Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/gI4jjjDct1l1n7ijlNniEaKLnYc.mft
File: gI4jjjDct1l1n7ijlNniEaKLnYc.mft (raw, json)
Hash identifier: gBMqG37P7G4Vy5tp3VqoYPtNGnBaNO771P8b+l16oPA=
Subject key identifier: 32:59:B0:1E:AD:F6:BA:F4:B4:8A:B8:79:9D:CA:30:28:4D:C4:94:8C
Authority key identifier: 80:8E:23:8E:30:DC:B7:59:75:9F:B8:A3:94:D9:E2:11:A2:8B:9D:87
Certificate issuer: /CN=808e238e30dcb759759fb8a394d9e211a28b9d87
Certificate serial: 019A571BD8534A5CA6A0049BA062E945847B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gI4jjjDct1l1n7ijlNniEaKLnYc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/gI4jjjDct1l1n7ijlNniEaKLnYc.mft
Manifest number: 16CA
Signing time: Thu 06 Nov 2025 03:00:33 +0000
Manifest this update: Thu 06 Nov 2025 03:00:33 +0000
Manifest next update: Fri 07 Nov 2025 03:00:33 +0000
Files and hashes: 1: FZaUJFQYhfOyQWOOlP3rV_o9nW4.roa (hash: 8mXMxLhYRdd/VkcpNmHYspbdck1amSr4XmtcJs+HDLA=)
2: QsA63htkLwfYnYHs-Kq4o8mj9CE.roa (hash: rn3uqwJBUFxLOERoWp4bxdCoGJiytcYNcQK3zAQq29M=)
3: WG0ANufF85rxDdd9Qpj3xWNbQEc.roa (hash: Sp37WqNPSToQfWSQsZD+qupyLcdSmiraov2p9HxbLVc=)
4: X5Fww_8KGev_5n5MWd8zbg2gmXc.roa (hash: DIztrJ51Kpwe3HNc07UEuOz1jm3MBQvVt7F7Mikk1H4=)
5: bJSjsJ3BIHwc_xXJ1R0xw1ipkaw.roa (hash: LBopJzLBdYAjF0iPvUvU2j1Vv+Rl7/hkuGtkkvmE9pk=)
6: gI4jjjDct1l1n7ijlNniEaKLnYc.crl (hash: zNnvAYtym2RDAOBy7sz4LKk4D/0WKMcZ5Qw565wrGMM=)
7: jhr_GFldqDt1qMGamMwZGXuEY9U.roa (hash: 1yDuZhUHai2SzEeMsTrIrMSyGKcGUnmYYO7txoQyhP0=)
8: l-taV26zQ7WeFxi5U2wEDJxQkyQ.roa (hash: 7NgCRlAWBxyzQ19N/UKMAgzRr/Nec4zr9xbSFVxPVyI=)
9: y4FE1rBXMFm62wHyyCqUymbJNYs.roa (hash: MR4VvjpI1G7xCd6u/lSzNw5eAzME4oCWzew3Uw7zWlY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/gI4jjjDct1l1n7ijlNniEaKLnYc.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/gI4jjjDct1l1n7ijlNniEaKLnYc.mft
rsync://rpki.ripe.net/repository/DEFAULT/gI4jjjDct1l1n7ijlNniEaKLnYc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 21:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:57:1b:d8:53:4a:5c:a6:a0:04:9b:a0:62:e9:45:84:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=808e238e30dcb759759fb8a394d9e211a28b9d87
Validity
Not Before: Nov 6 03:00:33 2025 GMT
Not After : Nov 7 03:00:33 2025 GMT
Subject: CN=3259b01eadf6baf4b48ab8799dca30284dc4948c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:c4:cd:53:b2:6d:13:f6:88:b2:cc:5b:7f:10:
d0:c9:4a:b6:30:fb:89:fa:30:d0:30:6a:6a:71:b7:
6d:84:5e:d4:da:e3:1a:e6:76:9f:0b:45:a3:a7:50:
9d:ee:09:f7:d6:8d:a8:78:ea:ff:23:09:86:ed:45:
46:f0:ae:42:d2:c4:67:95:07:87:05:c8:48:fe:90:
0b:2e:cc:bd:2f:14:28:5a:cb:eb:95:89:b2:7c:ab:
a3:e2:b1:8e:ec:99:a3:9e:a9:d4:6b:3f:21:d5:93:
b9:a1:78:08:15:b9:49:18:9b:ad:bb:4e:42:16:63:
cf:fb:fb:3b:97:7d:73:ac:ef:79:23:95:92:07:e0:
b3:54:11:80:03:36:a4:d8:ef:f1:56:c9:82:74:b2:
8a:fb:e9:bc:44:78:c5:8d:96:ec:b4:79:1e:7d:25:
d0:52:19:c0:83:0e:3b:7b:a4:04:f0:0a:bf:a2:30:
af:ad:ea:7e:31:0b:1b:6a:16:d5:c8:91:43:30:f8:
90:f6:25:32:45:4c:6f:6e:99:14:f7:da:42:08:38:
92:99:16:36:06:08:12:37:cd:2c:2b:84:dd:31:01:
91:f7:3f:65:66:99:51:eb:64:07:dd:f3:ce:c1:10:
5f:59:79:ed:5f:6d:3a:7c:db:d7:91:e6:ab:7d:40:
65:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:59:B0:1E:AD:F6:BA:F4:B4:8A:B8:79:9D:CA:30:28:4D:C4:94:8C
X509v3 Authority Key Identifier:
keyid:80:8E:23:8E:30:DC:B7:59:75:9F:B8:A3:94:D9:E2:11:A2:8B:9D:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gI4jjjDct1l1n7ijlNniEaKLnYc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/gI4jjjDct1l1n7ijlNniEaKLnYc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/gI4jjjDct1l1n7ijlNniEaKLnYc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:0f:5e:6d:94:a4:9d:14:a9:5e:75:e8:7f:30:6d:c5:7f:d1:
2b:f9:5b:e6:69:39:66:3d:29:c2:b0:63:8f:ab:6b:bb:6b:3c:
8e:df:24:d0:1b:67:3b:48:33:dd:0c:b2:6b:e7:e4:d8:a1:bf:
ae:a6:0e:eb:ae:bb:30:77:22:c0:59:00:08:e3:8f:4a:d4:78:
4e:9c:44:20:91:7c:52:1b:b7:4d:44:74:d9:a0:55:2c:2a:f4:
21:3a:ee:0b:6b:4e:52:5d:ac:48:65:95:e4:66:2a:bc:2a:4c:
b8:47:06:38:d5:8f:87:7a:49:84:ea:74:19:32:f0:5b:4e:f1:
96:90:28:1c:71:ed:23:5d:1f:b0:7c:fe:d4:eb:e6:42:49:cd:
94:ab:25:4f:95:10:06:69:de:65:c0:62:08:91:fa:13:ec:8c:
ec:0f:cd:61:9c:1a:03:c1:4a:8f:70:52:e0:ea:99:58:0d:86:
ba:cf:01:fd:cd:37:2f:3e:4f:45:43:6d:1b:4f:c3:31:5a:17:
72:a2:e0:d9:39:07:c9:69:63:c6:a0:68:17:88:cc:90:e1:41:
18:a4:32:8d:15:70:c9:b4:25:5c:f4:ef:72:2f:8e:fe:9c:04:
aa:50:57:c8:bc:91:0b:e6:c5:ce:92:64:b6:7b:9a:d2:57:6a:
4f:b9:a2:11
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpXG9hTSlymoASboGLpRYR7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgwOGUyMzhlMzBkY2I3NTk3NTlmYjhhMzk0ZDllMjExYTI4
YjlkODcwHhcNMjUxMTA2MDMwMDMzWhcNMjUxMTA3MDMwMDMzWjAzMTEwLwYDVQQD
EygzMjU5YjAxZWFkZjZiYWY0YjQ4YWI4Nzk5ZGNhMzAyODRkYzQ5NDhjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlcTNU7JtE/aIssxbfxDQyUq2MPuJ
+jDQMGpqcbdthF7U2uMa5nafC0Wjp1Cd7gn31o2oeOr/IwmG7UVG8K5C0sRnlQeH
BchI/pALLsy9LxQoWsvrlYmyfKuj4rGO7JmjnqnUaz8h1ZO5oXgIFblJGJutu05C
FmPP+/s7l31zrO95I5WSB+CzVBGAAzak2O/xVsmCdLKK++m8RHjFjZbstHkefSXQ
UhnAgw47e6QE8Aq/ojCvrep+MQsbahbVyJFDMPiQ9iUyRUxvbpkU99pCCDiSmRY2
BggSN80sK4TdMQGR9z9lZplR62QH3fPOwRBfWXntX206fNvXkearfUBlYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDJZsB6t9rr0tIq4eZ3KMChNxJSMMB8GA1UdIwQY
MBaAFICOI44w3LdZdZ+4o5TZ4hGii52HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ0k0ampqRGN0MWwxbjdpamxObmlFYUtMblljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi83YjJjZDYtYjFmMy00M2ZjLTlmMDkt
Y2Q5NzQwNDI2NDlmLzEvZ0k0ampqRGN0MWwxbjdpamxObmlFYUtMblljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi83YjJjZDYtYjFmMy00M2ZjLTlmMDktY2Q5NzQwNDI2NDlm
LzEvZ0k0ampqRGN0MWwxbjdpamxObmlFYUtMblljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATA9ebZSk
nRSpXnXofzBtxX/RK/lb5mk5Zj0pwrBjj6tru2s8jt8k0BtnO0gz3Qyya+fk2KG/
rqYO6667MHciwFkACOOPStR4TpxEIJF8Uhu3TUR02aBVLCr0ITruC2tOUl2sSGWV
5GYqvCpMuEcGONWPh3pJhOp0GTLwW07xlpAoHHHtI10fsHz+1OvmQknNlKslT5UQ
BmneZcBiCJH6E+yM7A/NYZwaA8FKj3BS4OqZWA2Gus8B/c03Lz5PRUNtG0/DMVoX
cqLg2TkHyWljxqBoF4jMkOFBGKQyjRVwybQlXPTvci+O/pwEqlBXyLyRC+bFzpJk
tnua0ldqT7miEQ==
-----END CERTIFICATE-----
Generated at Thu Nov 6 06:08:57 2025 by rpki-client