Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/a46bf5-cc8f-40c7-915b-a15af5e8f13c/1/gFPZtR9HqlX55ScEdUhp9VNrrkw.mft
File: gFPZtR9HqlX55ScEdUhp9VNrrkw.mft (raw, json)
Hash identifier: 7PFKWAZet9hf2+Dh+k9Zv1i8Twymnbnrda6LD6B4zHQ=
Subject key identifier: 53:28:52:60:A5:F8:3A:68:64:68:10:4F:EF:BC:C7:1D:E6:FF:27:FE
Authority key identifier: 80:53:D9:B5:1F:47:AA:55:F9:E5:27:04:75:48:69:F5:53:6B:AE:4C
Certificate issuer: /CN=8053d9b51f47aa55f9e52704754869f5536bae4c
Certificate serial: 019A503E5781FE6CE8263747CB861FD63C9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gFPZtR9HqlX55ScEdUhp9VNrrkw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/a46bf5-cc8f-40c7-915b-a15af5e8f13c/1/gFPZtR9HqlX55ScEdUhp9VNrrkw.mft
Manifest number: 0E3E
Signing time: Tue 04 Nov 2025 19:00:54 +0000
Manifest this update: Tue 04 Nov 2025 19:00:54 +0000
Manifest next update: Wed 05 Nov 2025 19:00:54 +0000
Files and hashes: 1: JQj924cUZ739dTo2CAmTW-Nn1zw.roa (hash: wLvSRyuv0hEPp/uJ8ZfBwX5TJv2CK5mAgRM5bxes1Tg=)
2: gFPZtR9HqlX55ScEdUhp9VNrrkw.crl (hash: uMeeoF7fO2Yx7g5UU6kuut1ofM5lBJqIo719+JrooZI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/a46bf5-cc8f-40c7-915b-a15af5e8f13c/1/gFPZtR9HqlX55ScEdUhp9VNrrkw.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/a46bf5-cc8f-40c7-915b-a15af5e8f13c/1/gFPZtR9HqlX55ScEdUhp9VNrrkw.mft
rsync://rpki.ripe.net/repository/DEFAULT/gFPZtR9HqlX55ScEdUhp9VNrrkw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3e:57:81:fe:6c:e8:26:37:47:cb:86:1f:d6:3c:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8053d9b51f47aa55f9e52704754869f5536bae4c
Validity
Not Before: Nov 4 19:00:54 2025 GMT
Not After : Nov 5 19:00:54 2025 GMT
Subject: CN=53285260a5f83a686468104fefbcc71de6ff27fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:cd:9c:3c:0c:7c:95:09:46:b4:65:1d:6e:81:
f6:23:ce:e9:7a:ee:45:96:ab:90:5f:ad:db:2c:bd:
80:b0:29:9f:30:26:a6:e4:57:3b:4c:d2:63:f1:81:
ee:e8:10:d2:9c:3c:06:14:b3:9f:10:1a:e6:5f:2f:
9c:f0:6e:39:5c:61:78:d9:1f:00:9f:fc:3f:b6:cf:
8e:dd:f9:43:10:ab:c7:e3:34:93:62:bc:a5:e2:72:
a7:5d:41:c6:44:29:58:3d:06:57:e4:3b:2c:97:e9:
b3:c3:0b:a5:23:40:ff:ac:af:b5:0a:4b:d9:37:c7:
05:b4:f6:97:a8:25:fb:39:3c:93:7e:01:b3:d3:1c:
18:06:0c:74:7a:af:95:91:d6:6f:d2:7c:c3:b5:f5:
87:46:da:90:6c:a5:0c:2f:cc:1e:1c:1c:40:b6:b3:
0c:1c:93:cb:5f:6b:8e:42:f7:2e:3b:87:9a:9c:d0:
d6:48:d2:81:7b:be:31:81:f7:5c:bc:4b:7c:8a:c0:
af:24:e0:2d:9e:dd:c7:45:38:e1:07:b3:c5:56:51:
5e:56:a5:0f:9d:86:4e:4b:48:a0:3a:8c:7f:8a:f7:
d9:3a:24:10:18:65:91:e9:f9:a1:85:0f:3b:6d:a4:
72:50:d7:77:1e:f6:a1:3b:bf:ab:00:82:5a:d7:6c:
61:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:28:52:60:A5:F8:3A:68:64:68:10:4F:EF:BC:C7:1D:E6:FF:27:FE
X509v3 Authority Key Identifier:
