Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/de64f7-39d9-4bbd-b023-bedcbc5a0174/1/gNHAtO8JDETXi3zLC_cvCdCDHzQ.mft
File: gNHAtO8JDETXi3zLC_cvCdCDHzQ.mft (raw, json)
Hash identifier: d8WQwtQy0vkrytbRZa2i5Y7HCv0xW36uRkpA8gtvJ0Q=
Subject key identifier: 65:03:B6:55:9D:61:24:98:2D:AD:7A:5B:5F:80:29:AA:73:D8:6A:2B
Authority key identifier: 80:D1:C0:B4:EF:09:0C:44:D7:8B:7C:CB:0B:F7:2F:09:D0:83:1F:34
Certificate issuer: /CN=80d1c0b4ef090c44d78b7ccb0bf72f09d0831f34
Certificate serial: 019A503E6AA08506E214B12A5F51AE6DCBA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gNHAtO8JDETXi3zLC_cvCdCDHzQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/de64f7-39d9-4bbd-b023-bedcbc5a0174/1/gNHAtO8JDETXi3zLC_cvCdCDHzQ.mft
Manifest number: 0C72
Signing time: Tue 04 Nov 2025 19:00:59 +0000
Manifest this update: Tue 04 Nov 2025 19:00:59 +0000
Manifest next update: Wed 05 Nov 2025 19:00:59 +0000
Files and hashes: 1: gNHAtO8JDETXi3zLC_cvCdCDHzQ.crl (hash: WRgnmfSs/qVv/VzHrf3DzBKHhqCKXR0VYnLu8IybJi4=)
2: gi0_EyMqvU0B6RLloJeCvIjrKZc.roa (hash: SmxwMosUzjILazIuYN/g07frRTjtu/khfxltbXPY3+0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/de64f7-39d9-4bbd-b023-bedcbc5a0174/1/gNHAtO8JDETXi3zLC_cvCdCDHzQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/de64f7-39d9-4bbd-b023-bedcbc5a0174/1/gNHAtO8JDETXi3zLC_cvCdCDHzQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/gNHAtO8JDETXi3zLC_cvCdCDHzQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3e:6a:a0:85:06:e2:14:b1:2a:5f:51:ae:6d:cb:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80d1c0b4ef090c44d78b7ccb0bf72f09d0831f34
Validity
Not Before: Nov 4 19:00:59 2025 GMT
Not After : Nov 5 19:00:59 2025 GMT
Subject: CN=6503b6559d6124982dad7a5b5f8029aa73d86a2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c7:5b:71:56:01:bd:45:32:ab:0f:49:d3:cf:
e6:f0:ec:69:bf:46:b1:e3:b1:f4:82:48:61:2c:4f:
54:60:2f:6b:64:c7:ed:d5:37:1b:29:dd:eb:1c:af:
5a:0e:aa:fc:8e:0f:4b:a7:bc:c1:ee:72:1e:09:4c:
3f:61:6a:ba:40:5b:52:b8:77:1e:fd:06:74:6b:cb:
24:e5:de:17:59:42:58:7e:3a:62:f5:fe:fe:f9:7e:
92:e8:d1:18:e6:aa:6d:c4:af:9d:36:4f:29:bc:bd:
7d:4b:39:58:bf:95:1c:f2:42:fa:a2:77:2b:83:f6:
83:c6:2d:72:dd:53:32:28:0c:b5:95:63:0e:d7:7b:
a6:b4:65:62:b2:c6:6d:1e:63:d4:ef:3a:77:b4:1e:
8b:aa:55:66:80:64:ba:74:c4:1e:fc:75:38:61:a6:
ce:0a:c4:83:99:69:19:8b:00:75:c5:39:ce:09:76:
f9:b2:a7:45:58:e6:5b:3d:85:b0:6a:f2:79:da:a8:
95:d1:a5:fd:05:da:ca:aa:cb:c0:98:1c:eb:06:f0:
07:a6:cc:15:36:91:51:03:c7:f9:18:84:80:53:f2:
5c:0f:81:c8:7d:cc:ac:33:8f:4d:8f:7e:86:c8:b6:
ae:98:39:48:b8:38:f2:69:e4:08:7f:c6:fd:b3:ed:
63:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:03:B6:55:9D:61:24:98:2D:AD:7A:5B:5F:80:29:AA:73:D8:6A:2B
X509v3 Authority Key Identifier:
