Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/d7d04c-3175-43ad-9e3d-10a4e537226e/1/Gvkdzt_e_c5ZvbBQArHLbFLwxdM.mft
File: Gvkdzt_e_c5ZvbBQArHLbFLwxdM.mft (raw, json)
Hash identifier: PUH7ym60DzcaSmDkPG+moe/Rtx1aTA9Mus0Gpp4IWYM=
Subject key identifier: AF:83:AD:2D:0F:7F:17:76:8E:77:93:F2:C1:6B:69:8A:19:28:DB:7E
Authority key identifier: 1A:F9:1D:CE:DF:DE:FD:CE:59:BD:B0:50:02:B1:CB:6C:52:F0:C5:D3
Certificate issuer: /CN=1af91dcedfdefdce59bdb05002b1cb6c52f0c5d3
Certificate serial: 019A70DC69DE7E14E3283EB2D163595752DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gvkdzt_e_c5ZvbBQArHLbFLwxdM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/d7d04c-3175-43ad-9e3d-10a4e537226e/1/Gvkdzt_e_c5ZvbBQArHLbFLwxdM.mft
Manifest number: 171B
Signing time: Tue 11 Nov 2025 03:01:24 +0000
Manifest this update: Tue 11 Nov 2025 03:01:24 +0000
Manifest next update: Wed 12 Nov 2025 03:01:24 +0000
Files and hashes: 1: Gvkdzt_e_c5ZvbBQArHLbFLwxdM.crl (hash: zOXJQpBWG9OnM9z9XSMznIyAJmt/R+lmmsBZwAuN8dM=)
2: ttZNv6l1EeF-xiTWTGqQIM7MdNI.roa (hash: 7CYeRmxgoUhsy4kTyySHz2v5rlglnUVr1BYD9Sp0a6Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/d7d04c-3175-43ad-9e3d-10a4e537226e/1/Gvkdzt_e_c5ZvbBQArHLbFLwxdM.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/d7d04c-3175-43ad-9e3d-10a4e537226e/1/Gvkdzt_e_c5ZvbBQArHLbFLwxdM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gvkdzt_e_c5ZvbBQArHLbFLwxdM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:dc:69:de:7e:14:e3:28:3e:b2:d1:63:59:57:52:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1af91dcedfdefdce59bdb05002b1cb6c52f0c5d3
Validity
Not Before: Nov 11 03:01:24 2025 GMT
Not After : Nov 12 03:01:24 2025 GMT
Subject: CN=af83ad2d0f7f17768e7793f2c16b698a1928db7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:1f:e7:24:8d:98:5d:9f:1e:97:4e:36:27:0c:
08:45:36:61:49:d2:25:bf:ee:79:fb:79:e8:64:92:
4b:94:ec:36:bd:4d:19:fd:c1:97:bd:bd:b6:ce:8a:
3c:45:1a:94:15:81:85:5d:4b:c2:ac:97:96:b6:9b:
1a:6b:3a:3d:e2:3a:5b:fa:14:41:f8:8a:16:63:c5:
01:4c:30:75:86:a9:ae:3a:8d:ff:0a:3d:94:00:71:
1e:04:e8:48:ab:e8:f8:4c:0e:db:ee:36:a5:3f:07:
19:49:55:b8:74:1e:f0:39:e5:4e:78:17:f8:55:70:
41:71:2a:2b:18:4a:fa:10:0b:2d:a3:41:12:8a:8a:
1c:81:ef:56:8d:75:41:5c:42:18:e5:48:8a:b6:1e:
7e:9b:24:d6:df:ee:a9:1d:3d:f7:43:ae:87:4c:62:
06:af:fb:a7:42:4e:35:a9:0f:31:da:43:e5:a8:01:
4d:76:97:19:e8:ca:79:d7:e0:d4:94:8c:ba:fb:35:
3f:c8:57:b7:2e:67:8b:e3:d3:05:62:41:c4:a9:9f:
52:77:57:5e:27:87:54:39:f2:ee:53:5f:86:45:f4:
e9:01:90:2c:eb:fe:d5:52:87:4c:9f:92:9f:ed:08:
b6:8f:af:d2:d7:62:fb:a5:7f:df:a7:54:fa:04:82:
54:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:83:AD:2D:0F:7F:17:76:8E:77:93:F2:C1:6B:69:8A:19:28:DB:7E
X509v3 Authority Key Identifier:
keyid:1A:F9:1D:CE:DF:DE:FD:CE:59:BD:B0:50:02:B1:CB:6C:52:F0:C5:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gvkdzt_e_c5ZvbBQArHLbFLwxdM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/d7d04c-3175-43ad-9e3d-10a4e537226e/1/Gvkdzt_e_c5ZvbBQArHLbFLwxdM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/d7d04c-3175-43ad-9e3d-10a4e537226e/1/Gvkdzt_e_c5ZvbBQArHLbFLwxdM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:0e:6b:53:5e:12:94:ec:10:35:bd:3d:59:d2:09:93:69:01:
f5:e1:27:cf:e0:d3:8a:25:3e:c6:3b:8e:6b:1e:2c:6c:ac:e0:
5a:86:5a:09:9e:e6:4c:b3:9c:b1:87:30:60:93:33:3a:a1:64:
8d:fb:49:30:bb:24:fa:48:13:55:f2:66:43:c3:d6:fc:85:f9:
35:46:80:c7:3b:69:dd:10:c3:ab:8a:25:f9:13:06:cf:2b:38:
6a:19:56:29:1c:99:6d:a9:2f:6a:e0:63:14:3b:86:29:67:ef:
cc:a7:45:e3:5b:84:56:b1:bb:e0:7a:09:7e:0f:f5:22:bc:ec:
74:cc:6f:b8:6c:be:bb:5f:f5:c2:b5:db:7f:8b:f8:e4:b7:b9:
38:dd:36:64:ee:f4:40:44:6f:e2:92:51:5a:7f:d8:4a:0b:b8:
2e:22:43:77:ed:65:c1:d5:4f:7a:de:65:fa:17:26:7e:c9:78:
18:92:93:d0:5f:10:95:b3:e0:4c:51:c0:a8:7c:25:a7:28:a8:
08:2c:df:08:a8:08:43:39:2f:ba:a4:a3:de:35:f8:97:22:98:
76:60:a7:90:b5:df:c9:69:4e:0a:62:49:8d:01:f9:d5:72:73:
98:a2:cd:7d:88:95:22:7e:18:0c:76:56:9a:89:56:22:17:4c:
0b:da:ea:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpw3GnefhTjKD6y0WNZV1LbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhZjkxZGNlZGZkZWZkY2U1OWJkYjA1MDAyYjFjYjZjNTJm
MGM1ZDMwHhcNMjUxMTExMDMwMTI0WhcNMjUxMTEyMDMwMTI0WjAzMTEwLwYDVQQD
EyhhZjgzYWQyZDBmN2YxNzc2OGU3NzkzZjJjMTZiNjk4YTE5MjhkYjdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArB/nJI2YXZ8el042JwwIRTZhSdIl
v+55+3noZJJLlOw2vU0Z/cGXvb22zoo8RRqUFYGFXUvCrJeWtpsaazo94jpb+hRB
+IoWY8UBTDB1hqmuOo3/Cj2UAHEeBOhIq+j4TA7b7jalPwcZSVW4dB7wOeVOeBf4
VXBBcSorGEr6EAsto0ESioocge9WjXVBXEIY5UiKth5+myTW3+6pHT33Q66HTGIG
r/unQk41qQ8x2kPlqAFNdpcZ6Mp51+DUlIy6+zU/yFe3LmeL49MFYkHEqZ9Sd1de
J4dUOfLuU1+GRfTpAZAs6/7VUodMn5Kf7Qi2j6/S12L7pX/fp1T6BIJUsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK+DrS0Pfxd2jneT8sFraYoZKNt+MB8GA1UdIwQY
MBaAFBr5Hc7f3v3OWb2wUAKxy2xS8MXTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3ZrZHp0X2VfYzVadmJCUUFySExiRkx3eGRNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My9kN2QwNGMtMzE3NS00M2FkLTllM2Qt
MTBhNGU1MzcyMjZlLzEvR3ZrZHp0X2VfYzVadmJCUUFySExiRkx3eGRNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My9kN2QwNGMtMzE3NS00M2FkLTllM2QtMTBhNGU1MzcyMjZl
LzEvR3ZrZHp0X2VfYzVadmJCUUFySExiRkx3eGRNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbw5rU14S
lOwQNb09WdIJk2kB9eEnz+DTiiU+xjuOax4sbKzgWoZaCZ7mTLOcsYcwYJMzOqFk
jftJMLsk+kgTVfJmQ8PW/IX5NUaAxztp3RDDq4ol+RMGzys4ahlWKRyZbakvauBj
FDuGKWfvzKdF41uEVrG74HoJfg/1IrzsdMxvuGy+u1/1wrXbf4v45Le5ON02ZO70
QERv4pJRWn/YSgu4LiJDd+1lwdVPet5l+hcmfsl4GJKT0F8QlbPgTFHAqHwlpyio
CCzfCKgIQzkvuqSj3jX4lyKYdmCnkLXfyWlOCmJJjQH51XJzmKLNfYiVIn4YDHZW
molWIhdMC9rqTg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:45:27 2025 by rpki-client