Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/532deb-42b1-4a2d-9fff-af7d6a89752a/1/gmzJk4wy4E3FRD3WwFoCelYX2Xs.mft
File: gmzJk4wy4E3FRD3WwFoCelYX2Xs.mft (raw, json)
Hash identifier: hynWOYUkUtdGc0v4P+aHqbRDRZtFYWnWs/1it93uFio=
Subject key identifier: B1:A9:64:51:E6:C9:47:88:A3:FC:89:4F:81:E8:70:66:53:44:50:1F
Authority key identifier: 82:6C:C9:93:8C:32:E0:4D:C5:44:3D:D6:C0:5A:02:7A:56:17:D9:7B
Certificate issuer: /CN=826cc9938c32e04dc5443dd6c05a027a5617d97b
Certificate serial: 019A7149B129A66D0F732FA5A9F8B2AF91DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gmzJk4wy4E3FRD3WwFoCelYX2Xs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/532deb-42b1-4a2d-9fff-af7d6a89752a/1/gmzJk4wy4E3FRD3WwFoCelYX2Xs.mft
Manifest number: 0C77
Signing time: Tue 11 Nov 2025 05:00:46 +0000
Manifest this update: Tue 11 Nov 2025 05:00:46 +0000
Manifest next update: Wed 12 Nov 2025 05:00:46 +0000
Files and hashes: 1: gmzJk4wy4E3FRD3WwFoCelYX2Xs.crl (hash: g+7ToDD/7ALrprtLSglLnIK2aQHAU3CH0TPnEX2lYFI=)
2: hZr6mNjSHqTgv3UgV0r5NKysYhc.roa (hash: AR+e3H/5yBz4nRQW+W404T/nXrb1KqyGNQGS5zNA/os=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/532deb-42b1-4a2d-9fff-af7d6a89752a/1/gmzJk4wy4E3FRD3WwFoCelYX2Xs.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/532deb-42b1-4a2d-9fff-af7d6a89752a/1/gmzJk4wy4E3FRD3WwFoCelYX2Xs.mft
rsync://rpki.ripe.net/repository/DEFAULT/gmzJk4wy4E3FRD3WwFoCelYX2Xs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:b1:29:a6:6d:0f:73:2f:a5:a9:f8:b2:af:91:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=826cc9938c32e04dc5443dd6c05a027a5617d97b
Validity
Not Before: Nov 11 05:00:46 2025 GMT
Not After : Nov 12 05:00:46 2025 GMT
Subject: CN=b1a96451e6c94788a3fc894f81e870665344501f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:96:3a:10:d4:3d:89:b1:bb:96:49:f0:8a:27:
86:fb:b3:4f:b6:00:11:1a:7c:8c:bb:48:c7:b2:d4:
d5:94:e0:7f:b3:db:82:e2:f9:ae:80:f4:c5:03:bf:
a4:93:16:2d:0a:c1:b0:c8:36:3b:15:a2:9f:39:56:
6d:82:69:b6:bd:36:50:26:26:82:e2:e8:58:f0:06:
c8:8c:3e:ce:ae:5b:a1:a0:fc:14:3b:ae:f4:9d:95:
dd:54:88:f5:49:43:f0:ba:c5:4a:8e:eb:2c:49:30:
7e:c3:75:20:6a:af:f8:4d:06:85:26:26:9f:1c:7b:
69:d7:a3:1e:0e:d8:e6:5b:d6:c3:19:30:e1:d6:59:
bc:9b:a1:03:9e:b8:14:2c:db:69:c8:45:89:08:c4:
9b:b1:03:92:ca:ce:d4:75:b0:f6:29:7a:22:2d:35:
5b:8d:30:b5:91:aa:ef:df:8d:f9:b7:55:3d:d0:1e:
e9:53:67:c6:96:25:fe:9e:be:17:28:1e:aa:8b:17:
44:40:4d:67:ae:a0:e6:21:db:12:67:89:b0:b8:58:
e8:e1:20:15:5f:a3:ce:c2:13:80:b2:a5:56:f0:a8:
35:65:b2:cd:7f:48:a8:ed:98:69:51:13:df:ce:3e:
64:6a:a7:78:89:ca:63:78:a0:da:57:57:62:03:1d:
b6:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:A9:64:51:E6:C9:47:88:A3:FC:89:4F:81:E8:70:66:53:44:50:1F
X509v3 Authority Key Identifier:
