Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.mft
File: gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.mft (raw, json)
Hash identifier: 5q9pC8AtpkuXOnZTjbkq6jLRSQvkesrwioXQGuBrN8M=
Subject key identifier: 0C:BD:3A:57:B7:1C:F3:AC:AB:0E:08:E3:B8:33:9C:A8:06:6B:0E:8B
Authority key identifier: 81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
Certificate issuer: /CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Certificate serial: 019A507498395C5B71D7B62726EF7D18117C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.mft
Manifest number: 17A1
Signing time: Tue 04 Nov 2025 20:00:09 +0000
Manifest this update: Tue 04 Nov 2025 20:00:09 +0000
Manifest next update: Wed 05 Nov 2025 20:00:09 +0000
Files and hashes: 1: TVTY8940R-JLK3g0bC-55INlCR4.roa (hash: G8fybb1dVxSY3d5NiOJGlSrI9zs27WohVNGxcPiP+KM=)
2: XVwZQRv1vz6JSSnd8P8GyNHVWKI.roa (hash: UKsEAKn0FU1wyu4cVCRnP9Y8nY4SlsAm5Omp7LeDq8o=)
3: gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.crl (hash: Jk4t3guAZf6lkgYXmF0i/8Pg5SM9IrjlCvx25uImpCg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.mft
rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 20:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:74:98:39:5c:5b:71:d7:b6:27:26:ef:7d:18:11:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Validity
Not Before: Nov 4 20:00:09 2025 GMT
Not After : Nov 5 20:00:09 2025 GMT
Subject: CN=0cbd3a57b71cf3acab0e08e3b8339ca8066b0e8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a5:68:61:b8:c5:5e:f4:a8:12:7b:80:9e:29:
0e:0b:41:e3:9e:db:25:e2:14:51:90:dc:2d:fa:fc:
b9:9e:a3:30:87:55:e3:06:ad:93:3f:36:ac:ba:5d:
c8:5a:fc:6a:bd:b3:e1:09:69:2a:32:e3:be:2e:66:
42:94:3d:ca:fc:21:e0:5b:5c:eb:38:67:47:05:a6:
68:e2:bc:5a:27:f2:23:b0:89:46:71:ee:ff:ba:b4:
d0:77:ec:1f:c6:8d:59:ca:36:ee:17:ac:60:a5:0d:
57:13:79:be:5a:90:1b:14:4a:95:b7:74:e9:e0:4c:
b1:0a:8b:62:5d:50:bc:c9:f0:45:b9:49:e9:6e:51:
b0:b7:ec:a6:fe:91:e3:40:3e:37:8c:c9:4f:ec:24:
d5:82:f3:67:7a:3a:cd:34:74:22:5b:1d:49:98:c0:
2f:34:3f:a2:18:83:82:19:d2:5c:77:a3:f7:c3:6d:
2c:a4:03:5b:da:51:0b:d8:aa:0c:d8:46:b6:e1:3c:
21:6c:33:1d:30:56:9e:f2:ad:a7:43:e8:ec:a1:af:
de:2b:ea:15:d3:e6:25:1c:8e:a2:f9:27:03:a8:bc:
ce:4f:b8:bb:77:42:39:3b:18:dd:b6:7b:4c:1e:ee:
64:1b:fd:ec:1f:93:3f:f8:4c:16:b7:21:db:26:88:
f4:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:BD:3A:57:B7:1C:F3:AC:AB:0E:08:E3:B8:33:9C:A8:06:6B:0E:8B
X509v3 Authority Key Identifier:
