Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/e70295-6c2e-48fb-8fc9-1260a6f3a393/1/GZCLY2kUj088UPFnED96BHjFKUI.mft
File: GZCLY2kUj088UPFnED96BHjFKUI.mft (raw, json)
Hash identifier: 1q1cSj7nEFHezZdPObc3rXNYiEdn4kPZhBmu5C11EZ4=
Subject key identifier: 60:2A:8E:DC:C7:FE:0D:13:CF:E0:F8:58:61:3A:26:A4:48:98:E1:1D
Authority key identifier: 19:90:8B:63:69:14:8F:4F:3C:50:F1:67:10:3F:7A:04:78:C5:29:42
Certificate issuer: /CN=19908b6369148f4f3c50f167103f7a0478c52942
Certificate serial: 019A52D2337A2415D867279FC8EDD64C9432
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GZCLY2kUj088UPFnED96BHjFKUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/e70295-6c2e-48fb-8fc9-1260a6f3a393/1/GZCLY2kUj088UPFnED96BHjFKUI.mft
Manifest number: 170D
Signing time: Wed 05 Nov 2025 07:01:38 +0000
Manifest this update: Wed 05 Nov 2025 07:01:38 +0000
Manifest next update: Thu 06 Nov 2025 07:01:38 +0000
Files and hashes: 1: GZCLY2kUj088UPFnED96BHjFKUI.crl (hash: 11HaipV8dIzs604i+zX3F2FeJQ6q4emg9Xvx3WR/QgI=)
2: wuy_u4wMKRC5CA2Y-Nry1AFAhj8.roa (hash: +wp6lxNgAtxILpMTUkDSjuiOZSAbCznuueE15At+rMg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/e70295-6c2e-48fb-8fc9-1260a6f3a393/1/GZCLY2kUj088UPFnED96BHjFKUI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/e70295-6c2e-48fb-8fc9-1260a6f3a393/1/GZCLY2kUj088UPFnED96BHjFKUI.mft
rsync://rpki.ripe.net/repository/DEFAULT/GZCLY2kUj088UPFnED96BHjFKUI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d2:33:7a:24:15:d8:67:27:9f:c8:ed:d6:4c:94:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19908b6369148f4f3c50f167103f7a0478c52942
Validity
Not Before: Nov 5 07:01:38 2025 GMT
Not After : Nov 6 07:01:38 2025 GMT
Subject: CN=602a8edcc7fe0d13cfe0f858613a26a44898e11d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:0e:fe:21:f4:b0:10:68:1c:7a:a8:e5:90:20:
c9:16:45:30:41:bb:0e:6e:93:42:3c:2d:c6:17:a6:
83:b9:8d:b0:de:f3:1a:50:60:21:7e:42:3b:2e:6d:
14:ee:40:0c:cc:ff:01:dd:01:9d:dc:de:33:c2:48:
e0:f8:61:7d:f8:3f:0f:aa:f7:46:fd:15:9b:d7:8c:
c2:da:2e:93:3d:49:2e:b4:95:ed:2c:df:75:1e:cf:
5e:e8:e1:2b:21:ef:0f:dc:11:04:1e:ff:0d:8d:57:
12:ef:65:ac:fb:dc:3b:9e:45:2a:50:eb:6f:3d:b8:
d8:73:62:d3:0e:1b:ff:aa:2d:fa:59:10:be:c6:4c:
51:3c:ca:e1:08:4c:ff:53:d6:64:f5:a5:d8:5a:5d:
13:c3:82:1b:53:4c:43:35:45:0d:6b:c7:89:fc:f9:
a3:4a:fb:a7:43:3d:c1:62:03:58:44:c8:b4:e2:d1:
aa:64:54:ed:17:d8:1a:91:2a:70:98:0d:28:e5:98:
92:a6:e5:15:16:5a:06:cd:73:25:d1:e2:df:02:27:
d2:27:f3:6d:89:e3:0d:20:bf:5c:a8:02:d4:e5:2e:
45:76:2d:95:3e:44:3a:10:29:5e:a7:c9:4f:52:79:
5b:8a:83:8f:da:48:07:ed:8a:4b:20:64:3f:7e:85:
f2:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:2A:8E:DC:C7:FE:0D:13:CF:E0:F8:58:61:3A:26:A4:48:98:E1:1D
X509v3 Authority Key Identifier:
keyid:19:90:8B:63:69:14:8F:4F:3C:50:F1:67:10:3F:7A:04:78:C5:29:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GZCLY2kUj088UPFnED96BHjFKUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/e70295-6c2e-48fb-8fc9-1260a6f3a393/1/GZCLY2kUj088UPFnED96BHjFKUI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/e70295-6c2e-48fb-8fc9-1260a6f3a393/1/GZCLY2kUj088UPFnED96BHjFKUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:fe:01:34:aa:66:7b:52:63:63:32:1f:8e:63:00:6b:e7:4c:
44:8e:82:df:7c:f6:86:8e:18:d7:0c:05:6e:c0:f8:10:90:ae:
13:ad:70:32:f1:fe:88:95:b1:ba:f9:0f:44:d5:45:44:d3:96:
ea:3c:13:e2:0c:30:0d:be:4d:cc:04:92:f5:0d:35:2a:0b:9e:
59:da:2c:d5:6e:13:c6:a8:ef:d8:0b:a6:cd:90:39:1d:bb:c4:
78:f9:bc:73:a7:1b:26:b6:c9:86:e2:c9:b4:e7:9e:ad:99:a4:
bd:2c:7d:2a:7a:cd:f9:cc:f2:0a:cb:f5:6c:2f:e4:9e:b2:d4:
4a:68:95:63:27:d0:37:c0:90:2f:76:80:97:a1:f8:f0:99:e5:
8f:47:fd:cb:01:8f:d7:91:6d:9f:aa:91:97:7d:fe:f0:75:30:
29:1b:23:29:40:9e:60:0d:66:7a:c4:26:56:3d:40:4d:41:c1:
8c:78:bf:67:3d:0e:dd:03:7a:77:d0:bc:6c:cb:40:db:cd:d1:
df:c3:5d:bb:84:03:a2:c8:33:a9:bd:f0:8d:a5:ad:73:60:94:
dd:90:93:a7:62:87:f2:2c:db:bf:50:39:5a:2d:70:a0:64:11:
4f:a9:0f:08:fe:b9:08:46:32:41:16:a9:03:68:81:0a:35:50:
5d:ba:c0:fa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpS0jN6JBXYZyefyO3WTJQyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5OTA4YjYzNjkxNDhmNGYzYzUwZjE2NzEwM2Y3YTA0Nzhj
NTI5NDIwHhcNMjUxMTA1MDcwMTM4WhcNMjUxMTA2MDcwMTM4WjAzMTEwLwYDVQQD
Eyg2MDJhOGVkY2M3ZmUwZDEzY2ZlMGY4NTg2MTNhMjZhNDQ4OThlMTFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvw7+IfSwEGgceqjlkCDJFkUwQbsO
bpNCPC3GF6aDuY2w3vMaUGAhfkI7Lm0U7kAMzP8B3QGd3N4zwkjg+GF9+D8PqvdG
/RWb14zC2i6TPUkutJXtLN91Hs9e6OErIe8P3BEEHv8NjVcS72Ws+9w7nkUqUOtv
PbjYc2LTDhv/qi36WRC+xkxRPMrhCEz/U9Zk9aXYWl0Tw4IbU0xDNUUNa8eJ/Pmj
SvunQz3BYgNYRMi04tGqZFTtF9gakSpwmA0o5ZiSpuUVFloGzXMl0eLfAifSJ/Nt
ieMNIL9cqALU5S5Fdi2VPkQ6EClep8lPUnlbioOP2kgH7YpLIGQ/foXy3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGAqjtzH/g0Tz+D4WGE6JqRImOEdMB8GA1UdIwQY
MBaAFBmQi2NpFI9PPFDxZxA/egR4xSlCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR1pDTFkya1VqMDg4VVBGbkVEOTZCSGpGS1VJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy9lNzAyOTUtNmMyZS00OGZiLThmYzkt
MTI2MGE2ZjNhMzkzLzEvR1pDTFkya1VqMDg4VVBGbkVEOTZCSGpGS1VJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy9lNzAyOTUtNmMyZS00OGZiLThmYzktMTI2MGE2ZjNhMzkz
LzEvR1pDTFkya1VqMDg4VVBGbkVEOTZCSGpGS1VJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvf4BNKpm
e1JjYzIfjmMAa+dMRI6C33z2ho4Y1wwFbsD4EJCuE61wMvH+iJWxuvkPRNVFRNOW
6jwT4gwwDb5NzASS9Q01KgueWdos1W4Txqjv2AumzZA5HbvEePm8c6cbJrbJhuLJ
tOeerZmkvSx9KnrN+czyCsv1bC/knrLUSmiVYyfQN8CQL3aAl6H48Jnlj0f9ywGP
15Ftn6qRl33+8HUwKRsjKUCeYA1mesQmVj1ATUHBjHi/Zz0O3QN6d9C8bMtA283R
38Ndu4QDosgzqb3wjaWtc2CU3ZCTp2KH8izbv1A5Wi1woGQRT6kPCP65CEYyQRap
A2iBCjVQXbrA+g==
-----END CERTIFICATE-----
Generated at Wed Nov 5 12:56:10 2025 by rpki-client