keyid:80:53:D9:B5:1F:47:AA:55:F9:E5:27:04:75:48:69:F5:53:6B:AE:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gFPZtR9HqlX55ScEdUhp9VNrrkw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a46bf5-cc8f-40c7-915b-a15af5e8f13c/1/gFPZtR9HqlX55ScEdUhp9VNrrkw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a46bf5-cc8f-40c7-915b-a15af5e8f13c/1/gFPZtR9HqlX55ScEdUhp9VNrrkw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:3e:b6:32:ae:cf:91:6a:62:39:62:df:94:97:32:be:16:54:
3f:ae:8f:dd:a4:f1:1b:23:01:0b:8e:6c:f0:7d:48:84:20:88:
98:ac:87:68:17:a2:14:31:4f:c2:62:ab:78:cb:e8:e0:76:a2:
e9:3b:b4:e4:91:1c:8c:f0:a2:10:81:2c:df:a6:1a:6e:c5:41:
b1:90:30:bd:3b:cb:b6:07:15:ed:ab:b5:c1:65:b1:0a:d0:21:
6c:84:0f:4c:ca:86:e7:5d:a0:45:fe:3f:bd:b5:8d:b2:be:16:
2c:4b:48:d1:da:fc:7b:e2:59:61:e1:c7:8f:be:40:28:f4:87:
51:14:e6:9b:16:0b:2f:ec:77:6c:a9:42:4b:43:8d:e6:90:c9:
08:2a:0c:a4:47:c4:04:19:d5:33:0b:f2:de:b0:26:b6:ae:5b:
67:52:07:34:f4:46:df:db:73:60:78:ba:e2:3e:f6:60:de:90:
f1:f3:ef:b0:2b:4f:e5:55:65:5a:ea:88:e4:2a:f0:22:e5:67:
18:10:f0:a2:40:e3:5c:bb:c7:b1:b9:55:61:78:7a:26:ac:58:
c8:03:b8:8d:6d:16:21:65:ca:2e:7e:22:55:10:fd:4c:d9:64:
b5:da:a9:78:ad:a2:e8:56:ef:09:25:41:11:f6:38:aa:14:ec:
60:18:fa:7c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpQPleB/mzoJjdHy4Yf1jyaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgwNTNkOWI1MWY0N2FhNTVmOWU1MjcwNDc1NDg2OWY1NTM2
YmFlNGMwHhcNMjUxMTA0MTkwMDU0WhcNMjUxMTA1MTkwMDU0WjAzMTEwLwYDVQQD
Eyg1MzI4NTI2MGE1ZjgzYTY4NjQ2ODEwNGZlZmJjYzcxZGU2ZmYyN2ZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl82cPAx8lQlGtGUdboH2I87peu5F
lquQX63bLL2AsCmfMCam5Fc7TNJj8YHu6BDSnDwGFLOfEBrmXy+c8G45XGF42R8A
n/w/ts+O3flDEKvH4zSTYryl4nKnXUHGRClYPQZX5Dssl+mzwwulI0D/rK+1CkvZ
N8cFtPaXqCX7OTyTfgGz0xwYBgx0eq+VkdZv0nzDtfWHRtqQbKUML8weHBxAtrMM
HJPLX2uOQvcuO4eanNDWSNKBe74xgfdcvEt8isCvJOAtnt3HRTjhB7PFVlFeVqUP
nYZOS0igOox/ivfZOiQQGGWR6fmhhQ87baRyUNd3HvahO7+rAIJa12xhBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFMoUmCl+DpoZGgQT++8xx3m/yf+MB8GA1UdIwQY
MBaAFIBT2bUfR6pV+eUnBHVIafVTa65MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ0ZQWnRSOUhxbFg1NVNjRWRVaHA5Vk5ycmt3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9hNDZiZjUtY2M4Zi00MGM3LTkxNWIt
YTE1YWY1ZThmMTNjLzEvZ0ZQWnRSOUhxbFg1NVNjRWRVaHA5Vk5ycmt3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi9hNDZiZjUtY2M4Zi00MGM3LTkxNWItYTE1YWY1ZThmMTNj
LzEvZ0ZQWnRSOUhxbFg1NVNjRWRVaHA5Vk5ycmt3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiT62Mq7P
kWpiOWLflJcyvhZUP66P3aTxGyMBC45s8H1IhCCImKyHaBeiFDFPwmKreMvo4Hai
6Tu05JEcjPCiEIEs36YabsVBsZAwvTvLtgcV7au1wWWxCtAhbIQPTMqG512gRf4/
vbWNsr4WLEtI0dr8e+JZYeHHj75AKPSHURTmmxYLL+x3bKlCS0ON5pDJCCoMpEfE
BBnVMwvy3rAmtq5bZ1IHNPRG39tzYHi64j72YN6Q8fPvsCtP5VVlWuqI5CrwIuVn
GBDwokDjXLvHsblVYXh6JqxYyAO4jW0WIWXKLn4iVRD9TNlktdqpeK2i6FbvCSVB
EfY4qhTsYBj6fA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 20:44:53 2025 by rpki-client