Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/e64148-4c8c-4e84-925b-e022e3009a71/1/gGnZ_-BIpwAD8W8G4k2b8tuF61I.mft
File: gGnZ_-BIpwAD8W8G4k2b8tuF61I.mft (raw, json)
Hash identifier: 4Q3uplPD/c9ITnYxNaHkPA/0KdoktWLYuIGFL8LtSvA=
Subject key identifier: DE:FF:CA:39:EF:2C:21:B9:03:78:BB:6F:43:F7:80:5B:D0:30:6E:33
Authority key identifier: 80:69:D9:FF:E0:48:A7:00:03:F1:6F:06:E2:4D:9B:F2:DB:85:EB:52
Certificate issuer: /CN=8069d9ffe048a70003f16f06e24d9bf2db85eb52
Certificate serial: 019A71EEAB91CE64C2C69DA59E1617047ABC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gGnZ_-BIpwAD8W8G4k2b8tuF61I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/e64148-4c8c-4e84-925b-e022e3009a71/1/gGnZ_-BIpwAD8W8G4k2b8tuF61I.mft
Manifest number: 1726
Signing time: Tue 11 Nov 2025 08:00:58 +0000
Manifest this update: Tue 11 Nov 2025 08:00:58 +0000
Manifest next update: Wed 12 Nov 2025 08:00:58 +0000
Files and hashes: 1: ReUkv2XBhq4jZK8mdlDBfah6_NY.roa (hash: 0JTSyIquJGzLqSds9ko3zMw9Lmr56Y3WjwQhPWRtRNo=)
2: XtfrcY0xGbaYSlWTXL9nm2Diii0.roa (hash: aEZWDKAQcPeSAXKY4jWlj23Ulwbg4fWY9kpGKgMl9kU=)
3: gGnZ_-BIpwAD8W8G4k2b8tuF61I.crl (hash: ILfAKZv2GGpbWCBG0Cqi4E55GqxZen1sjTe4YGR+Bio=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/e64148-4c8c-4e84-925b-e022e3009a71/1/gGnZ_-BIpwAD8W8G4k2b8tuF61I.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/e64148-4c8c-4e84-925b-e022e3009a71/1/gGnZ_-BIpwAD8W8G4k2b8tuF61I.mft
rsync://rpki.ripe.net/repository/DEFAULT/gGnZ_-BIpwAD8W8G4k2b8tuF61I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:ab:91:ce:64:c2:c6:9d:a5:9e:16:17:04:7a:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8069d9ffe048a70003f16f06e24d9bf2db85eb52
Validity
Not Before: Nov 11 08:00:58 2025 GMT
Not After : Nov 12 08:00:58 2025 GMT
Subject: CN=deffca39ef2c21b90378bb6f43f7805bd0306e33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:df:dc:33:4f:88:3d:9b:65:0a:39:96:2e:27:
43:f9:7b:40:1c:bb:49:c9:53:04:7d:84:34:91:00:
b9:cb:e3:be:07:37:67:88:2e:0e:73:27:e5:42:7e:
8a:e0:63:cd:74:66:8a:2f:2d:88:0e:1d:8b:3f:0a:
2b:86:91:63:be:aa:e1:2a:18:02:be:44:e9:bf:ac:
ed:6f:bf:7a:d5:7b:ae:99:0a:ee:8c:22:1e:7f:71:
b4:99:f1:c8:77:13:ea:e7:56:b9:7e:4f:ff:16:e8:
90:46:da:1c:6a:f6:cf:fc:cc:90:30:20:a2:ae:05:
b3:2c:dc:ed:88:5d:42:fd:04:6b:12:3d:12:36:e8:
ed:34:3d:99:93:a3:4e:cc:85:2c:e7:47:02:f0:07:
a4:00:af:b5:c2:c6:87:61:20:fd:34:4f:26:3e:66:
4a:18:e9:fd:b0:a1:d2:a1:1c:b3:01:bb:7d:f4:ef:
6f:b8:e2:08:89:bf:29:f9:84:fa:2d:2a:8e:23:c4:
e2:af:f9:ae:6f:fd:83:e5:65:c7:9c:71:d5:f6:44:
a8:e9:ad:48:9d:60:91:4b:3d:a9:0a:d2:62:a1:c6:
67:0a:19:86:0b:45:e3:27:fb:c3:50:97:20:9a:ca:
18:a2:ff:8f:95:0c:0c:f5:7f:eb:c6:83:e9:87:8d:
e2:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:FF:CA:39:EF:2C:21:B9:03:78:BB:6F:43:F7:80:5B:D0:30:6E:33
X509v3 Authority Key Identifier:
keyid:80:69:D9:FF:E0:48:A7:00:03:F1:6F:06:E2:4D:9B:F2:DB:85:EB:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gGnZ_-BIpwAD8W8G4k2b8tuF61I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/e64148-4c8c-4e84-925b-e022e3009a71/1/gGnZ_-BIpwAD8W8G4k2b8tuF61I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/e64148-4c8c-4e84-925b-e022e3009a71/1/gGnZ_-BIpwAD8W8G4k2b8tuF61I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:05:04:2a:08:64:c7:3f:58:8a:8b:2c:a0:ae:23:ea:88:14:
21:b9:da:9f:2d:80:c7:b0:1f:2b:60:0f:8f:0c:9a:1f:af:64:
a8:2f:32:82:32:bc:d1:8f:ba:1e:b4:b5:2e:af:86:4b:ea:de:
c9:2c:27:d8:4f:59:91:6d:d2:dc:95:fb:cc:aa:10:a8:a7:39:
1d:c7:99:18:c1:0e:4d:66:e9:23:b2:51:7d:2a:a1:77:6d:d4:
75:8c:b5:2a:0e:74:63:3e:fb:1f:af:f0:75:bf:28:bd:7c:ca:
63:36:68:ca:fa:4a:31:87:ef:43:28:ca:d3:99:ef:10:39:9e:
9b:d5:ed:81:4b:d0:ce:15:fb:38:0b:c9:1d:e8:cb:b9:65:ad:
bb:e4:84:2e:f0:85:08:46:4e:e2:54:b6:96:3c:9d:2c:e1:43:
8d:a4:54:17:51:91:01:5f:ee:7a:35:cf:b5:dd:ca:9f:b1:09:
d9:8a:36:25:57:7a:9c:8c:1f:7e:54:e1:0f:58:2d:9f:9c:fa:
a8:93:aa:3e:38:1b:b4:7d:47:95:73:d3:d5:d0:75:60:e8:39:
cc:e7:ee:fe:71:b2:6a:b7:7e:da:f0:60:ce:7f:dd:fd:81:e9:
ac:57:dc:84:84:32:f5:c4:67:c2:44:3d:50:ab:8f:0b:2f:a6:
b2:d6:3c:3b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpx7quRzmTCxp2lnhYXBHq8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgwNjlkOWZmZTA0OGE3MDAwM2YxNmYwNmUyNGQ5YmYyZGI4
NWViNTIwHhcNMjUxMTExMDgwMDU4WhcNMjUxMTEyMDgwMDU4WjAzMTEwLwYDVQQD
EyhkZWZmY2EzOWVmMmMyMWI5MDM3OGJiNmY0M2Y3ODA1YmQwMzA2ZTMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoN/cM0+IPZtlCjmWLidD+XtAHLtJ
yVMEfYQ0kQC5y+O+BzdniC4OcyflQn6K4GPNdGaKLy2IDh2LPworhpFjvqrhKhgC
vkTpv6ztb7961XuumQrujCIef3G0mfHIdxPq51a5fk//FuiQRtocavbP/MyQMCCi
rgWzLNztiF1C/QRrEj0SNujtND2Zk6NOzIUs50cC8AekAK+1wsaHYSD9NE8mPmZK
GOn9sKHSoRyzAbt99O9vuOIIib8p+YT6LSqOI8Tir/mub/2D5WXHnHHV9kSo6a1I
nWCRSz2pCtJiocZnChmGC0XjJ/vDUJcgmsoYov+PlQwM9X/rxoPph43iowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN7/yjnvLCG5A3i7b0P3gFvQMG4zMB8GA1UdIwQY
MBaAFIBp2f/gSKcAA/FvBuJNm/LbhetSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ0duWl8tQklwd0FEOFc4RzRrMmI4dHVGNjFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9lNjQxNDgtNGM4Yy00ZTg0LTkyNWIt
ZTAyMmUzMDA5YTcxLzEvZ0duWl8tQklwd0FEOFc4RzRrMmI4dHVGNjFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS9lNjQxNDgtNGM4Yy00ZTg0LTkyNWItZTAyMmUzMDA5YTcx
LzEvZ0duWl8tQklwd0FEOFc4RzRrMmI4dHVGNjFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANgUEKghk
xz9YiossoK4j6ogUIbnany2Ax7AfK2APjwyaH69kqC8ygjK80Y+6HrS1Lq+GS+re
ySwn2E9ZkW3S3JX7zKoQqKc5HceZGMEOTWbpI7JRfSqhd23UdYy1Kg50Yz77H6/w
db8ovXzKYzZoyvpKMYfvQyjK05nvEDmem9XtgUvQzhX7OAvJHejLuWWtu+SELvCF
CEZO4lS2ljydLOFDjaRUF1GRAV/uejXPtd3Kn7EJ2Yo2JVd6nIwfflThD1gtn5z6
qJOqPjgbtH1HlXPT1dB1YOg5zOfu/nGyard+2vBgzn/d/YHprFfchIQy9cRnwkQ9
UKuPCy+mstY8Ow==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:46:24 2025 by rpki-client