Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/b4d4ea-f10b-4bcd-a3f5-905276c5c414/1/gcAMyMc9EUHIklTtVWqNASypAiY.mft
File: gcAMyMc9EUHIklTtVWqNASypAiY.mft (raw, json)
Hash identifier: mEx/83aciix50i3X5iRUWsR5kZV9cZG+6l/IpW8gZX0=
Subject key identifier: 5B:47:4E:2B:3F:E2:56:93:DC:37:37:ED:C3:C0:7B:A5:7D:32:8E:6D
Authority key identifier: 81:C0:0C:C8:C7:3D:11:41:C8:92:54:ED:55:6A:8D:01:2C:A9:02:26
Certificate issuer: /CN=81c00cc8c73d1141c89254ed556a8d012ca90226
Certificate serial: 019A4EF58D108E5A006B92856EBD9DA43135
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gcAMyMc9EUHIklTtVWqNASypAiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/b4d4ea-f10b-4bcd-a3f5-905276c5c414/1/gcAMyMc9EUHIklTtVWqNASypAiY.mft
Manifest number: 095A
Signing time: Tue 04 Nov 2025 13:01:46 +0000
Manifest this update: Tue 04 Nov 2025 13:01:46 +0000
Manifest next update: Wed 05 Nov 2025 13:01:46 +0000
Files and hashes: 1: Oem3WDZnY6cSIaGyLYBEI1Ng_fU.roa (hash: A6c2c+PXtuhOYqewWMvzWTg68sLONrRYQPMKhm+zXUU=)
2: gcAMyMc9EUHIklTtVWqNASypAiY.crl (hash: WHC1+bInWBeytj6R7O04w4hk6maiNfclcVd1hzGJf3c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/b4d4ea-f10b-4bcd-a3f5-905276c5c414/1/gcAMyMc9EUHIklTtVWqNASypAiY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/b4d4ea-f10b-4bcd-a3f5-905276c5c414/1/gcAMyMc9EUHIklTtVWqNASypAiY.mft
rsync://rpki.ripe.net/repository/DEFAULT/gcAMyMc9EUHIklTtVWqNASypAiY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:8d:10:8e:5a:00:6b:92:85:6e:bd:9d:a4:31:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81c00cc8c73d1141c89254ed556a8d012ca90226
Validity
Not Before: Nov 4 13:01:46 2025 GMT
Not After : Nov 5 13:01:46 2025 GMT
Subject: CN=5b474e2b3fe25693dc3737edc3c07ba57d328e6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d7:ad:0b:eb:77:03:13:88:8e:20:20:62:39:
c4:bb:91:29:6b:0a:73:81:83:3c:37:ad:7c:b0:9e:
23:d9:05:8b:58:c7:d2:65:d7:7e:84:ab:fa:05:a9:
c9:34:1b:eb:98:b4:51:5f:8f:0f:35:53:de:84:b3:
8c:32:f3:ce:2b:7b:ce:a6:2b:b8:38:21:c8:5e:c9:
ac:86:85:6c:8e:d7:57:08:27:6f:7d:00:fb:9d:20:
87:18:dd:92:24:8d:68:67:36:39:02:d7:b9:a3:2f:
5b:6d:af:ea:63:9e:9e:d9:c9:80:f5:67:f1:5c:48:
c3:49:7e:04:44:b7:c3:ce:33:96:95:fc:cb:2d:be:
a4:e1:36:2c:29:32:70:9d:36:4e:e2:01:12:e7:a4:
bb:f2:b8:43:7c:84:bd:22:59:bf:bd:1b:14:89:77:
7c:55:fc:be:a0:17:dd:f2:b1:ab:63:0f:ef:a3:b3:
43:3e:aa:31:b6:2e:a7:3d:52:36:26:70:ce:e7:81:
26:cc:8a:b4:eb:65:07:5b:6c:85:96:52:b0:fc:45:
0b:cf:6a:fb:fe:71:2f:d5:69:a3:e4:c5:79:29:5f:
c2:91:9f:a7:a6:69:43:65:d2:87:24:f9:58:51:9f:
96:a7:bd:23:0f:f4:b9:b3:3c:cb:37:e8:2b:99:77:
e4:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:47:4E:2B:3F:E2:56:93:DC:37:37:ED:C3:C0:7B:A5:7D:32:8E:6D
X509v3 Authority Key Identifier:
