Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/64e19f-fe54-42cd-8923-09b9920fe00f/1/gL0AgpU21HdF9H2p0ainL23UYtQ.mft
File: gL0AgpU21HdF9H2p0ainL23UYtQ.mft (raw, json)
Hash identifier: UdQWvBO71OulOkulyCAxyhyOEAYg8mUFzwbMGFm1EcA=
Subject key identifier: A1:9A:67:BB:1B:90:15:C5:20:88:50:A4:6E:96:55:4C:65:92:4D:82
Authority key identifier: 80:BD:00:82:95:36:D4:77:45:F4:7D:A9:D1:A8:A7:2F:6D:D4:62:D4
Certificate issuer: /CN=80bd00829536d47745f47da9d1a8a72f6dd462d4
Certificate serial: 019A53E400CA919948072E8BC628F3949947
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gL0AgpU21HdF9H2p0ainL23UYtQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/64e19f-fe54-42cd-8923-09b9920fe00f/1/gL0AgpU21HdF9H2p0ainL23UYtQ.mft
Manifest number: 1714
Signing time: Wed 05 Nov 2025 12:00:42 +0000
Manifest this update: Wed 05 Nov 2025 12:00:42 +0000
Manifest next update: Thu 06 Nov 2025 12:00:42 +0000
Files and hashes: 1: Q9IYaPHKKKlO4sA9XCWmtz8FcgA.roa (hash: 3b2rcgvaeO3+9CrEYVWEp7XSo1030UaTBYseGkhn6jc=)
2: gL0AgpU21HdF9H2p0ainL23UYtQ.crl (hash: BxzHxAKL4ulH+leBS1E+MNpR/Drzb48dSsp2O8emLCE=)
3: zHD1UIuWQeduzn45VRXboBoA5NM.roa (hash: ToC2fZb+9n4mNoZ0Xp4h8y1142lDAhVM0QODtU55JXQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/64e19f-fe54-42cd-8923-09b9920fe00f/1/gL0AgpU21HdF9H2p0ainL23UYtQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/64e19f-fe54-42cd-8923-09b9920fe00f/1/gL0AgpU21HdF9H2p0ainL23UYtQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/gL0AgpU21HdF9H2p0ainL23UYtQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:e4:00:ca:91:99:48:07:2e:8b:c6:28:f3:94:99:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80bd00829536d47745f47da9d1a8a72f6dd462d4
Validity
Not Before: Nov 5 12:00:42 2025 GMT
Not After : Nov 6 12:00:42 2025 GMT
Subject: CN=a19a67bb1b9015c5208850a46e96554c65924d82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:17:a1:77:48:ab:93:08:ed:6c:c3:1f:99:73:
84:04:0b:44:36:59:a6:b8:65:c6:4c:54:ee:3a:09:
75:24:5d:3d:ce:3e:d2:df:fc:88:61:7a:05:af:47:
16:b3:ab:0e:15:e8:12:f6:cd:6e:5b:d6:02:58:62:
63:f9:e1:cd:23:91:bb:2a:7d:f0:a4:3a:a1:9b:f3:
5d:41:4b:f5:da:96:19:05:7e:0a:6a:39:54:da:df:
34:24:b2:79:95:04:3a:60:2b:5e:29:5e:e9:4f:b0:
4d:79:e1:b4:70:b9:61:26:cd:2f:2c:ee:6e:6f:dc:
c3:fd:4c:67:89:f3:e6:0d:db:48:c1:59:44:b9:2b:
bc:e3:61:b9:bf:78:c4:7e:45:11:71:41:7a:89:c8:
a3:6d:b3:15:0d:f5:67:a6:53:73:e3:7c:db:e3:0d:
95:cb:d3:df:91:36:0a:7e:66:ca:49:65:d3:d7:d1:
b1:de:6d:56:ca:d0:24:1e:b1:6d:c9:9a:7c:9e:73:
d9:30:36:44:f6:ba:58:3d:ff:50:38:24:dd:35:2b:
63:15:d2:94:77:e6:17:f0:fd:5f:c8:c4:15:c0:00:
bb:3a:8b:1e:64:1d:d5:bf:29:b9:e0:ff:2a:62:a1:
08:74:34:ce:74:1a:55:45:d1:42:3c:35:4e:3e:bb:
ee:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:9A:67:BB:1B:90:15:C5:20:88:50:A4:6E:96:55:4C:65:92:4D:82
X509v3 Authority Key Identifier:
