Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/6ba6a3-25e0-499a-a7a9-98398fdbc9fb/1/GpRvSoJtYiozjtg-CvzfeMh2BPg.mft
File: GpRvSoJtYiozjtg-CvzfeMh2BPg.mft (raw, json)
Hash identifier: CELNjBLElQWvx0TviTmYKIImJ+bUClfol4NTaYKQsDc=
Subject key identifier: A1:03:44:D6:04:DE:A1:97:44:6D:8D:89:D6:6C:78:48:B0:2A:F8:BF
Authority key identifier: 1A:94:6F:4A:82:6D:62:2A:33:8E:D8:3E:0A:FC:DF:78:C8:76:04:F8
Certificate issuer: /CN=1a946f4a826d622a338ed83e0afcdf78c87604f8
Certificate serial: 019A4E4F67CAD9D64E6D5AFD3A0132A77D11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GpRvSoJtYiozjtg-CvzfeMh2BPg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/6ba6a3-25e0-499a-a7a9-98398fdbc9fb/1/GpRvSoJtYiozjtg-CvzfeMh2BPg.mft
Manifest number: 1009
Signing time: Tue 04 Nov 2025 10:00:18 +0000
Manifest this update: Tue 04 Nov 2025 10:00:18 +0000
Manifest next update: Wed 05 Nov 2025 10:00:18 +0000
Files and hashes: 1: GpRvSoJtYiozjtg-CvzfeMh2BPg.crl (hash: 3QhTb2KKw9qQNV7bm9mjkQNAmkq9EhnzqJZTZtQI1Zc=)
2: PSwPdvpJ8F0S-rG7_N9WITcEKDI.roa (hash: /jo3ttsndkopDRSIl+Ye5A4QZZMm+sbwX25b3bVaXnY=)
3: l-86N1xNtY5uScFI7-RKcu_tM1g.roa (hash: tjaw/t7FWkVaKVLFK1mB9oeSnERDlbutQFZnLHnYIbQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/6ba6a3-25e0-499a-a7a9-98398fdbc9fb/1/GpRvSoJtYiozjtg-CvzfeMh2BPg.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/6ba6a3-25e0-499a-a7a9-98398fdbc9fb/1/GpRvSoJtYiozjtg-CvzfeMh2BPg.mft
rsync://rpki.ripe.net/repository/DEFAULT/GpRvSoJtYiozjtg-CvzfeMh2BPg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:67:ca:d9:d6:4e:6d:5a:fd:3a:01:32:a7:7d:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a946f4a826d622a338ed83e0afcdf78c87604f8
Validity
Not Before: Nov 4 10:00:18 2025 GMT
Not After : Nov 5 10:00:18 2025 GMT
Subject: CN=a10344d604dea197446d8d89d66c7848b02af8bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:a3:b9:59:cd:67:af:12:e1:92:6e:d7:d7:40:
63:6d:7f:a4:b1:46:f5:4a:59:c1:22:df:0a:93:81:
dd:8d:31:5b:6b:ee:fc:d6:48:b3:1d:16:e6:a0:fe:
27:45:ae:1e:91:03:3c:cd:dc:fa:84:92:31:5c:21:
c6:3a:97:7f:58:c6:d0:4d:eb:03:ae:e8:0a:2b:1d:
e5:89:76:2a:a4:4c:ea:1d:47:0e:8e:86:7d:e9:ed:
52:2c:a1:58:64:39:a3:14:80:3a:af:0d:c0:d5:aa:
fa:37:00:3c:48:83:89:68:98:c4:9d:ad:ff:6a:80:
30:bb:21:e2:bb:7e:50:ce:f6:d9:04:68:b2:4d:f6:
ff:a6:e5:09:96:60:7c:ba:d2:05:af:c4:e2:ca:6e:
50:6b:ec:4f:41:8e:b7:d2:9b:38:8f:fa:a0:c0:4e:
9c:30:7b:4c:e6:d2:cc:6a:a0:27:37:59:86:57:c9:
16:13:21:0c:0d:ac:8d:df:ce:bb:14:11:e6:9a:9a:
8a:07:3c:e3:d4:b5:8e:34:cc:c7:25:66:6f:65:9a:
21:6a:92:2c:85:15:70:f1:00:0e:59:42:f6:35:de:
7f:1e:91:c3:08:a0:6e:b0:45:d3:03:92:29:b5:4b:
e5:55:be:dc:df:9f:4a:b0:a9:97:b7:9e:02:2a:25:
7e:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:03:44:D6:04:DE:A1:97:44:6D:8D:89:D6:6C:78:48:B0:2A:F8:BF
X509v3 Authority Key Identifier:
keyid:1A:94:6F:4A:82:6D:62:2A:33:8E:D8:3E:0A:FC:DF:78:C8:76:04:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GpRvSoJtYiozjtg-CvzfeMh2BPg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/6ba6a3-25e0-499a-a7a9-98398fdbc9fb/1/GpRvSoJtYiozjtg-CvzfeMh2BPg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/6ba6a3-25e0-499a-a7a9-98398fdbc9fb/1/GpRvSoJtYiozjtg-CvzfeMh2BPg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:ba:88:ae:2e:a6:e6:a4:0f:4e:5e:6c:a3:86:10:90:e2:ed:
9c:6f:9a:23:54:e1:86:fd:70:0e:81:3f:74:81:9a:ec:d0:73:
fa:23:ce:66:f5:b4:12:8e:a5:6c:0e:cd:a7:15:5a:18:b7:2a:
bf:c2:cc:36:fb:b9:cf:40:f8:ab:ba:06:ea:ce:3d:65:0e:a8:
ca:33:d8:32:6c:a7:8a:95:26:e8:86:0e:95:3d:56:e3:c8:a6:
b8:59:d3:54:65:f5:f2:8e:18:46:10:55:de:bd:af:7c:6e:2e:
84:15:ad:75:13:f6:6f:68:8c:bd:b8:59:87:2d:28:c4:54:f5:
7c:cb:fe:df:5c:8b:86:9d:46:09:34:a4:e4:5f:9a:69:49:cb:
20:98:ea:71:47:bf:5e:08:df:73:80:90:2b:a1:d2:08:57:b2:
2f:0a:6b:44:e2:6e:53:12:af:83:7d:10:61:ae:af:a3:3b:a4:
9b:c2:19:db:d7:f5:e0:47:eb:61:11:40:da:31:c0:31:a0:3c:
7a:a1:08:16:f7:ab:39:d3:89:b3:d5:02:7c:f3:f7:1d:50:7c:
59:5f:51:64:e2:f8:ef:07:94:ef:fa:bd:e1:86:d5:89:cf:b6:
9d:2f:73:1d:17:8c:5a:c5:68:7f:82:e0:e4:6e:49:f7:54:38:
02:4a:50:14
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOT2fK2dZObVr9OgEyp30RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhOTQ2ZjRhODI2ZDYyMmEzMzhlZDgzZTBhZmNkZjc4Yzg3
NjA0ZjgwHhcNMjUxMTA0MTAwMDE4WhcNMjUxMTA1MTAwMDE4WjAzMTEwLwYDVQQD
EyhhMTAzNDRkNjA0ZGVhMTk3NDQ2ZDhkODlkNjZjNzg0OGIwMmFmOGJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6qO5Wc1nrxLhkm7X10BjbX+ksUb1
SlnBIt8Kk4HdjTFba+781kizHRbmoP4nRa4ekQM8zdz6hJIxXCHGOpd/WMbQTesD
rugKKx3liXYqpEzqHUcOjoZ96e1SLKFYZDmjFIA6rw3A1ar6NwA8SIOJaJjEna3/
aoAwuyHiu35QzvbZBGiyTfb/puUJlmB8utIFr8Tiym5Qa+xPQY630ps4j/qgwE6c
MHtM5tLMaqAnN1mGV8kWEyEMDayN3867FBHmmpqKBzzj1LWONMzHJWZvZZohapIs
hRVw8QAOWUL2Nd5/HpHDCKBusEXTA5IptUvlVb7c359KsKmXt54CKiV+IQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKEDRNYE3qGXRG2NidZseEiwKvi/MB8GA1UdIwQY
MBaAFBqUb0qCbWIqM47YPgr833jIdgT4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3BSdlNvSnRZaW96anRnLUN2emZlTWgyQlBnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi82YmE2YTMtMjVlMC00OTlhLWE3YTkt
OTgzOThmZGJjOWZiLzEvR3BSdlNvSnRZaW96anRnLUN2emZlTWgyQlBnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi82YmE2YTMtMjVlMC00OTlhLWE3YTktOTgzOThmZGJjOWZi
LzEvR3BSdlNvSnRZaW96anRnLUN2emZlTWgyQlBnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkrqIri6m
5qQPTl5so4YQkOLtnG+aI1Thhv1wDoE/dIGa7NBz+iPOZvW0Eo6lbA7NpxVaGLcq
v8LMNvu5z0D4q7oG6s49ZQ6oyjPYMmynipUm6IYOlT1W48imuFnTVGX18o4YRhBV
3r2vfG4uhBWtdRP2b2iMvbhZhy0oxFT1fMv+31yLhp1GCTSk5F+aaUnLIJjqcUe/
Xgjfc4CQK6HSCFeyLwprROJuUxKvg30QYa6vozukm8IZ29f14EfrYRFA2jHAMaA8
eqEIFverOdOJs9UCfPP3HVB8WV9RZOL47weU7/q94YbVic+2nS9zHReMWsVof4Lg
5G5J91Q4AkpQFA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 17:54:40 2025 by rpki-client