Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/b2397c-b36d-46a3-a240-1d9a19f1295b/1/g_W9I77F0GOYM6kUGYXMV1OIbhY.mft
File: g_W9I77F0GOYM6kUGYXMV1OIbhY.mft (raw, json)
Hash identifier: shoPbT6fZ5xC//vliIV3q9vRRj6xsGqrOnUsJRrTJJQ=
Subject key identifier: E9:DC:F5:EE:B9:B8:D3:A3:51:64:C1:DC:27:71:04:C7:90:E2:A7:CC
Authority key identifier: 83:F5:BD:23:BE:C5:D0:63:98:33:A9:14:19:85:CC:57:53:88:6E:16
Certificate issuer: /CN=83f5bd23bec5d0639833a9141985cc5753886e16
Certificate serial: 019A4EF416FDA08E719DF40465AED8D7BC53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g_W9I77F0GOYM6kUGYXMV1OIbhY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/b2397c-b36d-46a3-a240-1d9a19f1295b/1/g_W9I77F0GOYM6kUGYXMV1OIbhY.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 13:00:10 +0000
Manifest this update: Tue 04 Nov 2025 13:00:10 +0000
Manifest next update: Wed 05 Nov 2025 13:00:10 +0000
Files and hashes: 1: 1H2Y74rOLQCMhy2O3X9ouFiEkFY.roa (hash: fzT1x1Cd9KzjMSBAyqcBMyBoif3guu8C9asSN6fBGTo=)
2: g_W9I77F0GOYM6kUGYXMV1OIbhY.crl (hash: CkJvgj+1BuNRtkVMK4DOjEWuI6MSDniSlp9lwSkP1oI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/b2397c-b36d-46a3-a240-1d9a19f1295b/1/g_W9I77F0GOYM6kUGYXMV1OIbhY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/b2397c-b36d-46a3-a240-1d9a19f1295b/1/g_W9I77F0GOYM6kUGYXMV1OIbhY.mft
rsync://rpki.ripe.net/repository/DEFAULT/g_W9I77F0GOYM6kUGYXMV1OIbhY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:16:fd:a0:8e:71:9d:f4:04:65:ae:d8:d7:bc:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83f5bd23bec5d0639833a9141985cc5753886e16
Validity
Not Before: Nov 4 13:00:10 2025 GMT
Not After : Nov 5 13:00:10 2025 GMT
Subject: CN=e9dcf5eeb9b8d3a35164c1dc277104c790e2a7cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:3a:ba:ae:f7:4d:6a:2d:30:71:44:b8:be:03:
19:5e:16:ac:2c:1b:23:71:19:f7:d8:16:16:64:c8:
9d:b3:f5:9c:6d:38:71:3b:45:c4:d2:9e:01:27:1b:
ff:c7:8e:08:54:14:c9:4a:14:da:bb:61:57:8d:04:
81:89:40:c9:62:06:c6:7c:1b:10:5a:a8:16:3a:53:
b1:65:c8:fe:bb:0b:e3:61:eb:0f:ae:af:24:2a:3e:
94:1d:1a:d2:f8:81:60:79:d3:16:e6:21:9b:59:f5:
6a:14:e3:d6:b6:d1:8c:3c:96:ba:6e:27:6b:f2:80:
0f:38:e8:79:67:55:57:16:5c:6e:6d:86:a0:28:1b:
5b:fa:4b:a7:5e:39:2e:bc:51:6b:35:0f:cc:17:c4:
b1:c4:5c:57:c0:17:cd:f2:76:70:89:f2:31:be:3a:
41:fa:0d:35:c7:eb:9c:e8:8c:d6:ec:d0:6e:12:5b:
e5:8a:40:6f:55:61:77:e4:55:88:fc:e0:ac:67:8a:
0a:f6:d4:08:af:3a:dd:22:79:12:26:ba:b9:53:97:
3d:a0:ac:bc:ae:6a:14:a1:52:ac:98:56:60:11:4b:
82:60:1f:47:9d:ac:b8:ec:10:46:6c:db:07:3e:4c:
8e:82:12:35:ac:bb:0a:ed:ab:84:32:d8:c4:bb:fa:
34:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:DC:F5:EE:B9:B8:D3:A3:51:64:C1:DC:27:71:04:C7:90:E2:A7:CC
X509v3 Authority Key Identifier:
keyid:83:F5:BD:23:BE:C5:D0:63:98:33:A9:14:19:85:CC:57:53:88:6E:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g_W9I77F0GOYM6kUGYXMV1OIbhY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/b2397c-b36d-46a3-a240-1d9a19f1295b/1/g_W9I77F0GOYM6kUGYXMV1OIbhY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/b2397c-b36d-46a3-a240-1d9a19f1295b/1/g_W9I77F0GOYM6kUGYXMV1OIbhY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:3c:5d:58:7f:8e:e1:d5:e5:f7:b1:c7:bf:87:27:5c:0e:09:
c9:18:1b:1b:e4:36:5a:3c:05:0d:d3:b8:c7:24:df:23:b0:ad:
38:90:63:82:50:19:32:34:e8:1c:7a:69:bc:9e:50:e4:2f:c2:
8b:30:ca:b8:08:3c:0b:2a:5a:61:66:66:89:47:30:8a:92:43:
7c:84:e7:46:09:61:5e:c5:b9:4e:d5:1c:3e:d1:e7:df:23:13:
f5:61:b9:2a:86:85:23:e2:83:5d:2f:3c:19:aa:bd:d8:29:3f:
be:8b:ca:77:7a:ac:94:cc:4c:f4:c2:2e:cc:ed:c1:f9:bc:7f:
69:08:ba:b6:13:ea:e0:2b:12:86:49:bf:57:a6:26:b1:b7:f4:
c7:e3:95:57:92:b6:46:85:2c:f0:11:08:bb:ce:c8:3c:5a:38:
2c:2a:14:66:1d:28:f6:ec:cc:7d:e1:c1:40:15:cf:e6:d0:72:
a5:d4:29:0a:c3:c5:5c:03:d6:dc:9b:ca:a3:ed:44:34:e4:fd:
30:f4:a2:03:cd:61:2b:c3:9b:e2:2d:d2:51:a9:e6:87:a7:e4:
c3:ea:64:0e:1c:5d:b3:23:67:ba:20:18:90:8f:00:07:14:6e:
93:09:e8:e5:89:a2:6f:d0:2f:34:66:04:4a:90:4f:88:ab:ec:
be:e1:cf:97
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9Bb9oI5xnfQEZa7Y17xTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzZjViZDIzYmVjNWQwNjM5ODMzYTkxNDE5ODVjYzU3NTM4
ODZlMTYwHhcNMjUxMTA0MTMwMDEwWhcNMjUxMTA1MTMwMDEwWjAzMTEwLwYDVQQD
EyhlOWRjZjVlZWI5YjhkM2EzNTE2NGMxZGMyNzcxMDRjNzkwZTJhN2NjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzjq6rvdNai0wcUS4vgMZXhasLBsj
cRn32BYWZMids/WcbThxO0XE0p4BJxv/x44IVBTJShTau2FXjQSBiUDJYgbGfBsQ
WqgWOlOxZcj+uwvjYesPrq8kKj6UHRrS+IFgedMW5iGbWfVqFOPWttGMPJa6bidr
8oAPOOh5Z1VXFlxubYagKBtb+kunXjkuvFFrNQ/MF8SxxFxXwBfN8nZwifIxvjpB
+g01x+uc6IzW7NBuElvlikBvVWF35FWI/OCsZ4oK9tQIrzrdInkSJrq5U5c9oKy8
rmoUoVKsmFZgEUuCYB9Hnay47BBGbNsHPkyOghI1rLsK7auEMtjEu/o0CQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOnc9e65uNOjUWTB3CdxBMeQ4qfMMB8GA1UdIwQY
MBaAFIP1vSO+xdBjmDOpFBmFzFdTiG4WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ19XOUk3N0YwR09ZTTZrVUdZWE1WMU9JYmhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9iMjM5N2MtYjM2ZC00NmEzLWEyNDAt
MWQ5YTE5ZjEyOTViLzEvZ19XOUk3N0YwR09ZTTZrVUdZWE1WMU9JYmhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi9iMjM5N2MtYjM2ZC00NmEzLWEyNDAtMWQ5YTE5ZjEyOTVi
LzEvZ19XOUk3N0YwR09ZTTZrVUdZWE1WMU9JYmhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjjxdWH+O
4dXl97HHv4cnXA4JyRgbG+Q2WjwFDdO4xyTfI7CtOJBjglAZMjToHHppvJ5Q5C/C
izDKuAg8CypaYWZmiUcwipJDfITnRglhXsW5TtUcPtHn3yMT9WG5KoaFI+KDXS88
Gaq92Ck/vovKd3qslMxM9MIuzO3B+bx/aQi6thPq4CsShkm/V6Ymsbf0x+OVV5K2
RoUs8BEIu87IPFo4LCoUZh0o9uzMfeHBQBXP5tBypdQpCsPFXAPW3JvKo+1ENOT9
MPSiA81hK8Ob4i3SUanmh6fkw+pkDhxdsyNnuiAYkI8ABxRukwno5Ymib9AvNGYE
SpBPiKvsvuHPlw==
-----END CERTIFICATE-----
Generated at Tue Nov 4 15:08:30 2025 by rpki-client