Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/48157e-d4f8-4f2d-b96d-2d6d56d9ff4e/1/g9zjc8GLlAqXg5CycnACebMv7jo.mft
File: g9zjc8GLlAqXg5CycnACebMv7jo.mft (raw, json)
Hash identifier: snevHuSkfuFCTrTwZngilNU3ZdI2OVkes4rHnNQ6HkY=
Subject key identifier: 72:68:6E:C2:4A:AE:ED:59:D2:27:1E:56:9D:FD:4F:98:D3:53:45:54
Authority key identifier: 83:DC:E3:73:C1:8B:94:0A:97:83:90:B2:72:70:02:79:B3:2F:EE:3A
Certificate issuer: /CN=83dce373c18b940a978390b272700279b32fee3a
Certificate serial: 019A2D4413C3A9C2F27DF255295DE90285BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g9zjc8GLlAqXg5CycnACebMv7jo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/48157e-d4f8-4f2d-b96d-2d6d56d9ff4e/1/g9zjc8GLlAqXg5CycnACebMv7jo.mft
Manifest number: 16FD
Signing time: Wed 29 Oct 2025 00:00:27 +0000
Manifest this update: Wed 29 Oct 2025 00:00:27 +0000
Manifest next update: Thu 30 Oct 2025 00:00:27 +0000
Files and hashes: 1: Guy7Gbz5rPMc4iFSpd_8frqdYqs.roa (hash: atB7rNB4GngxSgp2zRWRq0GhS+DcIAMSX9Cb0N8BlB8=)
2: g9zjc8GLlAqXg5CycnACebMv7jo.crl (hash: BiTm7u8vq6W39CvVGnKh6vzyocxkMbVsiDnj5TJhdcQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/48157e-d4f8-4f2d-b96d-2d6d56d9ff4e/1/g9zjc8GLlAqXg5CycnACebMv7jo.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/48157e-d4f8-4f2d-b96d-2d6d56d9ff4e/1/g9zjc8GLlAqXg5CycnACebMv7jo.mft
rsync://rpki.ripe.net/repository/DEFAULT/g9zjc8GLlAqXg5CycnACebMv7jo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2d:44:13:c3:a9:c2:f2:7d:f2:55:29:5d:e9:02:85:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83dce373c18b940a978390b272700279b32fee3a
Validity
Not Before: Oct 29 00:00:27 2025 GMT
Not After : Oct 30 00:00:27 2025 GMT
Subject: CN=72686ec24aaeed59d2271e569dfd4f98d3534554
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:4b:d2:05:87:1d:b8:93:da:39:bb:81:96:0f:
ec:2e:30:bc:1d:2f:03:ba:a8:6c:8f:8b:98:d0:5e:
66:33:25:b6:4f:c7:39:de:04:1f:42:51:1e:c1:f1:
ad:96:6b:09:5b:bc:9f:a3:22:56:68:e4:db:97:d1:
88:fd:2e:8f:83:17:bc:4c:ce:52:d5:3d:2d:ed:bb:
60:32:b4:0e:a2:71:7c:10:b6:d8:bc:e1:28:e6:f5:
1c:d1:18:0d:3b:23:d6:a2:ad:e1:f5:25:b0:3b:8e:
8f:e3:a1:e0:ee:e3:44:76:34:ec:26:be:a1:4d:d6:
2e:c2:48:2b:f3:2f:93:66:f9:3e:12:a3:cf:18:c8:
93:57:d6:ed:63:f4:2f:83:96:7f:ff:ec:1a:ee:ba:
59:d1:c0:7e:82:1f:d4:f3:ef:9d:08:4a:75:a4:91:
98:b4:28:43:de:67:c5:66:c2:62:ae:70:07:25:71:
09:58:72:78:c8:4e:d9:c4:7f:dd:40:c5:2c:6a:5d:
4b:e6:4e:77:19:d6:9d:a5:6d:26:7f:9e:a0:af:55:
f5:0b:3a:a0:b3:fe:4f:06:eb:90:23:57:e1:7d:5f:
6e:80:61:f4:41:63:20:6d:24:95:ad:83:1b:f7:84:
df:1c:c4:b0:ce:01:bf:dd:cf:c4:1e:32:2b:06:1d:
65:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:68:6E:C2:4A:AE:ED:59:D2:27:1E:56:9D:FD:4F:98:D3:53:45:54
X509v3 Authority Key Identifier:
keyid:83:DC:E3:73:C1:8B:94:0A:97:83:90:B2:72:70:02:79:B3:2F:EE:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g9zjc8GLlAqXg5CycnACebMv7jo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/48157e-d4f8-4f2d-b96d-2d6d56d9ff4e/1/g9zjc8GLlAqXg5CycnACebMv7jo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/48157e-d4f8-4f2d-b96d-2d6d56d9ff4e/1/g9zjc8GLlAqXg5CycnACebMv7jo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:ad:37:1b:d7:80:67:10:a8:43:3c:06:ca:f2:88:e4:35:01:
ff:1e:2c:21:db:fb:74:2d:9a:52:53:c9:fd:e0:d5:b0:82:d2:
c3:53:fa:9c:5e:60:1b:44:91:51:25:0a:b5:ec:35:c1:1e:b1:
b7:6f:04:f5:26:1d:5e:c6:96:ca:65:28:b3:40:90:08:88:dd:
79:1a:93:fc:6e:b1:3b:a7:ac:c6:1a:7e:e9:3d:05:f6:85:8d:
01:7b:a8:13:d5:80:2f:b5:ae:2b:3c:3c:b3:2d:64:24:6f:b9:
8d:0e:d5:a3:c1:62:cc:43:df:2c:af:a5:ce:84:62:83:fe:5b:
f1:b7:e7:92:56:5d:77:c2:50:8b:a9:90:8c:a9:c2:03:25:73:
8d:a3:de:f1:b5:82:5f:ed:99:ff:05:98:32:71:2d:a8:86:2d:
92:f9:9d:85:f9:ea:a8:d9:b9:32:2b:59:63:6f:4b:af:f3:e8:
c7:f7:d4:c1:49:10:ad:73:ca:c5:ac:c8:a0:25:76:65:f0:e7:
0b:2e:6f:0b:af:6c:ce:7f:1f:88:43:8b:38:e6:7a:a9:92:e6:
c1:88:9d:23:dd:f1:9b:d1:72:14:55:fa:90:a8:0e:43:74:55:
c7:e8:0b:31:67:04:85:67:e1:7e:f3:32:33:97:78:f3:fc:a1:
77:6e:c2:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZotRBPDqcLyffJVKV3pAoW6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzZGNlMzczYzE4Yjk0MGE5NzgzOTBiMjcyNzAwMjc5YjMy
ZmVlM2EwHhcNMjUxMDI5MDAwMDI3WhcNMjUxMDMwMDAwMDI3WjAzMTEwLwYDVQQD
Eyg3MjY4NmVjMjRhYWVlZDU5ZDIyNzFlNTY5ZGZkNGY5OGQzNTM0NTU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkEvSBYcduJPaObuBlg/sLjC8HS8D
uqhsj4uY0F5mMyW2T8c53gQfQlEewfGtlmsJW7yfoyJWaOTbl9GI/S6Pgxe8TM5S
1T0t7btgMrQOonF8ELbYvOEo5vUc0RgNOyPWoq3h9SWwO46P46Hg7uNEdjTsJr6h
TdYuwkgr8y+TZvk+EqPPGMiTV9btY/Qvg5Z//+wa7rpZ0cB+gh/U8++dCEp1pJGY
tChD3mfFZsJirnAHJXEJWHJ4yE7ZxH/dQMUsal1L5k53GdadpW0mf56gr1X1Czqg
s/5PBuuQI1fhfV9ugGH0QWMgbSSVrYMb94TfHMSwzgG/3c/EHjIrBh1l5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHJobsJKru1Z0iceVp39T5jTU0VUMB8GA1UdIwQY
MBaAFIPc43PBi5QKl4OQsnJwAnmzL+46MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZzl6amM4R0xsQXFYZzVDeWNuQUNlYk12N2pvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC80ODE1N2UtZDRmOC00ZjJkLWI5NmQt
MmQ2ZDU2ZDlmZjRlLzEvZzl6amM4R0xsQXFYZzVDeWNuQUNlYk12N2pvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC80ODE1N2UtZDRmOC00ZjJkLWI5NmQtMmQ2ZDU2ZDlmZjRl
LzEvZzl6amM4R0xsQXFYZzVDeWNuQUNlYk12N2pvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIa03G9eA
ZxCoQzwGyvKI5DUB/x4sIdv7dC2aUlPJ/eDVsILSw1P6nF5gG0SRUSUKtew1wR6x
t28E9SYdXsaWymUos0CQCIjdeRqT/G6xO6esxhp+6T0F9oWNAXuoE9WAL7WuKzw8
sy1kJG+5jQ7Vo8FizEPfLK+lzoRig/5b8bfnklZdd8JQi6mQjKnCAyVzjaPe8bWC
X+2Z/wWYMnEtqIYtkvmdhfnqqNm5MitZY29Lr/Pox/fUwUkQrXPKxazIoCV2ZfDn
Cy5vC69szn8fiEOLOOZ6qZLmwYidI93xm9FyFFX6kKgOQ3RVx+gLMWcEhWfhfvMy
M5d48/yhd27Cow==
-----END CERTIFICATE-----
Generated at Wed Oct 29 02:39:24 2025 by rpki-client