Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/c3e03d-a4db-4050-906c-56294c708faf/1/GhgxUqZBpAN71soKarQcukbaV9s.mft
File: GhgxUqZBpAN71soKarQcukbaV9s.mft (raw, json)
Hash identifier: LpgHqSfVHbfnbU0GPBDnaJoK4ViHJXKyVL5g6qyXDCo=
Subject key identifier: 46:27:12:4D:58:8D:B6:98:B3:5C:60:0E:C3:2C:65:5C:05:2E:BB:3A
Authority key identifier: 1A:18:31:52:A6:41:A4:03:7B:D6:CA:0A:6A:B4:1C:BA:46:DA:57:DB
Certificate issuer: /CN=1a183152a641a4037bd6ca0a6ab41cba46da57db
Certificate serial: 019A2A432DEBE31AC56880C344241B6D65AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GhgxUqZBpAN71soKarQcukbaV9s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/c3e03d-a4db-4050-906c-56294c708faf/1/GhgxUqZBpAN71soKarQcukbaV9s.mft
Manifest number: 101C
Signing time: Tue 28 Oct 2025 10:00:37 +0000
Manifest this update: Tue 28 Oct 2025 10:00:37 +0000
Manifest next update: Wed 29 Oct 2025 10:00:37 +0000
Files and hashes: 1: GhgxUqZBpAN71soKarQcukbaV9s.crl (hash: f2ep+U01fEoAuZndXfpYMsBtc81S2LbOPcPR5IgIZdI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/c3e03d-a4db-4050-906c-56294c708faf/1/GhgxUqZBpAN71soKarQcukbaV9s.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/c3e03d-a4db-4050-906c-56294c708faf/1/GhgxUqZBpAN71soKarQcukbaV9s.mft
rsync://rpki.ripe.net/repository/DEFAULT/GhgxUqZBpAN71soKarQcukbaV9s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2a:43:2d:eb:e3:1a:c5:68:80:c3:44:24:1b:6d:65:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a183152a641a4037bd6ca0a6ab41cba46da57db
Validity
Not Before: Oct 28 10:00:37 2025 GMT
Not After : Oct 29 10:00:37 2025 GMT
Subject: CN=4627124d588db698b35c600ec32c655c052ebb3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:e8:31:13:1c:ed:29:60:e3:4c:71:7b:b8:d1:
d8:0d:61:1c:22:a2:38:c4:fc:20:f6:12:87:31:5c:
cd:19:0f:8c:4e:b9:3f:fc:92:35:0c:86:2b:98:6b:
66:ab:b0:74:e4:0b:80:01:11:d2:c1:b7:e8:eb:01:
dd:d4:88:52:ab:8d:e7:d9:69:5f:c7:82:cd:a3:af:
55:e8:fc:49:38:54:50:1c:dc:dc:88:b5:97:f2:f9:
27:06:79:90:11:51:5e:6d:15:fb:f1:80:cd:c4:16:
aa:24:d9:31:21:ce:bc:13:2f:ba:59:b9:a9:d4:6d:
ac:3c:30:cc:1d:de:06:8e:c1:9d:59:c9:06:d0:bf:
3a:68:37:ef:55:3c:f7:9b:49:a2:62:2d:2b:67:3b:
d1:28:56:54:7a:0d:af:fa:fa:8b:71:a8:1b:4b:86:
1f:6a:96:40:f4:6f:8b:7c:38:2d:0e:eb:d1:5b:1a:
e4:f8:f2:11:ba:99:a0:23:c2:48:a1:3f:be:a4:73:
ce:29:f0:24:15:4e:55:91:37:1d:75:59:c5:09:3e:
96:1f:eb:e7:a0:bd:64:db:8b:4d:f2:b9:27:43:ef:
f9:df:0b:e3:cc:a6:81:60:1e:2d:b9:04:73:70:2c:
77:fe:da:ea:4e:68:97:1a:06:c7:b9:1f:39:44:c2:
66:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:27:12:4D:58:8D:B6:98:B3:5C:60:0E:C3:2C:65:5C:05:2E:BB:3A
X509v3 Authority Key Identifier:
keyid:1A:18:31:52:A6:41:A4:03:7B:D6:CA:0A:6A:B4:1C:BA:46:DA:57:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GhgxUqZBpAN71soKarQcukbaV9s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/c3e03d-a4db-4050-906c-56294c708faf/1/GhgxUqZBpAN71soKarQcukbaV9s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/c3e03d-a4db-4050-906c-56294c708faf/1/GhgxUqZBpAN71soKarQcukbaV9s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:06:80:ef:e8:74:53:ea:15:36:e3:35:95:40:e3:57:77:0e:
28:ae:4c:36:b4:ec:26:6f:33:37:a4:e8:2f:75:15:72:ec:22:
0c:03:a5:38:90:cf:69:1e:10:ae:61:0b:85:b2:67:7c:d6:2e:
ca:0d:01:da:02:a7:74:27:fa:79:9c:15:7e:a4:d2:e9:f7:9f:
82:ec:e2:2a:e2:16:de:5f:fc:e9:4a:65:be:02:e6:2f:fb:1d:
3e:1a:5c:56:dd:56:0f:45:2f:80:da:cd:c5:32:d0:0d:06:86:
2e:0d:99:92:b9:07:29:24:d9:93:c9:0f:9b:5a:ee:c9:64:08:
74:84:0b:f0:7c:97:31:89:55:f4:27:c9:92:62:f5:d3:d8:f6:
9b:93:a7:95:46:76:80:62:3f:c2:7d:bc:b2:5e:52:75:29:b9:
2d:cf:3a:47:70:e0:9c:71:a5:d3:c8:b9:2d:71:e6:f7:f1:ff:
3b:73:9b:7a:81:83:af:c3:b1:f1:63:3e:dc:bb:f0:a5:c5:1a:
35:27:35:23:75:d6:e8:b7:cf:6b:75:5f:54:79:91:c6:0c:80:
80:92:8c:1b:df:e7:33:6e:24:49:dd:5a:c4:1a:82:0a:5e:50:
36:24:f9:aa:c8:44:32:3d:d4:53:63:8d:26:a5:a7:90:2b:72:
8a:0e:63:ab
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoqQy3r4xrFaIDDRCQbbWWsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhMTgzMTUyYTY0MWE0MDM3YmQ2Y2EwYTZhYjQxY2JhNDZk
YTU3ZGIwHhcNMjUxMDI4MTAwMDM3WhcNMjUxMDI5MTAwMDM3WjAzMTEwLwYDVQQD
Eyg0NjI3MTI0ZDU4OGRiNjk4YjM1YzYwMGVjMzJjNjU1YzA1MmViYjNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo+gxExztKWDjTHF7uNHYDWEcIqI4
xPwg9hKHMVzNGQ+MTrk//JI1DIYrmGtmq7B05AuAARHSwbfo6wHd1IhSq43n2Wlf
x4LNo69V6PxJOFRQHNzciLWX8vknBnmQEVFebRX78YDNxBaqJNkxIc68Ey+6Wbmp
1G2sPDDMHd4GjsGdWckG0L86aDfvVTz3m0miYi0rZzvRKFZUeg2v+vqLcagbS4Yf
apZA9G+LfDgtDuvRWxrk+PIRupmgI8JIoT++pHPOKfAkFU5VkTcddVnFCT6WH+vn
oL1k24tN8rknQ+/53wvjzKaBYB4tuQRzcCx3/trqTmiXGgbHuR85RMJmNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEYnEk1YjbaYs1xgDsMsZVwFLrs6MB8GA1UdIwQY
MBaAFBoYMVKmQaQDe9bKCmq0HLpG2lfbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2hneFVxWkJwQU43MXNvS2FyUWN1a2JhVjlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My9jM2UwM2QtYTRkYi00MDUwLTkwNmMt
NTYyOTRjNzA4ZmFmLzEvR2hneFVxWkJwQU43MXNvS2FyUWN1a2JhVjlzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My9jM2UwM2QtYTRkYi00MDUwLTkwNmMtNTYyOTRjNzA4ZmFm
LzEvR2hneFVxWkJwQU43MXNvS2FyUWN1a2JhVjlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAewaA7+h0
U+oVNuM1lUDjV3cOKK5MNrTsJm8zN6ToL3UVcuwiDAOlOJDPaR4QrmELhbJnfNYu
yg0B2gKndCf6eZwVfqTS6fefguziKuIW3l/86UplvgLmL/sdPhpcVt1WD0UvgNrN
xTLQDQaGLg2ZkrkHKSTZk8kPm1ruyWQIdIQL8HyXMYlV9CfJkmL109j2m5OnlUZ2
gGI/wn28sl5SdSm5Lc86R3DgnHGl08i5LXHm9/H/O3ObeoGDr8Ox8WM+3LvwpcUa
NSc1I3XW6LfPa3VfVHmRxgyAgJKMG9/nM24kSd1axBqCCl5QNiT5qshEMj3UU2ON
JqWnkCtyig5jqw==
-----END CERTIFICATE-----
Generated at Tue Oct 28 14:15:51 2025 by rpki-client