Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/13bdba-0715-4e26-b076-af5867476309/1/G8GZTqY9UNvItDrOytKEK03BV1k.mft
File: G8GZTqY9UNvItDrOytKEK03BV1k.mft (raw, json)
Hash identifier: FrzFXUPz2M8BqyW+pr1Vg64UOvrJcwPRLHRW7eHSlY0=
Subject key identifier: 15:63:9D:AD:30:1D:98:73:9B:74:63:7F:24:60:6A:88:85:F7:A7:A0
Authority key identifier: 1B:C1:99:4E:A6:3D:50:DB:C8:B4:3A:CE:CA:D2:84:2B:4D:C1:57:59
Certificate issuer: /CN=1bc1994ea63d50dbc8b43acecad2842b4dc15759
Certificate serial: 019A53AC79AD460D718299631C9FC235D2E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G8GZTqY9UNvItDrOytKEK03BV1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/13bdba-0715-4e26-b076-af5867476309/1/G8GZTqY9UNvItDrOytKEK03BV1k.mft
Manifest number: 1455
Signing time: Wed 05 Nov 2025 11:00:03 +0000
Manifest this update: Wed 05 Nov 2025 11:00:03 +0000
Manifest next update: Thu 06 Nov 2025 11:00:03 +0000
Files and hashes: 1: 7LJ9xawxzsvCYv_ns8BJ_8ldo2M.roa (hash: f0+qr316tmp0FcJIZdHHGP/bQ0+RaN5V5m4qk2p7tRk=)
2: G8GZTqY9UNvItDrOytKEK03BV1k.crl (hash: Sa+zmDRbP1n0h9GeCIFBN+E4lzZ2X1XOJpZjqZyznrY=)
3: PnNWpVBdWoAd7atmJEGFvS64Mws.roa (hash: tnccYlmQkpOSmjFbn8qMQEzLxuwoQXHA9SM9r5ZMjAk=)
4: VUW_CECBbTHdD7KnSWpCp7f6Uls.roa (hash: dGtVeAhKlKvD4goyS7nYKPSCr10+/VHRE76M3fcZW0M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/13bdba-0715-4e26-b076-af5867476309/1/G8GZTqY9UNvItDrOytKEK03BV1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/13bdba-0715-4e26-b076-af5867476309/1/G8GZTqY9UNvItDrOytKEK03BV1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/G8GZTqY9UNvItDrOytKEK03BV1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 11:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:ac:79:ad:46:0d:71:82:99:63:1c:9f:c2:35:d2:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bc1994ea63d50dbc8b43acecad2842b4dc15759
Validity
Not Before: Nov 5 11:00:03 2025 GMT
Not After : Nov 6 11:00:03 2025 GMT
Subject: CN=15639dad301d98739b74637f24606a8885f7a7a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:63:a4:91:3a:4b:ec:d1:a6:4d:55:f3:ac:62:
a1:42:eb:67:28:84:09:85:2d:f8:82:fc:3e:f0:16:
60:90:21:bb:02:93:cd:84:18:cf:9b:f3:74:f8:c2:
e1:e5:24:78:4b:9f:38:00:b9:d6:e5:6e:25:a0:fa:
d5:86:97:a8:26:ca:6e:ff:f9:b2:43:5c:dd:84:63:
2e:3e:80:4a:3b:6a:1d:d4:45:f4:f4:71:5a:01:54:
97:64:33:12:69:c8:29:0d:8b:6a:92:f1:a1:fa:44:
47:6c:6e:31:e8:ff:d0:8e:88:db:07:3f:09:d9:d5:
b7:43:d0:b9:af:53:26:86:d0:f6:cd:cb:7f:92:01:
64:94:f7:77:64:b7:7e:98:f5:0a:e5:4e:9e:df:cd:
0d:71:b0:77:2b:8d:6e:37:9f:e0:b9:f4:7f:6e:14:
b5:5d:40:b7:96:34:8f:74:1f:ec:54:96:a2:7c:46:
09:6f:7e:37:dd:4e:a2:6e:af:4b:28:04:51:f1:7b:
3f:2d:21:95:10:e0:04:42:4a:b0:b8:67:15:4d:18:
27:b5:dd:c1:c4:95:11:53:14:dc:2e:9f:c3:cd:83:
71:aa:73:2a:f0:61:ec:db:54:83:80:d1:2e:2a:4f:
90:10:d7:0b:87:c5:e3:d5:96:a6:3f:32:17:45:7b:
8c:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:63:9D:AD:30:1D:98:73:9B:74:63:7F:24:60:6A:88:85:F7:A7:A0
