Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/e5e2d0-f439-45e4-8540-f19600c7ad54/1/gQYKUYUo6GqOp38YigJjeQwI9rk.mft
File: gQYKUYUo6GqOp38YigJjeQwI9rk.mft (raw, json)
Hash identifier: oViOFKLXIQI2G4Ku62wJUPFegk5HfGrLonoDSHAfN3g=
Subject key identifier: BF:00:5A:96:82:D0:02:08:47:25:0B:BF:FF:4F:0D:55:0C:36:CF:D7
Authority key identifier: 81:06:0A:51:85:28:E8:6A:8E:A7:7F:18:8A:02:63:79:0C:08:F6:B9
Certificate issuer: /CN=81060a518528e86a8ea77f188a0263790c08f6b9
Certificate serial: 019A209C49134C4CB768EBB0794FA46E190B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gQYKUYUo6GqOp38YigJjeQwI9rk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/e5e2d0-f439-45e4-8540-f19600c7ad54/1/gQYKUYUo6GqOp38YigJjeQwI9rk.mft
Manifest number: 10EF
Signing time: Sun 26 Oct 2025 13:01:44 +0000
Manifest this update: Sun 26 Oct 2025 13:01:44 +0000
Manifest next update: Mon 27 Oct 2025 13:01:44 +0000
Files and hashes: 1: gQYKUYUo6GqOp38YigJjeQwI9rk.crl (hash: oJVsikelH5nuezFDtk1C5H2HQobvmdY6lTILR1u5ldk=)
2: mzS0mg7LzekXtU0-AI8vjQNsdnI.roa (hash: W1Odlm/4gNw2/x1K4BE4WalP/0rHvCKJa9lik2Xno0U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/e5e2d0-f439-45e4-8540-f19600c7ad54/1/gQYKUYUo6GqOp38YigJjeQwI9rk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/e5e2d0-f439-45e4-8540-f19600c7ad54/1/gQYKUYUo6GqOp38YigJjeQwI9rk.mft
rsync://rpki.ripe.net/repository/DEFAULT/gQYKUYUo6GqOp38YigJjeQwI9rk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:20:9c:49:13:4c:4c:b7:68:eb:b0:79:4f:a4:6e:19:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81060a518528e86a8ea77f188a0263790c08f6b9
Validity
Not Before: Oct 26 13:01:44 2025 GMT
Not After : Oct 27 13:01:44 2025 GMT
Subject: CN=bf005a9682d0020847250bbfff4f0d550c36cfd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:4e:36:bb:f3:58:85:3d:6f:b2:4a:fb:b7:0a:
1f:01:59:09:af:a7:2a:0b:5c:d5:5e:c8:f4:28:9f:
bf:6c:35:2f:0d:d1:80:da:d9:89:48:46:ee:f1:68:
00:96:3c:79:00:0f:06:82:e5:e0:6b:26:34:c0:4b:
37:54:f3:ad:b8:0e:18:c1:e6:1a:72:b0:ba:54:5b:
c0:73:fc:e8:36:c0:dc:45:a8:25:a2:f3:46:62:58:
fd:62:a1:d9:63:f0:60:32:31:5e:be:f0:a9:b5:57:
35:a8:fa:9a:46:2a:f0:bc:46:9d:15:3b:1e:45:f8:
63:ae:6c:4f:2a:76:b6:18:b9:9b:f4:44:9d:d0:5b:
3f:18:11:ff:e6:a8:40:ca:5d:bb:d2:d7:e7:41:e7:
3e:66:72:00:7d:d2:7c:20:3e:3a:38:f8:fd:22:45:
e2:ac:89:a3:d2:ac:80:a1:0b:dc:1e:53:c3:d1:40:
13:b5:27:9c:c9:8b:12:08:25:24:90:19:f9:ff:3a:
4d:22:e6:49:58:4d:02:95:92:54:97:51:d9:bb:d7:
6a:a2:3d:8e:22:d0:83:91:10:a9:d7:46:82:26:ed:
d5:a4:94:40:a8:0f:98:19:1b:f0:57:df:12:a2:f1:
65:29:b4:76:f9:5b:7e:47:f1:d7:c0:92:a4:c6:e0:
ab:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:00:5A:96:82:D0:02:08:47:25:0B:BF:FF:4F:0D:55:0C:36:CF:D7
X509v3 Authority Key Identifier:
keyid:81:06:0A:51:85:28:E8:6A:8E:A7:7F:18:8A:02:63:79:0C:08:F6:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gQYKUYUo6GqOp38YigJjeQwI9rk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/e5e2d0-f439-45e4-8540-f19600c7ad54/1/gQYKUYUo6GqOp38YigJjeQwI9rk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/e5e2d0-f439-45e4-8540-f19600c7ad54/1/gQYKUYUo6GqOp38YigJjeQwI9rk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:a1:1a:f4:e3:75:ea:cf:6f:f9:ca:b6:53:3c:a2:9c:ca:a1:
52:d3:2b:6f:56:dc:ca:92:ab:ed:0f:3b:79:f2:59:4f:64:4f:
99:51:18:30:08:5e:11:8d:3b:78:f0:55:d4:a7:84:ef:f6:d6:
e3:12:8b:75:8e:e0:67:73:32:12:82:6b:98:0b:76:da:76:06:
11:51:98:7b:7f:8f:51:02:e7:bf:8c:41:e8:38:81:fc:dd:a5:
54:6d:91:f2:20:6b:20:30:8a:b4:9a:4c:5d:14:f1:bc:47:64:
4a:d4:4c:4e:5c:cf:aa:40:a2:37:1b:2e:dd:b4:ba:45:93:31:
53:cc:f0:25:59:b7:69:e4:bd:2a:05:10:b5:d2:66:d9:d7:f6:
55:d0:4a:4e:8d:db:dc:cc:9b:78:6f:51:79:99:63:c1:fd:62:
5c:68:b7:14:85:e9:ba:1d:cd:aa:3b:54:ab:e1:b9:95:22:ce:
c2:cd:22:7f:dd:b4:83:bb:03:ce:0f:a2:1d:18:ab:3d:cb:ee:
30:42:98:e7:6b:03:87:a2:47:88:a0:49:e3:95:43:a5:31:11:
ca:d5:08:19:aa:39:d5:4d:9a:ed:f7:1d:4d:1a:39:1c:82:7e:
8b:77:58:ca:76:ba:1b:ef:a9:9a:7b:c1:41:75:94:0b:fe:b9:
4a:a0:7c:4d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZognEkTTEy3aOuweU+kbhkLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxMDYwYTUxODUyOGU4NmE4ZWE3N2YxODhhMDI2Mzc5MGMw
OGY2YjkwHhcNMjUxMDI2MTMwMTQ0WhcNMjUxMDI3MTMwMTQ0WjAzMTEwLwYDVQQD
EyhiZjAwNWE5NjgyZDAwMjA4NDcyNTBiYmZmZjRmMGQ1NTBjMzZjZmQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh042u/NYhT1vskr7twofAVkJr6cq
C1zVXsj0KJ+/bDUvDdGA2tmJSEbu8WgAljx5AA8GguXgayY0wEs3VPOtuA4YweYa
crC6VFvAc/zoNsDcRaglovNGYlj9YqHZY/BgMjFevvCptVc1qPqaRirwvEadFTse
RfhjrmxPKna2GLmb9ESd0Fs/GBH/5qhAyl270tfnQec+ZnIAfdJ8ID46OPj9IkXi
rImj0qyAoQvcHlPD0UATtSecyYsSCCUkkBn5/zpNIuZJWE0ClZJUl1HZu9dqoj2O
ItCDkRCp10aCJu3VpJRAqA+YGRvwV98SovFlKbR2+Vt+R/HXwJKkxuCrEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL8AWpaC0AIIRyULv/9PDVUMNs/XMB8GA1UdIwQY
MBaAFIEGClGFKOhqjqd/GIoCY3kMCPa5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ1FZS1VZVW82R3FPcDM4WWlnSmplUXdJOXJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9lNWUyZDAtZjQzOS00NWU0LTg1NDAt
ZjE5NjAwYzdhZDU0LzEvZ1FZS1VZVW82R3FPcDM4WWlnSmplUXdJOXJrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy9lNWUyZDAtZjQzOS00NWU0LTg1NDAtZjE5NjAwYzdhZDU0
LzEvZ1FZS1VZVW82R3FPcDM4WWlnSmplUXdJOXJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADqEa9ON1
6s9v+cq2UzyinMqhUtMrb1bcypKr7Q87efJZT2RPmVEYMAheEY07ePBV1KeE7/bW
4xKLdY7gZ3MyEoJrmAt22nYGEVGYe3+PUQLnv4xB6DiB/N2lVG2R8iBrIDCKtJpM
XRTxvEdkStRMTlzPqkCiNxsu3bS6RZMxU8zwJVm3aeS9KgUQtdJm2df2VdBKTo3b
3MybeG9ReZljwf1iXGi3FIXpuh3NqjtUq+G5lSLOws0if920g7sDzg+iHRirPcvu
MEKY52sDh6JHiKBJ45VDpTERytUIGao51U2a7fcdTRo5HIJ+i3dYyna6G++pmnvB
QXWUC/65SqB8TQ==
-----END CERTIFICATE-----
Generated at Sun Oct 26 20:25:56 2025 by rpki-client