Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/c2c03e-56e1-403a-93de-e23ad799b1d1/1/gcEVEu7o_tkcQi8ztljWi8NOt4A.mft
File: gcEVEu7o_tkcQi8ztljWi8NOt4A.mft (raw, json)
Hash identifier: K4z3+gRJxlZvzn8bAR1proaJO5LTdcX0IHjFkQsMnGE=
Subject key identifier: B8:9C:CE:14:77:2D:1E:9E:FB:A0:CF:C2:1C:FB:F8:51:D0:C6:94:14
Authority key identifier: 81:C1:15:12:EE:E8:FE:D9:1C:42:2F:33:B6:58:D6:8B:C3:4E:B7:80
Certificate issuer: /CN=81c11512eee8fed91c422f33b658d68bc34eb780
Certificate serial: 019A5752D25589C6460DF3DBA0EAC91C8A7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gcEVEu7o_tkcQi8ztljWi8NOt4A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/c2c03e-56e1-403a-93de-e23ad799b1d1/1/gcEVEu7o_tkcQi8ztljWi8NOt4A.mft
Manifest number: 0AC1
Signing time: Thu 06 Nov 2025 04:00:36 +0000
Manifest this update: Thu 06 Nov 2025 04:00:36 +0000
Manifest next update: Fri 07 Nov 2025 04:00:36 +0000
Files and hashes: 1: gcEVEu7o_tkcQi8ztljWi8NOt4A.crl (hash: 5Dcat08z00fdPSdicV7ao2fTWIg8maV5ZVJhAC/C37E=)
2: oBBYy0ld98gJluOgW3OE5ry-1bI.roa (hash: cDSWMJxoBmliysmmQ82PR5LMpFN2xHzw2hwrTiHsQ+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/c2c03e-56e1-403a-93de-e23ad799b1d1/1/gcEVEu7o_tkcQi8ztljWi8NOt4A.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/c2c03e-56e1-403a-93de-e23ad799b1d1/1/gcEVEu7o_tkcQi8ztljWi8NOt4A.mft
rsync://rpki.ripe.net/repository/DEFAULT/gcEVEu7o_tkcQi8ztljWi8NOt4A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 21:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:57:52:d2:55:89:c6:46:0d:f3:db:a0:ea:c9:1c:8a:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81c11512eee8fed91c422f33b658d68bc34eb780
Validity
Not Before: Nov 6 04:00:36 2025 GMT
Not After : Nov 7 04:00:36 2025 GMT
Subject: CN=b89cce14772d1e9efba0cfc21cfbf851d0c69414
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:3d:70:d7:9a:81:40:6a:f7:d7:90:1e:9e:75:
63:e1:2e:f0:1b:9b:fb:5f:ba:32:fb:9c:cf:27:8b:
32:e3:62:f8:56:0e:7a:59:50:cd:80:07:4f:c9:40:
00:75:27:09:1d:17:90:29:ee:cf:96:5e:6a:b4:52:
72:7b:70:02:d1:49:3d:6b:ca:37:ef:98:7a:30:5d:
8a:13:8a:9a:01:ec:3c:ab:4a:eb:89:c5:d5:a3:23:
8b:e0:85:a3:7b:36:02:40:e5:de:84:a7:05:aa:a0:
29:db:38:69:06:75:9c:7b:af:b3:9b:13:98:17:d8:
95:5f:1a:1e:1a:f6:78:40:7d:03:dd:46:c8:80:63:
94:ec:53:94:cc:08:c7:e1:08:7d:51:fd:59:9a:02:
e6:58:a9:7b:56:84:7f:f1:71:2d:ea:2c:89:21:d2:
63:18:5d:59:27:5c:4f:63:21:32:8b:c1:04:19:28:
d2:dc:e9:9f:a6:00:82:8a:be:a9:7a:8f:25:7b:f3:
fa:45:f6:14:ba:26:85:c2:ff:3d:52:d3:6a:2d:99:
dd:b4:34:28:df:3d:e9:10:59:33:24:1b:44:f7:81:
14:85:c9:85:8d:00:c9:8d:fd:98:22:06:91:8b:50:
8e:3e:fb:f2:03:94:49:a3:24:90:a9:72:24:64:a4:
b9:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:9C:CE:14:77:2D:1E:9E:FB:A0:CF:C2:1C:FB:F8:51:D0:C6:94:14
X509v3 Authority Key Identifier:
keyid:81:C1:15:12:EE:E8:FE:D9:1C:42:2F:33:B6:58:D6:8B:C3:4E:B7:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gcEVEu7o_tkcQi8ztljWi8NOt4A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/c2c03e-56e1-403a-93de-e23ad799b1d1/1/gcEVEu7o_tkcQi8ztljWi8NOt4A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/c2c03e-56e1-403a-93de-e23ad799b1d1/1/gcEVEu7o_tkcQi8ztljWi8NOt4A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:b9:89:32:53:ee:f0:72:4f:b1:a9:95:b3:c3:29:a6:3d:5d:
ad:64:47:3c:45:52:95:78:fb:65:5d:f1:1a:8f:0c:22:ee:6d:
7e:9d:fa:51:91:29:2d:66:62:08:cc:90:dd:c5:70:ee:c1:28:
90:8d:1a:12:20:d0:e2:d4:a8:8a:8b:c1:42:c3:58:65:d4:08:
27:79:87:13:91:45:9b:f3:23:76:48:f6:8b:d0:01:2a:4c:90:
c9:29:c7:3d:17:fd:fb:32:92:cc:b8:0d:f6:25:7c:95:7c:58:
e7:ff:46:ab:04:0b:fc:61:87:69:4e:91:f1:49:93:6e:c5:0f:
cc:91:f2:78:32:ea:23:16:34:c2:74:38:6f:ee:db:ea:74:3a:
2c:13:a2:73:b1:46:f1:fe:10:61:f6:0e:71:32:06:ae:14:1d:
53:94:50:26:8f:d0:ac:c3:e9:fd:b6:2e:f1:00:64:3a:3d:30:
bb:e1:f7:d2:20:57:50:b4:00:ca:0f:cd:25:fd:20:d3:e0:6e:
1f:56:3f:f5:c4:7c:f1:de:3d:58:8d:27:33:04:f7:77:44:8a:
29:e3:4f:1b:d4:ba:5a:41:54:df:cb:91:3e:a4:37:6d:da:0e:
4b:ae:f8:23:15:0a:23:01:de:bc:da:12:23:88:fe:ae:10:35:
24:2e:00:c0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpXUtJVicZGDfPboOrJHIp+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxYzExNTEyZWVlOGZlZDkxYzQyMmYzM2I2NThkNjhiYzM0
ZWI3ODAwHhcNMjUxMTA2MDQwMDM2WhcNMjUxMTA3MDQwMDM2WjAzMTEwLwYDVQQD
EyhiODljY2UxNDc3MmQxZTllZmJhMGNmYzIxY2ZiZjg1MWQwYzY5NDE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvT1w15qBQGr315AennVj4S7wG5v7
X7oy+5zPJ4sy42L4Vg56WVDNgAdPyUAAdScJHReQKe7Pll5qtFJye3AC0Uk9a8o3
75h6MF2KE4qaAew8q0rricXVoyOL4IWjezYCQOXehKcFqqAp2zhpBnWce6+zmxOY
F9iVXxoeGvZ4QH0D3UbIgGOU7FOUzAjH4Qh9Uf1ZmgLmWKl7VoR/8XEt6iyJIdJj
GF1ZJ1xPYyEyi8EEGSjS3OmfpgCCir6peo8le/P6RfYUuiaFwv89UtNqLZndtDQo
3z3pEFkzJBtE94EUhcmFjQDJjf2YIgaRi1COPvvyA5RJoySQqXIkZKS5pwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLiczhR3LR6e+6DPwhz7+FHQxpQUMB8GA1UdIwQY
MBaAFIHBFRLu6P7ZHEIvM7ZY1ovDTreAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ2NFVkV1N29fdGtjUWk4enRsaldpOE5PdDRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS9jMmMwM2UtNTZlMS00MDNhLTkzZGUt
ZTIzYWQ3OTliMWQxLzEvZ2NFVkV1N29fdGtjUWk4enRsaldpOE5PdDRBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS9jMmMwM2UtNTZlMS00MDNhLTkzZGUtZTIzYWQ3OTliMWQx
LzEvZ2NFVkV1N29fdGtjUWk4enRsaldpOE5PdDRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe7mJMlPu
8HJPsamVs8Mppj1drWRHPEVSlXj7ZV3xGo8MIu5tfp36UZEpLWZiCMyQ3cVw7sEo
kI0aEiDQ4tSoiovBQsNYZdQIJ3mHE5FFm/Mjdkj2i9ABKkyQySnHPRf9+zKSzLgN
9iV8lXxY5/9GqwQL/GGHaU6R8UmTbsUPzJHyeDLqIxY0wnQ4b+7b6nQ6LBOic7FG
8f4QYfYOcTIGrhQdU5RQJo/QrMPp/bYu8QBkOj0wu+H30iBXULQAyg/NJf0g0+Bu
H1Y/9cR88d49WI0nMwT3d0SKKeNPG9S6WkFU38uRPqQ3bdoOS674IxUKIwHevNoS
I4j+rhA1JC4AwA==
-----END CERTIFICATE-----
Generated at Thu Nov 6 06:07:48 2025 by rpki-client