Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/bf0162-fcba-4085-b4f1-d699ddc9d09c/1/gwVV8BG-XiQesLQl3l_YbMaDSlQ.mft
File: gwVV8BG-XiQesLQl3l_YbMaDSlQ.mft (raw, json)
Hash identifier: Q1fH5ciTg3g5s8teX7U+KoUG1F3Q543Mcr3iVzM0Cew=
Subject key identifier: EE:DC:7C:2C:79:74:4C:42:F4:10:8C:87:DA:DA:9F:12:B5:F1:A2:69
Authority key identifier: 83:05:55:F0:11:BE:5E:24:1E:B0:B4:25:DE:5F:D8:6C:C6:83:4A:54
Certificate issuer: /CN=830555f011be5e241eb0b425de5fd86cc6834a54
Certificate serial: 019A71132ADB978E2D4E0B321B803D01DBF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gwVV8BG-XiQesLQl3l_YbMaDSlQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/bf0162-fcba-4085-b4f1-d699ddc9d09c/1/gwVV8BG-XiQesLQl3l_YbMaDSlQ.mft
Manifest number: 171D
Signing time: Tue 11 Nov 2025 04:01:12 +0000
Manifest this update: Tue 11 Nov 2025 04:01:12 +0000
Manifest next update: Wed 12 Nov 2025 04:01:12 +0000
Files and hashes: 1: X8y17pVc211N8MGfVTBzz81iEoA.roa (hash: Hl59xAoHLIR2ve7ZY+IGK+whUrubuEhh7gzRr94EmJM=)
2: gwVV8BG-XiQesLQl3l_YbMaDSlQ.crl (hash: 4wottuZPAr9yRW2I/h6qr08yLurxavDhiceUiF4YLew=)
3: xYBkOkdRt8PDKOH8dzQ2NTMqI8M.roa (hash: ITHwZydQPAzKvryYx9N44bQeMeKILW1oaBs72ARfdxs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/bf0162-fcba-4085-b4f1-d699ddc9d09c/1/gwVV8BG-XiQesLQl3l_YbMaDSlQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/bf0162-fcba-4085-b4f1-d699ddc9d09c/1/gwVV8BG-XiQesLQl3l_YbMaDSlQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/gwVV8BG-XiQesLQl3l_YbMaDSlQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:2a:db:97:8e:2d:4e:0b:32:1b:80:3d:01:db:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=830555f011be5e241eb0b425de5fd86cc6834a54
Validity
Not Before: Nov 11 04:01:12 2025 GMT
Not After : Nov 12 04:01:12 2025 GMT
Subject: CN=eedc7c2c79744c42f4108c87dada9f12b5f1a269
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:d9:51:0a:7f:21:ac:b7:e3:9c:a6:20:dc:53:
81:99:00:3d:da:0c:c7:3c:8f:36:00:67:4d:35:2b:
08:85:61:7b:7c:4a:02:8a:9d:6e:55:27:10:36:3f:
5b:04:48:15:a0:00:78:ec:32:af:1f:a8:7c:ed:84:
0c:b0:ab:fa:17:5c:1e:7d:3c:14:85:50:21:5b:5d:
d7:7a:7d:b9:6e:25:01:ef:0c:c1:40:b7:8a:44:d2:
0f:22:a2:74:d6:e8:a0:69:f2:6d:52:e3:60:e0:65:
27:ba:8a:b2:45:4d:c1:c3:e2:a8:22:4a:f3:d9:08:
fe:8a:55:f4:6e:d0:28:68:0f:2d:c2:d9:60:81:3b:
f0:56:be:69:fa:b7:28:6e:e2:ee:da:35:2c:b0:1d:
58:31:7f:bc:a3:f4:56:59:51:31:08:23:34:e2:35:
a6:17:1a:32:f2:d4:e3:4b:a5:31:e9:e5:74:a4:0c:
36:35:dc:4a:8f:c0:77:83:78:5a:0c:5f:4b:6c:1c:
3c:5b:5a:29:43:ed:b6:51:ad:e8:18:02:a9:7b:fa:
bf:57:1c:9a:e0:87:24:c2:29:0c:66:e6:bb:7d:37:
13:37:12:03:ca:4a:f5:c1:a6:63:7d:40:6b:e9:74:
8f:34:ef:53:72:8c:63:e4:8b:34:36:b3:10:8f:a1:
f8:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:DC:7C:2C:79:74:4C:42:F4:10:8C:87:DA:DA:9F:12:B5:F1:A2:69
X509v3 Authority Key Identifier:
