Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/510c3b-f870-476b-a163-9d392eee0f66/1/GAi_f-SLBX-fLz1dGmMQ_Z4UxXE.mft
File: GAi_f-SLBX-fLz1dGmMQ_Z4UxXE.mft (raw, json)
Hash identifier: 2IuUnPmkyczp8L8xk2YDrrqGHkrQN0uad0h0XZuDlyM=
Subject key identifier: 47:7F:97:32:9E:35:8C:9F:74:28:41:8A:84:AE:87:1B:CE:A7:40:F5
Authority key identifier: 18:08:BF:7F:E4:8B:05:7F:9F:2F:3D:5D:1A:63:10:FD:9E:14:C5:71
Certificate issuer: /CN=1808bf7fe48b057f9f2f3d5d1a6310fd9e14c571
Certificate serial: 019A4D06CCFA756C7B5346B90D572CA6C131
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GAi_f-SLBX-fLz1dGmMQ_Z4UxXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/510c3b-f870-476b-a163-9d392eee0f66/1/GAi_f-SLBX-fLz1dGmMQ_Z4UxXE.mft
Manifest number: 1712
Signing time: Tue 04 Nov 2025 04:01:22 +0000
Manifest this update: Tue 04 Nov 2025 04:01:22 +0000
Manifest next update: Wed 05 Nov 2025 04:01:22 +0000
Files and hashes: 1: ENddU71AWsbfb-qIFVaxmAFw8qU.roa (hash: XIdLWvH5+lzPfcvEbUgIrNoDUrBQA7L4fLl6rSwliqY=)
2: G7KAYOVH38LzKR-IdVTjVu7lIf8.roa (hash: rqzGBQKFeB6ICiFMYesDYx+/XfxqjQHtzlizZQdtLiE=)
3: GAi_f-SLBX-fLz1dGmMQ_Z4UxXE.crl (hash: yzifzCjPpZgHJydVQwNQnZ1hPtN5yuz925QU84e6vXk=)
4: o7DFQSNSbtxlgxW6FLch62D8QIA.roa (hash: OW5TPqzlu/5OlPd3vdKxLAlylVm0d636/VsxyEnIicU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/510c3b-f870-476b-a163-9d392eee0f66/1/GAi_f-SLBX-fLz1dGmMQ_Z4UxXE.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/510c3b-f870-476b-a163-9d392eee0f66/1/GAi_f-SLBX-fLz1dGmMQ_Z4UxXE.mft
rsync://rpki.ripe.net/repository/DEFAULT/GAi_f-SLBX-fLz1dGmMQ_Z4UxXE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 04:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:06:cc:fa:75:6c:7b:53:46:b9:0d:57:2c:a6:c1:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1808bf7fe48b057f9f2f3d5d1a6310fd9e14c571
Validity
Not Before: Nov 4 04:01:22 2025 GMT
Not After : Nov 5 04:01:22 2025 GMT
Subject: CN=477f97329e358c9f7428418a84ae871bcea740f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:60:3a:39:67:ea:ca:6a:97:a7:70:53:d5:3e:
a1:d3:a0:df:b2:3b:39:34:9e:ad:54:79:e5:6e:9f:
81:09:80:6f:b6:85:fb:4c:58:ce:5d:95:e3:e2:41:
e8:dd:70:42:02:7a:69:72:5d:05:5f:ed:0a:de:a1:
cf:71:09:bc:26:60:65:96:a7:b7:9b:37:f2:a3:fb:
ea:e1:ab:78:7f:8d:f3:b3:24:71:64:34:f4:b7:f8:
55:2e:58:81:51:cc:1c:1b:2f:41:ef:08:24:49:cd:
00:05:2f:07:52:1c:45:9a:ee:dd:1c:7f:42:89:57:
07:7d:48:81:3b:0d:50:1c:27:84:bf:d6:6b:c7:10:
3d:c0:c8:ec:f8:02:c6:f7:b5:20:92:1c:48:72:51:
33:c2:67:e5:a5:83:45:15:35:b9:7c:cf:c2:c9:b8:
25:cd:b0:de:da:cb:b4:e3:e5:80:21:5a:bf:e9:67:
f4:2c:73:6b:f4:ff:eb:e3:32:f0:8c:8a:cc:16:40:
97:d6:6c:56:fa:3e:24:05:52:9a:73:da:e5:38:66:
d1:9d:49:9d:3a:b3:21:2b:9b:da:63:1b:0b:9f:1d:
8b:a3:84:31:f6:11:0e:81:16:43:e0:e9:63:7c:d4:
e6:19:cc:ba:f2:7d:de:fd:ea:15:90:1f:fc:0e:ce:
c0:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:7F:97:32:9E:35:8C:9F:74:28:41:8A:84:AE:87:1B:CE:A7:40:F5
