Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.mft
File: gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.mft (raw, json)
Hash identifier: yNsf5wXvcE1g6f0F6kJDkwUvqZr12taaMswLIbB2FEE=
Subject key identifier: B0:FA:AE:D3:25:F3:C9:EE:45:08:90:FA:F9:A6:2E:F0:59:F4:9A:C3
Authority key identifier: 81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
Certificate issuer: /CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Certificate serial: 019A54516464B627D5215A1A06A57F1523A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.mft
Manifest number: 17A3
Signing time: Wed 05 Nov 2025 14:00:11 +0000
Manifest this update: Wed 05 Nov 2025 14:00:11 +0000
Manifest next update: Thu 06 Nov 2025 14:00:11 +0000
Files and hashes: 1: TVTY8940R-JLK3g0bC-55INlCR4.roa (hash: G8fybb1dVxSY3d5NiOJGlSrI9zs27WohVNGxcPiP+KM=)
2: XVwZQRv1vz6JSSnd8P8GyNHVWKI.roa (hash: UKsEAKn0FU1wyu4cVCRnP9Y8nY4SlsAm5Omp7LeDq8o=)
3: gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.crl (hash: B8zar6kNfMu3S9TP+pdzrwJq7YnKmugdRTnecJfWTC0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.mft
rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:51:64:64:b6:27:d5:21:5a:1a:06:a5:7f:15:23:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Validity
Not Before: Nov 5 14:00:11 2025 GMT
Not After : Nov 6 14:00:11 2025 GMT
Subject: CN=b0faaed325f3c9ee450890faf9a62ef059f49ac3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:44:e1:81:0e:32:3a:0d:8c:c3:39:6d:f4:d9:
5c:1a:8a:fb:ae:17:55:ff:e5:26:75:ff:69:f8:64:
14:af:0b:53:2a:c5:5a:9a:6e:bf:b0:c6:2e:48:0a:
d1:af:b4:4a:a0:5f:f1:bf:58:e7:4f:e8:1c:52:df:
b8:20:e5:6e:fa:6e:a3:4b:aa:30:5c:01:42:e8:43:
f4:12:80:57:60:e8:62:c2:df:92:02:b1:ea:94:46:
d4:87:b3:f6:98:47:2b:ca:d4:59:5c:72:54:6f:31:
ed:14:27:22:af:9b:a6:f5:ce:10:09:30:4c:c9:27:
fa:59:4b:48:c8:55:09:6e:64:a2:0d:17:88:cf:8c:
4e:f1:cd:3a:1a:c6:4e:35:e3:5a:68:4f:20:70:ab:
97:a2:f8:68:53:34:bd:83:ea:94:16:4d:6f:9b:bd:
25:39:1c:4f:5d:74:5a:f6:80:94:e3:73:2f:80:3a:
66:4e:db:07:a3:f8:31:1a:d5:12:fd:6d:4a:80:ed:
c4:24:eb:62:cc:44:3a:0f:b3:0b:08:09:47:8c:e1:
7d:4a:be:60:bb:6d:1a:62:7a:39:db:a5:d5:19:91:
38:32:83:a1:da:0f:1f:56:a5:bb:27:d7:79:56:a0:
24:9c:9c:2c:d6:b7:da:5c:da:d5:f3:7c:18:0b:60:
1f:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:FA:AE:D3:25:F3:C9:EE:45:08:90:FA:F9:A6:2E:F0:59:F4:9A:C3
X509v3 Authority Key Identifier:
keyid:81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:e8:61:e3:d5:b4:ca:d5:88:cd:6a:19:4d:30:d6:8f:18:e1:
d1:f5:50:f9:52:8b:91:6c:8d:8d:aa:b8:ec:fa:27:99:11:b1:
40:47:cf:6c:e0:59:d4:9a:5b:a6:a1:fa:97:0e:03:ef:e0:65:
b0:07:66:4a:bf:8a:b3:a1:e7:39:77:21:df:de:85:7a:e6:03:
65:b5:11:50:22:65:d7:28:23:30:64:a5:b4:56:ad:97:c2:8d:
47:94:24:e6:05:5e:a7:29:31:52:4a:84:c6:65:8c:c6:ac:ef:
9d:76:01:46:d7:92:59:9a:ba:1c:8a:5e:82:7f:c3:a0:d0:e8:
64:2e:69:6e:d9:6b:88:a9:97:1e:14:67:c2:ca:1a:50:f3:38:
b0:b9:7f:39:de:eb:17:fa:2b:82:31:a4:b6:0f:d6:74:e2:c9:
0f:c3:2e:8c:a6:b2:f3:dd:28:4e:6e:bc:a1:47:7a:b4:f5:64:
ee:13:fd:81:48:f2:44:2d:e5:14:a3:15:4e:e6:3f:ca:5c:f4:
54:20:ae:f5:14:c2:f5:f1:1d:8e:49:2c:40:b5:8e:86:50:56:
d2:fa:62:76:3f:20:2e:18:e7:9f:dc:de:a4:2f:da:98:0c:93:
eb:70:b0:22:26:fe:f8:ab:a4:74:60:33:1f:bc:b4:44:65:b1:
04:e2:65:f2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpUUWRktifVIVoaBqV/FSOiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxY2NhOWYxNWUxOTIxOTUzYTYyOGM4YWQyYWM0YmU5Nzdi
NmMzMDMwHhcNMjUxMTA1MTQwMDExWhcNMjUxMTA2MTQwMDExWjAzMTEwLwYDVQQD
EyhiMGZhYWVkMzI1ZjNjOWVlNDUwODkwZmFmOWE2MmVmMDU5ZjQ5YWMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmUThgQ4yOg2Mwzlt9NlcGor7rhdV
/+Umdf9p+GQUrwtTKsVamm6/sMYuSArRr7RKoF/xv1jnT+gcUt+4IOVu+m6jS6ow
XAFC6EP0EoBXYOhiwt+SArHqlEbUh7P2mEcrytRZXHJUbzHtFCcir5um9c4QCTBM
ySf6WUtIyFUJbmSiDReIz4xO8c06GsZONeNaaE8gcKuXovhoUzS9g+qUFk1vm70l
ORxPXXRa9oCU43MvgDpmTtsHo/gxGtUS/W1KgO3EJOtizEQ6D7MLCAlHjOF9Sr5g
u20aYno526XVGZE4MoOh2g8fVqW7J9d5VqAknJws1rfaXNrV83wYC2AfbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLD6rtMl88nuRQiQ+vmmLvBZ9JrDMB8GA1UdIwQY
MBaAFIHMqfFeGSGVOmKMitKsS+l3tsMDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ2N5cDhWNFpJWlU2WW95SzBxeEw2WGUyd3dNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC8xZWEyYjAtNmI5YS00NGQ3LWEyZTUt
MjIwNmNjMmU2OTFjLzEvZ2N5cDhWNFpJWlU2WW95SzBxeEw2WGUyd3dNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC8xZWEyYjAtNmI5YS00NGQ3LWEyZTUtMjIwNmNjMmU2OTFj
LzEvZ2N5cDhWNFpJWlU2WW95SzBxeEw2WGUyd3dNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADehh49W0
ytWIzWoZTTDWjxjh0fVQ+VKLkWyNjaq47PonmRGxQEfPbOBZ1JpbpqH6lw4D7+Bl
sAdmSr+Ks6HnOXch396FeuYDZbURUCJl1ygjMGSltFatl8KNR5Qk5gVepykxUkqE
xmWMxqzvnXYBRteSWZq6HIpegn/DoNDoZC5pbtlriKmXHhRnwsoaUPM4sLl/Od7r
F/orgjGktg/WdOLJD8MujKay890oTm68oUd6tPVk7hP9gUjyRC3lFKMVTuY/ylz0
VCCu9RTC9fEdjkksQLWOhlBW0vpidj8gLhjnn9zepC/amAyT63CwIib++KukdGAz
H7y0RGWxBOJl8g==
-----END CERTIFICATE-----
Generated at Wed Nov 5 16:17:17 2025 by rpki-client