Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/e73f16-45d2-43c1-a4af-5cf9194d1702/1/gyP0nWzGUM1tZUgjSOHW0Lj9fqo.mft
File: gyP0nWzGUM1tZUgjSOHW0Lj9fqo.mft (raw, json)
Hash identifier: Qwi+TE5MyyblV7r2TxyxC/MUtq9WRP9g+kjT4WEI9Ic=
Subject key identifier: 75:83:93:D8:03:09:70:B5:F4:40:06:9A:F6:16:5D:E5:1D:75:C0:C1
Authority key identifier: 83:23:F4:9D:6C:C6:50:CD:6D:65:48:23:48:E1:D6:D0:B8:FD:7E:AA
Certificate issuer: /CN=8323f49d6cc650cd6d65482348e1d6d0b8fd7eaa
Certificate serial: 019A51198A688FF2ACDF3EB5FA9E6FC22F33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gyP0nWzGUM1tZUgjSOHW0Lj9fqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/e73f16-45d2-43c1-a4af-5cf9194d1702/1/gyP0nWzGUM1tZUgjSOHW0Lj9fqo.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 23:00:19 +0000
Manifest this update: Tue 04 Nov 2025 23:00:19 +0000
Manifest next update: Wed 05 Nov 2025 23:00:19 +0000
Files and hashes: 1: Kn2L20HdTOIfu80Nn50DjBWA6Jo.roa (hash: t13d2OWM34SoyNogtqsGXCD1a9gIw5aEGwzH9T6/vCE=)
2: gyP0nWzGUM1tZUgjSOHW0Lj9fqo.crl (hash: dCJw2xbF6oeInMH+U2Wuoj2SzhyJMaTF38ThS5on4tg=)
3: kPyw78W3vAy4mQl3NXjpt1MepRc.roa (hash: u8KAvtGZKGr7dbs+3GKBT4RIYYyEwMSs07RwUnPLdS0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/e73f16-45d2-43c1-a4af-5cf9194d1702/1/gyP0nWzGUM1tZUgjSOHW0Lj9fqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/e73f16-45d2-43c1-a4af-5cf9194d1702/1/gyP0nWzGUM1tZUgjSOHW0Lj9fqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/gyP0nWzGUM1tZUgjSOHW0Lj9fqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:19:8a:68:8f:f2:ac:df:3e:b5:fa:9e:6f:c2:2f:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8323f49d6cc650cd6d65482348e1d6d0b8fd7eaa
Validity
Not Before: Nov 4 23:00:19 2025 GMT
Not After : Nov 5 23:00:19 2025 GMT
Subject: CN=758393d8030970b5f440069af6165de51d75c0c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:db:f6:d2:c5:a3:77:dc:90:0c:70:3c:5d:46:
74:36:30:a1:52:63:8d:bc:97:a6:8a:d1:7f:b5:7f:
de:e4:2b:96:3f:30:85:e4:1f:1c:38:43:48:3f:fe:
90:d3:7e:9a:08:7d:39:61:b1:ad:a0:fc:29:8f:dd:
6b:05:b4:07:9a:1a:39:d9:88:4e:48:75:3c:fa:67:
3f:7d:1b:55:47:0d:d2:f2:20:6d:0a:7a:74:9e:87:
51:d0:6b:d6:b8:d7:a0:2f:ea:48:1e:af:5c:0c:b9:
5e:2f:50:6a:62:ef:59:cb:72:85:04:cd:8f:b1:b7:
83:33:c7:2c:e3:ec:36:14:2d:1b:60:88:78:bf:97:
c5:d5:96:2c:27:a6:c4:2b:5a:12:93:75:c3:c7:8d:
33:81:da:b1:44:e4:1e:79:62:d5:fc:69:f8:fa:19:
dd:b5:45:45:75:d6:a8:d9:8f:98:88:80:62:05:7b:
3e:fa:ec:19:23:a0:21:62:de:f0:16:63:1d:c1:86:
b3:71:73:f2:fc:04:38:5c:1a:46:31:be:f3:b2:f3:
f5:b1:58:c2:96:d3:49:5a:7d:c9:d3:35:f2:fa:42:
65:85:43:6c:5c:65:77:6e:db:4c:df:8f:cc:c1:74:
3b:4f:75:3c:33:ad:45:6f:04:17:a1:41:a8:14:4d:
46:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:83:93:D8:03:09:70:B5:F4:40:06:9A:F6:16:5D:E5:1D:75:C0:C1
X509v3 Authority Key Identifier:
