Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/d70d46-265a-4092-8331-ef5f093f5395/1/GbZo5W_iW9bcU4AO4XdQYezAkgY.mft
File: GbZo5W_iW9bcU4AO4XdQYezAkgY.mft (raw, json)
Hash identifier: 1Jn4eOgh53QaKsg5OzsN1eJHnTXCeUlGYG+L4lFKk9g=
Subject key identifier: 70:AC:BD:A9:CA:D8:71:46:F1:46:4B:6B:51:59:2A:4A:2D:14:51:36
Authority key identifier: 19:B6:68:E5:6F:E2:5B:D6:DC:53:80:0E:E1:77:50:61:EC:C0:92:06
Certificate issuer: /CN=19b668e56fe25bd6dc53800ee1775061ecc09206
Certificate serial: 019A70A5061FC324563BAC690D87B28F0B52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GbZo5W_iW9bcU4AO4XdQYezAkgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/d70d46-265a-4092-8331-ef5f093f5395/1/GbZo5W_iW9bcU4AO4XdQYezAkgY.mft
Manifest number: 0171
Signing time: Tue 11 Nov 2025 02:00:54 +0000
Manifest this update: Tue 11 Nov 2025 02:00:54 +0000
Manifest next update: Wed 12 Nov 2025 02:00:54 +0000
Files and hashes: 1: GbZo5W_iW9bcU4AO4XdQYezAkgY.crl (hash: orb3siywQheXrb/DjR4zrM7b/bzo29YjcN8HZxdKFkg=)
2: RiL09rS6VjBEVN__JOM2U5RqEcI.roa (hash: uYgL/yhRbt5qevmx86ZZVWKBSugMaqO2EFz8Vo1U7Pk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/d70d46-265a-4092-8331-ef5f093f5395/1/GbZo5W_iW9bcU4AO4XdQYezAkgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/d70d46-265a-4092-8331-ef5f093f5395/1/GbZo5W_iW9bcU4AO4XdQYezAkgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/GbZo5W_iW9bcU4AO4XdQYezAkgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a5:06:1f:c3:24:56:3b:ac:69:0d:87:b2:8f:0b:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19b668e56fe25bd6dc53800ee1775061ecc09206
Validity
Not Before: Nov 11 02:00:54 2025 GMT
Not After : Nov 12 02:00:54 2025 GMT
Subject: CN=70acbda9cad87146f1464b6b51592a4a2d145136
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:1f:36:05:53:93:72:3c:cd:77:12:c9:5e:cc:
a9:84:0b:22:d6:2a:3c:a9:ae:a9:84:23:4b:10:7b:
8a:b3:f1:d4:3a:e3:42:4d:33:67:ad:51:62:89:1e:
ce:ca:46:63:1c:b8:95:5a:cc:7f:41:64:d4:f2:18:
8f:9c:24:ec:be:89:a6:95:77:57:60:be:36:b7:c2:
2a:23:b1:53:04:5a:88:85:c3:a9:a1:e4:95:5a:d7:
55:8b:53:13:96:f4:f1:6b:fd:81:60:c3:b8:f5:3d:
aa:0c:c2:8b:3b:e6:9d:fc:93:fb:7f:c7:07:22:76:
ab:e1:19:6e:f9:40:04:b7:b3:c0:25:9f:b1:c8:c8:
44:93:e4:0f:5e:45:94:11:30:ba:44:6a:96:b0:8b:
aa:41:fc:d8:79:34:45:03:ef:4c:d4:2e:d1:4b:ed:
62:7b:30:fc:3d:57:5e:b9:e6:9b:d1:56:21:a6:7d:
c7:47:12:bb:6a:10:a7:fd:04:c6:52:df:51:58:a4:
d4:f0:fe:a2:80:7c:fd:2b:7e:fe:ab:e5:7b:40:7e:
b6:68:33:ae:39:13:73:52:a3:16:54:7f:53:67:2b:
9e:a7:58:c1:aa:b4:ae:1e:d9:71:ba:f8:fe:2f:24:
f1:58:66:a4:5e:32:8e:82:cf:2a:69:09:1e:de:46:
06:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:AC:BD:A9:CA:D8:71:46:F1:46:4B:6B:51:59:2A:4A:2D:14:51:36
X509v3 Authority Key Identifier:
keyid:19:B6:68:E5:6F:E2:5B:D6:DC:53:80:0E:E1:77:50:61:EC:C0:92:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GbZo5W_iW9bcU4AO4XdQYezAkgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/d70d46-265a-4092-8331-ef5f093f5395/1/GbZo5W_iW9bcU4AO4XdQYezAkgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/d70d46-265a-4092-8331-ef5f093f5395/1/GbZo5W_iW9bcU4AO4XdQYezAkgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:89:b8:dd:49:81:d3:98:04:f2:25:41:85:48:ee:47:2b:0c:
90:7a:fe:25:c5:1e:34:3f:f4:10:95:a5:44:c5:43:2d:52:78:
85:a8:56:a1:61:2e:8b:5a:cf:6e:ca:74:09:08:aa:c5:c8:b5:
6e:5e:85:27:44:6e:95:b5:cc:61:07:28:9d:9e:a0:7f:62:65:
1e:77:d4:de:93:d0:5a:59:42:d2:e0:2e:22:3f:49:e1:0f:cf:
91:df:89:b3:7b:46:e8:c0:35:31:ff:2e:3e:65:47:80:d8:14:
7d:2b:14:0a:17:43:7d:fd:53:ce:fe:f4:f4:8c:c0:75:7a:3e:
a3:d8:8e:ab:a2:d7:40:9c:23:35:ec:b3:cf:0a:35:37:7f:ec:
7f:11:70:55:04:bd:a6:b0:c6:6e:dd:fa:82:b0:49:9a:5a:b8:
be:29:8e:6d:30:56:32:1b:94:d3:98:22:68:3d:62:ef:c8:fc:
15:da:e1:56:52:78:b8:8c:82:ba:d8:f9:78:2a:04:96:a9:39:
64:48:63:3d:a9:a3:e4:0b:60:9b:2f:1a:31:d9:8c:bb:8e:6c:
49:f3:2a:1d:ce:ad:03:1e:7b:78:20:91:d9:5d:80:03:60:24:
c9:26:d5:ff:8d:de:a3:9d:19:59:27:9f:f1:28:31:5e:2d:03:
1d:30:39:f2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpwpQYfwyRWO6xpDYeyjwtSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5YjY2OGU1NmZlMjViZDZkYzUzODAwZWUxNzc1MDYxZWNj
MDkyMDYwHhcNMjUxMTExMDIwMDU0WhcNMjUxMTEyMDIwMDU0WjAzMTEwLwYDVQQD
Eyg3MGFjYmRhOWNhZDg3MTQ2ZjE0NjRiNmI1MTU5MmE0YTJkMTQ1MTM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8R82BVOTcjzNdxLJXsyphAsi1io8
qa6phCNLEHuKs/HUOuNCTTNnrVFiiR7OykZjHLiVWsx/QWTU8hiPnCTsvommlXdX
YL42t8IqI7FTBFqIhcOpoeSVWtdVi1MTlvTxa/2BYMO49T2qDMKLO+ad/JP7f8cH
Inar4Rlu+UAEt7PAJZ+xyMhEk+QPXkWUETC6RGqWsIuqQfzYeTRFA+9M1C7RS+1i
ezD8PVdeueab0VYhpn3HRxK7ahCn/QTGUt9RWKTU8P6igHz9K37+q+V7QH62aDOu
ORNzUqMWVH9TZyuep1jBqrSuHtlxuvj+LyTxWGakXjKOgs8qaQke3kYGtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHCsvanK2HFG8UZLa1FZKkotFFE2MB8GA1UdIwQY
MBaAFBm2aOVv4lvW3FOADuF3UGHswJIGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2JabzVXX2lXOWJjVTRBTzRYZFFZZXpBa2dZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9kNzBkNDYtMjY1YS00MDkyLTgzMzEt
ZWY1ZjA5M2Y1Mzk1LzEvR2JabzVXX2lXOWJjVTRBTzRYZFFZZXpBa2dZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS9kNzBkNDYtMjY1YS00MDkyLTgzMzEtZWY1ZjA5M2Y1Mzk1
LzEvR2JabzVXX2lXOWJjVTRBTzRYZFFZZXpBa2dZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApYm43UmB
05gE8iVBhUjuRysMkHr+JcUeND/0EJWlRMVDLVJ4hahWoWEui1rPbsp0CQiqxci1
bl6FJ0RulbXMYQconZ6gf2JlHnfU3pPQWllC0uAuIj9J4Q/Pkd+Js3tG6MA1Mf8u
PmVHgNgUfSsUChdDff1Tzv709IzAdXo+o9iOq6LXQJwjNeyzzwo1N3/sfxFwVQS9
prDGbt36grBJmlq4vimObTBWMhuU05giaD1i78j8FdrhVlJ4uIyCutj5eCoElqk5
ZEhjPamj5Atgmy8aMdmMu45sSfMqHc6tAx57eCCR2V2AA2AkySbV/43eo50ZWSef
8SgxXi0DHTA58g==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:34:49 2025 by rpki-client