Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/fccc7e-b511-451f-b982-dc85864aea89/1/gePml83W4iWsWxFhzfcE3pz8JlU.mft
File: gePml83W4iWsWxFhzfcE3pz8JlU.mft (raw, json)
Hash identifier: TyImWSs8VykO0csVVEK+U8vMkgahKHdwX+0DzwfWSgk=
Subject key identifier: CC:83:2E:49:A4:76:8A:9B:0D:DA:BE:28:0E:97:65:BD:82:AB:98:AF
Authority key identifier: 81:E3:E6:97:CD:D6:E2:25:AC:5B:11:61:CD:F7:04:DE:9C:FC:26:55
Certificate issuer: /CN=81e3e697cdd6e225ac5b1161cdf704de9cfc2655
Certificate serial: 019A14293B7F41B4440EECA773E5DE7FEA11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gePml83W4iWsWxFhzfcE3pz8JlU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/fccc7e-b511-451f-b982-dc85864aea89/1/gePml83W4iWsWxFhzfcE3pz8JlU.mft
Manifest number: 0AC1
Signing time: Fri 24 Oct 2025 03:00:37 +0000
Manifest this update: Fri 24 Oct 2025 03:00:37 +0000
Manifest next update: Sat 25 Oct 2025 03:00:37 +0000
Files and hashes: 1: gePml83W4iWsWxFhzfcE3pz8JlU.crl (hash: IMeMzw89bE9UFBrs/gAWRJM2/TaeeN2jQsuWsYaWVAI=)
2: z2a61Gj6rvrVvZkUxnDVYoDePIo.roa (hash: fvPf2Sq/vTgc0jy8x0X8WEqIuNGU5IX5ZX53TRDJUSs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/fccc7e-b511-451f-b982-dc85864aea89/1/gePml83W4iWsWxFhzfcE3pz8JlU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/fccc7e-b511-451f-b982-dc85864aea89/1/gePml83W4iWsWxFhzfcE3pz8JlU.mft
rsync://rpki.ripe.net/repository/DEFAULT/gePml83W4iWsWxFhzfcE3pz8JlU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Oct 2025 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:14:29:3b:7f:41:b4:44:0e:ec:a7:73:e5:de:7f:ea:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81e3e697cdd6e225ac5b1161cdf704de9cfc2655
Validity
Not Before: Oct 24 03:00:37 2025 GMT
Not After : Oct 25 03:00:37 2025 GMT
Subject: CN=cc832e49a4768a9b0ddabe280e9765bd82ab98af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:10:db:e8:d9:44:fd:0c:3d:4a:b8:8a:79:81:
5b:c1:79:2d:11:6f:f6:ed:53:e0:de:c2:ac:60:5b:
cc:7d:19:9c:fa:10:f5:4e:c9:3e:ff:6e:1c:77:65:
f5:ee:1c:e3:ea:e0:30:5e:b1:ee:61:76:ed:4b:36:
92:7b:14:56:ba:9c:37:e7:ce:63:fb:91:f4:f3:05:
73:c0:95:a5:1d:9c:91:a2:9f:43:5d:f8:25:21:c9:
0d:4a:fa:32:12:d0:45:9f:52:9f:e4:b2:c7:c8:d2:
b7:a3:ec:a1:ea:64:42:ea:51:f7:86:e0:82:0d:72:
7c:19:b9:8b:63:06:31:22:1a:a7:60:18:41:e0:1e:
ba:6f:51:4e:4e:0d:8f:51:da:44:6f:90:1d:de:d8:
f4:29:27:36:69:4d:d8:96:1a:b9:75:0b:3f:c9:9e:
f5:45:ea:50:8e:0a:28:94:77:47:db:f9:e4:9a:7f:
18:a9:62:f5:b6:60:f4:32:b8:8a:3f:47:65:bf:70:
cb:56:40:1c:ae:6f:c4:88:f0:22:e6:20:4f:c1:83:
3e:f5:40:4e:28:9b:ae:27:f4:04:b2:4c:45:17:69:
1d:11:91:04:a4:07:44:4d:58:17:be:3a:ee:4c:cd:
1e:3c:0f:b1:ed:0c:47:92:b7:bd:b3:33:3b:9b:7b:
3c:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:83:2E:49:A4:76:8A:9B:0D:DA:BE:28:0E:97:65:BD:82:AB:98:AF
X509v3 Authority Key Identifier:
keyid:81:E3:E6:97:CD:D6:E2:25:AC:5B:11:61:CD:F7:04:DE:9C:FC:26:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gePml83W4iWsWxFhzfcE3pz8JlU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/fccc7e-b511-451f-b982-dc85864aea89/1/gePml83W4iWsWxFhzfcE3pz8JlU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/fccc7e-b511-451f-b982-dc85864aea89/1/gePml83W4iWsWxFhzfcE3pz8JlU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:6b:85:ae:00:73:93:21:aa:1b:f2:c1:01:f0:e6:07:bd:9e:
d5:e4:4a:4f:96:cd:52:fd:f2:00:6b:fb:e7:fe:74:22:cf:16:
3c:ee:a1:93:b2:20:03:f6:3c:47:b0:57:4c:7e:68:e3:17:f7:
17:4f:68:d5:1e:5d:58:45:fc:c9:1b:4c:13:88:e4:e0:f1:04:
af:83:4a:82:2b:5c:01:7b:58:de:24:ed:ca:b8:c5:1c:09:14:
d1:aa:0b:36:2e:49:23:16:31:cc:e5:08:d4:89:29:08:51:a6:
0f:ee:9e:b0:d3:0c:2e:04:69:61:64:c2:54:5a:ca:d3:8c:40:
3f:ec:51:55:7d:3c:a2:19:0c:cd:85:b1:c0:da:ec:93:9e:6e:
76:ff:b8:ee:62:6f:9e:da:3a:89:ca:ee:65:8b:58:e8:42:43:
64:50:0d:d5:72:0b:f0:7b:57:73:2b:1f:b1:54:d7:76:bd:5d:
4e:25:18:cf:04:d9:2a:77:e6:09:78:1a:81:c8:9b:02:ec:5d:
5d:98:7c:31:df:6c:f5:73:f3:41:69:5a:d0:86:49:67:2d:fa:
c7:fe:d7:25:39:8e:3d:82:70:3f:54:a1:66:3a:92:ef:12:a9:
1b:df:96:8e:90:01:7e:66:bf:e7:c8:15:31:12:a3:2d:56:2c:
af:4c:59:e1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoUKTt/QbREDuync+Xef+oRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxZTNlNjk3Y2RkNmUyMjVhYzViMTE2MWNkZjcwNGRlOWNm
YzI2NTUwHhcNMjUxMDI0MDMwMDM3WhcNMjUxMDI1MDMwMDM3WjAzMTEwLwYDVQQD
EyhjYzgzMmU0OWE0NzY4YTliMGRkYWJlMjgwZTk3NjViZDgyYWI5OGFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmRDb6NlE/Qw9SriKeYFbwXktEW/2
7VPg3sKsYFvMfRmc+hD1Tsk+/24cd2X17hzj6uAwXrHuYXbtSzaSexRWupw3585j
+5H08wVzwJWlHZyRop9DXfglIckNSvoyEtBFn1Kf5LLHyNK3o+yh6mRC6lH3huCC
DXJ8GbmLYwYxIhqnYBhB4B66b1FOTg2PUdpEb5Ad3tj0KSc2aU3Ylhq5dQs/yZ71
RepQjgoolHdH2/nkmn8YqWL1tmD0MriKP0dlv3DLVkAcrm/EiPAi5iBPwYM+9UBO
KJuuJ/QEskxFF2kdEZEEpAdETVgXvjruTM0ePA+x7QxHkre9szM7m3s8DwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMyDLkmkdoqbDdq+KA6XZb2Cq5ivMB8GA1UdIwQY
MBaAFIHj5pfN1uIlrFsRYc33BN6c/CZVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ2VQbWw4M1c0aVdzV3hGaHpmY0UzcHo4SmxVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS9mY2NjN2UtYjUxMS00NTFmLWI5ODIt
ZGM4NTg2NGFlYTg5LzEvZ2VQbWw4M1c0aVdzV3hGaHpmY0UzcHo4SmxVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS9mY2NjN2UtYjUxMS00NTFmLWI5ODItZGM4NTg2NGFlYTg5
LzEvZ2VQbWw4M1c0aVdzV3hGaHpmY0UzcHo4SmxVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIWuFrgBz
kyGqG/LBAfDmB72e1eRKT5bNUv3yAGv75/50Is8WPO6hk7IgA/Y8R7BXTH5o4xf3
F09o1R5dWEX8yRtME4jk4PEEr4NKgitcAXtY3iTtyrjFHAkU0aoLNi5JIxYxzOUI
1IkpCFGmD+6esNMMLgRpYWTCVFrK04xAP+xRVX08ohkMzYWxwNrsk55udv+47mJv
nto6icruZYtY6EJDZFAN1XIL8HtXcysfsVTXdr1dTiUYzwTZKnfmCXgagcibAuxd
XZh8Md9s9XPzQWla0IZJZy36x/7XJTmOPYJwP1ShZjqS7xKpG9+WjpABfma/58gV
MRKjLVYsr0xZ4Q==
-----END CERTIFICATE-----
Generated at Fri Oct 24 06:39:10 2025 by rpki-client