Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/3d6107-5bce-4780-ae10-22d371d6cdee/1/G2uUO5o9_2loAVFr6EcbxFiFZug.mft
File: G2uUO5o9_2loAVFr6EcbxFiFZug.mft (raw, json)
Hash identifier: 0EJ6nL17iOT2WaDc0DT84cspg1oMzdinscxd5hbzsQI=
Subject key identifier: D4:8E:A0:90:F1:7D:0E:0B:CD:7A:65:B7:FE:44:70:1E:3C:2A:DE:03
Authority key identifier: 1B:6B:94:3B:9A:3D:FF:69:68:01:51:6B:E8:47:1B:C4:58:85:66:E8
Certificate issuer: /CN=1b6b943b9a3dff696801516be8471bc4588566e8
Certificate serial: 019A5187A8CE8FB8F4A61FF9CD5986F18549
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G2uUO5o9_2loAVFr6EcbxFiFZug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/3d6107-5bce-4780-ae10-22d371d6cdee/1/G2uUO5o9_2loAVFr6EcbxFiFZug.mft
Manifest number: 13B3
Signing time: Wed 05 Nov 2025 01:00:36 +0000
Manifest this update: Wed 05 Nov 2025 01:00:36 +0000
Manifest next update: Thu 06 Nov 2025 01:00:36 +0000
Files and hashes: 1: 1ISrUMvXtY8idtkbmSmcNCBmXOs.roa (hash: JdzcjRC1qPASLJAyKXCJZ2jvTuTxM21yeidKZ9A5IsQ=)
2: G2uUO5o9_2loAVFr6EcbxFiFZug.crl (hash: KvR5EVVaje/BbtmuEz/uTAX4N8rg8xQN+GT2MmduTII=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/3d6107-5bce-4780-ae10-22d371d6cdee/1/G2uUO5o9_2loAVFr6EcbxFiFZug.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/3d6107-5bce-4780-ae10-22d371d6cdee/1/G2uUO5o9_2loAVFr6EcbxFiFZug.mft
rsync://rpki.ripe.net/repository/DEFAULT/G2uUO5o9_2loAVFr6EcbxFiFZug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 01:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:87:a8:ce:8f:b8:f4:a6:1f:f9:cd:59:86:f1:85:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b6b943b9a3dff696801516be8471bc4588566e8
Validity
Not Before: Nov 5 01:00:36 2025 GMT
Not After : Nov 6 01:00:36 2025 GMT
Subject: CN=d48ea090f17d0e0bcd7a65b7fe44701e3c2ade03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:6a:a6:0c:64:ac:a6:32:3f:0f:4c:4a:59:0a:
7c:9a:c4:49:59:d1:60:ee:6e:10:41:fe:17:dc:4e:
22:37:8e:41:85:18:e8:8c:41:81:10:34:64:0f:8d:
70:65:f5:81:d5:cf:4b:32:47:e2:fc:38:ea:0d:fd:
ca:dc:59:0d:25:a5:20:21:bb:15:97:9d:36:d6:24:
55:53:88:6d:04:f8:34:75:12:2d:0c:af:f9:38:60:
17:cf:5c:0b:1a:67:d5:e5:3f:1d:77:73:09:ce:4f:
16:6b:61:e6:90:7d:b4:51:de:2b:92:2e:28:0b:f2:
fb:e9:f1:6e:53:3d:36:d8:42:3c:e8:3a:9d:f9:a3:
1b:92:b5:7f:f4:12:a4:d6:3b:99:82:9a:af:43:ec:
d7:76:b6:1a:c8:74:77:a9:97:9b:3c:8c:4d:67:ec:
41:19:1e:97:22:c5:bb:ff:84:b4:6b:4f:00:6d:38:
9c:a1:8a:ff:15:e7:e2:e5:ed:ae:8c:71:c6:f1:d3:
fe:31:58:37:c7:41:30:17:6c:bd:f8:9f:e2:47:c0:
9f:7b:d8:9d:3f:17:62:fa:05:06:b9:6b:3a:ef:0b:
fd:47:9e:27:ce:15:62:81:1a:a2:0f:74:4d:b9:22:
41:4b:c5:e6:ae:44:0c:be:1b:9b:fb:fd:9e:c7:c0:
e1:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:8E:A0:90:F1:7D:0E:0B:CD:7A:65:B7:FE:44:70:1E:3C:2A:DE:03
X509v3 Authority Key Identifier:
keyid:1B:6B:94:3B:9A:3D:FF:69:68:01:51:6B:E8:47:1B:C4:58:85:66:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G2uUO5o9_2loAVFr6EcbxFiFZug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/3d6107-5bce-4780-ae10-22d371d6cdee/1/G2uUO5o9_2loAVFr6EcbxFiFZug.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/3d6107-5bce-4780-ae10-22d371d6cdee/1/G2uUO5o9_2loAVFr6EcbxFiFZug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:20:4c:fd:a6:f9:99:b1:ae:e5:be:35:0a:d6:06:60:97:43:
b5:8d:df:41:34:ae:7e:ed:67:83:6e:6c:b9:88:0f:9a:5c:e0:
c9:a5:4b:47:d3:2b:28:8a:bc:37:be:a8:9f:14:c8:65:f8:c4:
0e:d0:74:d5:c3:4c:02:fe:0c:c1:57:44:ec:e1:22:4a:f1:c5:
e1:d1:27:6d:04:80:6c:e9:c1:34:0b:86:ee:07:16:be:f2:92:
c9:d5:f5:23:aa:1d:25:96:ff:3e:76:79:87:3b:6a:41:97:6a:
2c:b2:ea:76:8e:72:e6:cc:9d:9b:08:07:8e:2e:3e:83:c5:d3:
b5:a6:8f:a2:16:c7:38:bc:e7:11:48:6c:0a:eb:35:9e:78:76:
3b:ac:13:3f:f0:60:d6:79:a3:ee:55:28:b0:d2:7e:30:d3:60:
f8:27:9c:2b:bf:3e:22:60:17:6d:6e:9b:c0:71:eb:73:bf:b9:
4d:a0:5d:68:5e:dd:02:6e:12:33:31:26:f7:72:64:28:1a:96:
46:3c:a4:5c:ca:5e:39:b5:65:e6:d0:07:a9:0f:40:14:78:cd:
fe:db:27:b1:bf:27:ba:1c:61:32:c3:3f:fb:bb:2a:56:ab:aa:
ad:20:96:0c:ed:92:36:be:70:a3:ec:44:e9:7d:36:da:d7:b4:
dc:9d:40:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpRh6jOj7j0ph/5zVmG8YVJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiNmI5NDNiOWEzZGZmNjk2ODAxNTE2YmU4NDcxYmM0NTg4
NTY2ZTgwHhcNMjUxMTA1MDEwMDM2WhcNMjUxMTA2MDEwMDM2WjAzMTEwLwYDVQQD
EyhkNDhlYTA5MGYxN2QwZTBiY2Q3YTY1YjdmZTQ0NzAxZTNjMmFkZTAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn2qmDGSspjI/D0xKWQp8msRJWdFg
7m4QQf4X3E4iN45BhRjojEGBEDRkD41wZfWB1c9LMkfi/DjqDf3K3FkNJaUgIbsV
l5021iRVU4htBPg0dRItDK/5OGAXz1wLGmfV5T8dd3MJzk8Wa2HmkH20Ud4rki4o
C/L76fFuUz022EI86Dqd+aMbkrV/9BKk1juZgpqvQ+zXdrYayHR3qZebPIxNZ+xB
GR6XIsW7/4S0a08AbTicoYr/Fefi5e2ujHHG8dP+MVg3x0EwF2y9+J/iR8Cfe9id
Pxdi+gUGuWs67wv9R54nzhVigRqiD3RNuSJBS8XmrkQMvhub+/2ex8DhCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNSOoJDxfQ4LzXplt/5EcB48Kt4DMB8GA1UdIwQY
MBaAFBtrlDuaPf9paAFRa+hHG8RYhWboMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRzJ1VU81bzlfMmxvQVZGcjZFY2J4RmlGWnVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni8zZDYxMDctNWJjZS00NzgwLWFlMTAt
MjJkMzcxZDZjZGVlLzEvRzJ1VU81bzlfMmxvQVZGcjZFY2J4RmlGWnVnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni8zZDYxMDctNWJjZS00NzgwLWFlMTAtMjJkMzcxZDZjZGVl
LzEvRzJ1VU81bzlfMmxvQVZGcjZFY2J4RmlGWnVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKCBM/ab5
mbGu5b41CtYGYJdDtY3fQTSufu1ng25suYgPmlzgyaVLR9MrKIq8N76onxTIZfjE
DtB01cNMAv4MwVdE7OEiSvHF4dEnbQSAbOnBNAuG7gcWvvKSydX1I6odJZb/PnZ5
hztqQZdqLLLqdo5y5sydmwgHji4+g8XTtaaPohbHOLznEUhsCus1nnh2O6wTP/Bg
1nmj7lUosNJ+MNNg+CecK78+ImAXbW6bwHHrc7+5TaBdaF7dAm4SMzEm93JkKBqW
RjykXMpeObVl5tAHqQ9AFHjN/tsnsb8nuhxhMsM/+7sqVquqrSCWDO2SNr5wo+xE
6X022te03J1AyA==
-----END CERTIFICATE-----
Generated at Wed Nov 5 11:36:51 2025 by rpki-client