Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/6a2946-f0a4-4e85-930e-d4edf16e0978/1/G9ugE2Vbm7DKooXXXBQsHuMPiFQ.mft
File: G9ugE2Vbm7DKooXXXBQsHuMPiFQ.mft (raw, json)
Hash identifier: mRLuUsrRts38pUcm4WAQLVrIZXLCCv/4ovE/4gSrWEI=
Subject key identifier: 0A:07:63:12:53:54:C2:E2:28:68:EB:B6:0C:09:83:0D:7F:B2:94:A0
Authority key identifier: 1B:DB:A0:13:65:5B:9B:B0:CA:A2:85:D7:5C:14:2C:1E:E3:0F:88:54
Certificate issuer: /CN=1bdba013655b9bb0caa285d75c142c1ee30f8854
Certificate serial: 019A52630C35CEFFC1C394A19DE977D8EB44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G9ugE2Vbm7DKooXXXBQsHuMPiFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/6a2946-f0a4-4e85-930e-d4edf16e0978/1/G9ugE2Vbm7DKooXXXBQsHuMPiFQ.mft
Manifest number: 15E8
Signing time: Wed 05 Nov 2025 05:00:13 +0000
Manifest this update: Wed 05 Nov 2025 05:00:13 +0000
Manifest next update: Thu 06 Nov 2025 05:00:13 +0000
Files and hashes: 1: Crf41pfcZmNKuDt4hymlQTfYG2U.roa (hash: c4qxY3jolPv2UXEdOnJwnhLS1Znb3vlJyUzlD0LFsHY=)
2: G9ugE2Vbm7DKooXXXBQsHuMPiFQ.crl (hash: AxDsd2ts3uWPRtMuAEMljw96YcF0xgtKeBe/jY6OO6o=)
3: YCXRBD7Zei1Us8_1Zrh0WouSVoc.roa (hash: uf8QrvagAa32Z+Kqsvosmb8r/ocn/wRQquN7YdO8AOY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/6a2946-f0a4-4e85-930e-d4edf16e0978/1/G9ugE2Vbm7DKooXXXBQsHuMPiFQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/6a2946-f0a4-4e85-930e-d4edf16e0978/1/G9ugE2Vbm7DKooXXXBQsHuMPiFQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/G9ugE2Vbm7DKooXXXBQsHuMPiFQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:63:0c:35:ce:ff:c1:c3:94:a1:9d:e9:77:d8:eb:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bdba013655b9bb0caa285d75c142c1ee30f8854
Validity
Not Before: Nov 5 05:00:13 2025 GMT
Not After : Nov 6 05:00:13 2025 GMT
Subject: CN=0a0763125354c2e22868ebb60c09830d7fb294a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:05:fe:b7:dd:0b:ea:cb:a9:5a:d4:5b:cc:a5:
bc:46:bb:90:61:b0:57:a2:b0:44:07:54:45:d8:31:
8b:88:1e:d6:0f:6d:99:44:8d:39:15:70:c0:9b:cf:
40:79:c4:c2:ca:44:79:a2:cd:10:a0:ce:a5:9d:66:
98:34:37:8d:b1:2f:43:57:d6:bf:0e:8d:18:dc:e2:
d0:8a:81:7a:cc:e0:d2:86:29:48:e9:96:64:14:ce:
3b:48:fd:1a:51:fd:7a:30:c4:19:51:48:b6:d4:15:
de:36:e6:77:53:74:9a:c4:86:cb:ea:07:33:c5:5a:
63:ec:50:70:04:97:73:0b:87:c7:c3:e1:6f:e9:2f:
0e:a0:ac:3b:e7:64:d3:61:9d:9d:fa:0c:1d:fb:ea:
f9:ac:1a:9c:e2:ce:54:25:a6:25:14:23:8a:f2:1c:
3b:40:ab:00:e3:e2:ad:7c:cb:dd:a2:8c:21:0a:2a:
ab:54:97:26:da:f8:58:3c:bb:75:fe:6f:18:7a:01:
c8:aa:6c:ee:c0:54:8f:46:f9:2f:47:02:80:74:bd:
4c:14:9b:5c:bd:7e:e2:4e:19:92:5c:1c:68:4e:b3:
5c:f5:04:51:69:3a:ff:54:70:37:aa:28:15:f7:84:
51:31:84:57:ba:08:34:cf:2a:01:d5:af:d5:28:39:
06:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:07:63:12:53:54:C2:E2:28:68:EB:B6:0C:09:83:0D:7F:B2:94:A0
X509v3 Authority Key Identifier:
keyid:1B:DB:A0:13:65:5B:9B:B0:CA:A2:85:D7:5C:14:2C:1E:E3:0F:88:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G9ugE2Vbm7DKooXXXBQsHuMPiFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/6a2946-f0a4-4e85-930e-d4edf16e0978/1/G9ugE2Vbm7DKooXXXBQsHuMPiFQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/6a2946-f0a4-4e85-930e-d4edf16e0978/1/G9ugE2Vbm7DKooXXXBQsHuMPiFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:c1:1b:8d:8f:5c:ce:b3:62:72:77:fa:12:ef:2c:05:af:ec:
de:24:c5:a1:26:96:fd:3a:83:fd:5b:52:23:dc:0e:7d:09:7f:
de:08:e8:1f:df:30:92:90:cf:8c:ef:36:c2:09:4e:a8:1a:74:
37:74:c0:38:7b:c5:ce:e8:3a:a7:7a:c2:2e:53:e7:54:95:23:
76:74:94:42:86:1f:32:10:1c:e1:3e:91:27:3e:b2:1c:6b:bf:
88:ae:80:8a:79:96:f5:64:d1:c9:45:69:6e:db:01:79:45:3c:
b9:9a:44:fc:10:b1:df:27:73:82:4e:5e:a6:82:d3:65:4d:c8:
5e:d5:d1:fd:f2:e2:57:da:d2:ef:38:fd:c6:12:9f:23:28:f3:
e4:29:59:6c:17:1f:5f:32:51:8b:10:49:73:60:a5:61:3e:27:
aa:78:04:cc:1e:8e:dc:e0:91:66:2d:a1:3d:4e:0b:e3:e5:04:
8b:dc:7f:7b:e4:9e:7a:4b:01:ef:7f:5d:5d:5a:15:45:ae:27:
03:4c:e8:32:f3:22:1c:ab:a4:d1:c8:87:ab:0a:c0:21:b7:d5:
af:76:4a:58:27:72:25:f2:8b:b7:50:94:6d:9c:60:be:e6:64:
57:e0:80:ef:fa:f8:b6:e9:1b:1b:bf:e6:91:8a:54:a3:1a:73:
79:e2:1d:6a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpSYww1zv/Bw5Shnel32OtEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiZGJhMDEzNjU1YjliYjBjYWEyODVkNzVjMTQyYzFlZTMw
Zjg4NTQwHhcNMjUxMTA1MDUwMDEzWhcNMjUxMTA2MDUwMDEzWjAzMTEwLwYDVQQD
EygwYTA3NjMxMjUzNTRjMmUyMjg2OGViYjYwYzA5ODMwZDdmYjI5NGEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvgX+t90L6supWtRbzKW8RruQYbBX
orBEB1RF2DGLiB7WD22ZRI05FXDAm89AecTCykR5os0QoM6lnWaYNDeNsS9DV9a/
Do0Y3OLQioF6zODShilI6ZZkFM47SP0aUf16MMQZUUi21BXeNuZ3U3SaxIbL6gcz
xVpj7FBwBJdzC4fHw+Fv6S8OoKw752TTYZ2d+gwd++r5rBqc4s5UJaYlFCOK8hw7
QKsA4+KtfMvdoowhCiqrVJcm2vhYPLt1/m8YegHIqmzuwFSPRvkvRwKAdL1MFJtc
vX7iThmSXBxoTrNc9QRRaTr/VHA3qigV94RRMYRXugg0zyoB1a/VKDkGsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAoHYxJTVMLiKGjrtgwJgw1/spSgMB8GA1UdIwQY
MBaAFBvboBNlW5uwyqKF11wULB7jD4hUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRzl1Z0UyVmJtN0RLb29YWFhCUXNIdU1QaUZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi82YTI5NDYtZjBhNC00ZTg1LTkzMGUt
ZDRlZGYxNmUwOTc4LzEvRzl1Z0UyVmJtN0RLb29YWFhCUXNIdU1QaUZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYi82YTI5NDYtZjBhNC00ZTg1LTkzMGUtZDRlZGYxNmUwOTc4
LzEvRzl1Z0UyVmJtN0RLb29YWFhCUXNIdU1QaUZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk8EbjY9c
zrNicnf6Eu8sBa/s3iTFoSaW/TqD/VtSI9wOfQl/3gjoH98wkpDPjO82wglOqBp0
N3TAOHvFzug6p3rCLlPnVJUjdnSUQoYfMhAc4T6RJz6yHGu/iK6AinmW9WTRyUVp
btsBeUU8uZpE/BCx3ydzgk5epoLTZU3IXtXR/fLiV9rS7zj9xhKfIyjz5ClZbBcf
XzJRixBJc2ClYT4nqngEzB6O3OCRZi2hPU4L4+UEi9x/e+SeeksB739dXVoVRa4n
A0zoMvMiHKuk0ciHqwrAIbfVr3ZKWCdyJfKLt1CUbZxgvuZkV+CA7/r4tukbG7/m
kYpUoxpzeeIdag==
-----END CERTIFICATE-----
Generated at Wed Nov 5 09:08:53 2025 by rpki-client