Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/62afbb-b8f8-4b12-9193-1c5107cab353/1/Gnyv3jE1omvdQXkCnuv3QU6WQ68.mft
File: Gnyv3jE1omvdQXkCnuv3QU6WQ68.mft (raw, json)
Hash identifier: 0T4Pg+lRer6UxSMxP1ovs309ZdBz/KjZQnplCHe+86A=
Subject key identifier: C8:6F:6B:CE:14:A2:EB:84:F5:1E:DD:05:BD:8A:F1:F0:7F:E0:99:B7
Authority key identifier: 1A:7C:AF:DE:31:35:A2:6B:DD:41:79:02:9E:EB:F7:41:4E:96:43:AF
Certificate issuer: /CN=1a7cafde3135a26bdd4179029eebf7414e9643af
Certificate serial: 019A29678C1908FB340162B6AD76F0A76909
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gnyv3jE1omvdQXkCnuv3QU6WQ68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/62afbb-b8f8-4b12-9193-1c5107cab353/1/Gnyv3jE1omvdQXkCnuv3QU6WQ68.mft
Manifest number: 16F5
Signing time: Tue 28 Oct 2025 06:00:43 +0000
Manifest this update: Tue 28 Oct 2025 06:00:43 +0000
Manifest next update: Wed 29 Oct 2025 06:00:43 +0000
Files and hashes: 1: 1Cpy8hReysvqo6rJK2S7mrGPkKE.roa (hash: D4UL2BT0SqLhRGOh0lwv2Oqr8FVnOBm4wqYMVb3RDbk=)
2: Gnyv3jE1omvdQXkCnuv3QU6WQ68.crl (hash: n1uxAe/2fvcqZCZbaVKyFfJPKidwkf3AgnbrCwRmoZU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/62afbb-b8f8-4b12-9193-1c5107cab353/1/Gnyv3jE1omvdQXkCnuv3QU6WQ68.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/62afbb-b8f8-4b12-9193-1c5107cab353/1/Gnyv3jE1omvdQXkCnuv3QU6WQ68.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gnyv3jE1omvdQXkCnuv3QU6WQ68.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 06:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:29:67:8c:19:08:fb:34:01:62:b6:ad:76:f0:a7:69:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a7cafde3135a26bdd4179029eebf7414e9643af
Validity
Not Before: Oct 28 06:00:43 2025 GMT
Not After : Oct 29 06:00:43 2025 GMT
Subject: CN=c86f6bce14a2eb84f51edd05bd8af1f07fe099b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c0:53:68:13:63:6f:8e:3a:9e:f1:08:f4:60:
b8:ca:96:3d:5d:7a:80:88:eb:44:a3:77:c9:c4:ce:
03:a0:80:6e:24:26:fc:fa:c9:3b:89:26:db:ca:2d:
11:a7:cd:76:30:87:ae:63:22:36:c0:bd:58:7d:aa:
cf:72:c0:05:4f:d5:5f:8e:84:8a:32:3e:99:6e:65:
2c:5a:31:05:71:e8:b3:f6:33:43:5f:c4:6e:6c:d8:
aa:bd:50:be:90:f3:dc:72:e9:fc:7d:32:15:6f:0f:
04:ed:99:52:1f:58:f5:c3:72:00:e7:e8:37:a5:b0:
a3:4b:c2:fe:0c:90:7c:61:45:f4:b2:18:e1:df:c6:
40:47:e8:aa:f0:8b:de:ea:ba:d9:6e:ef:9d:f6:ad:
24:48:d8:fb:87:18:d9:18:6b:c9:c6:1a:10:9e:64:
6b:62:b1:06:71:6d:96:ff:4f:0a:0a:9d:0e:da:92:
55:27:ec:b7:78:8a:1d:b9:3e:92:ca:6d:dc:16:24:
cc:80:10:2d:db:59:91:98:47:85:82:64:2f:c1:d0:
69:29:63:18:ad:8c:a3:35:ec:b0:ea:f9:12:af:6e:
bc:b1:8d:2c:b2:74:ba:3f:7d:35:89:10:33:4d:cc:
6c:03:8e:f3:7e:b9:5b:35:48:23:e9:07:9f:0f:c1:
db:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:6F:6B:CE:14:A2:EB:84:F5:1E:DD:05:BD:8A:F1:F0:7F:E0:99:B7
X509v3 Authority Key Identifier:
keyid:1A:7C:AF:DE:31:35:A2:6B:DD:41:79:02:9E:EB:F7:41:4E:96:43:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gnyv3jE1omvdQXkCnuv3QU6WQ68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/62afbb-b8f8-4b12-9193-1c5107cab353/1/Gnyv3jE1omvdQXkCnuv3QU6WQ68.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/62afbb-b8f8-4b12-9193-1c5107cab353/1/Gnyv3jE1omvdQXkCnuv3QU6WQ68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:1b:c4:65:3b:5d:7f:53:2b:3f:cb:73:06:f4:24:c3:52:d3:
e0:b9:4f:e2:5a:fd:17:6d:c6:7d:13:a9:88:72:83:a5:26:d5:
6b:42:a2:b1:af:dd:04:a3:c6:63:d3:58:b2:16:bb:16:a5:59:
48:42:ac:e9:f3:a2:f3:6b:c8:96:4d:4f:a6:00:b6:27:a2:4d:
7c:de:b3:7f:65:3d:18:3c:71:b8:56:0d:1e:c1:23:96:58:4f:
ae:81:3b:f0:a6:aa:df:c2:ff:62:80:73:b5:2d:54:7b:5c:0e:
90:8d:b0:e5:b5:39:47:36:aa:72:85:a8:c7:12:f1:35:02:1b:
78:68:52:64:a0:fc:ca:57:bf:47:7f:92:72:b9:9b:fe:f0:48:
7a:c0:37:1c:11:db:6a:32:31:98:e1:a4:f9:a6:3a:ca:91:c2:
06:75:a9:f6:71:d1:9e:20:a4:7c:c2:c9:4f:4d:d2:f3:2f:f0:
82:02:91:30:2e:fb:2d:15:97:7f:3a:41:f7:96:96:b7:ab:d7:
6e:fa:63:68:1e:75:6e:9f:ae:6e:77:cc:e1:6a:d7:86:6a:19:
70:14:40:8e:da:3a:7b:ce:6f:93:d3:5e:55:45:9c:20:6a:29:
79:04:13:25:04:08:2e:f6:97:ba:ba:e0:b6:9c:a9:c7:0f:ea:
4e:73:a4:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZopZ4wZCPs0AWK2rXbwp2kJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhN2NhZmRlMzEzNWEyNmJkZDQxNzkwMjllZWJmNzQxNGU5
NjQzYWYwHhcNMjUxMDI4MDYwMDQzWhcNMjUxMDI5MDYwMDQzWjAzMTEwLwYDVQQD
EyhjODZmNmJjZTE0YTJlYjg0ZjUxZWRkMDViZDhhZjFmMDdmZTA5OWI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAscBTaBNjb446nvEI9GC4ypY9XXqA
iOtEo3fJxM4DoIBuJCb8+sk7iSbbyi0Rp812MIeuYyI2wL1YfarPcsAFT9VfjoSK
Mj6ZbmUsWjEFceiz9jNDX8RubNiqvVC+kPPccun8fTIVbw8E7ZlSH1j1w3IA5+g3
pbCjS8L+DJB8YUX0shjh38ZAR+iq8Ive6rrZbu+d9q0kSNj7hxjZGGvJxhoQnmRr
YrEGcW2W/08KCp0O2pJVJ+y3eIoduT6Sym3cFiTMgBAt21mRmEeFgmQvwdBpKWMY
rYyjNeyw6vkSr268sY0ssnS6P301iRAzTcxsA47zfrlbNUgj6QefD8HbvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMhva84UouuE9R7dBb2K8fB/4Jm3MB8GA1UdIwQY
MBaAFBp8r94xNaJr3UF5Ap7r90FOlkOvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR255djNqRTFvbXZkUVhrQ251djNRVTZXUTY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My82MmFmYmItYjhmOC00YjEyLTkxOTMt
MWM1MTA3Y2FiMzUzLzEvR255djNqRTFvbXZkUVhrQ251djNRVTZXUTY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My82MmFmYmItYjhmOC00YjEyLTkxOTMtMWM1MTA3Y2FiMzUz
LzEvR255djNqRTFvbXZkUVhrQ251djNRVTZXUTY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbRvEZTtd
f1MrP8tzBvQkw1LT4LlP4lr9F23GfROpiHKDpSbVa0Kisa/dBKPGY9NYsha7FqVZ
SEKs6fOi82vIlk1PpgC2J6JNfN6zf2U9GDxxuFYNHsEjllhProE78Kaq38L/YoBz
tS1Ue1wOkI2w5bU5RzaqcoWoxxLxNQIbeGhSZKD8yle/R3+Scrmb/vBIesA3HBHb
ajIxmOGk+aY6ypHCBnWp9nHRniCkfMLJT03S8y/wggKRMC77LRWXfzpB95aWt6vX
bvpjaB51bp+ubnfM4WrXhmoZcBRAjto6e85vk9NeVUWcIGopeQQTJQQILvaXurrg
tpypxw/qTnOk7g==
-----END CERTIFICATE-----
Generated at Tue Oct 28 14:21:12 2025 by rpki-client