keyid:81:C0:0C:C8:C7:3D:11:41:C8:92:54:ED:55:6A:8D:01:2C:A9:02:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gcAMyMc9EUHIklTtVWqNASypAiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b4d4ea-f10b-4bcd-a3f5-905276c5c414/1/gcAMyMc9EUHIklTtVWqNASypAiY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b4d4ea-f10b-4bcd-a3f5-905276c5c414/1/gcAMyMc9EUHIklTtVWqNASypAiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:96:d4:b0:82:ad:e8:3b:d8:1e:e5:e2:94:fc:60:91:88:1f:
43:a3:a9:d1:c5:5d:1f:8a:c6:8f:a4:46:f9:f4:92:b0:c9:5b:
65:58:ec:8e:c2:55:3b:dc:98:d2:f5:92:4f:5f:1f:8f:da:cc:
97:8a:d7:d5:54:b1:6c:62:29:2d:d0:ca:e6:3e:27:0a:bf:11:
d1:80:e5:5b:b8:23:bf:85:dd:a4:1f:6b:ac:39:bb:ec:33:e7:
b4:ac:79:b8:68:33:6a:de:eb:35:d9:0b:6b:23:4a:6a:70:3d:
37:3c:18:a4:8a:e4:3e:1c:e7:33:bd:f0:d3:90:a2:8e:2a:0b:
70:fe:eb:70:ce:59:0a:92:76:64:03:e6:7c:47:28:a7:ec:13:
73:d5:2b:c7:cd:ba:f7:1b:9e:fe:9c:ca:91:fa:02:fb:f3:24:
5b:41:3b:31:64:0f:4e:4a:3e:ca:d2:e7:b9:04:ea:b7:83:70:
ce:10:b2:86:03:06:77:0e:06:6a:53:a3:5c:92:d7:aa:e6:b9:
16:ec:45:ed:ce:88:f1:b2:32:cb:dc:af:04:e1:27:35:3a:9b:
54:a6:3c:78:6b:1d:95:cd:38:22:0a:27:a3:61:69:21:48:68:
f2:4b:05:e3:fe:29:9b:75:bb:6c:4f:96:17:1e:e6:92:ce:68:
2b:56:dc:9b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9Y0QjloAa5KFbr2dpDE1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxYzAwY2M4YzczZDExNDFjODkyNTRlZDU1NmE4ZDAxMmNh
OTAyMjYwHhcNMjUxMTA0MTMwMTQ2WhcNMjUxMTA1MTMwMTQ2WjAzMTEwLwYDVQQD
Eyg1YjQ3NGUyYjNmZTI1NjkzZGMzNzM3ZWRjM2MwN2JhNTdkMzI4ZTZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArNetC+t3AxOIjiAgYjnEu5Epawpz
gYM8N618sJ4j2QWLWMfSZdd+hKv6BanJNBvrmLRRX48PNVPehLOMMvPOK3vOpiu4
OCHIXsmshoVsjtdXCCdvfQD7nSCHGN2SJI1oZzY5Ate5oy9bba/qY56e2cmA9Wfx
XEjDSX4ERLfDzjOWlfzLLb6k4TYsKTJwnTZO4gES56S78rhDfIS9Ilm/vRsUiXd8
Vfy+oBfd8rGrYw/vo7NDPqoxti6nPVI2JnDO54EmzIq062UHW2yFllKw/EULz2r7
/nEv1Wmj5MV5KV/CkZ+npmlDZdKHJPlYUZ+Wp70jD/S5szzLN+grmXfkZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFtHTis/4laT3Dc37cPAe6V9Mo5tMB8GA1UdIwQY
MBaAFIHADMjHPRFByJJU7VVqjQEsqQImMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ2NBTXlNYzlFVUhJa2xUdFZXcU5BU3lwQWlZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9iNGQ0ZWEtZjEwYi00YmNkLWEzZjUt
OTA1Mjc2YzVjNDE0LzEvZ2NBTXlNYzlFVUhJa2xUdFZXcU5BU3lwQWlZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy9iNGQ0ZWEtZjEwYi00YmNkLWEzZjUtOTA1Mjc2YzVjNDE0
LzEvZ2NBTXlNYzlFVUhJa2xUdFZXcU5BU3lwQWlZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANpbUsIKt
6DvYHuXilPxgkYgfQ6Op0cVdH4rGj6RG+fSSsMlbZVjsjsJVO9yY0vWST18fj9rM
l4rX1VSxbGIpLdDK5j4nCr8R0YDlW7gjv4XdpB9rrDm77DPntKx5uGgzat7rNdkL
ayNKanA9NzwYpIrkPhznM73w05CijioLcP7rcM5ZCpJ2ZAPmfEcop+wTc9Urx826
9xue/pzKkfoC+/MkW0E7MWQPTko+ytLnuQTqt4NwzhCyhgMGdw4GalOjXJLXqua5
FuxF7c6I8bIyy9yvBOEnNTqbVKY8eGsdlc04Igono2FpIUho8ksF4/4pm3W7bE+W
Fx7mks5oK1bcmw==
-----END CERTIFICATE-----
Generated at Tue Nov 4 15:17:38 2025 by rpki-client