X509v3 Authority Key Identifier:
keyid:18:08:BF:7F:E4:8B:05:7F:9F:2F:3D:5D:1A:63:10:FD:9E:14:C5:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GAi_f-SLBX-fLz1dGmMQ_Z4UxXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/510c3b-f870-476b-a163-9d392eee0f66/1/GAi_f-SLBX-fLz1dGmMQ_Z4UxXE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/510c3b-f870-476b-a163-9d392eee0f66/1/GAi_f-SLBX-fLz1dGmMQ_Z4UxXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:a8:14:09:9f:b9:ab:f5:fd:d2:06:8a:6d:d7:c5:b8:af:a9:
3c:47:e1:cd:e0:81:c2:73:55:93:83:0c:30:06:88:83:95:ce:
45:55:f7:11:88:f2:46:0c:6e:12:c4:20:32:54:63:db:cb:cd:
6a:df:84:1f:53:db:d9:31:88:d1:68:e7:6a:1e:71:db:87:73:
f2:81:2e:a4:ae:47:b1:4e:66:87:ee:9f:fb:3f:41:a4:dd:29:
1c:6b:6c:11:30:42:2c:e4:3f:fa:98:1b:79:8e:91:eb:e7:f5:
56:d2:57:1e:20:c6:ea:94:c8:92:fe:f6:e7:09:1c:a7:91:a6:
d5:3f:06:3c:c5:ce:ab:c5:3e:5a:f5:6c:6f:88:84:12:64:7d:
fb:23:3f:51:5c:24:14:cc:9e:2d:62:9b:57:83:14:17:43:7f:
8c:9d:88:ee:a9:ef:a9:e2:cb:be:47:b6:79:6b:26:ed:37:73:
48:10:b0:da:33:8b:50:64:7c:ad:6f:f2:43:02:a7:4b:49:d6:
e2:24:e4:cc:26:22:c2:b5:7e:15:a4:3b:64:6a:7d:af:c7:59:
60:0b:7a:bb:d3:88:ff:aa:d3:6c:1c:d4:99:5e:ea:0a:18:40:
b1:c7:d6:37:bc:26:5c:8b:f2:f4:36:c4:2e:58:a5:8c:f2:c4:
de:e3:90:0a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNBsz6dWx7U0a5DVcspsExMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE4MDhiZjdmZTQ4YjA1N2Y5ZjJmM2Q1ZDFhNjMxMGZkOWUx
NGM1NzEwHhcNMjUxMTA0MDQwMTIyWhcNMjUxMTA1MDQwMTIyWjAzMTEwLwYDVQQD
Eyg0NzdmOTczMjllMzU4YzlmNzQyODQxOGE4NGFlODcxYmNlYTc0MGY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAomA6OWfqymqXp3BT1T6h06Dfsjs5
NJ6tVHnlbp+BCYBvtoX7TFjOXZXj4kHo3XBCAnppcl0FX+0K3qHPcQm8JmBllqe3
mzfyo/vq4at4f43zsyRxZDT0t/hVLliBUcwcGy9B7wgkSc0ABS8HUhxFmu7dHH9C
iVcHfUiBOw1QHCeEv9ZrxxA9wMjs+ALG97UgkhxIclEzwmflpYNFFTW5fM/Cybgl
zbDe2su04+WAIVq/6Wf0LHNr9P/r4zLwjIrMFkCX1mxW+j4kBVKac9rlOGbRnUmd
OrMhK5vaYxsLnx2Lo4Qx9hEOgRZD4OljfNTmGcy68n3e/eoVkB/8Ds7AaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEd/lzKeNYyfdChBioSuhxvOp0D1MB8GA1UdIwQY
MBaAFBgIv3/kiwV/ny89XRpjEP2eFMVxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR0FpX2YtU0xCWC1mTHoxZEdtTVFfWjRVeFhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC81MTBjM2ItZjg3MC00NzZiLWExNjMt
OWQzOTJlZWUwZjY2LzEvR0FpX2YtU0xCWC1mTHoxZEdtTVFfWjRVeFhFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC81MTBjM2ItZjg3MC00NzZiLWExNjMtOWQzOTJlZWUwZjY2
LzEvR0FpX2YtU0xCWC1mTHoxZEdtTVFfWjRVeFhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkagUCZ+5
q/X90gaKbdfFuK+pPEfhzeCBwnNVk4MMMAaIg5XORVX3EYjyRgxuEsQgMlRj28vN
at+EH1Pb2TGI0Wjnah5x24dz8oEupK5HsU5mh+6f+z9BpN0pHGtsETBCLOQ/+pgb
eY6R6+f1VtJXHiDG6pTIkv725wkcp5Gm1T8GPMXOq8U+WvVsb4iEEmR9+yM/UVwk
FMyeLWKbV4MUF0N/jJ2I7qnvqeLLvke2eWsm7TdzSBCw2jOLUGR8rW/yQwKnS0nW
4iTkzCYiwrV+FaQ7ZGp9r8dZYAt6u9OI/6rTbBzUmV7qChhAscfWN7wmXIvy9DbE
LliljPLE3uOQCg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 10:46:38 2025 by rpki-client