keyid:80:D1:C0:B4:EF:09:0C:44:D7:8B:7C:CB:0B:F7:2F:09:D0:83:1F:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gNHAtO8JDETXi3zLC_cvCdCDHzQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/de64f7-39d9-4bbd-b023-bedcbc5a0174/1/gNHAtO8JDETXi3zLC_cvCdCDHzQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/de64f7-39d9-4bbd-b023-bedcbc5a0174/1/gNHAtO8JDETXi3zLC_cvCdCDHzQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:bd:c7:58:5f:d8:ae:02:df:0d:03:dd:7b:b7:a3:74:c3:ed:
93:84:b7:58:06:4a:f4:cf:1f:70:4b:d1:ef:ae:61:ef:74:ee:
26:e5:b0:6c:b8:22:80:32:4a:49:1d:69:b5:3b:90:f3:f3:dd:
d4:52:c9:d4:8b:17:f1:7f:7d:99:93:0a:5b:25:34:c6:63:0e:
f6:73:fd:3a:a4:cf:7b:aa:c2:5a:fd:cf:ed:b3:19:cd:82:ed:
7a:ca:40:a2:95:fd:0a:07:20:9c:dc:80:2a:cb:d6:95:d4:0a:
58:26:11:58:88:20:55:06:9b:0e:04:79:f7:20:0a:ec:d2:ca:
07:df:4b:d0:0e:7d:81:a3:53:26:dc:12:3c:ec:fc:6c:cd:d2:
f9:ef:49:70:f0:64:3f:4e:96:bc:cd:7f:21:71:df:8c:4d:29:
c9:26:6d:1b:b7:0f:7d:5c:e2:38:ce:45:cc:9e:67:fd:2e:16:
0a:88:67:7f:f8:12:ac:29:ab:70:b4:26:eb:6a:40:53:39:28:
38:ad:9e:1e:44:7f:d9:0d:95:4f:e5:af:cc:f9:2f:32:bd:e7:
fa:fc:18:d6:8c:e3:6f:3e:16:1d:44:69:1d:97:cf:cc:b5:1a:
c0:ae:f3:01:0d:e3:c0:47:db:93:03:0c:03:36:42:54:8c:53:
57:23:50:e6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpQPmqghQbiFLEqX1GubculMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgwZDFjMGI0ZWYwOTBjNDRkNzhiN2NjYjBiZjcyZjA5ZDA4
MzFmMzQwHhcNMjUxMTA0MTkwMDU5WhcNMjUxMTA1MTkwMDU5WjAzMTEwLwYDVQQD
Eyg2NTAzYjY1NTlkNjEyNDk4MmRhZDdhNWI1ZjgwMjlhYTczZDg2YTJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApMdbcVYBvUUyqw9J08/m8Oxpv0ax
47H0gkhhLE9UYC9rZMft1TcbKd3rHK9aDqr8jg9Lp7zB7nIeCUw/YWq6QFtSuHce
/QZ0a8sk5d4XWUJYfjpi9f7++X6S6NEY5qptxK+dNk8pvL19SzlYv5Uc8kL6oncr
g/aDxi1y3VMyKAy1lWMO13umtGVissZtHmPU7zp3tB6LqlVmgGS6dMQe/HU4YabO
CsSDmWkZiwB1xTnOCXb5sqdFWOZbPYWwavJ52qiV0aX9BdrKqsvAmBzrBvAHpswV
NpFRA8f5GISAU/JcD4HIfcysM49Nj36GyLaumDlIuDjyaeQIf8b9s+1jUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGUDtlWdYSSYLa16W1+AKapz2GorMB8GA1UdIwQY
MBaAFIDRwLTvCQxE14t8ywv3LwnQgx80MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ05IQXRPOEpERVRYaTN6TENfY3ZDZENESHpRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9kZTY0ZjctMzlkOS00YmJkLWIwMjMt
YmVkY2JjNWEwMTc0LzEvZ05IQXRPOEpERVRYaTN6TENfY3ZDZENESHpRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC9kZTY0ZjctMzlkOS00YmJkLWIwMjMtYmVkY2JjNWEwMTc0
LzEvZ05IQXRPOEpERVRYaTN6TENfY3ZDZENESHpRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjL3HWF/Y
rgLfDQPde7ejdMPtk4S3WAZK9M8fcEvR765h73TuJuWwbLgigDJKSR1ptTuQ8/Pd
1FLJ1IsX8X99mZMKWyU0xmMO9nP9OqTPe6rCWv3P7bMZzYLtespAopX9CgcgnNyA
KsvWldQKWCYRWIggVQabDgR59yAK7NLKB99L0A59gaNTJtwSPOz8bM3S+e9JcPBk
P06WvM1/IXHfjE0pySZtG7cPfVziOM5FzJ5n/S4WCohnf/gSrCmrcLQm62pAUzko
OK2eHkR/2Q2VT+WvzPkvMr3n+vwY1ozjbz4WHURpHZfPzLUawK7zAQ3jwEfbkwMM
AzZCVIxTVyNQ5g==
-----END CERTIFICATE-----
Generated at Wed Nov 5 02:04:25 2025 by rpki-client