keyid:83:23:F4:9D:6C:C6:50:CD:6D:65:48:23:48:E1:D6:D0:B8:FD:7E:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gyP0nWzGUM1tZUgjSOHW0Lj9fqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/e73f16-45d2-43c1-a4af-5cf9194d1702/1/gyP0nWzGUM1tZUgjSOHW0Lj9fqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/e73f16-45d2-43c1-a4af-5cf9194d1702/1/gyP0nWzGUM1tZUgjSOHW0Lj9fqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:4b:8a:b0:29:9c:d9:7a:29:a0:27:4f:6c:57:54:39:76:f8:
c3:17:59:e6:c2:76:23:21:3d:8d:56:bf:72:29:9c:dd:d7:91:
d4:71:e5:7e:fd:23:e4:dc:2a:e1:0f:5e:a5:2b:c8:0c:93:ab:
46:6e:a8:a1:be:9b:ef:03:6c:57:9a:ef:27:45:d7:64:1e:67:
3f:d8:b6:68:d7:94:23:41:8b:42:6d:2d:53:4b:a4:29:c3:f5:
c5:52:bf:3f:b7:45:55:4b:bf:f3:34:bf:70:38:59:0b:7a:08:
55:d1:93:87:4f:a3:b2:16:bb:7f:50:bd:02:ba:c4:f6:68:89:
28:b0:d9:06:50:37:a0:2d:85:2a:0a:f7:9e:75:94:35:55:53:
e8:8e:59:d0:6d:eb:03:5b:39:0d:d1:b0:d2:29:60:66:23:c6:
fb:01:a8:5f:ab:be:16:30:f1:e9:6a:1d:bf:46:e3:f8:62:53:
39:3f:a8:82:22:cd:25:2c:d9:18:f1:f1:da:e2:54:5a:53:97:
0b:c0:48:95:b0:47:ac:a3:2f:79:df:6e:aa:c8:d8:62:ed:a1:
d5:26:ad:3c:d0:8e:44:75:b4:05:d2:63:be:cc:6a:ba:ee:21:
02:c2:77:84:bf:55:00:e3:5d:20:04:d2:a8:6e:51:8b:45:a6:
ee:0e:1e:76
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpRGYpoj/Ks3z61+p5vwi8zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzMjNmNDlkNmNjNjUwY2Q2ZDY1NDgyMzQ4ZTFkNmQwYjhm
ZDdlYWEwHhcNMjUxMTA0MjMwMDE5WhcNMjUxMTA1MjMwMDE5WjAzMTEwLwYDVQQD
Eyg3NTgzOTNkODAzMDk3MGI1ZjQ0MDA2OWFmNjE2NWRlNTFkNzVjMGMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4tv20sWjd9yQDHA8XUZ0NjChUmON
vJemitF/tX/e5CuWPzCF5B8cOENIP/6Q036aCH05YbGtoPwpj91rBbQHmho52YhO
SHU8+mc/fRtVRw3S8iBtCnp0nodR0GvWuNegL+pIHq9cDLleL1BqYu9Zy3KFBM2P
sbeDM8cs4+w2FC0bYIh4v5fF1ZYsJ6bEK1oSk3XDx40zgdqxROQeeWLV/Gn4+hnd
tUVFddao2Y+YiIBiBXs++uwZI6AhYt7wFmMdwYazcXPy/AQ4XBpGMb7zsvP1sVjC
ltNJWn3J0zXy+kJlhUNsXGV3bttM34/MwXQ7T3U8M61FbwQXoUGoFE1GjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHWDk9gDCXC19EAGmvYWXeUddcDBMB8GA1UdIwQY
MBaAFIMj9J1sxlDNbWVII0jh1tC4/X6qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3lQMG5XekdVTTF0WlVnalNPSFcwTGo5ZnFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9lNzNmMTYtNDVkMi00M2MxLWE0YWYt
NWNmOTE5NGQxNzAyLzEvZ3lQMG5XekdVTTF0WlVnalNPSFcwTGo5ZnFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC9lNzNmMTYtNDVkMi00M2MxLWE0YWYtNWNmOTE5NGQxNzAy
LzEvZ3lQMG5XekdVTTF0WlVnalNPSFcwTGo5ZnFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp0uKsCmc
2XopoCdPbFdUOXb4wxdZ5sJ2IyE9jVa/cimc3deR1HHlfv0j5Nwq4Q9epSvIDJOr
Rm6oob6b7wNsV5rvJ0XXZB5nP9i2aNeUI0GLQm0tU0ukKcP1xVK/P7dFVUu/8zS/
cDhZC3oIVdGTh0+jsha7f1C9ArrE9miJKLDZBlA3oC2FKgr3nnWUNVVT6I5Z0G3r
A1s5DdGw0ilgZiPG+wGoX6u+FjDx6Wodv0bj+GJTOT+ogiLNJSzZGPHx2uJUWlOX
C8BIlbBHrKMved9uqsjYYu2h1SatPNCORHW0BdJjvsxquu4hAsJ3hL9VAONdIATS
qG5Ri0Wm7g4edg==
-----END CERTIFICATE-----
Generated at Wed Nov 5 05:10:06 2025 by rpki-client