Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/2306f6-6cc0-4982-a523-16842bdad925/1/1GbRcMgQujTELpIOhNQmKEWXf4U.mft
File: 1GbRcMgQujTELpIOhNQmKEWXf4U.mft (raw, json)
Hash identifier: tD1ay3dmHFw6uq9bHffNe1366igGEKPYmrfqaJSBgqA=
Subject key identifier: 39:DE:7B:5E:B3:BC:8E:00:20:D9:B1:D8:7F:F0:74:EE:1A:5E:80:54
Authority key identifier: D4:66:D1:70:C8:10:BA:34:C4:2E:92:0E:84:D4:26:28:45:97:7F:85
Certificate issuer: /CN=d466d170c810ba34c42e920e84d4262845977f85
Certificate serial: 019A5074D873FCC8BF197531CAA634BFDFA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1GbRcMgQujTELpIOhNQmKEWXf4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/2306f6-6cc0-4982-a523-16842bdad925/1/1GbRcMgQujTELpIOhNQmKEWXf4U.mft
Manifest number: 0621
Signing time: Tue 04 Nov 2025 20:00:26 +0000
Manifest this update: Tue 04 Nov 2025 20:00:26 +0000
Manifest next update: Wed 05 Nov 2025 20:00:26 +0000
Files and hashes: 1: 1GbRcMgQujTELpIOhNQmKEWXf4U.crl (hash: njBWWCSJYvnGXeRgS4XTWfVQEDTpHpkyVv7K627PzLs=)
2: r0qME3D6vnHPgW7FfIJR7qyiR6U.roa (hash: +N7ZuBvhriEjaq14DPYwTSmD1pr2ezeFoDJODymMVSw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/2306f6-6cc0-4982-a523-16842bdad925/1/1GbRcMgQujTELpIOhNQmKEWXf4U.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/2306f6-6cc0-4982-a523-16842bdad925/1/1GbRcMgQujTELpIOhNQmKEWXf4U.mft
rsync://rpki.ripe.net/repository/DEFAULT/1GbRcMgQujTELpIOhNQmKEWXf4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:74:d8:73:fc:c8:bf:19:75:31:ca:a6:34:bf:df:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d466d170c810ba34c42e920e84d4262845977f85
Validity
Not Before: Nov 4 20:00:26 2025 GMT
Not After : Nov 5 20:00:26 2025 GMT
Subject: CN=39de7b5eb3bc8e0020d9b1d87ff074ee1a5e8054
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:13:0d:63:5d:a3:91:39:a5:a7:d7:db:53:33:
be:2e:b0:9e:5f:87:84:92:6c:9c:59:c0:64:4f:28:
89:ed:be:2d:1b:2b:52:5e:97:98:03:d3:0f:5c:92:
63:e4:15:aa:22:6b:e8:7b:42:e1:bd:8b:00:ac:d1:
ef:0b:77:19:4d:5e:f3:27:06:e0:8d:6a:ae:e3:9a:
81:ca:72:b8:a4:04:8a:ac:36:ae:b7:59:da:e8:98:
8d:eb:62:57:46:ba:fd:cc:77:1d:d9:4b:a0:1b:99:
38:c7:80:c1:a0:e2:d2:97:cc:b8:55:b9:3f:86:9e:
bd:71:cd:43:5a:34:bf:ab:43:63:c6:13:84:51:65:
94:60:e1:60:f1:14:bf:f8:33:76:b0:cc:18:da:38:
0f:ca:15:9c:df:91:57:d8:17:6c:fc:b2:4b:a4:7c:
d1:ff:f6:42:c9:d7:71:e1:f2:7c:04:94:cc:7c:00:
39:2f:42:75:33:a9:ca:1e:d0:84:15:c1:fd:fb:1c:
77:0f:1c:3f:1d:50:fc:b8:5a:3e:f8:2a:fe:3a:51:
bf:9d:fd:19:ce:83:11:e2:a1:99:c4:79:24:80:e9:
2c:26:2b:5c:0e:ea:05:ff:ad:84:0b:b2:e5:fa:c7:
c4:a7:42:02:80:c2:a6:4a:29:8e:35:be:57:16:04:
a5:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:DE:7B:5E:B3:BC:8E:00:20:D9:B1:D8:7F:F0:74:EE:1A:5E:80:54
X509v3 Authority Key Identifier:
