Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/066221-0eeb-42d9-9c07-fc69e0bca622/1/GyHb_7GS4UkZz-J4a69EhAw6yjw.mft
File: GyHb_7GS4UkZz-J4a69EhAw6yjw.mft (raw, json)
Hash identifier: CwIz8Jt0L4CdrjNj+oB2Jwc9YPk3ghZgDYJN2P9cCwk=
Subject key identifier: A1:05:6E:13:9C:21:0C:61:B3:F2:A0:F5:C8:21:B2:C1:8C:B1:C8:AD
Authority key identifier: 1B:21:DB:FF:B1:92:E1:49:19:CF:E2:78:6B:AF:44:84:0C:3A:CA:3C
Certificate issuer: /CN=1b21dbffb192e14919cfe2786baf44840c3aca3c
Certificate serial: 019A4DE1F4F0B6E80769B3877D470201203E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GyHb_7GS4UkZz-J4a69EhAw6yjw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/066221-0eeb-42d9-9c07-fc69e0bca622/1/GyHb_7GS4UkZz-J4a69EhAw6yjw.mft
Manifest number: 1710
Signing time: Tue 04 Nov 2025 08:00:45 +0000
Manifest this update: Tue 04 Nov 2025 08:00:45 +0000
Manifest next update: Wed 05 Nov 2025 08:00:45 +0000
Files and hashes: 1: GyHb_7GS4UkZz-J4a69EhAw6yjw.crl (hash: 6H0rnGOZeLXV2+RWG3aQYrGDYO1X+ESWAKyYXyRaFII=)
2: mvqabtX_vOansql-seMJOhDdwZw.roa (hash: P/IUoSGGXtH4YQtiGD2MIqmKWkm8ZG7EDvQk/wJS+50=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/066221-0eeb-42d9-9c07-fc69e0bca622/1/GyHb_7GS4UkZz-J4a69EhAw6yjw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/066221-0eeb-42d9-9c07-fc69e0bca622/1/GyHb_7GS4UkZz-J4a69EhAw6yjw.mft
rsync://rpki.ripe.net/repository/DEFAULT/GyHb_7GS4UkZz-J4a69EhAw6yjw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:f4:f0:b6:e8:07:69:b3:87:7d:47:02:01:20:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b21dbffb192e14919cfe2786baf44840c3aca3c
Validity
Not Before: Nov 4 08:00:45 2025 GMT
Not After : Nov 5 08:00:45 2025 GMT
Subject: CN=a1056e139c210c61b3f2a0f5c821b2c18cb1c8ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:60:fb:dd:d5:a1:89:7e:f5:7f:85:bb:13:2f:
2a:9d:07:83:36:bf:9b:15:65:c1:42:35:81:6e:49:
e3:4e:ec:fc:ef:7f:06:c1:a6:cb:b6:2e:ad:c3:ba:
70:9e:64:9a:4c:fa:ee:03:ba:5c:8b:8c:56:fb:67:
84:4d:78:c9:3d:36:92:44:5d:29:e6:18:4f:b6:85:
f3:da:41:20:bb:47:ea:13:c4:63:df:a3:cf:45:c2:
4a:31:35:68:cb:04:cb:22:93:8c:fc:7a:93:a5:f5:
0c:1a:ee:85:f7:08:3b:3b:43:37:5e:63:df:9e:aa:
fb:9d:fb:62:18:10:c3:8d:fe:f3:4a:37:87:d7:eb:
8d:4b:04:b3:7e:a8:f2:22:ca:20:5b:98:ea:8b:57:
62:b6:66:c6:6d:06:0a:74:dd:15:70:31:ab:f4:29:
a5:c8:75:f7:30:a8:2f:9b:07:0e:6a:09:7f:d2:72:
ff:c9:ea:53:aa:94:a0:34:55:86:97:05:2c:59:0c:
ed:f9:30:73:55:f0:81:e6:2a:86:2c:3f:b5:fa:c7:
40:cf:cd:53:23:5a:d7:7a:19:0e:83:8a:29:24:70:
3d:b4:71:e7:5f:1f:e0:2f:56:37:d4:16:5c:da:21:
c6:b0:4b:7f:b6:22:cb:31:02:c6:8c:b7:fb:6b:94:
b1:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:05:6E:13:9C:21:0C:61:B3:F2:A0:F5:C8:21:B2:C1:8C:B1:C8:AD
X509v3 Authority Key Identifier:
