Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/331ce6-e428-41fa-bb10-db3afd3d762e/1/ga63YipE0jwqRbTQ30DWzcwzJB0.mft
File: ga63YipE0jwqRbTQ30DWzcwzJB0.mft (raw, json)
Hash identifier: rai2zlNt/CsGFPgWAFeLp00uCMtOu5EA6wUouoJjI4o=
Subject key identifier: 53:2C:FE:56:51:77:34:33:7C:43:B1:40:94:48:55:DB:9A:91:AB:6F
Authority key identifier: 81:AE:B7:62:2A:44:D2:3C:2A:45:B4:D0:DF:40:D6:CD:CC:33:24:1D
Certificate issuer: /CN=81aeb7622a44d23c2a45b4d0df40d6cdcc33241d
Certificate serial: 019A5187BCC6D438A940CCE0C1C72EFB53CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ga63YipE0jwqRbTQ30DWzcwzJB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/331ce6-e428-41fa-bb10-db3afd3d762e/1/ga63YipE0jwqRbTQ30DWzcwzJB0.mft
Manifest number: 079C
Signing time: Wed 05 Nov 2025 01:00:41 +0000
Manifest this update: Wed 05 Nov 2025 01:00:41 +0000
Manifest next update: Thu 06 Nov 2025 01:00:41 +0000
Files and hashes: 1: TdvnZ-pSKLZ2di0IsrjKM1Y6TNQ.roa (hash: 3haz/IHoayXe0sYmFVaRZdqvibPOZRqi6vqfWqU727k=)
2: ga63YipE0jwqRbTQ30DWzcwzJB0.crl (hash: GksZOl6EfuMeSekuqyqxG0+eXF6OcwmnZ6u2vypXUx8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/331ce6-e428-41fa-bb10-db3afd3d762e/1/ga63YipE0jwqRbTQ30DWzcwzJB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/331ce6-e428-41fa-bb10-db3afd3d762e/1/ga63YipE0jwqRbTQ30DWzcwzJB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ga63YipE0jwqRbTQ30DWzcwzJB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 01:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:87:bc:c6:d4:38:a9:40:cc:e0:c1:c7:2e:fb:53:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81aeb7622a44d23c2a45b4d0df40d6cdcc33241d
Validity
Not Before: Nov 5 01:00:41 2025 GMT
Not After : Nov 6 01:00:41 2025 GMT
Subject: CN=532cfe56517734337c43b140944855db9a91ab6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a2:0e:30:63:eb:ac:00:05:a8:78:02:35:98:
8f:00:e9:ee:7c:51:32:b9:9f:da:f8:34:7d:95:00:
2e:36:5a:4a:3e:5c:3c:31:9d:78:b1:66:39:50:33:
f3:ee:9f:7f:91:1d:e0:72:8a:fb:0c:db:17:7a:4e:
cc:48:1c:47:3b:71:54:3e:d4:7e:be:4c:fa:93:f9:
83:6a:00:e4:04:53:d8:7d:c0:83:ba:fc:b4:34:4f:
82:53:09:d1:d9:2c:12:07:63:93:e1:a9:83:0e:ff:
9e:6f:21:33:14:0c:a9:e5:41:5d:e3:f0:28:23:b9:
95:e0:47:73:82:3c:45:db:eb:4c:92:9a:22:53:57:
ef:34:3a:1c:d9:7e:6f:a5:59:d5:ab:59:5a:fa:08:
ca:fd:f2:0f:6a:fe:e1:00:9f:b0:17:0a:fd:ad:09:
bb:d8:90:a8:de:91:c3:62:07:00:04:67:ed:8c:3d:
c5:14:45:a3:8f:ba:42:ac:fc:d0:e0:88:69:03:2e:
41:fd:e4:6d:8b:ad:bb:bb:8e:15:cf:b7:65:d7:94:
50:fb:a4:eb:48:71:e3:d6:18:ea:29:ca:bf:09:c0:
b2:8c:f4:3b:e2:a2:7f:8b:f1:3a:33:41:d3:88:35:
f6:39:11:e7:94:22:69:0a:04:1d:4c:7a:97:37:a0:
2e:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:2C:FE:56:51:77:34:33:7C:43:B1:40:94:48:55:DB:9A:91:AB:6F
X509v3 Authority Key Identifier:
keyid:81:AE:B7:62:2A:44:D2:3C:2A:45:B4:D0:DF:40:D6:CD:CC:33:24:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ga63YipE0jwqRbTQ30DWzcwzJB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/331ce6-e428-41fa-bb10-db3afd3d762e/1/ga63YipE0jwqRbTQ30DWzcwzJB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/331ce6-e428-41fa-bb10-db3afd3d762e/1/ga63YipE0jwqRbTQ30DWzcwzJB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:7d:d9:8c:36:10:99:31:a7:de:ca:88:79:12:8e:e1:fa:99:
6d:76:61:dd:f3:b9:c4:c7:3f:3b:66:93:12:d6:b5:f7:a4:ca:
22:98:9b:bc:1e:d0:fe:bf:77:5b:27:a8:69:57:cc:84:48:bb:
d0:b3:81:bd:ab:89:7f:63:c0:3b:80:ce:b4:4b:a0:90:4c:4e:
24:07:6d:7b:65:6c:9f:4a:b9:f4:fa:49:a1:6d:c9:b8:d7:9c:
d3:3e:e6:b7:96:36:cb:ad:b1:64:05:99:ee:86:82:ed:33:62:
cd:00:01:f5:51:82:6b:8c:fc:9a:52:fd:d4:39:ff:c6:7c:ad:
b7:e0:46:2f:7c:90:7f:62:ab:a2:55:1c:02:4e:22:d3:e6:cb:
48:3d:c1:a8:df:26:32:f7:c1:bf:1c:85:5d:3f:66:47:79:b0:
2a:53:91:e3:8c:12:6a:97:53:70:ef:31:4a:0f:c1:a9:fa:d0:
4e:99:d6:c1:d9:7a:52:4d:de:13:5f:60:37:09:09:c7:41:d6:
ed:f0:be:53:26:d4:2c:32:4d:73:d3:59:7e:c2:44:54:db:7d:
58:73:17:86:35:19:9f:0d:ac:f3:d6:2d:7f:ff:7d:72:2a:c9:
4a:c5:fc:e5:4c:30:1c:17:f4:a7:97:86:b9:cf:06:c0:7c:05:
f1:98:19:c4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpRh7zG1DipQMzgwccu+1PNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxYWViNzYyMmE0NGQyM2MyYTQ1YjRkMGRmNDBkNmNkY2Mz
MzI0MWQwHhcNMjUxMTA1MDEwMDQxWhcNMjUxMTA2MDEwMDQxWjAzMTEwLwYDVQQD
Eyg1MzJjZmU1NjUxNzczNDMzN2M0M2IxNDA5NDQ4NTVkYjlhOTFhYjZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx6IOMGPrrAAFqHgCNZiPAOnufFEy
uZ/a+DR9lQAuNlpKPlw8MZ14sWY5UDPz7p9/kR3gcor7DNsXek7MSBxHO3FUPtR+
vkz6k/mDagDkBFPYfcCDuvy0NE+CUwnR2SwSB2OT4amDDv+ebyEzFAyp5UFd4/Ao
I7mV4EdzgjxF2+tMkpoiU1fvNDoc2X5vpVnVq1la+gjK/fIPav7hAJ+wFwr9rQm7
2JCo3pHDYgcABGftjD3FFEWjj7pCrPzQ4IhpAy5B/eRti627u44Vz7dl15RQ+6Tr
SHHj1hjqKcq/CcCyjPQ74qJ/i/E6M0HTiDX2ORHnlCJpCgQdTHqXN6Au4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFMs/lZRdzQzfEOxQJRIVduakatvMB8GA1UdIwQY
MBaAFIGut2IqRNI8KkW00N9A1s3MMyQdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ2E2M1lpcEUwandxUmJUUTMwRFd6Y3d6SkIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi8zMzFjZTYtZTQyOC00MWZhLWJiMTAt
ZGIzYWZkM2Q3NjJlLzEvZ2E2M1lpcEUwandxUmJUUTMwRFd6Y3d6SkIwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi8zMzFjZTYtZTQyOC00MWZhLWJiMTAtZGIzYWZkM2Q3NjJl
LzEvZ2E2M1lpcEUwandxUmJUUTMwRFd6Y3d6SkIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGn3ZjDYQ
mTGn3sqIeRKO4fqZbXZh3fO5xMc/O2aTEta196TKIpibvB7Q/r93WyeoaVfMhEi7
0LOBvauJf2PAO4DOtEugkExOJAdte2Vsn0q59PpJoW3JuNec0z7mt5Y2y62xZAWZ
7oaC7TNizQAB9VGCa4z8mlL91Dn/xnytt+BGL3yQf2KrolUcAk4i0+bLSD3BqN8m
MvfBvxyFXT9mR3mwKlOR44wSapdTcO8xSg/BqfrQTpnWwdl6Uk3eE19gNwkJx0HW
7fC+UybULDJNc9NZfsJEVNt9WHMXhjUZnw2s89Ytf/99cirJSsX85UwwHBf0p5eG
uc8GwHwF8ZgZxA==
-----END CERTIFICATE-----
Generated at Wed Nov 5 10:39:04 2025 by rpki-client