keyid:82:6C:C9:93:8C:32:E0:4D:C5:44:3D:D6:C0:5A:02:7A:56:17:D9:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmzJk4wy4E3FRD3WwFoCelYX2Xs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/532deb-42b1-4a2d-9fff-af7d6a89752a/1/gmzJk4wy4E3FRD3WwFoCelYX2Xs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/532deb-42b1-4a2d-9fff-af7d6a89752a/1/gmzJk4wy4E3FRD3WwFoCelYX2Xs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:96:79:f0:d1:13:17:96:cb:44:2b:c0:eb:64:a5:3b:e4:31:
f4:1d:97:55:30:a6:a9:2e:58:4d:b9:37:40:ab:23:72:a2:03:
b9:f2:f6:2b:47:46:b5:09:73:4b:e6:47:89:6c:08:57:8b:55:
1b:75:5f:9f:59:57:73:d0:b9:4b:2c:b5:cf:a2:a9:2a:5e:b6:
73:88:8d:15:c7:98:e1:3b:42:a5:79:7f:fa:aa:e5:7c:84:9e:
d3:93:cc:3e:13:45:84:57:90:d4:54:6d:27:7b:3e:b1:d8:f8:
3c:87:11:25:b7:e2:6f:c7:90:80:a9:14:62:11:03:e1:25:47:
37:f4:e8:84:3e:8c:73:e1:29:e5:5f:ae:cc:27:88:96:52:b7:
0c:fe:9f:59:0e:af:d3:2d:0a:10:83:95:ed:55:cc:39:8e:f1:
e2:fa:de:27:1a:96:a0:6b:b0:e0:20:4c:06:42:0a:29:9e:a4:
ce:e1:6d:c5:3a:00:6a:af:5e:49:e3:d2:8d:16:07:4f:9d:36:
2f:b4:67:9a:fc:d7:04:3f:bf:d4:b5:e9:4b:c8:19:05:94:ef:
a9:1b:61:23:31:03:e2:b0:b3:b9:3c:16:c2:55:19:5c:df:1b:
7f:81:64:8a:d5:f3:5d:73:fb:cb:b9:7b:88:5b:28:24:54:80:
aa:b8:00:5d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxSbEppm0Pcy+lqfiyr5HdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyNmNjOTkzOGMzMmUwNGRjNTQ0M2RkNmMwNWEwMjdhNTYx
N2Q5N2IwHhcNMjUxMTExMDUwMDQ2WhcNMjUxMTEyMDUwMDQ2WjAzMTEwLwYDVQQD
EyhiMWE5NjQ1MWU2Yzk0Nzg4YTNmYzg5NGY4MWU4NzA2NjUzNDQ1MDFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr5Y6ENQ9ibG7lknwiieG+7NPtgAR
GnyMu0jHstTVlOB/s9uC4vmugPTFA7+kkxYtCsGwyDY7FaKfOVZtgmm2vTZQJiaC
4uhY8AbIjD7OrluhoPwUO670nZXdVIj1SUPwusVKjussSTB+w3Ugaq/4TQaFJiaf
HHtp16MeDtjmW9bDGTDh1lm8m6EDnrgULNtpyEWJCMSbsQOSys7UdbD2KXoiLTVb
jTC1karv3435t1U90B7pU2fGliX+nr4XKB6qixdEQE1nrqDmIdsSZ4mwuFjo4SAV
X6POwhOAsqVW8Kg1ZbLNf0io7ZhpURPfzj5kaqd4icpjeKDaV1diAx22uQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLGpZFHmyUeIo/yJT4HocGZTRFAfMB8GA1UdIwQY
MBaAFIJsyZOMMuBNxUQ91sBaAnpWF9l7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ216Sms0d3k0RTNGUkQzV3dGb0NlbFlYMlhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi81MzJkZWItNDJiMS00YTJkLTlmZmYt
YWY3ZDZhODk3NTJhLzEvZ216Sms0d3k0RTNGUkQzV3dGb0NlbFlYMlhzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi81MzJkZWItNDJiMS00YTJkLTlmZmYtYWY3ZDZhODk3NTJh
LzEvZ216Sms0d3k0RTNGUkQzV3dGb0NlbFlYMlhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJZZ58NET
F5bLRCvA62SlO+Qx9B2XVTCmqS5YTbk3QKsjcqIDufL2K0dGtQlzS+ZHiWwIV4tV
G3Vfn1lXc9C5Syy1z6KpKl62c4iNFceY4TtCpXl/+qrlfISe05PMPhNFhFeQ1FRt
J3s+sdj4PIcRJbfib8eQgKkUYhED4SVHN/TohD6Mc+Ep5V+uzCeIllK3DP6fWQ6v
0y0KEIOV7VXMOY7x4vreJxqWoGuw4CBMBkIKKZ6kzuFtxToAaq9eSePSjRYHT502
L7RnmvzXBD+/1LXpS8gZBZTvqRthIzED4rCzuTwWwlUZXN8bf4FkitXzXXP7y7l7
iFsoJFSAqrgAXQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:43:16 2025 by rpki-client