Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/0566be-f832-4e74-8966-f26adff40cc1/1/GGDjbiWx26EXgHXIA8KaBEzs_eE.mft
File: GGDjbiWx26EXgHXIA8KaBEzs_eE.mft (raw, json)
Hash identifier: EinihSrfk/qDo+5IrxwgqewiU/x9/QpOAEq1ZVsW2bg=
Subject key identifier: F0:EA:3F:B6:2F:39:86:B9:FE:2D:F0:2E:60:04:6A:E1:30:D1:83:47
Authority key identifier: 18:60:E3:6E:25:B1:DB:A1:17:80:75:C8:03:C2:9A:04:4C:EC:FD:E1
Certificate issuer: /CN=1860e36e25b1dba1178075c803c29a044cecfde1
Certificate serial: 019A4F62B2B52B1DD979DCA317BDB62850BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GGDjbiWx26EXgHXIA8KaBEzs_eE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/0566be-f832-4e74-8966-f26adff40cc1/1/GGDjbiWx26EXgHXIA8KaBEzs_eE.mft
Manifest number: 0A32
Signing time: Tue 04 Nov 2025 15:00:59 +0000
Manifest this update: Tue 04 Nov 2025 15:00:59 +0000
Manifest next update: Wed 05 Nov 2025 15:00:59 +0000
Files and hashes: 1: 1-ZAn3Qtlz0s6H8sKz3KAGMVojlQ.roa (hash: 1vtVvmn1NKghe/1GEiZ2YPPlg6egHJXC9enaE5kl0Rk=)
2: GGDjbiWx26EXgHXIA8KaBEzs_eE.crl (hash: 3qtdLSSoitmh7VP8Lja7L0+r/fOw+ivMaUqXatKPPB8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/0566be-f832-4e74-8966-f26adff40cc1/1/GGDjbiWx26EXgHXIA8KaBEzs_eE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/0566be-f832-4e74-8966-f26adff40cc1/1/GGDjbiWx26EXgHXIA8KaBEzs_eE.mft
rsync://rpki.ripe.net/repository/DEFAULT/GGDjbiWx26EXgHXIA8KaBEzs_eE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:b2:b5:2b:1d:d9:79:dc:a3:17:bd:b6:28:50:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1860e36e25b1dba1178075c803c29a044cecfde1
Validity
Not Before: Nov 4 15:00:59 2025 GMT
Not After : Nov 5 15:00:59 2025 GMT
Subject: CN=f0ea3fb62f3986b9fe2df02e60046ae130d18347
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:42:8f:41:fe:8c:fd:98:ad:c3:26:e8:68:71:
83:03:9c:98:e0:2b:d7:60:5d:90:ba:64:30:74:6f:
ff:11:fb:d5:6a:d4:2a:5a:53:b4:ad:a1:71:66:09:
f2:12:eb:d3:6c:d2:8d:94:cf:78:cb:d1:99:e2:32:
dd:c8:1e:da:38:5e:e8:13:d5:01:54:7e:4d:71:f6:
8c:4b:59:ca:c7:f9:4d:8e:fe:11:86:ff:1d:f4:65:
ae:7c:4e:c5:02:02:61:e1:a7:da:ef:33:dc:81:fe:
1c:a6:2f:f5:92:a9:8e:81:96:2a:d6:59:1a:72:52:
d9:19:41:a2:62:1b:87:2f:ca:89:98:69:ec:58:9a:
d9:b1:7f:42:64:60:a8:c0:8f:b0:2c:84:11:7a:77:
75:7e:a9:17:12:c6:9f:f5:12:28:87:c5:6e:27:f6:
42:75:a6:fe:bb:f2:65:4d:2c:bd:c4:df:22:5b:78:
e8:61:a0:dc:20:04:76:01:2b:7a:50:ef:bc:66:4c:
f7:47:00:12:6d:dc:19:85:d2:0c:81:48:e5:76:9f:
56:84:c4:fa:a2:9f:88:53:90:e6:9c:6c:92:bf:89:
bc:f5:f1:cc:11:28:59:1a:b0:8a:6d:4d:d5:e1:f6:
d9:39:7b:4e:d1:9f:e5:6e:f9:e2:63:95:32:2a:05:
a9:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:EA:3F:B6:2F:39:86:B9:FE:2D:F0:2E:60:04:6A:E1:30:D1:83:47
X509v3 Authority Key Identifier:
keyid:18:60:E3:6E:25:B1:DB:A1:17:80:75:C8:03:C2:9A:04:4C:EC:FD:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GGDjbiWx26EXgHXIA8KaBEzs_eE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/0566be-f832-4e74-8966-f26adff40cc1/1/GGDjbiWx26EXgHXIA8KaBEzs_eE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/0566be-f832-4e74-8966-f26adff40cc1/1/GGDjbiWx26EXgHXIA8KaBEzs_eE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:b8:a3:78:90:40:35:96:6e:d4:34:64:d9:d8:13:e3:3b:84:
64:f7:a7:b7:23:05:60:da:6b:dc:e6:ac:d3:8e:22:8a:75:53:
39:08:c7:b2:56:70:26:b9:37:8a:e4:d4:2a:54:79:c8:c7:40:
4e:e8:96:08:32:06:d4:3b:54:8f:b3:6a:7f:45:7b:75:06:17:
9e:b0:59:89:80:2d:54:09:9f:25:9e:60:24:bf:74:13:5f:da:
66:79:2c:1f:dc:9f:a9:ec:eb:14:de:d2:ac:bc:7a:d7:f8:d9:
3f:b9:bd:f4:4a:d0:94:25:8d:04:4f:21:bb:ec:95:dc:59:41:
5e:39:c6:53:cc:c9:31:2c:a8:0d:ef:93:bf:ad:b8:e9:e1:29:
a0:fe:c6:be:67:38:74:33:e6:98:dd:55:d0:ea:8e:7e:4b:6b:
9c:a6:14:49:a6:f3:62:e6:d6:e5:ae:41:3c:b1:3b:da:a1:36:
19:47:03:94:18:b4:b5:8e:d3:3e:b6:a0:48:59:ea:40:76:25:
69:a2:c4:d4:69:f9:4f:2c:98:ff:c1:8a:ca:30:eb:4c:27:c8:
96:e0:d5:73:4a:d9:a7:9a:a7:78:40:b3:fd:5b:b7:ab:d5:23:
b0:57:a9:7e:b9:cc:e3:0a:46:0a:00:cd:71:42:4c:8c:79:8f:
a9:4c:23:8d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPYrK1Kx3ZedyjF722KFC8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE4NjBlMzZlMjViMWRiYTExNzgwNzVjODAzYzI5YTA0NGNl
Y2ZkZTEwHhcNMjUxMTA0MTUwMDU5WhcNMjUxMTA1MTUwMDU5WjAzMTEwLwYDVQQD
EyhmMGVhM2ZiNjJmMzk4NmI5ZmUyZGYwMmU2MDA0NmFlMTMwZDE4MzQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmkKPQf6M/ZitwyboaHGDA5yY4CvX
YF2QumQwdG//EfvVatQqWlO0raFxZgnyEuvTbNKNlM94y9GZ4jLdyB7aOF7oE9UB
VH5NcfaMS1nKx/lNjv4Rhv8d9GWufE7FAgJh4afa7zPcgf4cpi/1kqmOgZYq1lka
clLZGUGiYhuHL8qJmGnsWJrZsX9CZGCowI+wLIQRend1fqkXEsaf9RIoh8VuJ/ZC
dab+u/JlTSy9xN8iW3joYaDcIAR2ASt6UO+8Zkz3RwASbdwZhdIMgUjldp9WhMT6
op+IU5DmnGySv4m89fHMEShZGrCKbU3V4fbZOXtO0Z/lbvniY5UyKgWpAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPDqP7YvOYa5/i3wLmAEauEw0YNHMB8GA1UdIwQY
MBaAFBhg424lsduhF4B1yAPCmgRM7P3hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR0dEamJpV3gyNkVYZ0hYSUE4S2FCRXpzX2VFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi8wNTY2YmUtZjgzMi00ZTc0LTg5NjYt
ZjI2YWRmZjQwY2MxLzEvR0dEamJpV3gyNkVYZ0hYSUE4S2FCRXpzX2VFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi8wNTY2YmUtZjgzMi00ZTc0LTg5NjYtZjI2YWRmZjQwY2Mx
LzEvR0dEamJpV3gyNkVYZ0hYSUE4S2FCRXpzX2VFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGbijeJBA
NZZu1DRk2dgT4zuEZPentyMFYNpr3Oas044iinVTOQjHslZwJrk3iuTUKlR5yMdA
TuiWCDIG1DtUj7Nqf0V7dQYXnrBZiYAtVAmfJZ5gJL90E1/aZnksH9yfqezrFN7S
rLx61/jZP7m99ErQlCWNBE8hu+yV3FlBXjnGU8zJMSyoDe+Tv6246eEpoP7Gvmc4
dDPmmN1V0OqOfktrnKYUSabzYubW5a5BPLE72qE2GUcDlBi0tY7TPragSFnqQHYl
aaLE1Gn5TyyY/8GKyjDrTCfIluDVc0rZp5qneECz/Vu3q9UjsFepfrnM4wpGCgDN
cUJMjHmPqUwjjQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 17:54:32 2025 by rpki-client