Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/f6f508-4b3e-422d-8fbc-1a2abda1a9e5/1/gXyxTOQBSsMmnXDu6onIcFWxdvE.mft
File: gXyxTOQBSsMmnXDu6onIcFWxdvE.mft (raw, json)
Hash identifier: +fqqteRfEF0ayDX3Oc2SVu3xctYjjWElDAWlp7F5cvA=
Subject key identifier: 44:F0:8A:B7:90:5D:14:14:CC:18:A0:65:DF:CB:B3:4A:12:06:18:61
Authority key identifier: 81:7C:B1:4C:E4:01:4A:C3:26:9D:70:EE:EA:89:C8:70:55:B1:76:F1
Certificate issuer: /CN=817cb14ce4014ac3269d70eeea89c87055b176f1
Certificate serial: 019A221BA5486FA769B3FCEA5BB00CCADFA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gXyxTOQBSsMmnXDu6onIcFWxdvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/f6f508-4b3e-422d-8fbc-1a2abda1a9e5/1/gXyxTOQBSsMmnXDu6onIcFWxdvE.mft
Manifest number: 07D4
Signing time: Sun 26 Oct 2025 20:00:28 +0000
Manifest this update: Sun 26 Oct 2025 20:00:28 +0000
Manifest next update: Mon 27 Oct 2025 20:00:28 +0000
Files and hashes: 1: 8sYphYrrmRM_ErwAJ8gqIzEpDGo.roa (hash: rt/OwZDBbcaVJA7rLlh63ti0IkxjXIhkThQceeCTgkI=)
2: gXyxTOQBSsMmnXDu6onIcFWxdvE.crl (hash: ZTxFUubc2uLZLb2uBK+bTSxF2ZFAQAi2dftOVf7ZdI4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/f6f508-4b3e-422d-8fbc-1a2abda1a9e5/1/gXyxTOQBSsMmnXDu6onIcFWxdvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/f6f508-4b3e-422d-8fbc-1a2abda1a9e5/1/gXyxTOQBSsMmnXDu6onIcFWxdvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/gXyxTOQBSsMmnXDu6onIcFWxdvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 14:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:1b:a5:48:6f:a7:69:b3:fc:ea:5b:b0:0c:ca:df:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=817cb14ce4014ac3269d70eeea89c87055b176f1
Validity
Not Before: Oct 26 20:00:28 2025 GMT
Not After : Oct 27 20:00:28 2025 GMT
Subject: CN=44f08ab7905d1414cc18a065dfcbb34a12061861
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:cc:ec:0e:dc:c1:05:e2:53:fb:6c:01:be:a9:
8a:e9:02:03:32:f9:cd:41:d0:82:61:d7:e6:ed:62:
d9:fc:c0:b8:52:d0:42:1c:30:c6:90:e9:7d:f6:d4:
37:d5:d1:64:b0:f8:a7:4d:ad:3e:6c:13:40:9e:da:
41:4d:81:17:38:1c:57:e0:cb:8f:6f:cf:66:b5:eb:
51:de:aa:02:95:3a:90:05:08:dd:94:57:46:97:5f:
8d:fd:09:99:37:8c:da:2f:28:28:3a:be:db:12:4c:
54:a1:7c:63:a0:32:fc:e6:b8:17:9e:cb:11:04:83:
b7:22:75:3c:0b:a4:b0:f7:22:5b:55:98:9d:78:46:
f3:d6:04:05:6e:ed:b4:9b:ce:51:6c:08:b7:6f:51:
5f:b7:cf:c3:da:60:24:dc:bf:46:34:ab:df:b2:c3:
b3:1e:17:0b:1a:09:f5:b9:1a:4b:82:52:98:c8:60:
5b:04:3f:d7:80:85:39:99:97:75:01:b8:d2:41:e8:
83:64:8e:e8:96:bd:19:87:d9:05:af:4b:0c:f8:5e:
9c:20:39:1e:6b:d4:80:95:ca:43:20:72:d4:a3:07:
da:3e:4b:ec:ae:c6:40:83:55:f5:bd:79:ee:20:1a:
33:ed:0a:37:17:95:ec:3a:a4:e2:c2:be:30:43:2e:
35:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:F0:8A:B7:90:5D:14:14:CC:18:A0:65:DF:CB:B3:4A:12:06:18:61
X509v3 Authority Key Identifier:
keyid:81:7C:B1:4C:E4:01:4A:C3:26:9D:70:EE:EA:89:C8:70:55:B1:76:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gXyxTOQBSsMmnXDu6onIcFWxdvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f6f508-4b3e-422d-8fbc-1a2abda1a9e5/1/gXyxTOQBSsMmnXDu6onIcFWxdvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f6f508-4b3e-422d-8fbc-1a2abda1a9e5/1/gXyxTOQBSsMmnXDu6onIcFWxdvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:9b:c2:d6:be:cf:37:17:de:18:1c:b7:ba:2d:ed:3f:58:5c:
76:24:2d:af:15:f1:82:5f:c8:24:1a:8a:93:ab:aa:e5:90:4f:
e4:37:aa:77:00:13:29:67:2f:e8:e1:dc:7e:fd:0d:35:2b:b5:
e6:ed:fb:16:eb:9e:af:91:f9:ad:d4:8e:41:21:30:a3:a3:7b:
71:85:c4:36:56:5d:79:00:a6:cb:4d:86:16:57:20:f7:46:31:
70:d3:77:ff:a7:76:8c:c1:1b:45:7a:4d:98:0d:9e:74:de:ed:
a0:16:ef:a1:03:71:42:05:bc:68:dc:30:ef:1f:6e:1c:9e:55:
72:18:9e:3b:65:d4:bd:08:00:62:cd:d5:c6:9c:6c:c7:c6:31:
c9:1a:4d:f7:f2:90:fe:26:06:a5:48:c0:7f:e3:98:b2:01:f2:
3a:2c:e5:2d:ca:5b:4c:5b:1f:ea:b1:c1:85:19:2c:18:4c:d6:
17:75:5a:ac:e7:7e:c3:51:63:23:b5:23:ff:5d:b7:dd:d5:d3:
99:8b:d7:77:cb:8b:38:7a:02:9f:8f:98:1e:c4:a3:ee:75:f9:
98:4d:3a:7f:51:06:87:7a:cc:ac:cd:27:62:8e:e7:f2:e4:54:
f7:ba:5c:9d:9d:f7:c2:d8:c9:65:5a:8d:84:ca:76:41:ab:8f:
89:6f:2d:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoiG6VIb6dps/zqW7AMyt+iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxN2NiMTRjZTQwMTRhYzMyNjlkNzBlZWVhODljODcwNTVi
MTc2ZjEwHhcNMjUxMDI2MjAwMDI4WhcNMjUxMDI3MjAwMDI4WjAzMTEwLwYDVQQD
Eyg0NGYwOGFiNzkwNWQxNDE0Y2MxOGEwNjVkZmNiYjM0YTEyMDYxODYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtszsDtzBBeJT+2wBvqmK6QIDMvnN
QdCCYdfm7WLZ/MC4UtBCHDDGkOl99tQ31dFksPinTa0+bBNAntpBTYEXOBxX4MuP
b89mtetR3qoClTqQBQjdlFdGl1+N/QmZN4zaLygoOr7bEkxUoXxjoDL85rgXnssR
BIO3InU8C6Sw9yJbVZideEbz1gQFbu20m85RbAi3b1Fft8/D2mAk3L9GNKvfssOz
HhcLGgn1uRpLglKYyGBbBD/XgIU5mZd1AbjSQeiDZI7olr0Zh9kFr0sM+F6cIDke
a9SAlcpDIHLUowfaPkvsrsZAg1X1vXnuIBoz7Qo3F5XsOqTiwr4wQy41EwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFETwireQXRQUzBigZd/Ls0oSBhhhMB8GA1UdIwQY
MBaAFIF8sUzkAUrDJp1w7uqJyHBVsXbxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ1h5eFRPUUJTc01tblhEdTZvbkljRld4ZHZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9mNmY1MDgtNGIzZS00MjJkLThmYmMt
MWEyYWJkYTFhOWU1LzEvZ1h5eFRPUUJTc01tblhEdTZvbkljRld4ZHZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy9mNmY1MDgtNGIzZS00MjJkLThmYmMtMWEyYWJkYTFhOWU1
LzEvZ1h5eFRPUUJTc01tblhEdTZvbkljRld4ZHZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhpvC1r7P
NxfeGBy3ui3tP1hcdiQtrxXxgl/IJBqKk6uq5ZBP5DeqdwATKWcv6OHcfv0NNSu1
5u37Fuuer5H5rdSOQSEwo6N7cYXENlZdeQCmy02GFlcg90YxcNN3/6d2jMEbRXpN
mA2edN7toBbvoQNxQgW8aNww7x9uHJ5VchieO2XUvQgAYs3Vxpxsx8YxyRpN9/KQ
/iYGpUjAf+OYsgHyOizlLcpbTFsf6rHBhRksGEzWF3VarOd+w1FjI7Uj/1233dXT
mYvXd8uLOHoCn4+YHsSj7nX5mE06f1EGh3rMrM0nYo7n8uRU97pcnZ33wtjJZVqN
hMp2QauPiW8tyQ==
-----END CERTIFICATE-----
Generated at Sun Oct 26 22:54:57 2025 by rpki-client