Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/d55988-42d2-4206-95a9-bb018cfbeaa2/1/GFovZ9JFy6lRiwFwYacWku555_8.mft
File: GFovZ9JFy6lRiwFwYacWku555_8.mft (raw, json)
Hash identifier: qXWkuZqmpH4HbnSUwLTZ4lym098noftxSkWzF7kZuLg=
Subject key identifier: B4:9F:BB:D5:74:BD:12:D5:A7:60:BF:19:C1:D5:E8:8E:81:EB:F9:D6
Authority key identifier: 18:5A:2F:67:D2:45:CB:A9:51:8B:01:70:61:A7:16:92:EE:79:E7:FF
Certificate issuer: /CN=185a2f67d245cba9518b017061a71692ee79e7ff
Certificate serial: 019A52D28A7C00A94755368C855876461005
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GFovZ9JFy6lRiwFwYacWku555_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/d55988-42d2-4206-95a9-bb018cfbeaa2/1/GFovZ9JFy6lRiwFwYacWku555_8.mft
Manifest number: 0932
Signing time: Wed 05 Nov 2025 07:02:00 +0000
Manifest this update: Wed 05 Nov 2025 07:02:00 +0000
Manifest next update: Thu 06 Nov 2025 07:02:00 +0000
Files and hashes: 1: GFovZ9JFy6lRiwFwYacWku555_8.crl (hash: mJwRoKVKTecRwpjQDxlmDHD/hDvt1P8sp5/ZqdxiNAI=)
2: RO9l6hoPRiEk5kvu-1wGIx3JVQs.roa (hash: z3IHW9wPnoAAyV5Yp5JV/XIyxcaRpjPHnzXPpTc3PGc=)
3: zPmRtHrWAHHMjTbZqQxb_k1QEE0.roa (hash: b0+r/Py1tsQMqZ9+iwYrxYKeaOWfr9BHfO+bAPyD5ME=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/d55988-42d2-4206-95a9-bb018cfbeaa2/1/GFovZ9JFy6lRiwFwYacWku555_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/d55988-42d2-4206-95a9-bb018cfbeaa2/1/GFovZ9JFy6lRiwFwYacWku555_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/GFovZ9JFy6lRiwFwYacWku555_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 07:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d2:8a:7c:00:a9:47:55:36:8c:85:58:76:46:10:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=185a2f67d245cba9518b017061a71692ee79e7ff
Validity
Not Before: Nov 5 07:02:00 2025 GMT
Not After : Nov 6 07:02:00 2025 GMT
Subject: CN=b49fbbd574bd12d5a760bf19c1d5e88e81ebf9d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:a0:b4:66:c6:75:ba:88:bc:ef:23:9b:b6:3e:
02:dc:85:e3:1f:88:7f:db:1b:67:86:ef:6d:d9:ed:
8f:83:19:0f:13:19:fd:ee:12:8b:09:55:62:9a:eb:
ce:52:81:af:7f:eb:34:48:32:35:16:97:a6:52:4a:
5e:0b:23:6b:f3:f0:b9:6c:4e:6f:7c:4e:46:18:2f:
86:9a:f2:c4:f3:44:d1:9c:d3:96:b1:ff:64:5a:6c:
8d:9a:0f:fd:b8:98:39:41:e4:ee:8d:44:64:47:b2:
81:1f:4d:16:d1:3f:c9:97:a3:ca:fc:29:1e:c8:44:
44:dc:aa:64:2c:02:4a:fa:f1:28:8b:0a:55:a4:8c:
2e:23:2a:88:da:a0:0a:c8:eb:ad:f6:2b:91:44:de:
a6:ac:c3:f1:f7:68:e6:fb:16:d1:a1:85:03:a6:0c:
b3:dd:85:da:ff:94:6b:4d:fe:fc:94:b0:32:79:51:
2f:5f:4e:87:02:78:c1:cb:03:8e:94:de:39:5f:55:
02:24:0d:97:96:4a:b5:39:58:50:64:3c:b8:1c:eb:
52:dd:96:d8:e0:7f:7c:bf:fc:8d:a1:fb:85:a1:a6:
84:87:99:c4:bb:eb:46:a4:57:f6:2d:6c:33:04:0b:
fe:4a:25:95:ae:98:44:11:ee:de:3a:ab:f2:75:a1:
cb:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:9F:BB:D5:74:BD:12:D5:A7:60:BF:19:C1:D5:E8:8E:81:EB:F9:D6
X509v3 Authority Key Identifier:
keyid:18:5A:2F:67:D2:45:CB:A9:51:8B:01:70:61:A7:16:92:EE:79:E7:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GFovZ9JFy6lRiwFwYacWku555_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d55988-42d2-4206-95a9-bb018cfbeaa2/1/GFovZ9JFy6lRiwFwYacWku555_8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d55988-42d2-4206-95a9-bb018cfbeaa2/1/GFovZ9JFy6lRiwFwYacWku555_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:ac:da:3e:d0:3b:b3:ca:1b:2b:7a:7c:8e:23:7b:7d:74:70:
94:e9:6c:49:5a:40:ef:65:95:d6:97:01:dd:b7:5f:9f:bd:3f:
53:d4:83:e7:68:b3:44:13:e5:be:97:3f:a6:e9:80:e5:f5:a7:
c6:6a:e4:4c:ba:7c:30:c5:c9:ef:87:4b:ab:00:12:5d:29:84:
90:36:60:dd:6c:5a:48:d1:e1:ff:99:dc:1a:37:c1:05:f6:8a:
1b:d4:2e:e6:a4:05:46:90:2d:1f:0a:32:4e:54:e4:e6:71:de:
52:5e:d8:a7:67:fe:34:d0:46:36:d5:b4:b1:1e:22:a1:51:ab:
e4:c2:50:18:79:ac:7f:f3:60:77:d3:c1:8d:e0:61:2b:3c:32:
be:a0:41:1e:b1:9d:21:76:fc:a6:2d:73:13:c3:69:7e:1a:b5:
34:13:78:c2:7d:41:d2:af:91:4d:ea:be:1d:ad:bb:59:d8:fa:
f7:ad:a7:23:31:71:29:e3:ac:f3:69:2c:6d:fc:c8:3a:6b:e5:
5a:cc:ff:83:58:d9:e0:f2:ca:f0:07:da:39:f2:46:2b:ad:4b:
86:19:7c:8c:8c:f8:9b:47:8a:e6:23:8a:ed:9f:79:1f:7f:5a:
17:da:6f:9a:34:b4:45:47:59:f7:24:20:ab:49:51:ac:fb:9e:
1c:57:e2:93
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpS0op8AKlHVTaMhVh2RhAFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE4NWEyZjY3ZDI0NWNiYTk1MThiMDE3MDYxYTcxNjkyZWU3
OWU3ZmYwHhcNMjUxMTA1MDcwMjAwWhcNMjUxMTA2MDcwMjAwWjAzMTEwLwYDVQQD
EyhiNDlmYmJkNTc0YmQxMmQ1YTc2MGJmMTljMWQ1ZTg4ZTgxZWJmOWQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2aC0ZsZ1uoi87yObtj4C3IXjH4h/
2xtnhu9t2e2PgxkPExn97hKLCVVimuvOUoGvf+s0SDI1FpemUkpeCyNr8/C5bE5v
fE5GGC+GmvLE80TRnNOWsf9kWmyNmg/9uJg5QeTujURkR7KBH00W0T/Jl6PK/Cke
yERE3KpkLAJK+vEoiwpVpIwuIyqI2qAKyOut9iuRRN6mrMPx92jm+xbRoYUDpgyz
3YXa/5RrTf78lLAyeVEvX06HAnjBywOOlN45X1UCJA2Xlkq1OVhQZDy4HOtS3ZbY
4H98v/yNofuFoaaEh5nEu+tGpFf2LWwzBAv+SiWVrphEEe7eOqvydaHLcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLSfu9V0vRLVp2C/GcHV6I6B6/nWMB8GA1UdIwQY
MBaAFBhaL2fSRcupUYsBcGGnFpLueef/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR0Zvdlo5SkZ5NmxSaXdGd1lhY1drdTU1NV84LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi9kNTU5ODgtNDJkMi00MjA2LTk1YTkt
YmIwMThjZmJlYWEyLzEvR0Zvdlo5SkZ5NmxSaXdGd1lhY1drdTU1NV84Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi9kNTU5ODgtNDJkMi00MjA2LTk1YTktYmIwMThjZmJlYWEy
LzEvR0Zvdlo5SkZ5NmxSaXdGd1lhY1drdTU1NV84LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbqzaPtA7
s8obK3p8jiN7fXRwlOlsSVpA72WV1pcB3bdfn70/U9SD52izRBPlvpc/pumA5fWn
xmrkTLp8MMXJ74dLqwASXSmEkDZg3WxaSNHh/5ncGjfBBfaKG9Qu5qQFRpAtHwoy
TlTk5nHeUl7Yp2f+NNBGNtW0sR4ioVGr5MJQGHmsf/Ngd9PBjeBhKzwyvqBBHrGd
IXb8pi1zE8Npfhq1NBN4wn1B0q+RTeq+Ha27Wdj6962nIzFxKeOs82ksbfzIOmvl
Wsz/g1jZ4PLK8AfaOfJGK61Lhhl8jIz4m0eK5iOK7Z95H39aF9pvmjS0RUdZ9yQg
q0lRrPueHFfikw==
-----END CERTIFICATE-----
Generated at Wed Nov 5 16:43:07 2025 by rpki-client