keyid:81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:62:a6:01:96:63:cc:9d:2e:40:63:aa:4c:d9:08:36:af:9d:
33:7b:ca:41:f3:e5:68:e9:4c:3e:df:e2:a9:6b:ff:bd:0e:e6:
e4:7a:8c:7e:15:e7:59:28:90:5d:f2:bd:0b:1e:79:cf:ef:81:
3f:f7:11:94:4f:10:42:f2:73:9e:7c:a3:e7:10:40:a2:37:fe:
ba:20:40:ae:75:d1:ae:6a:c4:5e:61:c7:84:b0:3b:a1:33:5b:
1d:b2:4d:99:48:f5:99:3b:5c:f9:0f:05:3a:05:6d:7a:97:d2:
1a:ed:b0:9f:e3:03:48:1d:b3:03:b4:80:f4:40:8f:7e:f8:92:
4f:50:2f:80:cb:df:45:67:f9:3a:4e:6d:ac:8d:14:76:b2:ce:
37:55:4a:8a:8b:2a:c4:6c:13:1c:2d:1c:90:45:83:22:e6:80:
ba:e2:dd:84:1a:70:9f:50:ac:05:ac:9c:21:45:af:ef:69:a7:
c0:99:f4:56:92:b9:5f:11:7e:be:a8:9c:f2:1a:46:b2:20:6f:
9e:08:0d:d5:39:df:62:ce:c6:cd:64:8c:26:b5:61:05:9f:f6:
dd:b4:75:98:47:db:70:72:ad:7c:9d:92:9e:d7:27:38:e5:93:
9f:bd:3e:07:87:69:ba:b3:af:4e:25:36:66:62:bc:9e:8e:30:
85:e0:81:d3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpQdJg5XFtx17YnJu99GBF8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxY2NhOWYxNWUxOTIxOTUzYTYyOGM4YWQyYWM0YmU5Nzdi
NmMzMDMwHhcNMjUxMTA0MjAwMDA5WhcNMjUxMTA1MjAwMDA5WjAzMTEwLwYDVQQD
EygwY2JkM2E1N2I3MWNmM2FjYWIwZTA4ZTNiODMzOWNhODA2NmIwZThiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqKVoYbjFXvSoEnuAnikOC0Hjntsl
4hRRkNwt+vy5nqMwh1XjBq2TPzasul3IWvxqvbPhCWkqMuO+LmZClD3K/CHgW1zr
OGdHBaZo4rxaJ/IjsIlGce7/urTQd+wfxo1ZyjbuF6xgpQ1XE3m+WpAbFEqVt3Tp
4EyxCotiXVC8yfBFuUnpblGwt+ym/pHjQD43jMlP7CTVgvNnejrNNHQiWx1JmMAv
ND+iGIOCGdJcd6P3w20spANb2lEL2KoM2Ea24TwhbDMdMFae8q2nQ+jsoa/eK+oV
0+YlHI6i+ScDqLzOT7i7d0I5OxjdtntMHu5kG/3sH5M/+EwWtyHbJoj06wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAy9Ole3HPOsqw4I47gznKgGaw6LMB8GA1UdIwQY
MBaAFIHMqfFeGSGVOmKMitKsS+l3tsMDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ2N5cDhWNFpJWlU2WW95SzBxeEw2WGUyd3dNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC8xZWEyYjAtNmI5YS00NGQ3LWEyZTUt
MjIwNmNjMmU2OTFjLzEvZ2N5cDhWNFpJWlU2WW95SzBxeEw2WGUyd3dNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC8xZWEyYjAtNmI5YS00NGQ3LWEyZTUtMjIwNmNjMmU2OTFj
LzEvZ2N5cDhWNFpJWlU2WW95SzBxeEw2WGUyd3dNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOWKmAZZj
zJ0uQGOqTNkINq+dM3vKQfPlaOlMPt/iqWv/vQ7m5HqMfhXnWSiQXfK9Cx55z++B
P/cRlE8QQvJznnyj5xBAojf+uiBArnXRrmrEXmHHhLA7oTNbHbJNmUj1mTtc+Q8F
OgVtepfSGu2wn+MDSB2zA7SA9ECPfviST1AvgMvfRWf5Ok5trI0UdrLON1VKiosq
xGwTHC0ckEWDIuaAuuLdhBpwn1CsBaycIUWv72mnwJn0VpK5XxF+vqic8hpGsiBv
nggN1TnfYs7GzWSMJrVhBZ/23bR1mEfbcHKtfJ2SntcnOOWTn70+B4dpurOvTiU2
ZmK8no4wheCB0w==
-----END CERTIFICATE-----
Generated at Wed Nov 5 05:27:53 2025 by rpki-client