Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/861f32-81f4-4d64-8610-54de7a6cb3b1/1/g_gpRGn7euwmAbsDdy0BVvRwt00.mft
File: g_gpRGn7euwmAbsDdy0BVvRwt00.mft (raw, json)
Hash identifier: VvIqHm02YeGE03hO780Hgsm29aMJABE+hU70PI9jmrI=
Subject key identifier: 24:77:E9:2B:2B:FE:86:26:24:EE:85:4B:6B:2D:BC:63:85:EF:5E:04
Authority key identifier: 83:F8:29:44:69:FB:7A:EC:26:01:BB:03:77:2D:01:56:F4:70:B7:4D
Certificate issuer: /CN=83f8294469fb7aec2601bb03772d0156f470b74d
Certificate serial: 019A4D3CF4F26C265CC7C1CFBF375815EEF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g_gpRGn7euwmAbsDdy0BVvRwt00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/861f32-81f4-4d64-8610-54de7a6cb3b1/1/g_gpRGn7euwmAbsDdy0BVvRwt00.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 05:00:31 +0000
Manifest this update: Tue 04 Nov 2025 05:00:31 +0000
Manifest next update: Wed 05 Nov 2025 05:00:31 +0000
Files and hashes: 1: atkABp03ezo3IQf9p_BdcUMTGKY.roa (hash: XIGewf/YhXuM1/3dqCaqTKBoy+0/E1uQhatEfe1jkfI=)
2: g_gpRGn7euwmAbsDdy0BVvRwt00.crl (hash: zPVejG5yZOPBJtjsrL1UfZxcfCmSOgQL5AS44q3gjok=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/861f32-81f4-4d64-8610-54de7a6cb3b1/1/g_gpRGn7euwmAbsDdy0BVvRwt00.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/861f32-81f4-4d64-8610-54de7a6cb3b1/1/g_gpRGn7euwmAbsDdy0BVvRwt00.mft
rsync://rpki.ripe.net/repository/DEFAULT/g_gpRGn7euwmAbsDdy0BVvRwt00.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3c:f4:f2:6c:26:5c:c7:c1:cf:bf:37:58:15:ee:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83f8294469fb7aec2601bb03772d0156f470b74d
Validity
Not Before: Nov 4 05:00:31 2025 GMT
Not After : Nov 5 05:00:31 2025 GMT
Subject: CN=2477e92b2bfe862624ee854b6b2dbc6385ef5e04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e0:86:55:82:5c:ab:bc:e6:fe:67:8e:04:62:
e2:01:01:80:c0:df:ee:8b:a1:38:18:ba:32:fb:16:
5f:c7:99:6e:46:e0:7e:84:d8:b1:2a:51:b3:aa:e1:
1d:5c:95:85:66:6c:2b:ed:6f:d9:83:81:a0:c3:ae:
52:72:68:cc:4d:dc:d2:e0:7e:49:36:8a:a3:b0:38:
a4:65:a6:c2:61:21:88:ae:58:d5:81:f4:af:0f:65:
ae:17:64:8f:7a:d1:d6:2f:ab:18:39:f3:d7:40:83:
bf:cc:96:04:c0:8a:00:33:a4:93:b7:83:20:f6:96:
12:85:cd:b7:d3:90:e5:7b:a6:4b:8b:29:47:cc:21:
93:4a:31:b2:dd:40:e3:2a:97:d8:c5:d5:c1:d9:8d:
6a:4f:2d:8e:a1:cc:70:bd:c7:a4:d7:b3:75:b8:8f:
ef:50:ba:cf:00:53:32:85:43:c8:c5:17:b5:8b:5b:
db:ba:8e:89:cb:b7:f2:e4:39:2e:95:1a:40:2f:63:
e5:4e:a2:0e:f6:44:36:af:78:3e:31:8e:31:32:5c:
b5:00:2b:87:23:86:25:6e:b6:e5:a6:c9:a3:05:a1:
db:c9:a9:a4:03:3d:34:b5:77:9d:c6:f4:f1:e8:e1:
a9:fd:9f:ad:50:94:0a:20:02:a5:bc:92:0a:9c:4e:
c1:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:77:E9:2B:2B:FE:86:26:24:EE:85:4B:6B:2D:BC:63:85:EF:5E:04
X509v3 Authority Key Identifier:
keyid:83:F8:29:44:69:FB:7A:EC:26:01:BB:03:77:2D:01:56:F4:70:B7:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g_gpRGn7euwmAbsDdy0BVvRwt00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/861f32-81f4-4d64-8610-54de7a6cb3b1/1/g_gpRGn7euwmAbsDdy0BVvRwt00.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/861f32-81f4-4d64-8610-54de7a6cb3b1/1/g_gpRGn7euwmAbsDdy0BVvRwt00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:0d:91:ad:2d:51:44:df:7d:66:2b:17:43:eb:b4:24:7a:43:
7f:47:ae:0d:5a:aa:42:28:9a:99:99:db:de:16:bd:4b:96:78:
e8:7c:36:b5:2c:b9:25:4d:89:0a:28:ce:d8:04:33:6c:11:38:
e5:40:85:2b:97:dc:ab:6e:4e:63:5b:84:49:fa:79:ff:83:3f:
d6:f8:d7:6b:a7:12:ff:3c:7f:b1:68:42:f2:d7:0b:5e:20:47:
ad:f5:30:2a:db:3b:4d:d6:03:86:d7:de:96:2d:74:51:c1:de:
b0:2b:e4:f2:85:cc:e8:e3:7f:20:4a:b4:89:d3:fe:e7:ac:a0:
9b:ba:aa:69:dd:95:ba:08:40:04:7b:ed:e0:ac:cc:92:0a:0a:
01:92:29:77:99:a4:da:e4:b9:df:43:72:af:8d:5e:53:10:ac:
fc:ac:5a:bd:f5:69:66:1e:da:4a:e6:8e:76:e3:49:3d:5a:32:
f5:a4:ac:d7:17:b9:6f:49:64:66:5e:ca:22:c9:e2:6b:06:24:
de:eb:a7:36:ee:d4:b0:9d:d3:bf:aa:38:99:8b:c8:aa:cf:6a:
d8:20:21:3e:1f:b3:a9:39:61:35:1f:32:c9:7a:73:8f:a1:f3:
9d:bc:3a:28:30:34:87:56:01:14:65:1a:86:d3:38:16:da:b6:
10:ad:36:ca
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNPPTybCZcx8HPvzdYFe72MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzZjgyOTQ0NjlmYjdhZWMyNjAxYmIwMzc3MmQwMTU2ZjQ3
MGI3NGQwHhcNMjUxMTA0MDUwMDMxWhcNMjUxMTA1MDUwMDMxWjAzMTEwLwYDVQQD
EygyNDc3ZTkyYjJiZmU4NjI2MjRlZTg1NGI2YjJkYmM2Mzg1ZWY1ZTA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtuCGVYJcq7zm/meOBGLiAQGAwN/u
i6E4GLoy+xZfx5luRuB+hNixKlGzquEdXJWFZmwr7W/Zg4Ggw65ScmjMTdzS4H5J
NoqjsDikZabCYSGIrljVgfSvD2WuF2SPetHWL6sYOfPXQIO/zJYEwIoAM6STt4Mg
9pYShc2305Dle6ZLiylHzCGTSjGy3UDjKpfYxdXB2Y1qTy2Oocxwvcek17N1uI/v
ULrPAFMyhUPIxRe1i1vbuo6Jy7fy5DkulRpAL2PlTqIO9kQ2r3g+MY4xMly1ACuH
I4YlbrblpsmjBaHbyamkAz00tXedxvTx6OGp/Z+tUJQKIAKlvJIKnE7BXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCR36Ssr/oYmJO6FS2stvGOF714EMB8GA1UdIwQY
MBaAFIP4KURp+3rsJgG7A3ctAVb0cLdNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ19ncFJHbjdldXdtQWJzRGR5MEJWdlJ3dDAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My84NjFmMzItODFmNC00ZDY0LTg2MTAt
NTRkZTdhNmNiM2IxLzEvZ19ncFJHbjdldXdtQWJzRGR5MEJWdlJ3dDAwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My84NjFmMzItODFmNC00ZDY0LTg2MTAtNTRkZTdhNmNiM2Ix
LzEvZ19ncFJHbjdldXdtQWJzRGR5MEJWdlJ3dDAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABQ2RrS1R
RN99ZisXQ+u0JHpDf0euDVqqQiiamZnb3ha9S5Z46Hw2tSy5JU2JCijO2AQzbBE4
5UCFK5fcq25OY1uESfp5/4M/1vjXa6cS/zx/sWhC8tcLXiBHrfUwKts7TdYDhtfe
li10UcHesCvk8oXM6ON/IEq0idP+56ygm7qqad2VughABHvt4KzMkgoKAZIpd5mk
2uS530Nyr41eUxCs/KxavfVpZh7aSuaOduNJPVoy9aSs1xe5b0lkZl7KIsniawYk
3uunNu7UsJ3Tv6o4mYvIqs9q2CAhPh+zqTlhNR8yyXpzj6Hznbw6KDA0h1YBFGUa
htM4Ftq2EK02yg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 15:01:54 2025 by rpki-client