Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/f85a54-7f8d-4b2f-8cbc-2a2bbcc2103f/1/G-vsblSMHSxoMZyNKaNfwG0Fxco.mft
File: G-vsblSMHSxoMZyNKaNfwG0Fxco.mft (raw, json)
Hash identifier: l+vsYounmlHTXCvCVCXm+g+TG+PizJUUfrsCA5VaLw0=
Subject key identifier: 7A:4D:90:5D:17:DD:50:1C:98:A5:EE:8E:92:AF:90:79:E2:CF:8E:CC
Authority key identifier: 1B:EB:EC:6E:54:8C:1D:2C:68:31:9C:8D:29:A3:5F:C0:6D:05:C5:CA
Certificate issuer: /CN=1bebec6e548c1d2c68319c8d29a35fc06d05c5ca
Certificate serial: 019A72265E725F91C17C0ABFBA070876FEDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G-vsblSMHSxoMZyNKaNfwG0Fxco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/f85a54-7f8d-4b2f-8cbc-2a2bbcc2103f/1/G-vsblSMHSxoMZyNKaNfwG0Fxco.mft
Manifest number: 01BE
Signing time: Tue 11 Nov 2025 09:01:48 +0000
Manifest this update: Tue 11 Nov 2025 09:01:48 +0000
Manifest next update: Wed 12 Nov 2025 09:01:48 +0000
Files and hashes: 1: G-vsblSMHSxoMZyNKaNfwG0Fxco.crl (hash: HkegtZcg42jb0q6VSBqbAsT/ulhzUXJ2s6AatAu9Lsc=)
2: gLxG9OBR-307s9i7CUzgsFayA0w.roa (hash: U9Hk3a/+dmVqWlPybJkT20UlsNmTcI0F5wchliR1XTs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/f85a54-7f8d-4b2f-8cbc-2a2bbcc2103f/1/G-vsblSMHSxoMZyNKaNfwG0Fxco.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/f85a54-7f8d-4b2f-8cbc-2a2bbcc2103f/1/G-vsblSMHSxoMZyNKaNfwG0Fxco.mft
rsync://rpki.ripe.net/repository/DEFAULT/G-vsblSMHSxoMZyNKaNfwG0Fxco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:5e:72:5f:91:c1:7c:0a:bf:ba:07:08:76:fe:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bebec6e548c1d2c68319c8d29a35fc06d05c5ca
Validity
Not Before: Nov 11 09:01:48 2025 GMT
Not After : Nov 12 09:01:48 2025 GMT
Subject: CN=7a4d905d17dd501c98a5ee8e92af9079e2cf8ecc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:fa:2a:36:4a:69:d5:e2:56:81:ef:50:f8:13:
fb:8c:58:25:e3:e1:67:62:e2:6d:5c:49:69:1e:6a:
8f:44:3b:ae:06:30:13:ea:54:3c:7c:42:68:11:32:
97:7d:92:7b:7b:2e:d3:e5:c7:0b:b6:5f:5e:96:c4:
b8:5e:cc:b8:58:5f:ef:6e:28:cf:e4:c9:0e:05:dc:
c3:32:8f:cb:b5:1c:af:d7:93:79:cc:ef:36:dd:8c:
54:1d:f4:97:ae:64:c6:df:b5:5d:da:73:e1:37:1f:
f5:ac:e2:c0:3a:00:07:7b:43:93:0b:07:2d:68:f7:
da:26:2e:64:f4:41:bc:dd:f6:63:66:30:5f:8b:b7:
db:36:0a:ab:6f:4a:78:45:f8:11:df:d0:07:a1:9c:
b1:82:e6:36:b0:6f:6a:be:12:40:8a:ff:9e:50:61:
61:61:79:c9:98:93:32:29:f9:7b:b9:ff:4c:66:e7:
34:80:f2:ce:4f:1b:f5:b3:9a:e4:20:7d:ef:26:c3:
fe:6c:48:5e:99:b3:8a:85:8b:78:76:1b:70:dc:89:
e3:22:83:6b:9d:07:ba:9d:a7:84:82:cc:ad:45:5e:
9a:39:73:ba:52:31:ae:80:f2:b3:f7:6e:46:73:58:
e9:cc:b6:06:fb:7e:d2:3b:52:cc:bc:1b:1d:bb:a3:
35:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:4D:90:5D:17:DD:50:1C:98:A5:EE:8E:92:AF:90:79:E2:CF:8E:CC
X509v3 Authority Key Identifier:
keyid:1B:EB:EC:6E:54:8C:1D:2C:68:31:9C:8D:29:A3:5F:C0:6D:05:C5:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G-vsblSMHSxoMZyNKaNfwG0Fxco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/f85a54-7f8d-4b2f-8cbc-2a2bbcc2103f/1/G-vsblSMHSxoMZyNKaNfwG0Fxco.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/f85a54-7f8d-4b2f-8cbc-2a2bbcc2103f/1/G-vsblSMHSxoMZyNKaNfwG0Fxco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:13:0b:20:fb:ac:7e:aa:30:29:a9:b9:cc:de:51:ad:72:9c:
a2:9d:df:98:dd:36:9c:7f:74:56:61:ce:00:be:00:e8:be:23:
8c:87:85:c8:ff:32:36:8f:7c:08:d3:80:ee:30:e7:02:e2:5d:
3a:f2:6b:7b:d1:16:48:39:c4:c5:9a:bc:d3:b0:74:44:76:ae:
b3:6a:ea:b8:12:9f:cd:cd:12:11:6d:d4:be:9f:d3:89:21:36:
90:7c:e4:f0:e1:46:c8:89:db:a8:b0:b8:5f:a4:99:b6:c8:76:
1f:be:6c:1a:dc:56:5a:7e:45:af:6b:d4:a3:a8:92:5d:9d:65:
5e:2f:72:bf:2f:0b:73:d5:70:0b:16:76:d0:3c:75:31:a8:ef:
0d:55:ab:43:68:9e:83:8b:dd:bd:01:88:6d:1d:26:41:7e:f6:
da:bf:80:44:a8:93:5c:8c:db:5c:95:34:81:45:c1:dc:01:26:
68:5f:c2:37:bf:8f:ef:cf:0f:b5:6c:31:58:d7:ef:f9:2d:98:
12:00:44:cf:e7:4f:6d:82:f3:fc:bf:5d:9e:32:b4:d5:d9:8e:
db:87:fa:d5:c2:37:bc:93:5c:fe:66:a2:79:04:8b:96:5a:61:
d0:a4:e4:f5:87:18:92:df:38:ab:33:ab:c2:f0:01:0c:37:f5:
04:76:60:6f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyJl5yX5HBfAq/ugcIdv7cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiZWJlYzZlNTQ4YzFkMmM2ODMxOWM4ZDI5YTM1ZmMwNmQw
NWM1Y2EwHhcNMjUxMTExMDkwMTQ4WhcNMjUxMTEyMDkwMTQ4WjAzMTEwLwYDVQQD
Eyg3YTRkOTA1ZDE3ZGQ1MDFjOThhNWVlOGU5MmFmOTA3OWUyY2Y4ZWNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0/oqNkpp1eJWge9Q+BP7jFgl4+Fn
YuJtXElpHmqPRDuuBjAT6lQ8fEJoETKXfZJ7ey7T5ccLtl9elsS4Xsy4WF/vbijP
5MkOBdzDMo/LtRyv15N5zO823YxUHfSXrmTG37Vd2nPhNx/1rOLAOgAHe0OTCwct
aPfaJi5k9EG83fZjZjBfi7fbNgqrb0p4RfgR39AHoZyxguY2sG9qvhJAiv+eUGFh
YXnJmJMyKfl7uf9MZuc0gPLOTxv1s5rkIH3vJsP+bEhembOKhYt4dhtw3InjIoNr
nQe6naeEgsytRV6aOXO6UjGugPKz925Gc1jpzLYG+37SO1LMvBsdu6M1DQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHpNkF0X3VAcmKXujpKvkHniz47MMB8GA1UdIwQY
MBaAFBvr7G5UjB0saDGcjSmjX8BtBcXKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRy12c2JsU01IU3hvTVp5TkthTmZ3RzBGeGNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC9mODVhNTQtN2Y4ZC00YjJmLThjYmMt
MmEyYmJjYzIxMDNmLzEvRy12c2JsU01IU3hvTVp5TkthTmZ3RzBGeGNvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC9mODVhNTQtN2Y4ZC00YjJmLThjYmMtMmEyYmJjYzIxMDNm
LzEvRy12c2JsU01IU3hvTVp5TkthTmZ3RzBGeGNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvhMLIPus
fqowKam5zN5RrXKcop3fmN02nH90VmHOAL4A6L4jjIeFyP8yNo98CNOA7jDnAuJd
OvJre9EWSDnExZq807B0RHaus2rquBKfzc0SEW3Uvp/TiSE2kHzk8OFGyInbqLC4
X6SZtsh2H75sGtxWWn5Fr2vUo6iSXZ1lXi9yvy8Lc9VwCxZ20Dx1MajvDVWrQ2ie
g4vdvQGIbR0mQX722r+ARKiTXIzbXJU0gUXB3AEmaF/CN7+P788PtWwxWNfv+S2Y
EgBEz+dPbYLz/L9dnjK01dmO24f61cI3vJNc/maieQSLllph0KTk9YcYkt84qzOr
wvABDDf1BHZgbw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:04:42 2025 by rpki-client