X509v3 Authority Key Identifier:
keyid:1B:C1:99:4E:A6:3D:50:DB:C8:B4:3A:CE:CA:D2:84:2B:4D:C1:57:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G8GZTqY9UNvItDrOytKEK03BV1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/13bdba-0715-4e26-b076-af5867476309/1/G8GZTqY9UNvItDrOytKEK03BV1k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/13bdba-0715-4e26-b076-af5867476309/1/G8GZTqY9UNvItDrOytKEK03BV1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:44:be:29:c7:f0:60:53:7f:29:a8:94:84:21:0e:c3:ef:3b:
99:24:85:c9:1f:04:df:55:01:f2:51:53:2f:9d:6d:33:0f:13:
68:b1:a8:de:e5:f6:86:c6:27:4d:1a:9c:9e:4e:af:ff:fa:18:
5e:66:85:1f:45:45:28:a7:81:c5:92:60:84:b2:65:22:79:91:
68:b7:04:2a:2f:37:4a:f8:a8:09:55:c1:c7:94:02:85:2f:08:
5b:92:20:e9:ca:62:55:59:c5:7f:47:c1:1b:00:8d:39:1f:ab:
95:cc:fb:da:34:94:ef:71:9c:b3:0a:6b:e3:f9:72:b9:87:f1:
61:1e:4e:aa:60:c6:cf:6c:36:ce:78:d5:38:94:15:5b:4e:cd:
33:9c:6f:34:52:d8:8a:7a:ba:ed:29:79:c9:f2:c8:91:85:23:
aa:95:3f:39:89:e8:83:ba:38:eb:5f:33:a5:e5:a0:17:90:f1:
28:69:62:44:22:c6:f7:c5:9a:f6:43:f9:e0:bb:39:9e:8e:e5:
5d:a0:0e:93:b2:11:b2:72:35:e4:74:d8:b1:92:f9:aa:09:45:
e5:b6:0d:66:b8:08:58:e0:45:c4:c9:40:5b:ef:38:b1:af:35:
ca:dc:6c:50:33:58:73:68:e6:41:5a:4c:4f:fb:c1:97:32:1b:
c8:37:63:c1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpTrHmtRg1xgpljHJ/CNdLkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiYzE5OTRlYTYzZDUwZGJjOGI0M2FjZWNhZDI4NDJiNGRj
MTU3NTkwHhcNMjUxMTA1MTEwMDAzWhcNMjUxMTA2MTEwMDAzWjAzMTEwLwYDVQQD
EygxNTYzOWRhZDMwMWQ5ODczOWI3NDYzN2YyNDYwNmE4ODg1ZjdhN2EwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvGOkkTpL7NGmTVXzrGKhQutnKIQJ
hS34gvw+8BZgkCG7ApPNhBjPm/N0+MLh5SR4S584ALnW5W4loPrVhpeoJspu//my
Q1zdhGMuPoBKO2od1EX09HFaAVSXZDMSacgpDYtqkvGh+kRHbG4x6P/QjojbBz8J
2dW3Q9C5r1MmhtD2zct/kgFklPd3ZLd+mPUK5U6e380NcbB3K41uN5/gufR/bhS1
XUC3ljSPdB/sVJaifEYJb3433U6ibq9LKARR8Xs/LSGVEOAEQkqwuGcVTRgntd3B
xJURUxTcLp/DzYNxqnMq8GHs21SDgNEuKk+QENcLh8Xj1ZamPzIXRXuMgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBVjna0wHZhzm3RjfyRgaoiF96egMB8GA1UdIwQY
MBaAFBvBmU6mPVDbyLQ6zsrShCtNwVdZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRzhHWlRxWTlVTnZJdERyT3l0S0VLMDNCVjFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC8xM2JkYmEtMDcxNS00ZTI2LWIwNzYt
YWY1ODY3NDc2MzA5LzEvRzhHWlRxWTlVTnZJdERyT3l0S0VLMDNCVjFrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC8xM2JkYmEtMDcxNS00ZTI2LWIwNzYtYWY1ODY3NDc2MzA5
LzEvRzhHWlRxWTlVTnZJdERyT3l0S0VLMDNCVjFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEES+Kcfw
YFN/KaiUhCEOw+87mSSFyR8E31UB8lFTL51tMw8TaLGo3uX2hsYnTRqcnk6v//oY
XmaFH0VFKKeBxZJghLJlInmRaLcEKi83SvioCVXBx5QChS8IW5Ig6cpiVVnFf0fB
GwCNOR+rlcz72jSU73Gcswpr4/lyuYfxYR5OqmDGz2w2znjVOJQVW07NM5xvNFLY
inq67Sl5yfLIkYUjqpU/OYnog7o4618zpeWgF5DxKGliRCLG98Wa9kP54Ls5no7l
XaAOk7IRsnI15HTYsZL5qglF5bYNZrgIWOBFxMlAW+84sa81ytxsUDNYc2jmQVpM
T/vBlzIbyDdjwQ==
-----END CERTIFICATE-----
Generated at Wed Nov 5 15:33:15 2025 by rpki-client