Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/c2c03e-56e1-403a-93de-e23ad799b1d1/1/gcEVEu7o_tkcQi8ztljWi8NOt4A.mft
File: gcEVEu7o_tkcQi8ztljWi8NOt4A.mft (raw, json)
Hash identifier: s4pYyySPATRZGN+YmTewaqx4rGAKaXfufSUup5uBGIE=
Subject key identifier: 63:E7:27:03:9E:98:C2:AB:66:12:33:54:A5:6A:97:4A:9C:E8:3C:82
Authority key identifier: 81:C1:15:12:EE:E8:FE:D9:1C:42:2F:33:B6:58:D6:8B:C3:4E:B7:80
Certificate issuer: /CN=81c11512eee8fed91c422f33b658d68bc34eb780
Certificate serial: 019A232E4B971F6FE63BB7620320C04CA9EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gcEVEu7o_tkcQi8ztljWi8NOt4A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/c2c03e-56e1-403a-93de-e23ad799b1d1/1/gcEVEu7o_tkcQi8ztljWi8NOt4A.mft
Manifest number: 0AA6
Signing time: Mon 27 Oct 2025 01:00:27 +0000
Manifest this update: Mon 27 Oct 2025 01:00:27 +0000
Manifest next update: Tue 28 Oct 2025 01:00:27 +0000
Files and hashes: 1: gcEVEu7o_tkcQi8ztljWi8NOt4A.crl (hash: Kz8HKWzzcNbzmHCmWIr8DQpXwBNL/zwjbElmCgtEwEg=)
2: oBBYy0ld98gJluOgW3OE5ry-1bI.roa (hash: cDSWMJxoBmliysmmQ82PR5LMpFN2xHzw2hwrTiHsQ+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/c2c03e-56e1-403a-93de-e23ad799b1d1/1/gcEVEu7o_tkcQi8ztljWi8NOt4A.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/c2c03e-56e1-403a-93de-e23ad799b1d1/1/gcEVEu7o_tkcQi8ztljWi8NOt4A.mft
rsync://rpki.ripe.net/repository/DEFAULT/gcEVEu7o_tkcQi8ztljWi8NOt4A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:23:2e:4b:97:1f:6f:e6:3b:b7:62:03:20:c0:4c:a9:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81c11512eee8fed91c422f33b658d68bc34eb780
Validity
Not Before: Oct 27 01:00:27 2025 GMT
Not After : Oct 28 01:00:27 2025 GMT
Subject: CN=63e727039e98c2ab66123354a56a974a9ce83c82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:4f:31:82:50:26:cd:3c:6a:c4:bd:c2:f6:9f:
de:cf:0a:9e:10:52:67:23:e9:a1:80:d6:4c:e6:87:
65:21:63:6e:bb:f8:cc:19:88:79:42:5b:93:2e:8c:
4b:d9:35:d9:9b:61:f1:6f:7b:3d:c3:50:34:a6:68:
ee:98:3f:c9:31:da:8f:3b:e6:9e:56:49:55:9d:ef:
d0:c4:6a:ed:f7:a2:9e:8b:5b:13:79:95:18:7a:4f:
22:44:1b:e0:b7:f1:31:5f:c9:e6:55:a5:f6:71:fe:
93:af:57:81:0e:de:f0:16:c7:97:98:50:a8:46:da:
12:9f:ce:52:85:b5:d7:3d:20:a4:14:82:88:b5:40:
5c:3f:5a:3b:c8:cb:c2:6a:46:91:9d:bd:37:8d:05:
c6:5e:80:b1:c8:f7:b3:98:bb:86:6b:62:80:42:2a:
ca:9f:8f:d3:52:7e:32:86:85:3e:a3:2c:3d:ca:05:
6d:58:c7:f3:38:ad:8b:3b:46:4b:c1:91:7f:b7:f0:
4c:04:c7:ca:e5:c1:31:8a:d1:4e:b7:5d:5f:1b:b5:
21:e4:27:ba:6c:32:3e:a0:08:d1:ed:8d:62:6d:93:
74:e5:9d:9e:07:79:de:6d:8d:e3:4f:4a:e9:2a:3f:
f6:6c:b5:9d:a6:2f:c3:e0:06:83:21:60:47:f3:fd:
cb:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:E7:27:03:9E:98:C2:AB:66:12:33:54:A5:6A:97:4A:9C:E8:3C:82
X509v3 Authority Key Identifier:
keyid:81:C1:15:12:EE:E8:FE:D9:1C:42:2F:33:B6:58:D6:8B:C3:4E:B7:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gcEVEu7o_tkcQi8ztljWi8NOt4A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/c2c03e-56e1-403a-93de-e23ad799b1d1/1/gcEVEu7o_tkcQi8ztljWi8NOt4A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/c2c03e-56e1-403a-93de-e23ad799b1d1/1/gcEVEu7o_tkcQi8ztljWi8NOt4A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:a9:85:2b:8c:97:d2:42:54:e6:20:6a:44:32:e8:1a:50:fe:
9c:11:c1:30:54:26:c3:e8:bb:10:38:98:44:91:8d:81:a7:29:
d3:bf:94:a4:ce:b1:82:c4:d3:b7:46:1f:7a:23:3c:7c:2b:91:
d8:06:05:20:57:9a:56:fe:47:ec:de:5b:fe:a0:d1:5b:60:ef:
5a:d4:d1:92:9e:9d:0f:47:fb:f7:3e:e4:52:44:1e:33:69:17:
46:e0:63:1f:56:6d:69:95:25:46:20:96:f6:8a:3c:06:2a:4c:
34:2c:91:89:f5:63:43:e2:dd:da:2a:8b:1f:d3:e3:ef:e2:92:
4d:fa:89:c9:0a:50:72:b0:ed:64:86:63:15:6d:6a:76:37:fa:
25:eb:c2:84:f7:22:3c:18:d7:04:b2:a7:60:f9:9d:66:b2:b4:
52:0f:4b:ad:ce:67:32:f6:4d:f3:d9:b5:a5:1e:e4:2c:4c:4b:
5b:be:89:30:81:44:aa:76:3f:0c:6a:88:0c:74:e2:b2:5b:58:
36:76:97:2d:d0:d5:2a:d4:58:e6:42:be:0c:46:84:cf:73:c6:
74:fc:6f:10:4d:fd:3b:13:b3:f0:f2:c3:a7:00:26:d1:f8:68:
f5:9f:2a:35:88:06:17:12:a7:66:3d:df:ef:46:aa:75:02:f5:
f8:16:6d:c7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZojLkuXH2/mO7diAyDATKnuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxYzExNTEyZWVlOGZlZDkxYzQyMmYzM2I2NThkNjhiYzM0
ZWI3ODAwHhcNMjUxMDI3MDEwMDI3WhcNMjUxMDI4MDEwMDI3WjAzMTEwLwYDVQQD
Eyg2M2U3MjcwMzllOThjMmFiNjYxMjMzNTRhNTZhOTc0YTljZTgzYzgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzU8xglAmzTxqxL3C9p/ezwqeEFJn
I+mhgNZM5odlIWNuu/jMGYh5QluTLoxL2TXZm2Hxb3s9w1A0pmjumD/JMdqPO+ae
VklVne/QxGrt96Kei1sTeZUYek8iRBvgt/ExX8nmVaX2cf6Tr1eBDt7wFseXmFCo
RtoSn85ShbXXPSCkFIKItUBcP1o7yMvCakaRnb03jQXGXoCxyPezmLuGa2KAQirK
n4/TUn4yhoU+oyw9ygVtWMfzOK2LO0ZLwZF/t/BMBMfK5cExitFOt11fG7Uh5Ce6
bDI+oAjR7Y1ibZN05Z2eB3nebY3jT0rpKj/2bLWdpi/D4AaDIWBH8/3LhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGPnJwOemMKrZhIzVKVql0qc6DyCMB8GA1UdIwQY
MBaAFIHBFRLu6P7ZHEIvM7ZY1ovDTreAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ2NFVkV1N29fdGtjUWk4enRsaldpOE5PdDRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS9jMmMwM2UtNTZlMS00MDNhLTkzZGUt
ZTIzYWQ3OTliMWQxLzEvZ2NFVkV1N29fdGtjUWk4enRsaldpOE5PdDRBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS9jMmMwM2UtNTZlMS00MDNhLTkzZGUtZTIzYWQ3OTliMWQx
LzEvZ2NFVkV1N29fdGtjUWk4enRsaldpOE5PdDRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApamFK4yX
0kJU5iBqRDLoGlD+nBHBMFQmw+i7EDiYRJGNgacp07+UpM6xgsTTt0YfeiM8fCuR
2AYFIFeaVv5H7N5b/qDRW2DvWtTRkp6dD0f79z7kUkQeM2kXRuBjH1ZtaZUlRiCW
9oo8BipMNCyRifVjQ+Ld2iqLH9Pj7+KSTfqJyQpQcrDtZIZjFW1qdjf6JevChPci
PBjXBLKnYPmdZrK0Ug9Lrc5nMvZN89m1pR7kLExLW76JMIFEqnY/DGqIDHTisltY
NnaXLdDVKtRY5kK+DEaEz3PGdPxvEE39OxOz8PLDpwAm0fho9Z8qNYgGFxKnZj3f
70aqdQL1+BZtxw==
-----END CERTIFICATE-----
Generated at Mon Oct 27 04:34:36 2025 by rpki-client