keyid:80:BD:00:82:95:36:D4:77:45:F4:7D:A9:D1:A8:A7:2F:6D:D4:62:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gL0AgpU21HdF9H2p0ainL23UYtQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/64e19f-fe54-42cd-8923-09b9920fe00f/1/gL0AgpU21HdF9H2p0ainL23UYtQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/64e19f-fe54-42cd-8923-09b9920fe00f/1/gL0AgpU21HdF9H2p0ainL23UYtQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:b5:56:79:f0:29:e8:5f:30:19:75:e9:71:66:5a:04:e0:26:
a9:2e:27:5c:4b:bb:b8:4e:f1:41:6b:20:01:80:b7:be:c3:bd:
cc:d6:02:f0:5a:8f:b6:ff:48:6f:f2:65:f2:34:31:dc:6c:ac:
6f:aa:97:51:c7:a4:59:f2:ae:89:c3:ca:d0:78:55:5b:55:7e:
56:b7:18:80:ef:18:37:a3:87:e6:a6:38:14:b7:9f:2c:81:0a:
ff:e9:16:8f:63:a1:6f:42:cb:39:6c:cd:01:f3:b1:a2:d2:b1:
c3:fd:d5:93:bc:4c:59:80:f2:8e:c9:a7:f0:21:2c:50:f8:5c:
55:dc:5f:75:6a:e0:81:d8:72:7c:38:b9:a9:03:55:f3:43:e7:
87:6f:60:6f:a0:e0:5a:e0:99:0d:48:b7:ce:ef:e1:ec:1c:57:
20:4c:cc:f2:88:ba:72:93:26:0a:54:5e:2f:45:2a:6b:aa:b3:
7c:ef:ad:3d:05:92:78:e0:32:cd:55:a3:1c:fd:6c:94:3f:89:
59:a6:bc:0f:5d:8f:76:a5:92:43:23:79:a9:25:1d:dd:b3:44:
1c:48:5a:52:c2:ce:f9:b6:c6:36:4d:1e:f1:14:dc:6b:94:21:
2a:70:e8:11:04:06:b7:04:a5:ce:6d:aa:0f:de:ef:e1:bc:d8:
9f:05:08:be
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpT5ADKkZlIBy6LxijzlJlHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgwYmQwMDgyOTUzNmQ0Nzc0NWY0N2RhOWQxYThhNzJmNmRk
NDYyZDQwHhcNMjUxMTA1MTIwMDQyWhcNMjUxMTA2MTIwMDQyWjAzMTEwLwYDVQQD
EyhhMTlhNjdiYjFiOTAxNWM1MjA4ODUwYTQ2ZTk2NTU0YzY1OTI0ZDgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Behd0irkwjtbMMfmXOEBAtENlmm
uGXGTFTuOgl1JF09zj7S3/yIYXoFr0cWs6sOFegS9s1uW9YCWGJj+eHNI5G7Kn3w
pDqhm/NdQUv12pYZBX4KajlU2t80JLJ5lQQ6YCteKV7pT7BNeeG0cLlhJs0vLO5u
b9zD/UxnifPmDdtIwVlEuSu842G5v3jEfkURcUF6icijbbMVDfVnplNz43zb4w2V
y9PfkTYKfmbKSWXT19Gx3m1WytAkHrFtyZp8nnPZMDZE9rpYPf9QOCTdNStjFdKU
d+YX8P1fyMQVwAC7OoseZB3Vvym54P8qYqEIdDTOdBpVRdFCPDVOPrvulQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKGaZ7sbkBXFIIhQpG6WVUxlkk2CMB8GA1UdIwQY
MBaAFIC9AIKVNtR3RfR9qdGopy9t1GLUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ0wwQWdwVTIxSGRGOUgycDBhaW5MMjNVWXRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi82NGUxOWYtZmU1NC00MmNkLTg5MjMt
MDliOTkyMGZlMDBmLzEvZ0wwQWdwVTIxSGRGOUgycDBhaW5MMjNVWXRRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi82NGUxOWYtZmU1NC00MmNkLTg5MjMtMDliOTkyMGZlMDBm
LzEvZ0wwQWdwVTIxSGRGOUgycDBhaW5MMjNVWXRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGbVWefAp
6F8wGXXpcWZaBOAmqS4nXEu7uE7xQWsgAYC3vsO9zNYC8FqPtv9Ib/Jl8jQx3Gys
b6qXUcekWfKuicPK0HhVW1V+VrcYgO8YN6OH5qY4FLefLIEK/+kWj2Ohb0LLOWzN
AfOxotKxw/3Vk7xMWYDyjsmn8CEsUPhcVdxfdWrggdhyfDi5qQNV80Pnh29gb6Dg
WuCZDUi3zu/h7BxXIEzM8oi6cpMmClReL0Uqa6qzfO+tPQWSeOAyzVWjHP1slD+J
Waa8D12PdqWSQyN5qSUd3bNEHEhaUsLO+bbGNk0e8RTca5QhKnDoEQQGtwSlzm2q
D97v4bzYnwUIvg==
-----END CERTIFICATE-----
Generated at Wed Nov 5 20:53:46 2025 by rpki-client