Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/a91608-c322-41fb-9b00-c54014e1c29a/1/GZmkJgD7ZAvrXjPQ6rj-TpUxHOQ.mft
File: GZmkJgD7ZAvrXjPQ6rj-TpUxHOQ.mft (raw, json)
Hash identifier: 09ii0vOkfrE1SexwRqDvPflq35ooWbZ2T5pzKQhoE9k=
Subject key identifier: 91:C7:7C:DC:53:54:16:7F:85:5A:65:15:7A:58:B8:80:8C:BD:FD:75
Authority key identifier: 19:99:A4:26:00:FB:64:0B:EB:5E:33:D0:EA:B8:FE:4E:95:31:1C:E4
Certificate issuer: /CN=1999a42600fb640beb5e33d0eab8fe4e95311ce4
Certificate serial: 019A4F98EB0C6E5A9073B27186FA525D47CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GZmkJgD7ZAvrXjPQ6rj-TpUxHOQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/a91608-c322-41fb-9b00-c54014e1c29a/1/GZmkJgD7ZAvrXjPQ6rj-TpUxHOQ.mft
Manifest number: 1709
Signing time: Tue 04 Nov 2025 16:00:12 +0000
Manifest this update: Tue 04 Nov 2025 16:00:12 +0000
Manifest next update: Wed 05 Nov 2025 16:00:12 +0000
Files and hashes: 1: GZmkJgD7ZAvrXjPQ6rj-TpUxHOQ.crl (hash: 0cqOCrenO1S2aHLaEGX1h7CboYQTuCX1V4k50GnMxTE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/a91608-c322-41fb-9b00-c54014e1c29a/1/GZmkJgD7ZAvrXjPQ6rj-TpUxHOQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/a91608-c322-41fb-9b00-c54014e1c29a/1/GZmkJgD7ZAvrXjPQ6rj-TpUxHOQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/GZmkJgD7ZAvrXjPQ6rj-TpUxHOQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:98:eb:0c:6e:5a:90:73:b2:71:86:fa:52:5d:47:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1999a42600fb640beb5e33d0eab8fe4e95311ce4
Validity
Not Before: Nov 4 16:00:12 2025 GMT
Not After : Nov 5 16:00:12 2025 GMT
Subject: CN=91c77cdc5354167f855a65157a58b8808cbdfd75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:73:dd:d3:c9:65:43:12:be:5e:6a:5d:1e:69:
74:0d:f3:96:41:b2:5a:81:22:1f:7c:f0:fa:74:2a:
c1:58:85:99:c1:7f:ab:65:f0:3f:57:5f:6d:e9:5b:
eb:b0:bf:17:d5:86:4b:02:21:2c:88:47:4c:c4:f6:
05:b5:50:aa:aa:af:c8:ab:7b:ec:33:e4:66:00:a3:
78:7f:49:d8:16:3c:a7:60:70:7a:a1:f6:37:14:e4:
5b:36:cb:ee:66:69:a2:83:08:6f:ff:a2:c5:be:4a:
bb:90:0e:3d:c7:51:cb:b4:46:8e:96:02:b7:ec:40:
64:06:7f:54:25:17:5d:3c:b3:a8:b5:0d:a8:1d:fa:
f6:09:38:7c:74:e2:b4:59:aa:1c:1f:da:38:ad:6f:
c6:b7:bf:fe:51:4e:a0:06:6e:4c:2a:72:20:4d:d7:
e5:de:a9:31:95:d4:0f:b2:e8:d8:6a:5f:56:9f:9d:
75:36:00:e6:8d:4b:e3:e6:40:34:78:0e:10:bf:93:
dd:46:ba:7d:c0:f4:0a:f8:51:89:53:71:85:71:7c:
58:41:68:96:e7:00:65:3a:a2:9b:ad:8b:89:dc:43:
50:05:58:8d:39:38:11:a6:24:e0:99:fd:b3:a9:81:
22:d7:3d:6f:5b:6c:bb:ad:47:e9:fd:5e:31:08:a8:
ca:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:C7:7C:DC:53:54:16:7F:85:5A:65:15:7A:58:B8:80:8C:BD:FD:75
X509v3 Authority Key Identifier:
keyid:19:99:A4:26:00:FB:64:0B:EB:5E:33:D0:EA:B8:FE:4E:95:31:1C:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GZmkJgD7ZAvrXjPQ6rj-TpUxHOQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/a91608-c322-41fb-9b00-c54014e1c29a/1/GZmkJgD7ZAvrXjPQ6rj-TpUxHOQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/a91608-c322-41fb-9b00-c54014e1c29a/1/GZmkJgD7ZAvrXjPQ6rj-TpUxHOQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:40:1a:56:81:5e:11:67:90:1d:06:d3:3c:27:c4:36:35:6d:
e5:63:85:4e:af:01:2b:26:e7:20:e1:33:70:02:39:a0:1d:64:
cc:d1:79:f9:bb:29:b6:17:e8:2e:05:10:e3:6e:71:cd:66:d6:
80:90:58:33:06:3d:39:22:bb:dc:4a:3b:06:bd:cc:e7:ee:65:
1e:4b:04:1b:3f:fa:ff:09:37:1e:e5:8f:57:2f:ae:ac:64:b4:
8e:20:00:36:6c:1f:32:f2:c9:05:0f:ba:b1:de:8a:79:7e:a3:
d1:6f:4f:6a:e4:4e:8f:9e:a3:d8:ca:c0:b2:a3:a1:ad:62:43:
65:f3:1c:3c:52:90:8a:54:b4:6b:99:d1:15:dd:32:e8:a2:2c:
46:1f:82:de:e5:f6:79:97:b9:02:17:71:3f:2b:74:48:f6:06:
4f:32:59:08:39:83:8b:d3:67:4e:5d:3d:0e:6d:79:5c:da:f0:
c6:ff:81:bb:91:ed:2d:37:4c:1c:f2:f2:2d:38:8e:e6:5f:bd:
ac:62:d2:86:72:83:a7:26:f6:f1:ec:2e:ea:e7:ca:df:6c:5b:
5a:98:54:e0:6d:41:74:04:38:14:47:55:fe:6e:5f:3f:39:26:
eb:2f:56:2b:33:8b:c5:04:e3:d9:d7:8a:31:ae:49:61:25:93:
25:03:5a:de
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPmOsMblqQc7JxhvpSXUfNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5OTlhNDI2MDBmYjY0MGJlYjVlMzNkMGVhYjhmZTRlOTUz
MTFjZTQwHhcNMjUxMTA0MTYwMDEyWhcNMjUxMTA1MTYwMDEyWjAzMTEwLwYDVQQD
Eyg5MWM3N2NkYzUzNTQxNjdmODU1YTY1MTU3YTU4Yjg4MDhjYmRmZDc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtXPd08llQxK+XmpdHml0DfOWQbJa
gSIffPD6dCrBWIWZwX+rZfA/V19t6VvrsL8X1YZLAiEsiEdMxPYFtVCqqq/Iq3vs
M+RmAKN4f0nYFjynYHB6ofY3FORbNsvuZmmigwhv/6LFvkq7kA49x1HLtEaOlgK3
7EBkBn9UJRddPLOotQ2oHfr2CTh8dOK0WaocH9o4rW/Gt7/+UU6gBm5MKnIgTdfl
3qkxldQPsujYal9Wn511NgDmjUvj5kA0eA4Qv5PdRrp9wPQK+FGJU3GFcXxYQWiW
5wBlOqKbrYuJ3ENQBViNOTgRpiTgmf2zqYEi1z1vW2y7rUfp/V4xCKjKmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJHHfNxTVBZ/hVplFXpYuICMvf11MB8GA1UdIwQY
MBaAFBmZpCYA+2QL614z0Oq4/k6VMRzkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR1pta0pnRDdaQXZyWGpQUTZyai1UcFV4SE9RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9hOTE2MDgtYzMyMi00MWZiLTliMDAt
YzU0MDE0ZTFjMjlhLzEvR1pta0pnRDdaQXZyWGpQUTZyai1UcFV4SE9RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS9hOTE2MDgtYzMyMi00MWZiLTliMDAtYzU0MDE0ZTFjMjlh
LzEvR1pta0pnRDdaQXZyWGpQUTZyai1UcFV4SE9RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtkAaVoFe
EWeQHQbTPCfENjVt5WOFTq8BKybnIOEzcAI5oB1kzNF5+bspthfoLgUQ425xzWbW
gJBYMwY9OSK73Eo7Br3M5+5lHksEGz/6/wk3HuWPVy+urGS0jiAANmwfMvLJBQ+6
sd6KeX6j0W9PauROj56j2MrAsqOhrWJDZfMcPFKQilS0a5nRFd0y6KIsRh+C3uX2
eZe5AhdxPyt0SPYGTzJZCDmDi9NnTl09Dm15XNrwxv+Bu5HtLTdMHPLyLTiO5l+9
rGLShnKDpyb28ewu6ufK32xbWphU4G1BdAQ4FEdV/m5fPzkm6y9WKzOLxQTj2deK
Ma5JYSWTJQNa3g==
-----END CERTIFICATE-----
Generated at Tue Nov 4 18:07:29 2025 by rpki-client