keyid:83:05:55:F0:11:BE:5E:24:1E:B0:B4:25:DE:5F:D8:6C:C6:83:4A:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gwVV8BG-XiQesLQl3l_YbMaDSlQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/bf0162-fcba-4085-b4f1-d699ddc9d09c/1/gwVV8BG-XiQesLQl3l_YbMaDSlQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/bf0162-fcba-4085-b4f1-d699ddc9d09c/1/gwVV8BG-XiQesLQl3l_YbMaDSlQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:fc:8d:68:fe:70:85:6d:6a:9f:90:b2:da:56:66:10:00:31:
fa:d4:b2:70:a6:00:5e:d8:7a:f7:d2:8d:44:cb:d6:05:5a:af:
40:87:19:05:b7:52:bc:8e:e5:b3:60:78:69:86:81:ff:59:2b:
7f:8b:5f:b6:8d:bf:63:ea:d1:f3:51:3a:49:5b:4d:b8:ae:57:
e9:93:b9:5c:67:e7:66:19:cd:86:14:ab:6e:f4:a2:e9:2f:88:
4b:0e:43:6f:cd:1c:b2:34:05:9d:24:1d:b9:70:e6:2b:c5:68:
81:55:92:83:e3:d7:cc:8c:0f:56:c3:97:2b:a7:d9:ec:11:89:
dd:64:77:81:c4:52:01:af:e1:34:c6:32:60:74:4b:19:bc:14:
38:1e:90:dc:be:e4:2c:39:eb:1d:e9:5f:e4:96:bf:a2:27:5f:
a5:47:dd:90:35:b1:f2:58:44:52:80:a1:62:c1:0d:70:5a:06:
11:17:63:c6:f5:9e:c5:ff:98:6f:82:02:19:63:48:16:48:54:
62:b9:9b:89:ad:33:d9:88:c1:b9:b6:d6:b9:fb:0c:3f:42:da:
75:a6:1e:9c:94:2f:d4:77:58:07:b9:b0:85:bf:b2:77:f2:d9:
bd:2a:81:09:38:04:df:bb:66:33:02:02:86:f3:b0:be:41:9e:
a1:ab:d3:43
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxEyrbl44tTgsyG4A9Adv5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzMDU1NWYwMTFiZTVlMjQxZWIwYjQyNWRlNWZkODZjYzY4
MzRhNTQwHhcNMjUxMTExMDQwMTEyWhcNMjUxMTEyMDQwMTEyWjAzMTEwLwYDVQQD
EyhlZWRjN2MyYzc5NzQ0YzQyZjQxMDhjODdkYWRhOWYxMmI1ZjFhMjY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3NlRCn8hrLfjnKYg3FOBmQA92gzH
PI82AGdNNSsIhWF7fEoCip1uVScQNj9bBEgVoAB47DKvH6h87YQMsKv6F1wefTwU
hVAhW13Xen25biUB7wzBQLeKRNIPIqJ01uigafJtUuNg4GUnuoqyRU3Bw+KoIkrz
2Qj+ilX0btAoaA8twtlggTvwVr5p+rcobuLu2jUssB1YMX+8o/RWWVExCCM04jWm
Fxoy8tTjS6Ux6eV0pAw2NdxKj8B3g3haDF9LbBw8W1opQ+22Ua3oGAKpe/q/Vxya
4IckwikMZua7fTcTNxIDykr1waZjfUBr6XSPNO9Tcoxj5Is0NrMQj6H4MQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO7cfCx5dExC9BCMh9ranxK18aJpMB8GA1UdIwQY
MBaAFIMFVfARvl4kHrC0Jd5f2GzGg0pUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3dWVjhCRy1YaVFlc0xRbDNsX1liTWFEU2xRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9iZjAxNjItZmNiYS00MDg1LWI0ZjEt
ZDY5OWRkYzlkMDljLzEvZ3dWVjhCRy1YaVFlc0xRbDNsX1liTWFEU2xRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy9iZjAxNjItZmNiYS00MDg1LWI0ZjEtZDY5OWRkYzlkMDlj
LzEvZ3dWVjhCRy1YaVFlc0xRbDNsX1liTWFEU2xRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdfyNaP5w
hW1qn5Cy2lZmEAAx+tSycKYAXth699KNRMvWBVqvQIcZBbdSvI7ls2B4aYaB/1kr
f4tfto2/Y+rR81E6SVtNuK5X6ZO5XGfnZhnNhhSrbvSi6S+ISw5Db80csjQFnSQd
uXDmK8VogVWSg+PXzIwPVsOXK6fZ7BGJ3WR3gcRSAa/hNMYyYHRLGbwUOB6Q3L7k
LDnrHelf5Ja/oidfpUfdkDWx8lhEUoChYsENcFoGERdjxvWexf+Yb4ICGWNIFkhU
Yrmbia0z2YjBubbWufsMP0LadaYenJQv1HdYB7mwhb+yd/LZvSqBCTgE37tmMwIC
hvOwvkGeoavTQw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:54:14 2025 by rpki-client