Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/399269-5e14-4d5e-a1bc-6bdd3478d10c/1/gDCVaDspR93Unu6sDb2eqVSuoUQ.mft
File: gDCVaDspR93Unu6sDb2eqVSuoUQ.mft (raw, json)
Hash identifier: jIFBaRSoocpB4nvbKOw/j6bi8ueg+KLFHos/jC6Gzf4=
Subject key identifier: 8F:FC:84:19:04:37:AB:E9:B3:D5:87:27:54:F9:4F:98:8B:E6:3C:F5
Authority key identifier: 80:30:95:68:3B:29:47:DD:D4:9E:EE:AC:0D:BD:9E:A9:54:AE:A1:44
Certificate issuer: /CN=803095683b2947ddd49eeeac0dbd9ea954aea144
Certificate serial: 019A2553C7C245CC1A37EDC6457A69AFD9C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gDCVaDspR93Unu6sDb2eqVSuoUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/399269-5e14-4d5e-a1bc-6bdd3478d10c/1/gDCVaDspR93Unu6sDb2eqVSuoUQ.mft
Manifest number: 060D
Signing time: Mon 27 Oct 2025 11:00:38 +0000
Manifest this update: Mon 27 Oct 2025 11:00:38 +0000
Manifest next update: Tue 28 Oct 2025 11:00:38 +0000
Files and hashes: 1: W5iuUvjQHKES7b_m2-IC5Q7IB04.roa (hash: usyzAXKt0ilcyhdvyj8HiQdu4iL1ydlMcUp3wQXJixw=)
2: gDCVaDspR93Unu6sDb2eqVSuoUQ.crl (hash: lTqnbo+ema3ODoRygpforbi4g+g8hmwFVSN7/YrDbdM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/399269-5e14-4d5e-a1bc-6bdd3478d10c/1/gDCVaDspR93Unu6sDb2eqVSuoUQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/399269-5e14-4d5e-a1bc-6bdd3478d10c/1/gDCVaDspR93Unu6sDb2eqVSuoUQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/gDCVaDspR93Unu6sDb2eqVSuoUQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 11:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:25:53:c7:c2:45:cc:1a:37:ed:c6:45:7a:69:af:d9:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=803095683b2947ddd49eeeac0dbd9ea954aea144
Validity
Not Before: Oct 27 11:00:38 2025 GMT
Not After : Oct 28 11:00:38 2025 GMT
Subject: CN=8ffc84190437abe9b3d5872754f94f988be63cf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:2f:29:be:16:2f:fd:25:74:c5:dd:4a:9d:d0:
ca:10:b9:3f:e0:89:e2:9f:6c:cb:bc:e5:b5:61:de:
72:6c:da:a0:f9:ce:3b:9b:92:e2:d0:03:17:38:45:
bf:0b:e5:b3:16:29:bc:23:7a:be:41:17:01:4b:ca:
15:cb:f3:e2:b3:e7:e2:14:70:35:50:86:4b:68:a4:
68:99:d5:4d:8e:f8:b8:71:db:38:9a:7e:93:4d:39:
a9:91:c3:5e:dd:8e:d6:a0:9f:88:9b:14:63:09:90:
5d:78:43:5e:10:fd:1a:87:ce:3f:b5:e0:af:4f:a5:
9c:13:b4:f0:bf:31:2a:96:01:68:dc:d7:d1:39:e6:
e0:28:ea:c5:a2:41:9e:b9:b0:3b:52:2a:8a:5a:0c:
a9:5e:cf:13:56:3b:2f:94:62:64:fd:d6:bb:10:76:
ce:90:c2:d0:2f:dc:cc:6c:70:04:ab:c9:d0:4d:57:
45:57:89:34:0d:e6:e5:b0:5b:6b:3d:ee:36:1d:5e:
69:1e:0b:27:9c:cc:62:48:ff:44:79:fe:1b:ad:c2:
7b:15:e7:26:21:6f:79:f4:f1:f3:fc:5e:d8:a8:52:
48:a0:a3:d5:71:e2:53:40:f7:ce:bc:70:62:0d:26:
98:3e:31:14:a3:96:cb:b8:80:61:1f:cd:6d:bf:e0:
e9:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:FC:84:19:04:37:AB:E9:B3:D5:87:27:54:F9:4F:98:8B:E6:3C:F5
X509v3 Authority Key Identifier:
keyid:80:30:95:68:3B:29:47:DD:D4:9E:EE:AC:0D:BD:9E:A9:54:AE:A1:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gDCVaDspR93Unu6sDb2eqVSuoUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/399269-5e14-4d5e-a1bc-6bdd3478d10c/1/gDCVaDspR93Unu6sDb2eqVSuoUQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/399269-5e14-4d5e-a1bc-6bdd3478d10c/1/gDCVaDspR93Unu6sDb2eqVSuoUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:10:a0:4b:de:86:11:76:f3:b1:cc:e8:85:32:c5:15:76:ee:
94:57:d4:a5:41:78:df:55:56:ac:5c:d9:94:03:08:d9:dc:64:
c1:da:3a:3b:8c:04:ff:f4:3f:42:9a:d1:45:c3:97:10:1e:27:
21:98:e5:d2:f8:aa:75:c6:5d:73:ae:2f:fb:2e:be:e7:ff:ae:
a7:9d:50:ac:a4:34:b2:66:26:6b:db:bc:54:b9:35:dc:9d:aa:
fe:99:09:98:b9:6c:2c:19:24:53:84:5e:2e:2f:e2:09:e0:ae:
f9:2c:71:75:c8:29:44:20:ee:dd:3e:c5:3a:ef:9f:b1:12:f7:
2e:9f:07:b9:b8:27:73:59:73:14:04:e8:0d:83:bd:0a:6c:87:
94:e1:45:a6:8e:7c:9f:73:37:eb:d7:0b:43:46:89:9a:f1:ba:
56:8e:79:39:fe:f7:d5:10:a3:81:65:57:8b:91:70:06:97:38:
dd:61:73:93:59:8a:d5:ea:59:db:d8:78:bb:1d:9c:1a:b2:71:
37:d1:ce:a0:90:08:d1:a4:25:c8:29:51:2c:92:f9:1e:a6:22:
4c:fa:62:8e:52:49:bb:b0:36:51:28:fa:23:95:8e:92:33:a4:
be:91:20:1c:22:72:3c:f3:aa:fc:de:a5:cf:07:12:b9:a7:70:
fe:92:e1:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZolU8fCRcwaN+3GRXppr9nCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgwMzA5NTY4M2IyOTQ3ZGRkNDllZWVhYzBkYmQ5ZWE5NTRh
ZWExNDQwHhcNMjUxMDI3MTEwMDM4WhcNMjUxMDI4MTEwMDM4WjAzMTEwLwYDVQQD
Eyg4ZmZjODQxOTA0MzdhYmU5YjNkNTg3Mjc1NGY5NGY5ODhiZTYzY2Y1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAni8pvhYv/SV0xd1KndDKELk/4Ini
n2zLvOW1Yd5ybNqg+c47m5Li0AMXOEW/C+WzFim8I3q+QRcBS8oVy/Pis+fiFHA1
UIZLaKRomdVNjvi4cds4mn6TTTmpkcNe3Y7WoJ+ImxRjCZBdeENeEP0ah84/teCv
T6WcE7TwvzEqlgFo3NfROebgKOrFokGeubA7UiqKWgypXs8TVjsvlGJk/da7EHbO
kMLQL9zMbHAEq8nQTVdFV4k0DeblsFtrPe42HV5pHgsnnMxiSP9Eef4brcJ7Fecm
IW959PHz/F7YqFJIoKPVceJTQPfOvHBiDSaYPjEUo5bLuIBhH81tv+Dp0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI/8hBkEN6vps9WHJ1T5T5iL5jz1MB8GA1UdIwQY
MBaAFIAwlWg7KUfd1J7urA29nqlUrqFEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ0RDVmFEc3BSOTNVbnU2c0RiMmVxVlN1b1VRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi8zOTkyNjktNWUxNC00ZDVlLWExYmMt
NmJkZDM0NzhkMTBjLzEvZ0RDVmFEc3BSOTNVbnU2c0RiMmVxVlN1b1VRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi8zOTkyNjktNWUxNC00ZDVlLWExYmMtNmJkZDM0NzhkMTBj
LzEvZ0RDVmFEc3BSOTNVbnU2c0RiMmVxVlN1b1VRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkBCgS96G
EXbzsczohTLFFXbulFfUpUF431VWrFzZlAMI2dxkwdo6O4wE//Q/QprRRcOXEB4n
IZjl0viqdcZdc64v+y6+5/+up51QrKQ0smYma9u8VLk13J2q/pkJmLlsLBkkU4Re
Li/iCeCu+SxxdcgpRCDu3T7FOu+fsRL3Lp8Hubgnc1lzFAToDYO9CmyHlOFFpo58
n3M369cLQ0aJmvG6Vo55Of731RCjgWVXi5FwBpc43WFzk1mK1epZ29h4ux2cGrJx
N9HOoJAI0aQlyClRLJL5HqYiTPpijlJJu7A2USj6I5WOkjOkvpEgHCJyPPOq/N6l
zwcSuadw/pLhtg==
-----END CERTIFICATE-----
Generated at Mon Oct 27 20:28:00 2025 by rpki-client