keyid:1B:21:DB:FF:B1:92:E1:49:19:CF:E2:78:6B:AF:44:84:0C:3A:CA:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GyHb_7GS4UkZz-J4a69EhAw6yjw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/066221-0eeb-42d9-9c07-fc69e0bca622/1/GyHb_7GS4UkZz-J4a69EhAw6yjw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/066221-0eeb-42d9-9c07-fc69e0bca622/1/GyHb_7GS4UkZz-J4a69EhAw6yjw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:05:7b:ee:ce:77:e4:d5:e1:f0:af:2c:ff:43:ad:57:21:69:
1b:57:7b:71:1d:b2:d2:bc:83:e2:bd:a5:e0:1d:49:0b:f6:1c:
d3:3b:d4:b0:f0:bf:8d:a6:a3:9f:c0:ee:75:9e:1b:29:6b:98:
9e:cc:5c:b8:dc:e5:36:d0:c7:19:87:de:4a:31:53:10:32:41:
cd:da:43:41:63:dd:b6:84:a0:27:05:e7:1d:b9:13:b1:bd:33:
ca:6f:46:6f:41:e5:b2:d2:ba:de:7f:5d:6f:50:a2:2e:f2:93:
12:d0:41:65:0f:57:9d:74:a1:f4:06:55:48:20:d0:39:ef:48:
2e:46:aa:bc:83:2a:61:72:ac:5d:98:f0:27:63:4e:31:44:fe:
ea:f6:d1:9b:5f:65:3c:b3:db:e6:b0:2b:fb:1e:a4:37:02:74:
c5:9b:e1:ef:56:ee:7f:d4:6c:19:2b:cb:7b:2f:54:00:06:4a:
c2:8a:ab:94:59:9d:1b:16:04:10:d6:4f:33:ab:bf:21:9c:40:
1a:70:6a:af:f7:72:03:9f:25:18:95:ba:1c:8c:50:c0:7c:9c:
c0:f8:33:35:8e:cb:b8:d2:9a:24:88:db:6d:bd:a0:ec:ba:1b:
e6:99:b4:41:0c:43:9c:7d:5e:35:dc:4e:1b:92:78:0d:0a:7e:
d0:36:09:c7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpN4fTwtugHabOHfUcCASA+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiMjFkYmZmYjE5MmUxNDkxOWNmZTI3ODZiYWY0NDg0MGMz
YWNhM2MwHhcNMjUxMTA0MDgwMDQ1WhcNMjUxMTA1MDgwMDQ1WjAzMTEwLwYDVQQD
EyhhMTA1NmUxMzljMjEwYzYxYjNmMmEwZjVjODIxYjJjMThjYjFjOGFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuGD73dWhiX71f4W7Ey8qnQeDNr+b
FWXBQjWBbknjTuz8738GwabLti6tw7pwnmSaTPruA7pci4xW+2eETXjJPTaSRF0p
5hhPtoXz2kEgu0fqE8Rj36PPRcJKMTVoywTLIpOM/HqTpfUMGu6F9wg7O0M3XmPf
nqr7nftiGBDDjf7zSjeH1+uNSwSzfqjyIsogW5jqi1ditmbGbQYKdN0VcDGr9Cml
yHX3MKgvmwcOagl/0nL/yepTqpSgNFWGlwUsWQzt+TBzVfCB5iqGLD+1+sdAz81T
I1rXehkOg4opJHA9tHHnXx/gL1Y31BZc2iHGsEt/tiLLMQLGjLf7a5SxLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKEFbhOcIQxhs/Kg9cghssGMscitMB8GA1UdIwQY
MBaAFBsh2/+xkuFJGc/ieGuvRIQMOso8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3lIYl83R1M0VWtaei1KNGE2OUVoQXc2eWp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS8wNjYyMjEtMGVlYi00MmQ5LTljMDct
ZmM2OWUwYmNhNjIyLzEvR3lIYl83R1M0VWtaei1KNGE2OUVoQXc2eWp3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS8wNjYyMjEtMGVlYi00MmQ5LTljMDctZmM2OWUwYmNhNjIy
LzEvR3lIYl83R1M0VWtaei1KNGE2OUVoQXc2eWp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACwV77s53
5NXh8K8s/0OtVyFpG1d7cR2y0ryD4r2l4B1JC/Yc0zvUsPC/jaajn8DudZ4bKWuY
nsxcuNzlNtDHGYfeSjFTEDJBzdpDQWPdtoSgJwXnHbkTsb0zym9Gb0HlstK63n9d
b1CiLvKTEtBBZQ9XnXSh9AZVSCDQOe9ILkaqvIMqYXKsXZjwJ2NOMUT+6vbRm19l
PLPb5rAr+x6kNwJ0xZvh71buf9RsGSvLey9UAAZKwoqrlFmdGxYEENZPM6u/IZxA
GnBqr/dyA58lGJW6HIxQwHycwPgzNY7LuNKaJIjbbb2g7Lob5pm0QQxDnH1eNdxO
G5J4DQp+0DYJxw==
-----END CERTIFICATE-----
Generated at Tue Nov 4 15:04:51 2025 by rpki-client