Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/73c3e3-81e6-4eb4-a946-609fa4e54067/1/GnU2E7QiD2jytUbQkqIwvtbtrLg.mft
File: GnU2E7QiD2jytUbQkqIwvtbtrLg.mft (raw, json)
Hash identifier: fpUplMePywsoCJJv9A050tKdkh4+bzjIre8QWFwSyL0=
Subject key identifier: 3A:DA:8D:31:44:F8:1A:33:0D:DB:A9:5A:89:3F:96:7E:53:1C:9B:46
Authority key identifier: 1A:75:36:13:B4:22:0F:68:F2:B5:46:D0:92:A2:30:BE:D6:ED:AC:B8
Certificate issuer: /CN=1a753613b4220f68f2b546d092a230bed6edacb8
Certificate serial: 019A7225C25C99487136C01B8C0215BA11DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GnU2E7QiD2jytUbQkqIwvtbtrLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/73c3e3-81e6-4eb4-a946-609fa4e54067/1/GnU2E7QiD2jytUbQkqIwvtbtrLg.mft
Manifest number: 0A6E
Signing time: Tue 11 Nov 2025 09:01:08 +0000
Manifest this update: Tue 11 Nov 2025 09:01:08 +0000
Manifest next update: Wed 12 Nov 2025 09:01:08 +0000
Files and hashes: 1: GnU2E7QiD2jytUbQkqIwvtbtrLg.crl (hash: 8l9KyWlQix6gxIjKVc+NN0llba5DcJGokl0QhGW3Cf8=)
2: dZV8dvdnA_9uSLTQkNXVl8a3FaI.roa (hash: Krx07PHv8S1aDWSKbtOJAHlzZWfSCAV78WJWEmqXiPw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/73c3e3-81e6-4eb4-a946-609fa4e54067/1/GnU2E7QiD2jytUbQkqIwvtbtrLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/73c3e3-81e6-4eb4-a946-609fa4e54067/1/GnU2E7QiD2jytUbQkqIwvtbtrLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/GnU2E7QiD2jytUbQkqIwvtbtrLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:c2:5c:99:48:71:36:c0:1b:8c:02:15:ba:11:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a753613b4220f68f2b546d092a230bed6edacb8
Validity
Not Before: Nov 11 09:01:08 2025 GMT
Not After : Nov 12 09:01:08 2025 GMT
Subject: CN=3ada8d3144f81a330ddba95a893f967e531c9b46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:3e:a3:d2:63:49:ed:65:29:11:21:60:75:c3:
2e:3d:58:99:c4:9d:5e:ac:5a:8a:15:62:49:71:ba:
50:47:81:d2:04:32:8e:0b:14:9f:b6:85:13:f1:64:
82:9e:fc:6f:5a:da:64:a1:1a:8e:10:ef:df:3e:6d:
fd:ce:b5:39:7a:93:0c:6b:62:50:38:fc:03:e2:8c:
e3:3c:b1:85:e8:72:ac:b6:27:1e:da:60:11:9b:4c:
cf:4b:b2:b1:8a:3d:44:00:4d:57:6b:e6:36:ae:8c:
67:95:ca:14:d8:70:bb:fe:4a:59:09:eb:44:17:59:
61:b0:88:52:e4:8b:27:67:eb:45:64:5e:5f:8b:1c:
0c:0f:5c:32:0b:01:a5:c8:d3:75:85:2b:b2:03:f2:
4b:c7:f8:d9:78:51:f1:af:c8:d2:55:ae:ba:e6:a0:
75:ee:65:a2:ba:1c:78:be:00:1f:3b:a5:58:02:46:
f7:3a:44:4e:ba:29:fd:13:c6:8a:e0:0a:d9:bd:e1:
70:81:54:88:4c:8d:54:fd:41:31:32:2c:65:7c:d1:
cd:f4:65:98:b4:22:3e:a3:20:ef:06:b4:a2:b2:8d:
ad:19:29:01:64:f0:31:54:18:07:3f:c1:0d:2d:91:
88:b0:52:ff:2d:38:a9:57:77:85:0e:00:e9:c3:ce:
ca:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:DA:8D:31:44:F8:1A:33:0D:DB:A9:5A:89:3F:96:7E:53:1C:9B:46
X509v3 Authority Key Identifier:
keyid:1A:75:36:13:B4:22:0F:68:F2:B5:46:D0:92:A2:30:BE:D6:ED:AC:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GnU2E7QiD2jytUbQkqIwvtbtrLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/73c3e3-81e6-4eb4-a946-609fa4e54067/1/GnU2E7QiD2jytUbQkqIwvtbtrLg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/73c3e3-81e6-4eb4-a946-609fa4e54067/1/GnU2E7QiD2jytUbQkqIwvtbtrLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:d3:c7:0d:c3:53:8e:c1:1a:3c:d9:f7:9b:d0:f3:6b:ac:1f:
e0:71:f2:7d:c4:4c:5c:e1:3f:cc:93:2e:46:c2:bd:8c:dd:60:
aa:7b:80:90:0f:7c:4e:38:cd:18:89:f3:f9:12:0c:dd:56:38:
ac:01:ef:b9:8a:9d:95:bc:7b:a4:49:ad:f4:94:71:e7:76:51:
8a:c4:19:c4:e0:e0:43:da:7a:8d:24:19:9a:29:59:85:17:6e:
e2:94:b6:16:2e:28:09:db:00:1c:9b:34:db:c9:93:fa:03:87:
5f:30:b3:0c:cf:b9:18:2f:98:87:05:cb:43:99:28:8a:2a:d2:
e7:2a:16:7b:f6:d1:d4:45:0c:d4:fb:6e:8d:13:56:d1:fb:4c:
35:08:31:b0:1d:31:45:c0:cf:41:c5:0e:87:d4:c8:de:a7:a2:
99:93:d3:d2:46:ce:05:8f:73:7e:8c:b1:f8:7a:7e:e2:81:c2:
51:a7:3e:3e:7f:f3:d6:b7:c9:db:f6:41:96:05:e5:bd:aa:74:
b2:57:5f:fe:5e:fc:80:58:8d:7d:44:3d:ab:f7:91:09:15:a6:
31:4b:0e:d7:6d:59:75:da:9c:4b:6d:66:76:e4:3e:9b:a9:27:
0b:93:8f:f7:f7:ec:e7:f1:18:d9:5d:5e:9d:5e:01:03:d1:b9:
40:1c:07:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyJcJcmUhxNsAbjAIVuhHdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhNzUzNjEzYjQyMjBmNjhmMmI1NDZkMDkyYTIzMGJlZDZl
ZGFjYjgwHhcNMjUxMTExMDkwMTA4WhcNMjUxMTEyMDkwMTA4WjAzMTEwLwYDVQQD
EygzYWRhOGQzMTQ0ZjgxYTMzMGRkYmE5NWE4OTNmOTY3ZTUzMWM5YjQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1D6j0mNJ7WUpESFgdcMuPViZxJ1e
rFqKFWJJcbpQR4HSBDKOCxSftoUT8WSCnvxvWtpkoRqOEO/fPm39zrU5epMMa2JQ
OPwD4ozjPLGF6HKstice2mARm0zPS7Kxij1EAE1Xa+Y2roxnlcoU2HC7/kpZCetE
F1lhsIhS5IsnZ+tFZF5fixwMD1wyCwGlyNN1hSuyA/JLx/jZeFHxr8jSVa665qB1
7mWiuhx4vgAfO6VYAkb3OkROuin9E8aK4ArZveFwgVSITI1U/UExMixlfNHN9GWY
tCI+oyDvBrSiso2tGSkBZPAxVBgHP8ENLZGIsFL/LTipV3eFDgDpw87KWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDrajTFE+BozDdupWok/ln5THJtGMB8GA1UdIwQY
MBaAFBp1NhO0Ig9o8rVG0JKiML7W7ay4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR25VMkU3UWlEMmp5dFViUWtxSXd2dGJ0ckxnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My83M2MzZTMtODFlNi00ZWI0LWE5NDYt
NjA5ZmE0ZTU0MDY3LzEvR25VMkU3UWlEMmp5dFViUWtxSXd2dGJ0ckxnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My83M2MzZTMtODFlNi00ZWI0LWE5NDYtNjA5ZmE0ZTU0MDY3
LzEvR25VMkU3UWlEMmp5dFViUWtxSXd2dGJ0ckxnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVdPHDcNT
jsEaPNn3m9Dza6wf4HHyfcRMXOE/zJMuRsK9jN1gqnuAkA98TjjNGInz+RIM3VY4
rAHvuYqdlbx7pEmt9JRx53ZRisQZxODgQ9p6jSQZmilZhRdu4pS2Fi4oCdsAHJs0
28mT+gOHXzCzDM+5GC+YhwXLQ5koiirS5yoWe/bR1EUM1PtujRNW0ftMNQgxsB0x
RcDPQcUOh9TI3qeimZPT0kbOBY9zfoyx+Hp+4oHCUac+Pn/z1rfJ2/ZBlgXlvap0
sldf/l78gFiNfUQ9q/eRCRWmMUsO121ZddqcS21mduQ+m6knC5OP9/fs5/EY2V1e
nV4BA9G5QBwH8Q==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:33:52 2025 by rpki-client