keyid:D4:66:D1:70:C8:10:BA:34:C4:2E:92:0E:84:D4:26:28:45:97:7F:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1GbRcMgQujTELpIOhNQmKEWXf4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/2306f6-6cc0-4982-a523-16842bdad925/1/1GbRcMgQujTELpIOhNQmKEWXf4U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/2306f6-6cc0-4982-a523-16842bdad925/1/1GbRcMgQujTELpIOhNQmKEWXf4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:a7:28:ba:2f:7f:a8:cc:41:bd:58:5c:fc:63:8c:fc:ae:98:
25:f1:89:7d:20:6c:1e:ad:2a:f6:72:17:49:32:ee:64:7b:f8:
1f:55:e4:84:41:54:df:3c:38:8f:37:08:b0:f6:15:f2:0a:be:
dc:9b:e5:bd:ce:9b:3a:6c:9c:9b:b0:f1:95:d7:8c:58:ba:0b:
78:79:2a:fe:18:df:41:f9:d2:48:2a:56:6b:fc:e4:92:d6:25:
4f:44:cf:7c:6b:32:5c:ad:0c:21:5b:5c:11:55:03:3c:c6:dc:
60:c5:c8:4c:ae:89:c7:59:3a:6b:e0:c8:2e:32:0f:b5:26:8f:
75:d8:8d:68:eb:ea:02:f2:c1:40:58:f7:c5:f1:00:d8:37:c7:
78:f4:a9:9b:c4:33:b5:d5:17:ca:a0:3a:00:4b:e0:be:57:0f:
fa:aa:20:c3:ae:78:4d:ef:4a:b1:1d:0b:ea:2b:b2:9b:30:9a:
30:84:49:00:30:c0:2f:81:3c:15:13:17:c7:87:b5:24:82:19:
cb:a7:da:65:8f:c6:34:4b:d6:10:e0:33:11:6a:3e:8b:2e:15:
77:52:16:9e:ac:1e:b5:75:f9:78:b3:8f:9b:c9:e5:3c:1c:a2:
7b:3a:5d:04:36:38:11:f7:1e:36:dc:95:30:a6:c2:cd:56:49:
34:12:9e:c5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpQdNhz/Mi/GXUxyqY0v9+nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0NjZkMTcwYzgxMGJhMzRjNDJlOTIwZTg0ZDQyNjI4NDU5
NzdmODUwHhcNMjUxMTA0MjAwMDI2WhcNMjUxMTA1MjAwMDI2WjAzMTEwLwYDVQQD
EygzOWRlN2I1ZWIzYmM4ZTAwMjBkOWIxZDg3ZmYwNzRlZTFhNWU4MDU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmxMNY12jkTmlp9fbUzO+LrCeX4eE
kmycWcBkTyiJ7b4tGytSXpeYA9MPXJJj5BWqImvoe0LhvYsArNHvC3cZTV7zJwbg
jWqu45qBynK4pASKrDaut1na6JiN62JXRrr9zHcd2UugG5k4x4DBoOLSl8y4Vbk/
hp69cc1DWjS/q0NjxhOEUWWUYOFg8RS/+DN2sMwY2jgPyhWc35FX2Bds/LJLpHzR
//ZCyddx4fJ8BJTMfAA5L0J1M6nKHtCEFcH9+xx3Dxw/HVD8uFo++Cr+OlG/nf0Z
zoMR4qGZxHkkgOksJitcDuoF/62EC7Ll+sfEp0ICgMKmSimONb5XFgSlXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDnee16zvI4AINmx2H/wdO4aXoBUMB8GA1UdIwQY
MBaAFNRm0XDIELo0xC6SDoTUJihFl3+FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUdiUmNNZ1F1alRFTHBJT2hOUW1LRVdYZjRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy8yMzA2ZjYtNmNjMC00OTgyLWE1MjMt
MTY4NDJiZGFkOTI1LzEvMUdiUmNNZ1F1alRFTHBJT2hOUW1LRVdYZjRVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy8yMzA2ZjYtNmNjMC00OTgyLWE1MjMtMTY4NDJiZGFkOTI1
LzEvMUdiUmNNZ1F1alRFTHBJT2hOUW1LRVdYZjRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgacoui9/
qMxBvVhc/GOM/K6YJfGJfSBsHq0q9nIXSTLuZHv4H1XkhEFU3zw4jzcIsPYV8gq+
3Jvlvc6bOmycm7DxldeMWLoLeHkq/hjfQfnSSCpWa/zkktYlT0TPfGsyXK0MIVtc
EVUDPMbcYMXITK6Jx1k6a+DILjIPtSaPddiNaOvqAvLBQFj3xfEA2DfHePSpm8Qz
tdUXyqA6AEvgvlcP+qogw654Te9KsR0L6iuymzCaMIRJADDAL4E8FRMXx4e1JIIZ
y6faZY/GNEvWEOAzEWo+iy4Vd1IWnqwetXX5eLOPm8nlPByiezpdBDY4EfceNtyV
MKbCzVZJNBKexQ==
-----END CERTIFICATE-----
Generated at Wed Nov 5 00:23:37 2025 by rpki-client