----
Generated at Tue Oct 28 06:19:00 2025 by rpki-client