Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/b71af2-6697-4d07-adc5-1450efbd9e35/1/GnTydwKmLGtifF6nC5b9KYI2RSI.mft
File: GnTydwKmLGtifF6nC5b9KYI2RSI.mft (raw, json)
Hash identifier: hFo1TlHgnG3MzKoRwzA6Ev9e0ahwtjmh258hDGtsdds=
Subject key identifier: 77:CC:7A:45:71:BE:1C:28:FC:6C:6B:68:27:21:0B:7C:05:FE:60:C7
Authority key identifier: 1A:74:F2:77:02:A6:2C:6B:62:7C:5E:A7:0B:96:FD:29:82:36:45:22
Certificate issuer: /CN=1a74f27702a62c6b627c5ea70b96fd2982364522
Certificate serial: 019A5451A05B6C7B958BA6B9EE23FB0FB047
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GnTydwKmLGtifF6nC5b9KYI2RSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/b71af2-6697-4d07-adc5-1450efbd9e35/1/GnTydwKmLGtifF6nC5b9KYI2RSI.mft
Manifest number: 02E7
Signing time: Wed 05 Nov 2025 14:00:26 +0000
Manifest this update: Wed 05 Nov 2025 14:00:26 +0000
Manifest next update: Thu 06 Nov 2025 14:00:26 +0000
Files and hashes: 1: GnTydwKmLGtifF6nC5b9KYI2RSI.crl (hash: mdcqia2PEqVM5J9GpizcI0eLfWOj8qiKPAPujai5aIU=)
2: RyTD8ysj6_4VmnUX2OFrVA27p2U.roa (hash: dgeC3fAtFGdk1IystX/d2Lto62C1ZW8Kifsbnvy1J74=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/b71af2-6697-4d07-adc5-1450efbd9e35/1/GnTydwKmLGtifF6nC5b9KYI2RSI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/b71af2-6697-4d07-adc5-1450efbd9e35/1/GnTydwKmLGtifF6nC5b9KYI2RSI.mft
rsync://rpki.ripe.net/repository/DEFAULT/GnTydwKmLGtifF6nC5b9KYI2RSI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:51:a0:5b:6c:7b:95:8b:a6:b9:ee:23:fb:0f:b0:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a74f27702a62c6b627c5ea70b96fd2982364522
Validity
Not Before: Nov 5 14:00:26 2025 GMT
Not After : Nov 6 14:00:26 2025 GMT
Subject: CN=77cc7a4571be1c28fc6c6b6827210b7c05fe60c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:dd:99:5b:d4:db:be:c1:77:9d:05:69:5a:38:
77:2b:10:27:28:05:47:c4:6a:06:80:99:7b:f3:fd:
63:31:97:87:42:6f:21:1b:c3:ab:07:ac:cb:65:a4:
7a:0a:5a:97:99:aa:22:d8:49:18:a8:f7:21:44:6f:
d4:18:16:dd:4f:9a:e9:08:58:83:4f:87:f7:45:a0:
17:bd:db:2b:91:be:9a:80:6f:da:a6:fa:0e:c3:51:
42:c0:ce:d2:11:18:f2:2d:9c:89:1d:76:41:e3:50:
e1:05:26:c1:11:6b:10:b4:f0:2c:16:49:69:03:57:
89:2d:92:7a:9e:13:a1:ce:07:9e:92:fe:8f:53:cb:
e2:d7:01:ed:da:a3:a6:b3:de:09:cc:a3:55:17:34:
fd:25:d2:82:79:88:59:eb:31:a0:33:46:85:80:ab:
4a:8a:c5:d8:9d:30:81:90:ea:70:5a:b1:8a:99:db:
69:2a:13:d4:53:02:22:a5:2a:d2:1c:4d:a9:7b:0e:
ec:77:e6:e0:59:86:98:80:e7:bb:76:b1:87:01:6e:
43:f8:a5:8a:b0:29:ff:3c:0a:75:01:95:24:5e:65:
b4:3b:48:ab:63:dc:a6:cc:4c:7d:23:bf:48:5b:79:
16:c0:9a:0c:11:0a:31:0c:76:5b:d6:a5:5d:0e:14:
0a:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:CC:7A:45:71:BE:1C:28:FC:6C:6B:68:27:21:0B:7C:05:FE:60:C7
X509v3 Authority Key Identifier:
