Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/c65e48-31c4-4974-89f4-ac2ae483955e/1/GZgd6LdyA5RZREi3oOYlwzo43GY.mft
File: GZgd6LdyA5RZREi3oOYlwzo43GY.mft (raw, json)
Hash identifier: 0mrRPZyEDrhTmKw6TZIGVruknWEA96MmN9NfKLClrxs=
Subject key identifier: 06:F2:B1:C3:6F:88:4B:E2:6E:65:C2:11:76:15:68:8E:82:8A:06:22
Authority key identifier: 19:98:1D:E8:B7:72:03:94:59:44:48:B7:A0:E6:25:C3:3A:38:DC:66
Certificate issuer: /CN=19981de8b7720394594448b7a0e625c33a38dc66
Certificate serial: 019A51875BFA1B6E5EB46AE2F99D3EEA0716
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GZgd6LdyA5RZREi3oOYlwzo43GY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/c65e48-31c4-4974-89f4-ac2ae483955e/1/GZgd6LdyA5RZREi3oOYlwzo43GY.mft
Manifest number: 02AE
Signing time: Wed 05 Nov 2025 01:00:16 +0000
Manifest this update: Wed 05 Nov 2025 01:00:16 +0000
Manifest next update: Thu 06 Nov 2025 01:00:16 +0000
Files and hashes: 1: GZgd6LdyA5RZREi3oOYlwzo43GY.crl (hash: JDC4Ka1dwi+cvXP1/b/+F2uJuiFuH7jGQGhBOhTsYgc=)
2: rJMIHQLkxom4E-e7Qy3aYsdGMVA.roa (hash: Fg5t4xG81KRwBzgiOaCNb7xH+qvhUM++MTkXaN72cEY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/c65e48-31c4-4974-89f4-ac2ae483955e/1/GZgd6LdyA5RZREi3oOYlwzo43GY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/c65e48-31c4-4974-89f4-ac2ae483955e/1/GZgd6LdyA5RZREi3oOYlwzo43GY.mft
rsync://rpki.ripe.net/repository/DEFAULT/GZgd6LdyA5RZREi3oOYlwzo43GY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 01:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:87:5b:fa:1b:6e:5e:b4:6a:e2:f9:9d:3e:ea:07:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19981de8b7720394594448b7a0e625c33a38dc66
Validity
Not Before: Nov 5 01:00:16 2025 GMT
Not After : Nov 6 01:00:16 2025 GMT
Subject: CN=06f2b1c36f884be26e65c2117615688e828a0622
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:00:7f:00:05:43:5f:53:8f:cd:66:9a:68:7a:
5d:2f:65:2e:f3:37:a9:4c:a5:8e:60:58:b1:94:e1:
55:09:60:95:52:cd:84:31:dc:d3:fb:87:57:2d:3d:
59:e8:89:ff:6c:f3:a5:89:50:81:c5:ca:76:55:4f:
5e:ae:0a:46:3f:4e:a5:e2:4d:1b:c8:39:8b:69:fe:
64:2f:52:2e:c9:71:5f:bd:e4:c7:1a:14:4a:e3:3e:
43:45:60:01:47:47:b9:be:cd:0c:81:69:26:be:c0:
71:5d:f1:ea:f8:72:62:95:0e:e4:93:42:3a:70:d9:
be:f8:12:0d:fc:77:1a:58:48:1b:01:fb:85:7f:10:
4d:5b:e1:ad:c7:3e:b7:fa:50:cd:fd:1d:65:41:2a:
92:c5:dd:4f:95:f3:5a:81:c9:e2:c2:09:a6:59:ee:
27:3b:58:b7:63:fa:8d:1a:e0:98:b0:ec:b0:0e:c2:
af:ef:4a:6d:87:8c:7f:4a:ba:86:14:76:7f:01:62:
22:eb:09:36:c9:24:40:4f:bc:c6:70:6f:c7:a4:ca:
a1:a6:55:b5:0c:a6:e8:06:72:3e:f3:71:75:16:db:
82:05:fd:d8:9a:be:e3:c1:53:6a:01:6f:7b:6b:b2:
63:7b:5c:a7:a1:eb:9c:f4:2e:b9:5d:d9:41:bd:10:
3d:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:F2:B1:C3:6F:88:4B:E2:6E:65:C2:11:76:15:68:8E:82:8A:06:22
X509v3 Authority Key Identifier:
keyid:19:98:1D:E8:B7:72:03:94:59:44:48:B7:A0:E6:25:C3:3A:38:DC:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GZgd6LdyA5RZREi3oOYlwzo43GY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/c65e48-31c4-4974-89f4-ac2ae483955e/1/GZgd6LdyA5RZREi3oOYlwzo43GY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/c65e48-31c4-4974-89f4-ac2ae483955e/1/GZgd6LdyA5RZREi3oOYlwzo43GY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:ca:41:a5:6b:32:13:44:d5:8a:f2:bc:8a:7a:54:32:27:12:
12:22:c6:be:b1:17:cc:55:be:94:eb:6c:a7:1a:50:ec:1a:7a:
de:e0:76:fe:28:f4:a8:80:a5:b3:c2:5a:63:b9:1b:ca:bd:1a:
04:fe:39:e7:59:a5:d4:49:a9:5e:18:85:fd:1e:00:3c:72:aa:
d9:e0:62:5b:75:da:fc:9a:19:fa:c3:bf:4f:7b:f8:7d:34:67:
18:a6:cc:ab:3f:97:c4:5f:d1:e2:30:6d:99:78:6b:1d:66:8f:
9a:8f:ce:a1:ff:72:2f:11:83:da:c7:1e:64:15:14:8a:db:2c:
fb:9e:7f:08:d8:5b:ed:32:5e:35:f6:b2:e3:e1:58:61:3b:56:
14:f7:59:47:5d:22:35:53:a5:f9:df:57:83:ce:be:2c:f9:2f:
2c:c4:0d:bf:3a:62:28:cf:72:55:f6:80:6c:4d:94:d5:e6:b1:
37:49:fb:d6:24:6a:e9:95:b5:48:ae:78:0c:54:81:16:8d:13:
23:2f:16:df:dd:f0:02:02:dc:d5:09:64:e4:3a:54:3a:26:47:
e1:f4:14:57:64:0d:c1:f4:09:62:c7:d7:59:32:5e:20:24:22:
87:be:a2:4e:4a:d8:88:72:12:f3:1b:08:b5:7c:cb:b5:5a:83:
d4:cc:3d:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpRh1v6G25etGri+Z0+6gcWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5OTgxZGU4Yjc3MjAzOTQ1OTQ0NDhiN2EwZTYyNWMzM2Ez
OGRjNjYwHhcNMjUxMTA1MDEwMDE2WhcNMjUxMTA2MDEwMDE2WjAzMTEwLwYDVQQD
EygwNmYyYjFjMzZmODg0YmUyNmU2NWMyMTE3NjE1Njg4ZTgyOGEwNjIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtAB/AAVDX1OPzWaaaHpdL2Uu8zep
TKWOYFixlOFVCWCVUs2EMdzT+4dXLT1Z6In/bPOliVCBxcp2VU9ergpGP06l4k0b
yDmLaf5kL1IuyXFfveTHGhRK4z5DRWABR0e5vs0MgWkmvsBxXfHq+HJilQ7kk0I6
cNm++BIN/HcaWEgbAfuFfxBNW+Gtxz63+lDN/R1lQSqSxd1PlfNagcniwgmmWe4n
O1i3Y/qNGuCYsOywDsKv70pth4x/SrqGFHZ/AWIi6wk2ySRAT7zGcG/HpMqhplW1
DKboBnI+83F1FtuCBf3Ymr7jwVNqAW97a7Jje1ynoeuc9C65XdlBvRA9uwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAbyscNviEvibmXCEXYVaI6CigYiMB8GA1UdIwQY
MBaAFBmYHei3cgOUWURIt6DmJcM6ONxmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR1pnZDZMZHlBNVJaUkVpM29PWWx3em80M0dZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9jNjVlNDgtMzFjNC00OTc0LTg5ZjQt
YWMyYWU0ODM5NTVlLzEvR1pnZDZMZHlBNVJaUkVpM29PWWx3em80M0dZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy9jNjVlNDgtMzFjNC00OTc0LTg5ZjQtYWMyYWU0ODM5NTVl
LzEvR1pnZDZMZHlBNVJaUkVpM29PWWx3em80M0dZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK8pBpWsy
E0TVivK8inpUMicSEiLGvrEXzFW+lOtspxpQ7Bp63uB2/ij0qICls8JaY7kbyr0a
BP4551ml1EmpXhiF/R4APHKq2eBiW3Xa/JoZ+sO/T3v4fTRnGKbMqz+XxF/R4jBt
mXhrHWaPmo/Oof9yLxGD2sceZBUUitss+55/CNhb7TJeNfay4+FYYTtWFPdZR10i
NVOl+d9Xg86+LPkvLMQNvzpiKM9yVfaAbE2U1eaxN0n71iRq6ZW1SK54DFSBFo0T
Iy8W393wAgLc1Qlk5DpUOiZH4fQUV2QNwfQJYsfXWTJeICQih76iTkrYiHIS8xsI
tXzLtVqD1Mw9PA==
-----END CERTIFICATE-----
Generated at Wed Nov 5 09:54:54 2025 by rpki-client