Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/e5e2d0-f439-45e4-8540-f19600c7ad54/1/gQYKUYUo6GqOp38YigJjeQwI9rk.mft
File: gQYKUYUo6GqOp38YigJjeQwI9rk.mft (raw, json)
Hash identifier: DqQCt5i3/SBCnoxsd1GoooG8E5VDvo4ZuM2b4W14Thw=
Subject key identifier: E5:24:33:02:CC:C8:C9:23:29:D0:55:75:68:40:A1:01:92:4A:EE:D3
Authority key identifier: 81:06:0A:51:85:28:E8:6A:8E:A7:7F:18:8A:02:63:79:0C:08:F6:B9
Certificate issuer: /CN=81060a518528e86a8ea77f188a0263790c08f6b9
Certificate serial: 019A4EF44B0F872782EAE00B8ADDB66A465E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gQYKUYUo6GqOp38YigJjeQwI9rk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/e5e2d0-f439-45e4-8540-f19600c7ad54/1/gQYKUYUo6GqOp38YigJjeQwI9rk.mft
Manifest number: 1107
Signing time: Tue 04 Nov 2025 13:00:23 +0000
Manifest this update: Tue 04 Nov 2025 13:00:23 +0000
Manifest next update: Wed 05 Nov 2025 13:00:23 +0000
Files and hashes: 1: gQYKUYUo6GqOp38YigJjeQwI9rk.crl (hash: Kylna5E25+WdjK58hdTXHEPnK3uPAz2cAf9lXGotQZE=)
2: mzS0mg7LzekXtU0-AI8vjQNsdnI.roa (hash: W1Odlm/4gNw2/x1K4BE4WalP/0rHvCKJa9lik2Xno0U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/e5e2d0-f439-45e4-8540-f19600c7ad54/1/gQYKUYUo6GqOp38YigJjeQwI9rk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/e5e2d0-f439-45e4-8540-f19600c7ad54/1/gQYKUYUo6GqOp38YigJjeQwI9rk.mft
rsync://rpki.ripe.net/repository/DEFAULT/gQYKUYUo6GqOp38YigJjeQwI9rk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:4b:0f:87:27:82:ea:e0:0b:8a:dd:b6:6a:46:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81060a518528e86a8ea77f188a0263790c08f6b9
Validity
Not Before: Nov 4 13:00:23 2025 GMT
Not After : Nov 5 13:00:23 2025 GMT
Subject: CN=e5243302ccc8c92329d055756840a101924aeed3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e3:41:91:98:00:77:2e:dc:d1:49:67:47:45:
9b:95:b9:42:a9:fa:1a:d3:b1:e8:23:b9:67:66:51:
d3:2b:bd:58:14:17:d3:d4:99:70:e9:e2:ba:58:ad:
33:10:4e:2b:ae:60:ac:c0:14:cf:36:ed:4e:a1:fa:
a3:a2:97:40:cf:b9:d0:42:a2:86:98:b7:d4:63:62:
ee:7c:26:04:65:56:c7:95:c3:8d:27:06:1c:c5:d9:
d3:7b:9e:91:b7:63:5c:af:4d:30:fb:19:75:96:1e:
46:a6:dd:f7:6f:98:84:35:7b:58:9e:2b:ae:85:9e:
7c:ae:6b:fa:07:0b:1b:ef:24:d6:a5:4c:f0:7b:78:
36:57:00:25:0b:27:9a:6f:21:61:81:cb:80:c3:11:
a4:4f:15:c0:14:2d:0e:8d:71:64:7c:09:b3:d5:1e:
29:44:e2:9c:8c:2c:36:99:22:ca:56:37:2a:49:58:
33:0d:44:38:09:70:76:a1:8e:7b:15:20:e6:e2:e6:
c2:49:cc:4b:15:91:5a:56:57:2b:d7:a9:43:4b:82:
74:4a:84:cf:30:35:13:05:38:07:7a:32:7d:f0:1f:
28:59:17:cb:a6:8c:25:a0:54:7e:1e:36:1a:25:d7:
5b:d4:5c:aa:ee:fd:9d:26:29:22:a0:83:36:d1:ed:
16:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:24:33:02:CC:C8:C9:23:29:D0:55:75:68:40:A1:01:92:4A:EE:D3
X509v3 Authority Key Identifier:
keyid:81:06:0A:51:85:28:E8:6A:8E:A7:7F:18:8A:02:63:79:0C:08:F6:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gQYKUYUo6GqOp38YigJjeQwI9rk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/e5e2d0-f439-45e4-8540-f19600c7ad54/1/gQYKUYUo6GqOp38YigJjeQwI9rk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/e5e2d0-f439-45e4-8540-f19600c7ad54/1/gQYKUYUo6GqOp38YigJjeQwI9rk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:ae:cb:02:ea:38:2e:97:c2:88:d7:ab:03:3e:ed:13:78:be:
db:01:06:4e:fb:ac:9b:65:14:fe:c9:63:df:71:f7:78:2c:ff:
8a:96:9a:5b:f4:d7:35:d4:af:17:cc:44:b5:9c:90:17:23:c8:
8c:fe:c7:a4:93:5f:8c:4a:5a:7c:64:b4:59:7c:dd:cd:29:38:
82:04:df:66:3b:4a:4d:85:84:71:56:02:8a:63:86:2f:04:6d:
72:2d:07:d0:1d:bd:8f:67:eb:1a:d9:65:fa:c7:42:95:03:5c:
19:32:a6:b8:0b:75:1c:75:c4:1b:7e:83:19:dd:83:c1:1b:d9:
ef:73:43:eb:63:7c:85:e0:18:51:64:cb:03:fd:da:0a:da:ed:
4e:a6:d3:88:0c:e8:a2:ff:3d:c3:1b:19:4d:ef:7a:ba:40:17:
ab:02:8b:63:ce:e8:12:8d:e1:71:64:4a:4b:ce:bc:3e:05:f6:
46:a3:02:a1:fb:a8:85:61:37:1b:4a:c1:2f:75:ac:25:8c:cc:
17:4d:d6:d2:38:de:4a:56:31:37:89:5c:9b:9c:29:b8:f6:3f:
ab:b3:56:20:8f:2f:77:7a:79:79:b9:f1:43:ba:39:2f:3f:35:
d4:98:ab:84:20:d4:a0:19:e2:b4:cd:0b:bd:27:be:0d:53:7f:
82:e0:18:5e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9EsPhyeC6uALit22akZeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxMDYwYTUxODUyOGU4NmE4ZWE3N2YxODhhMDI2Mzc5MGMw
OGY2YjkwHhcNMjUxMTA0MTMwMDIzWhcNMjUxMTA1MTMwMDIzWjAzMTEwLwYDVQQD
EyhlNTI0MzMwMmNjYzhjOTIzMjlkMDU1NzU2ODQwYTEwMTkyNGFlZWQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAquNBkZgAdy7c0UlnR0WblblCqfoa
07HoI7lnZlHTK71YFBfT1Jlw6eK6WK0zEE4rrmCswBTPNu1OofqjopdAz7nQQqKG
mLfUY2LufCYEZVbHlcONJwYcxdnTe56Rt2Ncr00w+xl1lh5Gpt33b5iENXtYniuu
hZ58rmv6Bwsb7yTWpUzwe3g2VwAlCyeabyFhgcuAwxGkTxXAFC0OjXFkfAmz1R4p
ROKcjCw2mSLKVjcqSVgzDUQ4CXB2oY57FSDm4ubCScxLFZFaVlcr16lDS4J0SoTP
MDUTBTgHejJ98B8oWRfLpowloFR+HjYaJddb1Fyq7v2dJikioIM20e0W4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOUkMwLMyMkjKdBVdWhAoQGSSu7TMB8GA1UdIwQY
MBaAFIEGClGFKOhqjqd/GIoCY3kMCPa5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ1FZS1VZVW82R3FPcDM4WWlnSmplUXdJOXJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9lNWUyZDAtZjQzOS00NWU0LTg1NDAt
ZjE5NjAwYzdhZDU0LzEvZ1FZS1VZVW82R3FPcDM4WWlnSmplUXdJOXJrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy9lNWUyZDAtZjQzOS00NWU0LTg1NDAtZjE5NjAwYzdhZDU0
LzEvZ1FZS1VZVW82R3FPcDM4WWlnSmplUXdJOXJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIq7LAuo4
LpfCiNerAz7tE3i+2wEGTvusm2UU/slj33H3eCz/ipaaW/TXNdSvF8xEtZyQFyPI
jP7HpJNfjEpafGS0WXzdzSk4ggTfZjtKTYWEcVYCimOGLwRtci0H0B29j2frGtll
+sdClQNcGTKmuAt1HHXEG36DGd2DwRvZ73ND62N8heAYUWTLA/3aCtrtTqbTiAzo
ov89wxsZTe96ukAXqwKLY87oEo3hcWRKS868PgX2RqMCofuohWE3G0rBL3WsJYzM
F03W0jjeSlYxN4lcm5wpuPY/q7NWII8vd3p5ebnxQ7o5Lz811JirhCDUoBnitM0L
vSe+DVN/guAYXg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:41:54 2025 by rpki-client