keyid:1A:74:F2:77:02:A6:2C:6B:62:7C:5E:A7:0B:96:FD:29:82:36:45:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GnTydwKmLGtifF6nC5b9KYI2RSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/b71af2-6697-4d07-adc5-1450efbd9e35/1/GnTydwKmLGtifF6nC5b9KYI2RSI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/b71af2-6697-4d07-adc5-1450efbd9e35/1/GnTydwKmLGtifF6nC5b9KYI2RSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:b3:97:1d:4f:94:69:d6:06:8b:00:78:75:4d:ba:92:28:b0:
67:6d:d1:4e:ce:41:de:c6:73:7b:80:3d:69:8f:92:df:68:29:
45:23:83:17:02:39:d0:0b:68:0b:3c:60:6b:6f:ba:7f:2a:fa:
f7:5b:78:c3:98:23:85:5f:f6:ed:4b:78:8d:9a:09:1d:6f:76:
46:e7:ac:14:d3:74:e8:b1:2b:3e:82:c3:a3:55:66:f1:4e:bc:
34:20:8c:05:b6:c0:b2:4b:cf:3a:fe:0c:52:82:75:c5:33:9c:
4e:8c:61:53:fa:b3:9f:24:69:59:32:c6:fc:c8:09:53:59:d6:
07:7a:3a:26:76:e3:d2:6d:b4:46:6e:a1:f9:c2:5b:6a:2f:6f:
bc:f7:de:d9:0a:ed:fc:49:05:18:fc:e8:cb:15:7c:b9:55:81:
dd:f6:18:6a:61:2d:07:86:83:4d:49:29:8c:c2:6f:4c:6b:c4:
45:a8:cb:01:68:a5:eb:a8:ff:b3:58:15:b8:02:fd:e8:0b:6b:
65:fa:18:07:8e:f4:e1:76:70:89:eb:28:b5:6e:cb:b7:db:fa:
59:70:6c:88:41:89:6e:20:79:ee:50:d2:86:65:d5:a4:95:7b:
93:a9:fc:a7:43:54:38:70:fc:0e:8b:75:96:49:98:5e:e1:96:
fd:94:e7:1c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpUUaBbbHuVi6a57iP7D7BHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhNzRmMjc3MDJhNjJjNmI2MjdjNWVhNzBiOTZmZDI5ODIz
NjQ1MjIwHhcNMjUxMTA1MTQwMDI2WhcNMjUxMTA2MTQwMDI2WjAzMTEwLwYDVQQD
Eyg3N2NjN2E0NTcxYmUxYzI4ZmM2YzZiNjgyNzIxMGI3YzA1ZmU2MGM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw92ZW9TbvsF3nQVpWjh3KxAnKAVH
xGoGgJl78/1jMZeHQm8hG8OrB6zLZaR6ClqXmaoi2EkYqPchRG/UGBbdT5rpCFiD
T4f3RaAXvdsrkb6agG/apvoOw1FCwM7SERjyLZyJHXZB41DhBSbBEWsQtPAsFklp
A1eJLZJ6nhOhzgeekv6PU8vi1wHt2qOms94JzKNVFzT9JdKCeYhZ6zGgM0aFgKtK
isXYnTCBkOpwWrGKmdtpKhPUUwIipSrSHE2pew7sd+bgWYaYgOe7drGHAW5D+KWK
sCn/PAp1AZUkXmW0O0irY9ymzEx9I79IW3kWwJoMEQoxDHZb1qVdDhQKdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHfMekVxvhwo/GxraCchC3wF/mDHMB8GA1UdIwQY
MBaAFBp08ncCpixrYnxepwuW/SmCNkUiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR25UeWR3S21MR3RpZkY2bkM1YjlLWUkyUlNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi9iNzFhZjItNjY5Ny00ZDA3LWFkYzUt
MTQ1MGVmYmQ5ZTM1LzEvR25UeWR3S21MR3RpZkY2bkM1YjlLWUkyUlNJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYi9iNzFhZjItNjY5Ny00ZDA3LWFkYzUtMTQ1MGVmYmQ5ZTM1
LzEvR25UeWR3S21MR3RpZkY2bkM1YjlLWUkyUlNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL7OXHU+U
adYGiwB4dU26kiiwZ23RTs5B3sZze4A9aY+S32gpRSODFwI50AtoCzxga2+6fyr6
91t4w5gjhV/27Ut4jZoJHW92RuesFNN06LErPoLDo1Vm8U68NCCMBbbAskvPOv4M
UoJ1xTOcToxhU/qznyRpWTLG/MgJU1nWB3o6Jnbj0m20Rm6h+cJbai9vvPfe2Qrt
/EkFGPzoyxV8uVWB3fYYamEtB4aDTUkpjMJvTGvERajLAWil66j/s1gVuAL96Atr
ZfoYB4704XZwiesotW7Lt9v6WXBsiEGJbiB57lDShmXVpJV7k6n8p0NUOHD8Dot1
lkmYXuGW/ZTnHA==
-----END CERTIFICATE-----
Generated at Wed Nov 5 16:16:31 2025 by rpki-client