Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/711d0b-c631-4b6b-8700-cea65bce7324/1/_gwUoL3BGfHtSWIC2Jvk_SZZ_wE.mft
File: _gwUoL3BGfHtSWIC2Jvk_SZZ_wE.mft (raw, json)
Hash identifier: LODlPhbnVgAfKNqzeOhKQ1yXCgnYzZVjtp5n2pwaJJE=
Subject key identifier: 10:FF:98:ED:C9:A9:EE:5F:63:01:99:3D:D6:5D:86:53:7E:6D:BC:64
Authority key identifier: FE:0C:14:A0:BD:C1:19:F1:ED:49:62:02:D8:9B:E4:FD:26:59:FF:01
Certificate issuer: /CN=fe0c14a0bdc119f1ed496202d89be4fd2659ff01
Certificate serial: 019A4E86CD89AC154F7358DE999DF65596FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_gwUoL3BGfHtSWIC2Jvk_SZZ_wE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/711d0b-c631-4b6b-8700-cea65bce7324/1/_gwUoL3BGfHtSWIC2Jvk_SZZ_wE.mft
Manifest number: 07F7
Signing time: Tue 04 Nov 2025 11:00:48 +0000
Manifest this update: Tue 04 Nov 2025 11:00:48 +0000
Manifest next update: Wed 05 Nov 2025 11:00:48 +0000
Files and hashes: 1: _gwUoL3BGfHtSWIC2Jvk_SZZ_wE.crl (hash: dFH1lsEDfhnniXx4haa3yV4+67czBmjMABZSLNikZBc=)
2: oYPmCSWvS8EzeEC8QLUq6x_eYrI.roa (hash: 1A9wNN6kYL22cNZ71fS4DQFjU5QHCoE6jNJ2g/Xtw44=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/711d0b-c631-4b6b-8700-cea65bce7324/1/_gwUoL3BGfHtSWIC2Jvk_SZZ_wE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/711d0b-c631-4b6b-8700-cea65bce7324/1/_gwUoL3BGfHtSWIC2Jvk_SZZ_wE.mft
rsync://rpki.ripe.net/repository/DEFAULT/_gwUoL3BGfHtSWIC2Jvk_SZZ_wE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:cd:89:ac:15:4f:73:58:de:99:9d:f6:55:96:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe0c14a0bdc119f1ed496202d89be4fd2659ff01
Validity
Not Before: Nov 4 11:00:48 2025 GMT
Not After : Nov 5 11:00:48 2025 GMT
Subject: CN=10ff98edc9a9ee5f6301993dd65d86537e6dbc64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:2c:51:de:db:ef:de:38:89:a3:6e:db:4c:3d:
29:1d:b0:e2:4e:c9:db:6b:67:09:25:ed:72:8d:4d:
ab:15:fe:e1:c1:e9:f1:cd:be:87:c8:74:82:15:9c:
2e:1b:68:bf:bd:ab:4f:03:47:2d:e7:8b:50:aa:42:
60:4d:cb:88:4f:9d:fb:22:9b:5b:3e:7f:af:09:4b:
7d:1c:8d:a2:7b:9b:6b:0c:78:f1:f7:eb:14:2e:83:
b0:fc:e4:f0:52:47:b4:21:6e:d1:82:29:0c:53:c6:
ba:e1:af:3d:58:6f:fa:67:d0:7e:8c:46:57:fa:4c:
f5:2d:df:a2:1b:f5:bb:10:e2:8b:ba:d3:92:0f:60:
5d:5f:a4:fb:73:5f:1a:d2:94:0d:1a:7a:78:9f:cb:
6c:4d:c5:20:63:f3:97:bc:77:c1:65:9c:53:e3:b9:
d2:1f:50:b0:1b:95:67:7c:e4:7d:5b:76:c9:6e:b2:
bd:e2:ee:66:f4:8b:01:bb:55:2a:1c:bd:e5:6e:60:
67:f6:9c:9f:9c:ef:4f:f4:fa:6f:ec:d0:48:52:ea:
ff:93:f5:49:35:db:fb:d7:85:f9:3d:e1:e6:60:85:
94:dd:e6:20:f0:dd:3c:c2:da:cb:ac:80:73:7c:38:
f6:50:61:12:3a:2b:5f:62:25:30:6f:7f:e0:55:fd:
c3:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:FF:98:ED:C9:A9:EE:5F:63:01:99:3D:D6:5D:86:53:7E:6D:BC:64
X509v3 Authority Key Identifier:
keyid:FE:0C:14:A0:BD:C1:19:F1:ED:49:62:02:D8:9B:E4:FD:26:59:FF:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_gwUoL3BGfHtSWIC2Jvk_SZZ_wE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/711d0b-c631-4b6b-8700-cea65bce7324/1/_gwUoL3BGfHtSWIC2Jvk_SZZ_wE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/711d0b-c631-4b6b-8700-cea65bce7324/1/_gwUoL3BGfHtSWIC2Jvk_SZZ_wE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:2f:df:e2:2b:94:64:5b:ad:00:dc:cc:03:a1:8d:0c:84:3e:
96:cc:6d:df:8a:eb:9c:79:4f:e1:6b:aa:04:6c:13:9e:f8:ff:
63:42:ca:36:da:55:0e:c7:15:b1:f3:0c:75:83:8a:31:f4:5f:
26:a0:88:8c:6c:46:7c:c5:2e:40:04:4b:9e:b7:66:ee:bf:18:
e2:92:d5:59:9d:44:6c:b9:91:df:b6:90:f6:35:c7:00:0a:86:
47:aa:f6:8c:ba:ac:af:ca:81:74:23:f0:33:1e:53:8f:21:93:
45:86:08:94:eb:e7:81:92:9e:36:8b:9d:14:24:b3:30:c8:60:
0b:22:b1:56:7b:96:98:43:18:56:ea:2d:f2:6b:f8:7e:95:f2:
36:a8:d5:c6:34:01:b6:2f:6d:8c:12:70:f4:bc:6b:db:e0:7c:
65:26:c7:a9:69:20:fc:c2:b2:85:9c:84:80:15:f1:1c:5a:d4:
b7:7d:18:b8:92:71:77:fb:b7:36:e6:bc:2a:f9:49:25:a3:df:
e0:9f:42:0e:fa:69:2e:8d:55:dc:af:a8:17:7b:17:4c:59:b3:
7b:49:fa:e0:01:97:73:eb:d3:03:56:cf:29:da:68:c9:b3:7e:
99:5d:3a:93:74:8b:b8:9e:68:5e:1b:6d:4d:db:d0:3f:d9:8d:
27:58:45:49
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOhs2JrBVPc1jemZ32VZb8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlMGMxNGEwYmRjMTE5ZjFlZDQ5NjIwMmQ4OWJlNGZkMjY1
OWZmMDEwHhcNMjUxMTA0MTEwMDQ4WhcNMjUxMTA1MTEwMDQ4WjAzMTEwLwYDVQQD
EygxMGZmOThlZGM5YTllZTVmNjMwMTk5M2RkNjVkODY1MzdlNmRiYzY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzCxR3tvv3jiJo27bTD0pHbDiTsnb
a2cJJe1yjU2rFf7hwenxzb6HyHSCFZwuG2i/vatPA0ct54tQqkJgTcuIT537Iptb
Pn+vCUt9HI2ie5trDHjx9+sULoOw/OTwUke0IW7RgikMU8a64a89WG/6Z9B+jEZX
+kz1Ld+iG/W7EOKLutOSD2BdX6T7c18a0pQNGnp4n8tsTcUgY/OXvHfBZZxT47nS
H1CwG5VnfOR9W3bJbrK94u5m9IsBu1UqHL3lbmBn9pyfnO9P9Ppv7NBIUur/k/VJ
Ndv714X5PeHmYIWU3eYg8N08wtrLrIBzfDj2UGESOitfYiUwb3/gVf3DfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBD/mO3Jqe5fYwGZPdZdhlN+bbxkMB8GA1UdIwQY
MBaAFP4MFKC9wRnx7UliAtib5P0mWf8BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX2d3VW9MM0JHZkh0U1dJQzJKdmtfU1paX3dFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC83MTFkMGItYzYzMS00YjZiLTg3MDAt
Y2VhNjViY2U3MzI0LzEvX2d3VW9MM0JHZkh0U1dJQzJKdmtfU1paX3dFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC83MTFkMGItYzYzMS00YjZiLTg3MDAtY2VhNjViY2U3MzI0
LzEvX2d3VW9MM0JHZkh0U1dJQzJKdmtfU1paX3dFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKy/f4iuU
ZFutANzMA6GNDIQ+lsxt34rrnHlP4WuqBGwTnvj/Y0LKNtpVDscVsfMMdYOKMfRf
JqCIjGxGfMUuQARLnrdm7r8Y4pLVWZ1EbLmR37aQ9jXHAAqGR6r2jLqsr8qBdCPw
Mx5TjyGTRYYIlOvngZKeNoudFCSzMMhgCyKxVnuWmEMYVuot8mv4fpXyNqjVxjQB
ti9tjBJw9Lxr2+B8ZSbHqWkg/MKyhZyEgBXxHFrUt30YuJJxd/u3Nua8KvlJJaPf
4J9CDvppLo1V3K+oF3sXTFmze0n64AGXc+vTA1bPKdpoybN+mV06k3SLuJ5oXhtt
TdvQP9mNJ1hFSQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 18:19:58 2025 by rpki-client