Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/0562f8-2670-440f-8502-1ba0ebaa8a86/1/GzWY67XR0I6w2kONBSzrqk_cdo8.mft
File: GzWY67XR0I6w2kONBSzrqk_cdo8.mft (raw, json)
Hash identifier: Dro4Nlucj3ZQIsCEdgGEnF32eWUCs+Bdsu12MraUjm8=
Subject key identifier: D2:26:94:CD:07:77:D3:04:01:C6:9D:79:CD:75:EC:62:AD:B1:AE:51
Authority key identifier: 1B:35:98:EB:B5:D1:D0:8E:B0:DA:43:8D:05:2C:EB:AA:4F:DC:76:8F
Certificate issuer: /CN=1b3598ebb5d1d08eb0da438d052cebaa4fdc768f
Certificate serial: 019A71B7BDA1AA1EAD22FF0BFAA246C8D776
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GzWY67XR0I6w2kONBSzrqk_cdo8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/0562f8-2670-440f-8502-1ba0ebaa8a86/1/GzWY67XR0I6w2kONBSzrqk_cdo8.mft
Manifest number: 0665
Signing time: Tue 11 Nov 2025 07:00:58 +0000
Manifest this update: Tue 11 Nov 2025 07:00:58 +0000
Manifest next update: Wed 12 Nov 2025 07:00:58 +0000
Files and hashes: 1: CVTCDO4j3ew_vvVMZ-5a85iKk6w.roa (hash: 1WlZWQglW9seeMd9Cyv5zgkOiHhAGTdr0i/f1OUkJDs=)
2: GzWY67XR0I6w2kONBSzrqk_cdo8.crl (hash: AB4zcfQgNuxJ5sAEwZN24hQDxkAQ1jR30sE33cxmghM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/0562f8-2670-440f-8502-1ba0ebaa8a86/1/GzWY67XR0I6w2kONBSzrqk_cdo8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/0562f8-2670-440f-8502-1ba0ebaa8a86/1/GzWY67XR0I6w2kONBSzrqk_cdo8.mft
rsync://rpki.ripe.net/repository/DEFAULT/GzWY67XR0I6w2kONBSzrqk_cdo8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:bd:a1:aa:1e:ad:22:ff:0b:fa:a2:46:c8:d7:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b3598ebb5d1d08eb0da438d052cebaa4fdc768f
Validity
Not Before: Nov 11 07:00:58 2025 GMT
Not After : Nov 12 07:00:58 2025 GMT
Subject: CN=d22694cd0777d30401c69d79cd75ec62adb1ae51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:3f:b3:81:ab:bb:c4:00:3d:3a:fa:88:09:3f:
89:0d:73:ac:4f:98:b3:a1:e6:8c:23:4a:ee:dc:08:
98:52:d8:77:8f:4a:27:ff:97:66:8d:81:33:10:49:
6d:b8:7d:5e:c5:05:17:06:56:6b:1b:8b:14:0d:f3:
71:89:e1:e1:ad:ed:a4:58:9c:1f:b9:4a:ea:2d:cf:
13:c6:24:13:27:31:56:13:31:7f:fa:75:48:6c:91:
d4:f9:cf:cc:92:3d:1a:79:82:86:cb:c7:bc:b8:20:
41:57:25:b6:53:13:52:87:94:1e:48:88:b5:07:86:
d1:6a:c5:96:e2:de:f3:35:55:a2:52:f5:d2:9c:5b:
d9:c2:3b:d9:74:6b:d9:3b:8f:99:c9:df:9e:5c:5b:
81:c5:fc:55:cb:f8:ac:5c:d1:b6:da:49:98:dd:06:
fc:15:ca:0b:82:f1:db:69:6d:58:bf:ee:9a:31:25:
63:37:f4:94:cd:30:74:55:56:aa:07:21:90:c7:07:
69:de:83:d4:e4:05:ea:53:1f:c6:dd:f7:24:9e:a7:
74:40:4c:a1:2c:f7:8d:e0:b3:b8:86:52:69:3b:bb:
56:2d:ec:ba:54:70:dd:f3:9d:bd:fe:bb:1b:fc:1c:
6b:3b:f1:43:cd:b8:f3:30:0e:c3:e3:b7:63:95:ba:
4d:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:26:94:CD:07:77:D3:04:01:C6:9D:79:CD:75:EC:62:AD:B1:AE:51
X509v3 Authority Key Identifier:
keyid:1B:35:98:EB:B5:D1:D0:8E:B0:DA:43:8D:05:2C:EB:AA:4F:DC:76:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GzWY67XR0I6w2kONBSzrqk_cdo8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/0562f8-2670-440f-8502-1ba0ebaa8a86/1/GzWY67XR0I6w2kONBSzrqk_cdo8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/0562f8-2670-440f-8502-1ba0ebaa8a86/1/GzWY67XR0I6w2kONBSzrqk_cdo8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:dd:a0:0b:fa:d1:14:4a:e0:3d:9d:4c:5d:32:ba:e1:58:27:
3f:6c:10:15:d1:1e:b0:e1:46:f3:dc:20:a0:d3:7a:61:5f:25:
96:5d:54:84:8a:ef:86:0b:a0:8e:da:93:94:79:d3:89:35:6c:
42:32:1f:12:44:06:c2:57:fa:61:69:bc:1b:cd:21:76:17:26:
24:8b:36:6a:c5:c6:fb:d9:9e:1b:39:e0:3e:d5:ec:7b:4d:19:
e1:b8:60:fa:96:99:3d:b6:37:bf:cc:7e:06:07:e8:a1:d8:88:
9b:ed:df:b6:9d:0f:01:42:3d:01:98:a0:6e:82:53:06:b8:a1:
af:b6:4a:29:73:23:39:82:fd:11:8c:9f:98:08:bd:7f:72:63:
8b:37:69:65:02:9d:b8:df:72:9b:24:8d:3f:c6:f8:52:ce:cb:
f0:b3:c6:82:64:e1:18:74:8e:4d:d9:24:f8:ca:16:17:49:c4:
22:1f:26:70:24:44:6a:af:34:2b:96:06:93:1b:f5:1e:52:45:
98:fb:54:14:dc:56:8b:57:1a:13:91:f5:ee:d2:e1:84:96:c5:
b9:54:fd:bb:54:06:b3:d5:24:e7:ff:c3:ab:8a:f5:83:e6:2b:
d6:03:a9:39:18:b1:f5:39:09:b2:ef:76:c8:12:c8:58:49:07:
e0:73:07:80
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxt72hqh6tIv8L+qJGyNd2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiMzU5OGViYjVkMWQwOGViMGRhNDM4ZDA1MmNlYmFhNGZk
Yzc2OGYwHhcNMjUxMTExMDcwMDU4WhcNMjUxMTEyMDcwMDU4WjAzMTEwLwYDVQQD
EyhkMjI2OTRjZDA3NzdkMzA0MDFjNjlkNzljZDc1ZWM2MmFkYjFhZTUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlT+zgau7xAA9OvqICT+JDXOsT5iz
oeaMI0ru3AiYUth3j0on/5dmjYEzEEltuH1exQUXBlZrG4sUDfNxieHhre2kWJwf
uUrqLc8TxiQTJzFWEzF/+nVIbJHU+c/Mkj0aeYKGy8e8uCBBVyW2UxNSh5QeSIi1
B4bRasWW4t7zNVWiUvXSnFvZwjvZdGvZO4+Zyd+eXFuBxfxVy/isXNG22kmY3Qb8
FcoLgvHbaW1Yv+6aMSVjN/SUzTB0VVaqByGQxwdp3oPU5AXqUx/G3fcknqd0QEyh
LPeN4LO4hlJpO7tWLey6VHDd8529/rsb/BxrO/FDzbjzMA7D47djlbpNdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNImlM0Hd9MEAcadec117GKtsa5RMB8GA1UdIwQY
MBaAFBs1mOu10dCOsNpDjQUs66pP3HaPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3pXWTY3WFIwSTZ3MmtPTkJTenJxa19jZG84LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy8wNTYyZjgtMjY3MC00NDBmLTg1MDIt
MWJhMGViYWE4YTg2LzEvR3pXWTY3WFIwSTZ3MmtPTkJTenJxa19jZG84Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy8wNTYyZjgtMjY3MC00NDBmLTg1MDItMWJhMGViYWE4YTg2
LzEvR3pXWTY3WFIwSTZ3MmtPTkJTenJxa19jZG84LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgt2gC/rR
FErgPZ1MXTK64VgnP2wQFdEesOFG89wgoNN6YV8lll1UhIrvhgugjtqTlHnTiTVs
QjIfEkQGwlf6YWm8G80hdhcmJIs2asXG+9meGzngPtXse00Z4bhg+paZPbY3v8x+
BgfoodiIm+3ftp0PAUI9AZigboJTBrihr7ZKKXMjOYL9EYyfmAi9f3JjizdpZQKd
uN9ymySNP8b4Us7L8LPGgmThGHSOTdkk+MoWF0nEIh8mcCREaq80K5YGkxv1HlJF
mPtUFNxWi1caE5H17tLhhJbFuVT9u1QGs9Uk5//Dq4r1g+Yr1gOpORix9TkJsu92
yBLIWEkH4HMHgA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:41:49 2025 by rpki-client