Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/7176f6-371d-45b9-b276-877cf21c8f7b/1/01GoxXA90UCJWao1WSVY_1GiQ-k.mft
File: 01GoxXA90UCJWao1WSVY_1GiQ-k.mft (raw, json)
Hash identifier: Hw6NR8NDXX1xM/yNKhowa37Ba+9JGuCkHsFPUSwBbXM=
Subject key identifier: B9:EB:BF:7B:D6:B7:5C:B4:9B:6A:FD:37:28:E7:7B:10:E0:95:54:DC
Authority key identifier: D3:51:A8:C5:70:3D:D1:40:89:59:AA:35:59:25:58:FF:51:A2:43:E9
Certificate issuer: /CN=d351a8c5703dd1408959aa35592558ff51a243e9
Certificate serial: 019A4E8687E4CEA54CE56C074969D91E1B1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/01GoxXA90UCJWao1WSVY_1GiQ-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/7176f6-371d-45b9-b276-877cf21c8f7b/1/01GoxXA90UCJWao1WSVY_1GiQ-k.mft
Manifest number: 032C
Signing time: Tue 04 Nov 2025 11:00:30 +0000
Manifest this update: Tue 04 Nov 2025 11:00:30 +0000
Manifest next update: Wed 05 Nov 2025 11:00:30 +0000
Files and hashes: 1: 01GoxXA90UCJWao1WSVY_1GiQ-k.crl (hash: xVDk1c12teTQvZ8V0zvUEcx9F6w8+6Vh8FmaPiuJRVA=)
2: M7R2UHHJlETHSR8o10ZhPmjnSrQ.roa (hash: 48LCEV6BiMysqNLuoMNmOC2etuBDhXK4TMcdmnpSDVw=)
3: QBnJw99597zp1MOGO0aw50ZWWWw.roa (hash: Sivngawcknlc7BG16HCXOssKTWMLVcvalL4l8eCv6+o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/7176f6-371d-45b9-b276-877cf21c8f7b/1/01GoxXA90UCJWao1WSVY_1GiQ-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/7176f6-371d-45b9-b276-877cf21c8f7b/1/01GoxXA90UCJWao1WSVY_1GiQ-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/01GoxXA90UCJWao1WSVY_1GiQ-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:87:e4:ce:a5:4c:e5:6c:07:49:69:d9:1e:1b:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d351a8c5703dd1408959aa35592558ff51a243e9
Validity
Not Before: Nov 4 11:00:30 2025 GMT
Not After : Nov 5 11:00:30 2025 GMT
Subject: CN=b9ebbf7bd6b75cb49b6afd3728e77b10e09554dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:32:74:ea:96:bc:81:dd:d2:6d:e9:8f:07:3a:
4a:89:1c:ec:71:7c:63:94:de:46:7e:d5:7d:17:f1:
b7:01:70:69:c9:3a:b8:cd:c4:2c:01:de:c3:a7:3e:
4a:f0:17:2e:6e:22:77:34:de:75:de:6f:04:72:8e:
f4:e1:22:20:e1:07:47:3d:b6:78:db:20:06:b5:6a:
0e:51:1b:56:df:be:d5:7c:97:ea:dd:b5:0d:8b:14:
27:d3:46:1b:22:a2:54:58:7a:1e:35:f2:cc:f2:3c:
f5:27:0f:a4:66:2b:87:8b:d3:7c:05:6a:43:dd:c4:
a8:00:63:18:82:2e:eb:fe:09:c8:aa:69:14:ce:9b:
d9:a6:f9:1b:90:e5:9e:b9:fb:d4:16:53:de:1e:4e:
25:bc:a7:05:a7:69:3b:21:67:32:2d:67:b0:cf:7b:
47:a1:6d:58:22:e4:3f:12:0b:b5:64:a0:18:16:c0:
2f:8d:07:27:1d:06:02:46:ad:60:bd:e6:52:66:df:
99:c0:f1:7d:50:b3:95:61:f6:01:33:09:29:81:3c:
23:28:c3:9a:7f:2e:fe:15:70:2c:3e:22:c8:05:98:
72:5a:e7:d6:de:1f:e8:0b:2f:34:67:5d:84:77:ad:
39:1c:eb:dc:20:70:c7:80:53:32:fe:77:f9:cb:c4:
46:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:EB:BF:7B:D6:B7:5C:B4:9B:6A:FD:37:28:E7:7B:10:E0:95:54:DC
X509v3 Authority Key Identifier:
keyid:D3:51:A8:C5:70:3D:D1:40:89:59:AA:35:59:25:58:FF:51:A2:43:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/01GoxXA90UCJWao1WSVY_1GiQ-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7176f6-371d-45b9-b276-877cf21c8f7b/1/01GoxXA90UCJWao1WSVY_1GiQ-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7176f6-371d-45b9-b276-877cf21c8f7b/1/01GoxXA90UCJWao1WSVY_1GiQ-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:61:07:71:f4:a3:18:1d:a6:96:23:ab:b2:65:1b:25:e0:3f:
a1:96:c2:02:0f:45:3f:bc:6c:6d:1c:f7:54:2f:42:35:af:d3:
a5:c5:43:65:c8:b2:a4:e9:a6:28:59:6e:86:5f:8a:b1:8b:10:
05:96:e8:cf:85:79:3e:87:96:dc:81:f7:d8:ec:08:24:ca:48:
de:3d:26:66:c7:b5:1c:f1:a1:00:fa:06:4a:9b:e4:e0:d1:43:
88:91:7c:1e:2e:66:6f:4a:37:21:b7:8a:ed:bf:60:6c:27:e9:
57:24:aa:38:06:a8:70:79:61:31:9f:b4:f2:2d:d8:f1:59:5a:
0c:1c:66:82:c6:f4:f6:b7:cc:a4:ab:26:72:f8:12:e8:c8:8d:
b8:d7:64:4e:5f:f6:6a:5b:3e:69:d0:06:0e:e8:3c:04:be:ce:
9f:3f:75:13:80:aa:48:3e:2c:1c:d5:51:55:3f:41:0f:0c:62:
c8:c4:cb:b6:70:7c:6e:6c:ca:4b:27:59:de:ff:e9:a6:d3:d8:
cb:f1:1c:9d:14:ab:3b:af:4c:f5:66:98:f1:73:50:cf:f5:c0:
e3:97:35:89:99:0b:de:da:56:41:d6:9c:56:b5:4b:e9:d4:63:
fd:19:7d:4e:2a:65:cb:64:91:96:ba:63:65:b6:34:d0:3f:08:
28:64:35:df
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOhofkzqVM5WwHSWnZHhscMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzNTFhOGM1NzAzZGQxNDA4OTU5YWEzNTU5MjU1OGZmNTFh
MjQzZTkwHhcNMjUxMTA0MTEwMDMwWhcNMjUxMTA1MTEwMDMwWjAzMTEwLwYDVQQD
EyhiOWViYmY3YmQ2Yjc1Y2I0OWI2YWZkMzcyOGU3N2IxMGUwOTU1NGRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAojJ06pa8gd3SbemPBzpKiRzscXxj
lN5GftV9F/G3AXBpyTq4zcQsAd7Dpz5K8BcubiJ3NN513m8Eco704SIg4QdHPbZ4
2yAGtWoOURtW377VfJfq3bUNixQn00YbIqJUWHoeNfLM8jz1Jw+kZiuHi9N8BWpD
3cSoAGMYgi7r/gnIqmkUzpvZpvkbkOWeufvUFlPeHk4lvKcFp2k7IWcyLWewz3tH
oW1YIuQ/Egu1ZKAYFsAvjQcnHQYCRq1gveZSZt+ZwPF9ULOVYfYBMwkpgTwjKMOa
fy7+FXAsPiLIBZhyWufW3h/oCy80Z12Ed605HOvcIHDHgFMy/nf5y8RG3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLnrv3vWt1y0m2r9NyjnexDglVTcMB8GA1UdIwQY
MBaAFNNRqMVwPdFAiVmqNVklWP9RokPpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDFHb3hYQTkwVUNKV2FvMVdTVllfMUdpUS1rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS83MTc2ZjYtMzcxZC00NWI5LWIyNzYt
ODc3Y2YyMWM4ZjdiLzEvMDFHb3hYQTkwVUNKV2FvMVdTVllfMUdpUS1rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS83MTc2ZjYtMzcxZC00NWI5LWIyNzYtODc3Y2YyMWM4Zjdi
LzEvMDFHb3hYQTkwVUNKV2FvMVdTVllfMUdpUS1rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA2EHcfSj
GB2mliOrsmUbJeA/oZbCAg9FP7xsbRz3VC9CNa/TpcVDZciypOmmKFluhl+KsYsQ
BZboz4V5PoeW3IH32OwIJMpI3j0mZse1HPGhAPoGSpvk4NFDiJF8Hi5mb0o3IbeK
7b9gbCfpVySqOAaocHlhMZ+08i3Y8VlaDBxmgsb09rfMpKsmcvgS6MiNuNdkTl/2
als+adAGDug8BL7Onz91E4CqSD4sHNVRVT9BDwxiyMTLtnB8bmzKSydZ3v/pptPY
y/EcnRSrO69M9WaY8XNQz/XA45c1iZkL3tpWQdacVrVL6dRj/Rl9Tiply2SRlrpj
ZbY00D8IKGQ13w==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:42:46 2025 by rpki-client