Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/02bf2a-e919-4add-a18e-e9e023609c7f/1/gTEkC9qnwS6BChc4vN91p0ZTC8E.mft
File: gTEkC9qnwS6BChc4vN91p0ZTC8E.mft (raw, json)
Hash identifier: /rB1m9Cf9bWJTFwum2xAwCTtaMqcrhbZOPnjY7BPOnw=
Subject key identifier: 18:59:5D:45:D8:68:80:93:83:BF:7C:92:7C:98:92:06:A2:B1:B0:5E
Authority key identifier: 81:31:24:0B:DA:A7:C1:2E:81:0A:17:38:BC:DF:75:A7:46:53:0B:C1
Certificate issuer: /CN=8131240bdaa7c12e810a1738bcdf75a746530bc1
Certificate serial: 019A5074F4336FB4B98F4F9E746874336102
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gTEkC9qnwS6BChc4vN91p0ZTC8E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/02bf2a-e919-4add-a18e-e9e023609c7f/1/gTEkC9qnwS6BChc4vN91p0ZTC8E.mft
Manifest number: 0C78
Signing time: Tue 04 Nov 2025 20:00:33 +0000
Manifest this update: Tue 04 Nov 2025 20:00:33 +0000
Manifest next update: Wed 05 Nov 2025 20:00:33 +0000
Files and hashes: 1: 6BQqkGrM3gw54Pj0HSmQY8wMCck.roa (hash: Ar7D9TbLcSVMAE2S4iadlofqY6yoHjuB0ZjyXAJSQDg=)
2: gTEkC9qnwS6BChc4vN91p0ZTC8E.crl (hash: vfizTm+670X7r6yLFncCSO6bGCnAdGilFO1dN55KLmE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/02bf2a-e919-4add-a18e-e9e023609c7f/1/gTEkC9qnwS6BChc4vN91p0ZTC8E.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/02bf2a-e919-4add-a18e-e9e023609c7f/1/gTEkC9qnwS6BChc4vN91p0ZTC8E.mft
rsync://rpki.ripe.net/repository/DEFAULT/gTEkC9qnwS6BChc4vN91p0ZTC8E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 20:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:74:f4:33:6f:b4:b9:8f:4f:9e:74:68:74:33:61:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8131240bdaa7c12e810a1738bcdf75a746530bc1
Validity
Not Before: Nov 4 20:00:33 2025 GMT
Not After : Nov 5 20:00:33 2025 GMT
Subject: CN=18595d45d868809383bf7c927c989206a2b1b05e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:62:2f:3e:77:aa:fa:b6:f4:59:df:4f:5d:ff:
84:0b:2c:cc:3e:10:f9:72:34:ac:90:e0:fc:69:56:
e4:15:4a:1f:99:8d:7e:7f:d8:df:6d:0f:a1:57:de:
37:63:97:84:f2:08:3f:50:4b:ea:b7:d5:98:e3:36:
ad:86:6b:ed:c4:74:9d:41:78:db:77:c8:6e:86:09:
24:4f:66:56:8e:2a:6b:82:88:e2:8d:24:be:2e:8a:
16:ba:13:07:09:70:58:c1:06:23:d6:00:13:14:2f:
a7:d0:74:3d:c0:c8:d6:5f:07:36:b4:7e:08:c1:81:
89:34:a0:b1:9c:92:e8:b6:24:98:c3:d4:0d:ac:29:
73:26:69:bc:b1:5c:c9:b4:4d:3f:d5:d9:62:c5:81:
87:d1:2d:ed:28:9d:8c:e4:c1:b9:67:70:c0:2b:0e:
bb:45:d8:25:18:df:38:3e:03:4f:47:9d:ca:c4:25:
11:de:51:c5:5f:b1:c4:9b:f2:83:23:a6:07:88:e2:
22:9c:ab:2b:5a:f3:69:cb:7c:5c:05:01:ee:4e:70:
62:92:54:59:b0:33:b4:3d:ca:bf:03:73:c4:ad:52:
b7:78:3f:d8:33:95:de:63:ae:44:84:04:f2:7a:a2:
8f:af:23:66:6e:9c:fb:13:f5:92:cb:50:99:35:e2:
66:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:59:5D:45:D8:68:80:93:83:BF:7C:92:7C:98:92:06:A2:B1:B0:5E
X509v3 Authority Key Identifier:
keyid:81:31:24:0B:DA:A7:C1:2E:81:0A:17:38:BC:DF:75:A7:46:53:0B:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gTEkC9qnwS6BChc4vN91p0ZTC8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/02bf2a-e919-4add-a18e-e9e023609c7f/1/gTEkC9qnwS6BChc4vN91p0ZTC8E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/02bf2a-e919-4add-a18e-e9e023609c7f/1/gTEkC9qnwS6BChc4vN91p0ZTC8E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:a5:86:e6:35:a5:ef:14:e1:3f:e7:16:60:c0:e8:70:41:db:
bf:65:11:81:9b:ea:8c:50:b9:3a:33:20:71:3a:bf:cd:29:e4:
03:65:2e:5d:6b:f7:cb:1b:1e:0e:70:9b:f7:66:aa:f8:87:1e:
68:1c:e8:d6:6d:09:7d:3b:dd:73:37:b2:e3:b2:09:c1:c1:12:
83:8c:7d:d6:bd:53:8d:eb:1e:8b:8f:e5:de:d1:ec:03:8f:03:
ab:2b:51:a9:71:3c:f0:c2:38:46:c2:bc:5f:11:f9:a2:96:73:
b1:26:c7:bd:0e:52:f6:5f:19:fe:58:df:1c:e8:a6:14:df:93:
f1:24:6f:b1:58:39:5f:7f:29:ad:5a:e0:5a:34:c9:ba:b9:98:
12:ef:4f:7f:04:60:87:a6:ab:97:36:e5:ab:3d:f1:40:9c:25:
af:c5:8c:e8:2c:f0:0f:ec:e7:35:0c:c1:88:2e:82:db:15:3c:
4d:12:3c:ce:06:04:8c:70:08:10:c0:e3:a0:9f:e7:19:b2:3b:
64:f1:ff:c3:b1:ac:56:82:76:ba:8f:13:f5:8a:a2:22:74:32:
01:45:14:d5:c3:5b:a5:8f:3c:35:38:69:9e:65:4c:0b:69:01:
2d:f9:be:23:95:21:67:5a:20:c0:f1:f4:92:1a:10:29:ce:8d:
2c:26:36:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpQdPQzb7S5j0+edGh0M2ECMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxMzEyNDBiZGFhN2MxMmU4MTBhMTczOGJjZGY3NWE3NDY1
MzBiYzEwHhcNMjUxMTA0MjAwMDMzWhcNMjUxMTA1MjAwMDMzWjAzMTEwLwYDVQQD
EygxODU5NWQ0NWQ4Njg4MDkzODNiZjdjOTI3Yzk4OTIwNmEyYjFiMDVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsGIvPneq+rb0Wd9PXf+ECyzMPhD5
cjSskOD8aVbkFUofmY1+f9jfbQ+hV943Y5eE8gg/UEvqt9WY4zathmvtxHSdQXjb
d8huhgkkT2ZWjiprgojijSS+LooWuhMHCXBYwQYj1gATFC+n0HQ9wMjWXwc2tH4I
wYGJNKCxnJLotiSYw9QNrClzJmm8sVzJtE0/1dlixYGH0S3tKJ2M5MG5Z3DAKw67
RdglGN84PgNPR53KxCUR3lHFX7HEm/KDI6YHiOIinKsrWvNpy3xcBQHuTnBiklRZ
sDO0Pcq/A3PErVK3eD/YM5XeY65EhATyeqKPryNmbpz7E/WSy1CZNeJmzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBhZXUXYaICTg798knyYkgaisbBeMB8GA1UdIwQY
MBaAFIExJAvap8EugQoXOLzfdadGUwvBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ1RFa0M5cW53UzZCQ2hjNHZOOTFwMFpUQzhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi8wMmJmMmEtZTkxOS00YWRkLWExOGUt
ZTllMDIzNjA5YzdmLzEvZ1RFa0M5cW53UzZCQ2hjNHZOOTFwMFpUQzhFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi8wMmJmMmEtZTkxOS00YWRkLWExOGUtZTllMDIzNjA5Yzdm
LzEvZ1RFa0M5cW53UzZCQ2hjNHZOOTFwMFpUQzhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp6WG5jWl
7xThP+cWYMDocEHbv2URgZvqjFC5OjMgcTq/zSnkA2UuXWv3yxseDnCb92aq+Ice
aBzo1m0JfTvdczey47IJwcESg4x91r1Tjesei4/l3tHsA48DqytRqXE88MI4RsK8
XxH5opZzsSbHvQ5S9l8Z/ljfHOimFN+T8SRvsVg5X38prVrgWjTJurmYEu9PfwRg
h6arlzblqz3xQJwlr8WM6CzwD+znNQzBiC6C2xU8TRI8zgYEjHAIEMDjoJ/nGbI7
ZPH/w7GsVoJ2uo8T9YqiInQyAUUU1cNbpY88NThpnmVMC2kBLfm+I5UhZ1ogwPH0
khoQKc6NLCY2eQ==
-----END CERTIFICATE-----
Generated at Wed Nov 5 05:44:25 2025 by rpki-client