Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/d6c15a-3dff-44d7-a538-a951f200f652/1/GimypF3gE2_qu_rkuqcBcqqGYZs.mft
File: GimypF3gE2_qu_rkuqcBcqqGYZs.mft (raw, json)
Hash identifier: IM9EwMH+FUlk0ecV9iAc2IMzgNqee3j9o6O6nOvanYM=
Subject key identifier: 32:50:04:D3:D1:E2:F5:22:D4:49:43:BE:1B:FE:29:C2:FB:08:40:84
Authority key identifier: 1A:29:B2:A4:5D:E0:13:6F:EA:BB:FA:E4:BA:A7:01:72:AA:86:61:9B
Certificate issuer: /CN=1a29b2a45de0136feabbfae4baa70172aa86619b
Certificate serial: 019A50E3F36865ABA441E869CA386743D8BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GimypF3gE2_qu_rkuqcBcqqGYZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/d6c15a-3dff-44d7-a538-a951f200f652/1/GimypF3gE2_qu_rkuqcBcqqGYZs.mft
Manifest number: 1711
Signing time: Tue 04 Nov 2025 22:01:47 +0000
Manifest this update: Tue 04 Nov 2025 22:01:47 +0000
Manifest next update: Wed 05 Nov 2025 22:01:47 +0000
Files and hashes: 1: GimypF3gE2_qu_rkuqcBcqqGYZs.crl (hash: bQcFX1zfFiqnjvjRJ9uqyDqLbGiRgBJut3wleV46stg=)
2: bZLHtasaTPjY31e6RPfAq2RJKnA.roa (hash: ID+iO3817M9kW6iqLKBAKlaZVewlrBg5mSajuX6nX2s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/d6c15a-3dff-44d7-a538-a951f200f652/1/GimypF3gE2_qu_rkuqcBcqqGYZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/d6c15a-3dff-44d7-a538-a951f200f652/1/GimypF3gE2_qu_rkuqcBcqqGYZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/GimypF3gE2_qu_rkuqcBcqqGYZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e3:f3:68:65:ab:a4:41:e8:69:ca:38:67:43:d8:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a29b2a45de0136feabbfae4baa70172aa86619b
Validity
Not Before: Nov 4 22:01:47 2025 GMT
Not After : Nov 5 22:01:47 2025 GMT
Subject: CN=325004d3d1e2f522d44943be1bfe29c2fb084084
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:da:19:68:3c:eb:bb:3f:2b:c7:b2:50:61:5f:
73:de:f9:b6:59:93:cc:fb:db:23:79:ca:33:3f:5c:
fa:79:2f:d3:7b:c6:06:83:4f:d5:99:ab:0a:b3:47:
f8:ff:4b:83:ff:44:d7:8f:89:56:a9:e5:3e:3c:b0:
50:00:92:8f:f0:3a:72:11:79:79:f5:ef:1f:ff:6b:
3b:d1:5a:9a:0d:ad:0c:98:e4:c1:ca:c5:17:e4:d6:
ed:d7:7c:29:c4:55:97:bc:72:02:31:b4:b1:d2:b3:
a5:3a:e9:ce:68:ae:13:9b:32:7b:9a:1d:c2:c4:bd:
c3:c0:8a:8b:2b:b1:a5:79:6b:69:bd:1f:59:a2:21:
e3:a1:49:5c:cc:2f:f9:47:de:1e:28:4d:a8:1f:d4:
93:d8:15:65:dd:41:f6:c3:61:b9:9c:84:e8:77:6e:
46:cd:c6:08:41:32:8a:ce:79:27:58:4b:a2:ef:4a:
f2:c3:68:6b:0d:0f:f4:fa:e2:79:d8:0d:37:fb:e4:
77:e8:ed:5e:ed:d5:99:38:28:83:8a:e6:bf:d0:0b:
da:8e:ca:e8:01:da:ee:47:ac:26:c2:39:a1:75:73:
64:e4:65:32:37:1a:c2:00:2e:a5:76:ef:04:6c:55:
cc:be:41:79:fb:95:b7:d6:40:4e:3c:5d:48:17:b5:
67:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:50:04:D3:D1:E2:F5:22:D4:49:43:BE:1B:FE:29:C2:FB:08:40:84
X509v3 Authority Key Identifier:
keyid:1A:29:B2:A4:5D:E0:13:6F:EA:BB:FA:E4:BA:A7:01:72:AA:86:61:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GimypF3gE2_qu_rkuqcBcqqGYZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/d6c15a-3dff-44d7-a538-a951f200f652/1/GimypF3gE2_qu_rkuqcBcqqGYZs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/d6c15a-3dff-44d7-a538-a951f200f652/1/GimypF3gE2_qu_rkuqcBcqqGYZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:88:b9:12:e2:67:1a:3f:13:3b:1c:09:f7:09:1d:8f:a9:43:
06:27:b3:ae:33:f9:17:11:8c:f5:07:c1:5f:1f:ca:a2:eb:e9:
64:3b:8e:28:ff:4d:43:59:e8:06:5c:f8:8c:66:42:7a:40:5b:
d2:13:ca:e1:f8:06:8a:69:08:1d:ae:23:1f:c8:52:b2:90:b1:
0d:36:0e:ce:6d:31:f3:b6:b1:aa:0b:2b:29:48:9f:e5:09:12:
a9:a5:f8:71:2d:78:5c:67:07:a5:a5:01:7b:ce:bb:da:c7:f2:
5a:39:84:37:0d:05:3c:5b:ed:6e:95:a0:40:69:f9:45:83:c9:
7c:0f:1a:1c:e7:63:b0:1a:97:22:37:cc:0a:d8:89:f9:ab:bf:
a0:01:f5:5c:32:60:9f:7c:31:ab:42:88:9a:45:c6:17:ef:fe:
4e:32:49:de:95:92:41:60:e9:a9:7f:06:a7:9d:6f:2b:32:32:
33:88:41:35:97:a2:89:32:be:af:30:41:e9:54:df:10:e2:2f:
26:2f:fc:b9:c7:8d:47:3e:e2:aa:03:de:ea:60:0c:69:1f:86:
c5:f1:b6:a9:9c:60:69:dd:04:32:3e:5b:c3:04:85:e5:54:8d:
f1:33:c7:3b:08:03:a6:dd:a2:bd:5c:2e:19:19:94:8c:5d:b1:
44:33:51:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpQ4/NoZaukQehpyjhnQ9i8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhMjliMmE0NWRlMDEzNmZlYWJiZmFlNGJhYTcwMTcyYWE4
NjYxOWIwHhcNMjUxMTA0MjIwMTQ3WhcNMjUxMTA1MjIwMTQ3WjAzMTEwLwYDVQQD
EygzMjUwMDRkM2QxZTJmNTIyZDQ0OTQzYmUxYmZlMjljMmZiMDg0MDg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7toZaDzruz8rx7JQYV9z3vm2WZPM
+9sjecozP1z6eS/Te8YGg0/VmasKs0f4/0uD/0TXj4lWqeU+PLBQAJKP8DpyEXl5
9e8f/2s70VqaDa0MmOTBysUX5Nbt13wpxFWXvHICMbSx0rOlOunOaK4TmzJ7mh3C
xL3DwIqLK7GleWtpvR9ZoiHjoUlczC/5R94eKE2oH9ST2BVl3UH2w2G5nITod25G
zcYIQTKKznknWEui70ryw2hrDQ/0+uJ52A03++R36O1e7dWZOCiDiua/0Avajsro
AdruR6wmwjmhdXNk5GUyNxrCAC6ldu8EbFXMvkF5+5W31kBOPF1IF7VnwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDJQBNPR4vUi1ElDvhv+KcL7CECEMB8GA1UdIwQY
MBaAFBopsqRd4BNv6rv65LqnAXKqhmGbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2lteXBGM2dFMl9xdV9ya3VxY0JjcXFHWVpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My9kNmMxNWEtM2RmZi00NGQ3LWE1Mzgt
YTk1MWYyMDBmNjUyLzEvR2lteXBGM2dFMl9xdV9ya3VxY0JjcXFHWVpzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My9kNmMxNWEtM2RmZi00NGQ3LWE1MzgtYTk1MWYyMDBmNjUy
LzEvR2lteXBGM2dFMl9xdV9ya3VxY0JjcXFHWVpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsIi5EuJn
Gj8TOxwJ9wkdj6lDBiezrjP5FxGM9QfBXx/KouvpZDuOKP9NQ1noBlz4jGZCekBb
0hPK4fgGimkIHa4jH8hSspCxDTYOzm0x87axqgsrKUif5QkSqaX4cS14XGcHpaUB
e8672sfyWjmENw0FPFvtbpWgQGn5RYPJfA8aHOdjsBqXIjfMCtiJ+au/oAH1XDJg
n3wxq0KImkXGF+/+TjJJ3pWSQWDpqX8Gp51vKzIyM4hBNZeiiTK+rzBB6VTfEOIv
Ji/8uceNRz7iqgPe6mAMaR+GxfG2qZxgad0EMj5bwwSF5VSN8TPHOwgDpt2ivVwu
GRmUjF2xRDNRIQ==
-----END CERTIFICATE-----
Generated at Wed Nov 5 02:01:43 2025 by rpki-client