Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/ecaa96-9af6-4b99-957f-6b7599fcdc33/1/gQzVDbQ3x4lGTLZN-r_kBcqYGxo.mft
File: gQzVDbQ3x4lGTLZN-r_kBcqYGxo.mft (raw, json)
Hash identifier: KOHAtXW8f8yexaxCsptYxXPLlBJRTS3jzPK8vHSDZvg=
Subject key identifier: 7F:51:52:8B:D7:28:3F:93:A4:D5:2B:5C:1A:8A:6E:15:29:DB:70:37
Authority key identifier: 81:0C:D5:0D:B4:37:C7:89:46:4C:B6:4D:FA:BF:E4:05:CA:98:1B:1A
Certificate issuer: /CN=810cd50db437c789464cb64dfabfe405ca981b1a
Certificate serial: 019A51F5E53DBE399E33BA895D8A0B29E90B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gQzVDbQ3x4lGTLZN-r_kBcqYGxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/ecaa96-9af6-4b99-957f-6b7599fcdc33/1/gQzVDbQ3x4lGTLZN-r_kBcqYGxo.mft
Manifest number: 1711
Signing time: Wed 05 Nov 2025 03:01:00 +0000
Manifest this update: Wed 05 Nov 2025 03:01:00 +0000
Manifest next update: Thu 06 Nov 2025 03:01:00 +0000
Files and hashes: 1: CabH8yqn5S_kOgWDLQqFiKvzRos.roa (hash: 6ag0+5Ik/WQxtmqQPOIuQwUXIuLv9ELuLcs7tX6aoMI=)
2: VQo-At29Fu-EX7b5D46S6kL9nbI.roa (hash: jdnjmvA4QLfORK84+jjkf8uapja4VMoDv0JpxJYMg64=)
3: gQzVDbQ3x4lGTLZN-r_kBcqYGxo.crl (hash: 8MR88ZvpOs0AC2BPdrupYPApX6DQ042T3nPW3da7n60=)
4: wB7zO9znSbsEaFVzHFAP7dE2rN0.roa (hash: oKOkiDomqnZDUq9zEDTivQ41nb+DuiZJIDMY2vxiFOA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/ecaa96-9af6-4b99-957f-6b7599fcdc33/1/gQzVDbQ3x4lGTLZN-r_kBcqYGxo.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/ecaa96-9af6-4b99-957f-6b7599fcdc33/1/gQzVDbQ3x4lGTLZN-r_kBcqYGxo.mft
rsync://rpki.ripe.net/repository/DEFAULT/gQzVDbQ3x4lGTLZN-r_kBcqYGxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:f5:e5:3d:be:39:9e:33:ba:89:5d:8a:0b:29:e9:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=810cd50db437c789464cb64dfabfe405ca981b1a
Validity
Not Before: Nov 5 03:01:00 2025 GMT
Not After : Nov 6 03:01:00 2025 GMT
Subject: CN=7f51528bd7283f93a4d52b5c1a8a6e1529db7037
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:4b:6c:4f:09:ed:14:fe:b8:cf:1e:59:e5:87:
42:fc:c3:c3:30:c5:b8:5c:9f:e4:5d:52:fa:be:db:
1f:87:a0:f9:e8:ff:b1:93:f0:04:f0:32:ab:f7:f4:
7f:76:17:d9:59:b7:fa:64:c5:05:09:12:fb:c3:d2:
bb:28:38:91:ca:33:58:ee:cc:98:02:b8:e2:4f:64:
71:9f:1f:6e:fb:f0:b7:ab:75:fa:41:90:06:f0:23:
90:72:8d:40:a3:d3:ae:2b:e1:f1:68:dc:39:d9:c3:
e3:00:c9:72:6e:6a:52:83:35:40:54:f6:e6:d5:eb:
71:46:84:ca:e9:7d:aa:07:22:1d:4c:85:46:51:e6:
97:b4:c5:d2:70:1d:86:76:ef:b3:b3:56:f1:bb:85:
30:4d:fa:57:eb:51:17:f6:d5:39:fd:8f:59:6a:32:
20:04:5f:a1:3f:4e:3b:d6:fe:6d:c2:23:34:84:02:
59:6c:93:e9:39:72:b1:48:19:06:6a:a9:2d:5d:d1:
ae:4a:91:68:1a:52:a5:c8:19:14:b3:46:85:a9:1c:
eb:6a:fc:81:c4:aa:40:c9:5b:d1:14:d0:70:fd:9a:
ea:14:b2:75:7b:b4:47:d4:7f:89:7a:3c:ba:87:d7:
13:33:5d:9a:30:e2:93:21:68:24:50:b7:23:81:6f:
29:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:51:52:8B:D7:28:3F:93:A4:D5:2B:5C:1A:8A:6E:15:29:DB:70:37
X509v3 Authority Key Identifier:
keyid:81:0C:D5:0D:B4:37:C7:89:46:4C:B6:4D:FA:BF:E4:05:CA:98:1B:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gQzVDbQ3x4lGTLZN-r_kBcqYGxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ecaa96-9af6-4b99-957f-6b7599fcdc33/1/gQzVDbQ3x4lGTLZN-r_kBcqYGxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ecaa96-9af6-4b99-957f-6b7599fcdc33/1/gQzVDbQ3x4lGTLZN-r_kBcqYGxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:60:2b:30:77:68:e8:d5:e0:bf:84:dc:ed:24:62:5c:7a:a3:
33:1a:55:e3:42:1a:10:9c:4b:4d:0c:06:4f:bd:a3:da:5a:4c:
92:93:31:d3:d5:70:98:88:bd:31:f4:85:97:15:cf:83:2f:88:
0d:9e:f5:05:7b:c1:09:9a:45:3a:bf:16:b3:d8:71:24:4d:50:
14:18:77:78:dd:be:42:4d:92:ea:9d:4d:fa:3a:9f:26:a9:b9:
61:11:9e:d2:d8:d9:55:52:d5:2d:d7:df:7d:32:5d:4b:de:d2:
67:76:04:6f:72:dd:d9:04:25:d5:ca:59:fc:06:6e:16:56:fb:
8c:af:8b:49:2b:9a:e7:a0:16:7f:54:3f:9f:bf:c8:97:ad:a9:
e7:5b:db:3e:a3:5c:5a:5b:48:55:b4:b4:ff:ec:a8:27:98:18:
bc:a8:c9:63:4d:17:2d:be:be:ba:01:7e:ac:6f:83:bb:f2:66:
ef:d7:c2:f6:af:d3:46:eb:d3:f5:4b:a3:53:85:fa:fa:dd:55:
ce:65:e2:a1:26:be:4a:6c:d6:e3:b6:2b:ef:71:12:dd:45:7f:
b9:54:96:a8:09:32:d8:92:79:f9:fa:e9:59:28:36:fa:32:2d:
d3:89:e7:1c:ed:61:3d:23:46:13:a7:98:55:92:90:42:18:e6:
67:1e:40:2d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpR9eU9vjmeM7qJXYoLKekLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxMGNkNTBkYjQzN2M3ODk0NjRjYjY0ZGZhYmZlNDA1Y2E5
ODFiMWEwHhcNMjUxMTA1MDMwMTAwWhcNMjUxMTA2MDMwMTAwWjAzMTEwLwYDVQQD
Eyg3ZjUxNTI4YmQ3MjgzZjkzYTRkNTJiNWMxYThhNmUxNTI5ZGI3MDM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmUtsTwntFP64zx5Z5YdC/MPDMMW4
XJ/kXVL6vtsfh6D56P+xk/AE8DKr9/R/dhfZWbf6ZMUFCRL7w9K7KDiRyjNY7syY
ArjiT2Rxnx9u+/C3q3X6QZAG8COQco1Ao9OuK+HxaNw52cPjAMlybmpSgzVAVPbm
1etxRoTK6X2qByIdTIVGUeaXtMXScB2Gdu+zs1bxu4UwTfpX61EX9tU5/Y9ZajIg
BF+hP0471v5twiM0hAJZbJPpOXKxSBkGaqktXdGuSpFoGlKlyBkUs0aFqRzravyB
xKpAyVvRFNBw/ZrqFLJ1e7RH1H+Jejy6h9cTM12aMOKTIWgkULcjgW8pIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH9RUovXKD+TpNUrXBqKbhUp23A3MB8GA1UdIwQY
MBaAFIEM1Q20N8eJRky2Tfq/5AXKmBsaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ1F6VkRiUTN4NGxHVExaTi1yX2tCY3FZR3hvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi9lY2FhOTYtOWFmNi00Yjk5LTk1N2Yt
NmI3NTk5ZmNkYzMzLzEvZ1F6VkRiUTN4NGxHVExaTi1yX2tCY3FZR3hvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi9lY2FhOTYtOWFmNi00Yjk5LTk1N2YtNmI3NTk5ZmNkYzMz
LzEvZ1F6VkRiUTN4NGxHVExaTi1yX2tCY3FZR3hvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATWArMHdo
6NXgv4Tc7SRiXHqjMxpV40IaEJxLTQwGT72j2lpMkpMx09VwmIi9MfSFlxXPgy+I
DZ71BXvBCZpFOr8Ws9hxJE1QFBh3eN2+Qk2S6p1N+jqfJqm5YRGe0tjZVVLVLdff
fTJdS97SZ3YEb3Ld2QQl1cpZ/AZuFlb7jK+LSSua56AWf1Q/n7/Il62p51vbPqNc
WltIVbS0/+yoJ5gYvKjJY00XLb6+ugF+rG+Du/Jm79fC9q/TRuvT9UujU4X6+t1V
zmXioSa+SmzW47Yr73ES3UV/uVSWqAky2JJ5+frpWSg2+jIt04nnHO1hPSNGE6eY
VZKQQhjmZx5ALQ==
-----END CERTIFICATE-----
Generated at Wed Nov 5 08:47:56 2025 by rpki-client