Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/9db4d3-f78d-4430-87c0-6cbd581d317c/1/gbt4vkHkgzeZfI_pHY4vJPe0nq8.mft
File: gbt4vkHkgzeZfI_pHY4vJPe0nq8.mft (raw, json)
Hash identifier: 0T6g+aB+zbrcMC8LXj1qWsgGRJhr67c/IeZEMd/yVHo=
Subject key identifier: 4F:69:1F:48:F6:8B:A6:1E:83:7F:78:66:CC:4F:F1:A0:36:7E:C4:B1
Authority key identifier: 81:BB:78:BE:41:E4:83:37:99:7C:8F:E9:1D:8E:2F:24:F7:B4:9E:AF
Certificate issuer: /CN=81bb78be41e48337997c8fe91d8e2f24f7b49eaf
Certificate serial: 019A4E1904D65216352E60581DD77CBCCFC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gbt4vkHkgzeZfI_pHY4vJPe0nq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/9db4d3-f78d-4430-87c0-6cbd581d317c/1/gbt4vkHkgzeZfI_pHY4vJPe0nq8.mft
Manifest number: 1711
Signing time: Tue 04 Nov 2025 09:00:53 +0000
Manifest this update: Tue 04 Nov 2025 09:00:53 +0000
Manifest next update: Wed 05 Nov 2025 09:00:53 +0000
Files and hashes: 1: FG-bEioa4civ6jvoSnaUtHZPEQE.roa (hash: w4e7tpxeaBQHMoRYqhi0o1qJLopKx8fwD7s6iGDvqgY=)
2: aGlvUdVJOWbqaat4vglrkQH1tNo.roa (hash: svvIGknsbQhU6YBIsZkBO7bjTdjQ0GNK1yuIVKiea6E=)
3: eZ8arxnGDWk7xkVHJ1bRXWZ355M.roa (hash: AeIoI4f85DUeWbFvZ4SxFOX1IxHcOJjIFceKESNKiJo=)
4: gbt4vkHkgzeZfI_pHY4vJPe0nq8.crl (hash: ELQl4vQ4mBkDp2dBA8ESc1PMKxgn5Oc7wUbCTuwqi80=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/9db4d3-f78d-4430-87c0-6cbd581d317c/1/gbt4vkHkgzeZfI_pHY4vJPe0nq8.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/9db4d3-f78d-4430-87c0-6cbd581d317c/1/gbt4vkHkgzeZfI_pHY4vJPe0nq8.mft
rsync://rpki.ripe.net/repository/DEFAULT/gbt4vkHkgzeZfI_pHY4vJPe0nq8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:19:04:d6:52:16:35:2e:60:58:1d:d7:7c:bc:cf:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81bb78be41e48337997c8fe91d8e2f24f7b49eaf
Validity
Not Before: Nov 4 09:00:53 2025 GMT
Not After : Nov 5 09:00:53 2025 GMT
Subject: CN=4f691f48f68ba61e837f7866cc4ff1a0367ec4b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:3d:8f:d2:f2:47:78:b8:2f:d0:22:5d:82:9d:
d9:18:3e:62:7b:aa:ef:df:56:ee:97:3b:30:2e:00:
24:f0:67:30:c0:44:c7:9e:81:74:ec:0f:6f:9f:c5:
91:78:9e:6f:b9:6a:a8:1a:9a:7d:0d:0b:91:c0:05:
5b:37:d8:ca:1c:55:f8:7c:e9:76:cb:b9:0c:26:41:
d1:c7:dd:15:83:82:b6:fb:fa:81:4d:bf:32:40:a4:
55:e2:08:d0:b0:af:b4:6a:51:0e:10:17:95:71:f7:
c8:b2:58:d4:0f:bf:78:91:f5:b0:5e:ef:15:bd:78:
f3:91:5e:25:99:68:a1:06:f2:9f:31:ec:1b:da:04:
2c:c4:6d:2d:12:f4:8a:a3:06:13:6b:a9:83:e2:6f:
a2:f7:0d:c1:8c:4e:e8:76:0f:83:79:29:05:bf:d3:
db:f0:01:38:5c:58:19:0a:4a:4c:f5:a4:e7:c0:6f:
cd:95:67:e1:11:06:54:38:79:7a:35:35:2b:2a:e1:
66:cd:4c:51:06:c3:ab:37:06:28:80:cf:4d:9e:4b:
06:f3:bb:ab:a0:65:44:22:5d:b9:fa:bb:b9:67:a2:
65:53:3e:90:11:d6:76:e8:98:cb:13:d7:e0:dc:68:
60:31:c6:07:3e:ba:3b:ea:9d:52:16:29:03:4e:45:
f5:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:69:1F:48:F6:8B:A6:1E:83:7F:78:66:CC:4F:F1:A0:36:7E:C4:B1
X509v3 Authority Key Identifier:
keyid:81:BB:78:BE:41:E4:83:37:99:7C:8F:E9:1D:8E:2F:24:F7:B4:9E:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gbt4vkHkgzeZfI_pHY4vJPe0nq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/9db4d3-f78d-4430-87c0-6cbd581d317c/1/gbt4vkHkgzeZfI_pHY4vJPe0nq8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/9db4d3-f78d-4430-87c0-6cbd581d317c/1/gbt4vkHkgzeZfI_pHY4vJPe0nq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:0f:7d:25:05:8c:ce:81:b4:40:f5:ea:65:c0:1c:07:5b:50:
35:68:46:98:ca:1e:86:2b:68:7e:68:51:49:4c:69:f8:84:f6:
78:8c:61:b5:89:a3:6c:52:fc:6c:8a:50:0c:a5:42:3d:d9:f4:
a1:65:27:9e:ef:57:ce:86:c2:06:31:33:c6:8c:66:fd:8a:40:
82:e7:da:dc:2d:83:6d:43:21:42:a4:1b:ac:3b:b8:34:5b:f3:
aa:0e:14:5d:f4:e5:4d:79:32:c3:bc:ad:a5:eb:d1:49:d6:e5:
a2:03:34:5e:d3:63:5f:0d:6a:bf:d0:d4:13:ff:86:97:32:1a:
ed:55:6d:00:84:c6:69:d5:60:3b:7e:fe:0b:d4:f8:fa:ae:12:
f4:e2:a6:c5:30:0e:af:bf:d7:0d:4c:04:d2:38:8f:71:46:9d:
a8:77:55:d6:2b:01:91:f9:01:5e:20:30:79:73:d7:de:13:73:
33:60:80:a3:fa:54:62:e1:46:b6:08:16:79:b2:36:6c:5f:2f:
56:83:30:5a:ec:8d:d3:c2:64:3e:5d:79:7a:42:7d:49:0c:4f:
0f:0e:cd:29:0e:b2:76:c9:00:d3:73:c0:75:72:5c:6f:ef:86:
67:88:84:46:29:a4:ee:a1:86:3f:c0:4b:4d:ab:af:f9:61:fe:
8b:09:b5:54
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOGQTWUhY1LmBYHdd8vM/EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxYmI3OGJlNDFlNDgzMzc5OTdjOGZlOTFkOGUyZjI0Zjdi
NDllYWYwHhcNMjUxMTA0MDkwMDUzWhcNMjUxMTA1MDkwMDUzWjAzMTEwLwYDVQQD
Eyg0ZjY5MWY0OGY2OGJhNjFlODM3Zjc4NjZjYzRmZjFhMDM2N2VjNGIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqT2P0vJHeLgv0CJdgp3ZGD5ie6rv
31bulzswLgAk8GcwwETHnoF07A9vn8WReJ5vuWqoGpp9DQuRwAVbN9jKHFX4fOl2
y7kMJkHRx90Vg4K2+/qBTb8yQKRV4gjQsK+0alEOEBeVcffIsljUD794kfWwXu8V
vXjzkV4lmWihBvKfMewb2gQsxG0tEvSKowYTa6mD4m+i9w3BjE7odg+DeSkFv9Pb
8AE4XFgZCkpM9aTnwG/NlWfhEQZUOHl6NTUrKuFmzUxRBsOrNwYogM9NnksG87ur
oGVEIl25+ru5Z6JlUz6QEdZ26JjLE9fg3GhgMcYHPro76p1SFikDTkX1jwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE9pH0j2i6Yeg394ZsxP8aA2fsSxMB8GA1UdIwQY
MBaAFIG7eL5B5IM3mXyP6R2OLyT3tJ6vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ2J0NHZrSGtnemVaZklfcEhZNHZKUGUwbnE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC85ZGI0ZDMtZjc4ZC00NDMwLTg3YzAt
NmNiZDU4MWQzMTdjLzEvZ2J0NHZrSGtnemVaZklfcEhZNHZKUGUwbnE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC85ZGI0ZDMtZjc4ZC00NDMwLTg3YzAtNmNiZDU4MWQzMTdj
LzEvZ2J0NHZrSGtnemVaZklfcEhZNHZKUGUwbnE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgQ99JQWM
zoG0QPXqZcAcB1tQNWhGmMoehitofmhRSUxp+IT2eIxhtYmjbFL8bIpQDKVCPdn0
oWUnnu9XzobCBjEzxoxm/YpAgufa3C2DbUMhQqQbrDu4NFvzqg4UXfTlTXkyw7yt
pevRSdblogM0XtNjXw1qv9DUE/+GlzIa7VVtAITGadVgO37+C9T4+q4S9OKmxTAO
r7/XDUwE0jiPcUadqHdV1isBkfkBXiAweXPX3hNzM2CAo/pUYuFGtggWebI2bF8v
VoMwWuyN08JkPl15ekJ9SQxPDw7NKQ6ydskA03PAdXJcb++GZ4iERimk7qGGP8BL
Tauv+WH+iwm1VA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 18:35:57 2025 by rpki-client