Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/b2397c-b36d-46a3-a240-1d9a19f1295b/1/g_W9I77F0GOYM6kUGYXMV1OIbhY.mft
File: g_W9I77F0GOYM6kUGYXMV1OIbhY.mft (raw, json)
Hash identifier: ZQwPkU+1tRGBWaOb5P7FeZRelob6/VprTnIlxAaW1Ko=
Subject key identifier: 41:BD:2A:5F:92:10:86:7C:79:88:BB:B6:FF:2D:F5:40:DE:B0:9C:AF
Authority key identifier: 83:F5:BD:23:BE:C5:D0:63:98:33:A9:14:19:85:CC:57:53:88:6E:16
Certificate issuer: /CN=83f5bd23bec5d0639833a9141985cc5753886e16
Certificate serial: 019A71B8F7D829ECFB1C6CEFC1E05F44FC14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g_W9I77F0GOYM6kUGYXMV1OIbhY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/b2397c-b36d-46a3-a240-1d9a19f1295b/1/g_W9I77F0GOYM6kUGYXMV1OIbhY.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 07:02:18 +0000
Manifest this update: Tue 11 Nov 2025 07:02:18 +0000
Manifest next update: Wed 12 Nov 2025 07:02:18 +0000
Files and hashes: 1: 1H2Y74rOLQCMhy2O3X9ouFiEkFY.roa (hash: fzT1x1Cd9KzjMSBAyqcBMyBoif3guu8C9asSN6fBGTo=)
2: g_W9I77F0GOYM6kUGYXMV1OIbhY.crl (hash: Gnf1PUdRjuh8WqJh/FCa7zM7+bT/HT8ENU+iAhHnvCI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/b2397c-b36d-46a3-a240-1d9a19f1295b/1/g_W9I77F0GOYM6kUGYXMV1OIbhY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/b2397c-b36d-46a3-a240-1d9a19f1295b/1/g_W9I77F0GOYM6kUGYXMV1OIbhY.mft
rsync://rpki.ripe.net/repository/DEFAULT/g_W9I77F0GOYM6kUGYXMV1OIbhY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:f7:d8:29:ec:fb:1c:6c:ef:c1:e0:5f:44:fc:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83f5bd23bec5d0639833a9141985cc5753886e16
Validity
Not Before: Nov 11 07:02:18 2025 GMT
Not After : Nov 12 07:02:18 2025 GMT
Subject: CN=41bd2a5f9210867c7988bbb6ff2df540deb09caf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:65:ca:e2:42:67:73:86:b9:e7:9a:2b:20:91:
d9:6a:ab:65:61:cf:8d:27:b1:af:ce:ff:a6:c2:3d:
07:76:be:d8:46:aa:6e:bf:ac:2b:35:2d:ec:6f:83:
c4:13:df:a3:8b:c7:04:ad:ab:34:c9:e9:5f:f7:57:
c7:b4:ab:bc:6b:9f:6d:2b:28:5d:ba:53:fa:aa:0f:
8f:ee:17:5b:a9:79:56:c1:ca:eb:57:a2:33:37:e4:
1b:fe:4b:8d:56:53:8d:f3:58:08:e6:5f:52:e0:d9:
e9:e9:b5:73:d4:c3:43:7b:55:16:0a:21:49:15:f1:
58:27:2f:ad:df:c4:e8:52:39:57:28:d9:b9:90:c3:
ec:4b:fc:45:1d:04:59:87:06:63:b3:6c:39:ff:6b:
45:75:6f:8c:15:5f:45:53:aa:10:95:a0:43:84:a9:
9d:88:6e:b9:09:91:20:e4:4c:e1:ec:3a:06:8a:f1:
e6:fc:09:74:ae:7d:bf:6d:5f:19:64:84:ea:dc:11:
31:c7:71:23:f0:1e:ad:85:cb:85:23:97:a1:42:d6:
f7:e1:cb:12:34:e8:ba:6f:66:ba:02:08:1b:99:af:
d8:8b:1c:dc:3b:26:c1:af:dc:d6:cb:a0:8f:00:e8:
55:2b:c8:6c:4c:ce:47:2d:a6:cd:9f:39:56:70:d7:
c8:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:BD:2A:5F:92:10:86:7C:79:88:BB:B6:FF:2D:F5:40:DE:B0:9C:AF
X509v3 Authority Key Identifier:
keyid:83:F5:BD:23:BE:C5:D0:63:98:33:A9:14:19:85:CC:57:53:88:6E:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g_W9I77F0GOYM6kUGYXMV1OIbhY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/b2397c-b36d-46a3-a240-1d9a19f1295b/1/g_W9I77F0GOYM6kUGYXMV1OIbhY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/b2397c-b36d-46a3-a240-1d9a19f1295b/1/g_W9I77F0GOYM6kUGYXMV1OIbhY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:3a:75:e6:f2:a6:08:7d:b5:4d:e2:26:1c:c9:75:f1:80:ba:
24:cd:dc:9c:86:55:0a:7f:48:9b:80:46:b7:a9:05:54:c3:b3:
99:30:5d:67:fd:85:b6:17:5f:2b:d4:8f:90:5a:08:44:13:f8:
44:0a:c6:aa:b4:a3:9e:c4:65:29:70:6c:ff:5f:63:ca:25:38:
0b:fd:67:d9:06:f2:a8:6a:ad:f1:b2:80:b3:61:ff:c6:71:1a:
88:b9:75:e2:ad:7c:76:a6:71:9c:d2:fc:1d:07:bf:40:83:de:
77:b5:71:6c:f1:5b:00:d6:e4:7e:41:89:ac:3a:1d:04:2f:a1:
fb:99:3e:af:89:41:35:30:35:45:85:87:00:e5:0c:58:b6:0e:
88:11:69:8c:de:67:bb:50:3c:9f:27:84:8b:37:91:11:5b:61:
0b:e3:13:37:1d:31:ca:9e:e5:90:e8:05:52:c9:b0:b1:32:4b:
74:1b:75:ac:7a:34:36:ee:33:3f:0c:76:27:f2:3a:f5:e9:f4:
7f:d2:31:dc:1a:03:4e:bd:9b:88:49:d0:b4:00:cf:6c:3f:98:
f0:8f:81:d8:cd:ce:1d:d5:59:51:20:dc:56:e1:15:99:5e:55:
31:73:05:70:4c:cd:6e:23:82:0a:bf:76:3d:e2:4b:0f:56:81:
3d:6b:57:a8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuPfYKez7HGzvweBfRPwUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzZjViZDIzYmVjNWQwNjM5ODMzYTkxNDE5ODVjYzU3NTM4
ODZlMTYwHhcNMjUxMTExMDcwMjE4WhcNMjUxMTEyMDcwMjE4WjAzMTEwLwYDVQQD
Eyg0MWJkMmE1ZjkyMTA4NjdjNzk4OGJiYjZmZjJkZjU0MGRlYjA5Y2FmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvGXK4kJnc4a555orIJHZaqtlYc+N
J7Gvzv+mwj0Hdr7YRqpuv6wrNS3sb4PEE9+ji8cEras0yelf91fHtKu8a59tKyhd
ulP6qg+P7hdbqXlWwcrrV6IzN+Qb/kuNVlON81gI5l9S4Nnp6bVz1MNDe1UWCiFJ
FfFYJy+t38ToUjlXKNm5kMPsS/xFHQRZhwZjs2w5/2tFdW+MFV9FU6oQlaBDhKmd
iG65CZEg5Ezh7DoGivHm/Al0rn2/bV8ZZITq3BExx3Ej8B6thcuFI5ehQtb34csS
NOi6b2a6Aggbma/YixzcOybBr9zWy6CPAOhVK8hsTM5HLabNnzlWcNfIswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEG9Kl+SEIZ8eYi7tv8t9UDesJyvMB8GA1UdIwQY
MBaAFIP1vSO+xdBjmDOpFBmFzFdTiG4WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ19XOUk3N0YwR09ZTTZrVUdZWE1WMU9JYmhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9iMjM5N2MtYjM2ZC00NmEzLWEyNDAt
MWQ5YTE5ZjEyOTViLzEvZ19XOUk3N0YwR09ZTTZrVUdZWE1WMU9JYmhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi9iMjM5N2MtYjM2ZC00NmEzLWEyNDAtMWQ5YTE5ZjEyOTVi
LzEvZ19XOUk3N0YwR09ZTTZrVUdZWE1WMU9JYmhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArTp15vKm
CH21TeImHMl18YC6JM3cnIZVCn9Im4BGt6kFVMOzmTBdZ/2FthdfK9SPkFoIRBP4
RArGqrSjnsRlKXBs/19jyiU4C/1n2QbyqGqt8bKAs2H/xnEaiLl14q18dqZxnNL8
HQe/QIPed7VxbPFbANbkfkGJrDodBC+h+5k+r4lBNTA1RYWHAOUMWLYOiBFpjN5n
u1A8nyeEizeREVthC+MTNx0xyp7lkOgFUsmwsTJLdBt1rHo0Nu4zPwx2J/I69en0
f9Ix3BoDTr2biEnQtADPbD+Y8I+B2M3OHdVZUSDcVuEVmV5VMXMFcEzNbiOCCr92
PeJLD1aBPWtXqA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 13:11:11 2025 by rpki-client