Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/d4e0db-18c1-4483-8803-966685ea40f9/1/GSXmOHsz6UBpqJpdG-aJBOQJBhM.mft
File: GSXmOHsz6UBpqJpdG-aJBOQJBhM.mft (raw, json)
Hash identifier: ZZBVSE/mswWV3ZzYcd0+2ynQqcQopYtmYaxzOYev4uo=
Subject key identifier: 20:E4:55:44:04:6D:43:E4:3A:4F:5D:42:05:47:40:0A:77:6C:E1:09
Authority key identifier: 19:25:E6:38:7B:33:E9:40:69:A8:9A:5D:1B:E6:89:04:E4:09:06:13
Certificate issuer: /CN=1925e6387b33e94069a89a5d1be68904e4090613
Certificate serial: 019A71B9690556FDC8BBE702173C0C7B7829
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GSXmOHsz6UBpqJpdG-aJBOQJBhM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/d4e0db-18c1-4483-8803-966685ea40f9/1/GSXmOHsz6UBpqJpdG-aJBOQJBhM.mft
Manifest number: 03F8
Signing time: Tue 11 Nov 2025 07:02:47 +0000
Manifest this update: Tue 11 Nov 2025 07:02:47 +0000
Manifest next update: Wed 12 Nov 2025 07:02:47 +0000
Files and hashes: 1: GSXmOHsz6UBpqJpdG-aJBOQJBhM.crl (hash: /OAKKxusfgp0U8TAwXNS3SRBGagouhVtYKNIaTsMV4s=)
2: KKovPP5k_vOQvmKc7t5x14I_gos.roa (hash: xTSJVhmS95WWwOtUsvBgdC5iNk4sqmcitObjOn9r3l4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/d4e0db-18c1-4483-8803-966685ea40f9/1/GSXmOHsz6UBpqJpdG-aJBOQJBhM.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/d4e0db-18c1-4483-8803-966685ea40f9/1/GSXmOHsz6UBpqJpdG-aJBOQJBhM.mft
rsync://rpki.ripe.net/repository/DEFAULT/GSXmOHsz6UBpqJpdG-aJBOQJBhM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:69:05:56:fd:c8:bb:e7:02:17:3c:0c:7b:78:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1925e6387b33e94069a89a5d1be68904e4090613
Validity
Not Before: Nov 11 07:02:47 2025 GMT
Not After : Nov 12 07:02:47 2025 GMT
Subject: CN=20e45544046d43e43a4f5d420547400a776ce109
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d9:33:33:1f:2c:45:cf:cc:ad:83:48:6a:68:
38:4f:96:98:2a:43:b8:7d:bd:b6:ec:11:bb:a4:ce:
5d:64:a0:3d:8d:ef:2c:d4:58:b3:28:25:16:37:ad:
8e:81:bb:b2:6a:e4:7e:99:41:e7:17:15:1e:93:2d:
26:c4:fe:2c:f4:2e:cb:3c:4f:86:7e:86:2a:4e:3a:
f8:07:50:bc:f5:ea:70:c4:6f:a6:6d:ea:df:be:6a:
1d:13:ab:44:77:aa:90:80:21:49:60:b7:34:b6:e5:
83:09:31:27:56:6e:36:fd:46:40:b8:99:09:47:12:
84:bd:b8:93:64:6b:d5:ca:86:96:cf:52:36:7f:13:
d5:58:6a:72:58:b2:c4:de:e1:a4:fa:7a:be:70:d7:
13:08:3f:db:fe:8d:0f:b3:1f:de:a9:4b:7a:44:f6:
62:7e:f1:0d:ec:07:68:2e:1b:56:bb:e4:db:d2:ac:
fa:a0:7b:ac:f6:35:f9:da:6d:48:39:a2:31:5f:a3:
7d:e2:2c:ab:ba:15:4f:89:6e:03:5f:9c:fc:cf:ca:
7b:ed:03:32:5d:12:e4:bd:61:fd:4e:c9:08:cf:3e:
dc:3b:7d:d8:7e:05:96:d5:3e:51:fd:3f:84:03:33:
cc:2b:37:17:b0:23:70:9a:8b:0d:98:e0:08:34:46:
49:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:E4:55:44:04:6D:43:E4:3A:4F:5D:42:05:47:40:0A:77:6C:E1:09
X509v3 Authority Key Identifier:
keyid:19:25:E6:38:7B:33:E9:40:69:A8:9A:5D:1B:E6:89:04:E4:09:06:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GSXmOHsz6UBpqJpdG-aJBOQJBhM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/d4e0db-18c1-4483-8803-966685ea40f9/1/GSXmOHsz6UBpqJpdG-aJBOQJBhM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/d4e0db-18c1-4483-8803-966685ea40f9/1/GSXmOHsz6UBpqJpdG-aJBOQJBhM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:ac:57:0b:f4:58:73:38:db:21:bc:ea:6e:3e:a8:fe:d2:61:
5e:3a:e8:de:e6:3b:24:27:49:94:2e:c3:f9:34:e9:5c:4a:26:
1c:82:e3:d5:7e:9c:8d:d3:a6:27:77:6b:85:70:54:72:12:4f:
7c:58:99:44:0d:63:bf:44:ee:f3:f1:a4:6e:bb:7f:63:3d:bc:
af:fa:e1:58:bb:f7:20:e8:c0:f6:c2:81:c3:6f:4b:c8:c1:cc:
97:14:24:8b:53:47:0a:e9:0a:87:97:1f:b2:57:1d:a0:f1:14:
be:58:5c:b3:ba:42:7c:de:7a:49:da:65:ad:ac:53:88:1b:ab:
d4:17:98:e8:f5:67:11:f7:aa:1d:27:ef:5f:ba:28:cb:c5:48:
01:0e:08:80:48:d1:81:39:60:a7:e0:14:7e:d6:2f:68:05:70:
44:d6:7c:cb:7a:dd:e4:1e:01:09:da:cc:65:9b:6a:c8:8c:d9:
bf:09:54:fa:10:16:ca:9a:b4:46:df:85:25:05:8c:2e:4a:a6:
ef:ee:b1:82:01:04:fa:4f:b2:c5:f4:b3:3a:8b:cf:e9:1b:50:
1a:13:7d:28:f0:a2:32:11:b1:c0:8e:64:28:49:c2:10:d0:16:
db:8f:ae:81:34:8b:c8:74:63:fb:11:26:ab:2c:77:19:1b:0d:
ef:c0:34:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuWkFVv3Iu+cCFzwMe3gpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5MjVlNjM4N2IzM2U5NDA2OWE4OWE1ZDFiZTY4OTA0ZTQw
OTA2MTMwHhcNMjUxMTExMDcwMjQ3WhcNMjUxMTEyMDcwMjQ3WjAzMTEwLwYDVQQD
EygyMGU0NTU0NDA0NmQ0M2U0M2E0ZjVkNDIwNTQ3NDAwYTc3NmNlMTA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs9kzMx8sRc/MrYNIamg4T5aYKkO4
fb227BG7pM5dZKA9je8s1FizKCUWN62OgbuyauR+mUHnFxUeky0mxP4s9C7LPE+G
foYqTjr4B1C89epwxG+mberfvmodE6tEd6qQgCFJYLc0tuWDCTEnVm42/UZAuJkJ
RxKEvbiTZGvVyoaWz1I2fxPVWGpyWLLE3uGk+nq+cNcTCD/b/o0Psx/eqUt6RPZi
fvEN7AdoLhtWu+Tb0qz6oHus9jX52m1IOaIxX6N94iyruhVPiW4DX5z8z8p77QMy
XRLkvWH9TskIzz7cO33YfgWW1T5R/T+EAzPMKzcXsCNwmosNmOAINEZJvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCDkVUQEbUPkOk9dQgVHQAp3bOEJMB8GA1UdIwQY
MBaAFBkl5jh7M+lAaaiaXRvmiQTkCQYTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR1NYbU9Ic3o2VUJwcUpwZEctYUpCT1FKQmhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9kNGUwZGItMThjMS00NDgzLTg4MDMt
OTY2Njg1ZWE0MGY5LzEvR1NYbU9Ic3o2VUJwcUpwZEctYUpCT1FKQmhNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi9kNGUwZGItMThjMS00NDgzLTg4MDMtOTY2Njg1ZWE0MGY5
LzEvR1NYbU9Ic3o2VUJwcUpwZEctYUpCT1FKQmhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQaxXC/RY
czjbIbzqbj6o/tJhXjro3uY7JCdJlC7D+TTpXEomHILj1X6cjdOmJ3drhXBUchJP
fFiZRA1jv0Tu8/Gkbrt/Yz28r/rhWLv3IOjA9sKBw29LyMHMlxQki1NHCukKh5cf
slcdoPEUvlhcs7pCfN56SdplraxTiBur1BeY6PVnEfeqHSfvX7ooy8VIAQ4IgEjR
gTlgp+AUftYvaAVwRNZ8y3rd5B4BCdrMZZtqyIzZvwlU+hAWypq0Rt+FJQWMLkqm
7+6xggEE+k+yxfSzOovP6RtQGhN9KPCiMhGxwI5kKEnCENAW24+ugTSLyHRj+xEm
qyx3GRsN78A0QQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:45:17 2025 by rpki-client