Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/d25a72-bbe3-4ab0-9564-fe45d5160c39/1/gaLQ3NUKaC-XXqPYw45eZ7sDIvk.mft
File: gaLQ3NUKaC-XXqPYw45eZ7sDIvk.mft (raw, json)
Hash identifier: F7gktJIVXEDWJ0GgSVr9/xRaZIiPrTukUFqJsILTrxc=
Subject key identifier: 9E:07:9B:30:B0:E3:38:DE:01:D1:0E:95:4F:0C:55:86:AB:59:5F:CB
Authority key identifier: 81:A2:D0:DC:D5:0A:68:2F:97:5E:A3:D8:C3:8E:5E:67:BB:03:22:F9
Certificate issuer: /CN=81a2d0dcd50a682f975ea3d8c38e5e67bb0322f9
Certificate serial: 019A5187E0B9170F24E853557FD54B8A02BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gaLQ3NUKaC-XXqPYw45eZ7sDIvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/d25a72-bbe3-4ab0-9564-fe45d5160c39/1/gaLQ3NUKaC-XXqPYw45eZ7sDIvk.mft
Manifest number: 15D5
Signing time: Wed 05 Nov 2025 01:00:50 +0000
Manifest this update: Wed 05 Nov 2025 01:00:50 +0000
Manifest next update: Thu 06 Nov 2025 01:00:50 +0000
Files and hashes: 1: 3bMVFRs8FOeJcOkO2XYWLqzrrkg.roa (hash: jcRVVzJYs1NWamGAFlutgx67H4FacWZP/qMYz6OqYpI=)
2: gaLQ3NUKaC-XXqPYw45eZ7sDIvk.crl (hash: ZsXENfgwJIud4DBqc1y9VT+TU0HQ0N8Z51xGQi+bFpU=)
3: iu1uLDkjA2lC4iCmh3mgoTg-ECs.roa (hash: J1M6seCPFdUQmcH1n+B1kmRcatuaeOrkFhV5roQrzQ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/d25a72-bbe3-4ab0-9564-fe45d5160c39/1/gaLQ3NUKaC-XXqPYw45eZ7sDIvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/d25a72-bbe3-4ab0-9564-fe45d5160c39/1/gaLQ3NUKaC-XXqPYw45eZ7sDIvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/gaLQ3NUKaC-XXqPYw45eZ7sDIvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 01:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:87:e0:b9:17:0f:24:e8:53:55:7f:d5:4b:8a:02:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81a2d0dcd50a682f975ea3d8c38e5e67bb0322f9
Validity
Not Before: Nov 5 01:00:50 2025 GMT
Not After : Nov 6 01:00:50 2025 GMT
Subject: CN=9e079b30b0e338de01d10e954f0c5586ab595fcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e7:32:22:8d:b6:c7:82:89:0d:25:d4:79:a7:
6d:6b:9c:39:7e:04:31:f6:72:80:ad:aa:7a:9f:77:
0e:4d:83:8c:8b:ad:7b:8d:c0:87:6a:79:e4:18:4f:
2d:c2:72:dc:3a:7a:d4:00:b6:78:67:5b:ac:cf:a1:
b9:2a:0a:b4:ff:0f:d7:11:7c:e7:d1:c3:40:0b:f1:
37:79:ad:5e:6a:58:8f:3d:72:23:78:9a:a6:c8:a8:
13:12:bd:30:97:da:71:46:ca:19:2d:42:f8:e9:32:
5a:9b:db:10:4f:28:39:be:55:05:7f:38:ec:88:de:
3e:79:05:bf:fd:69:98:e8:28:30:81:44:58:bf:28:
b5:6a:b1:d4:17:b4:52:a7:ed:10:cb:ea:3a:2c:d4:
22:38:dc:4b:95:23:7d:32:1a:d7:00:24:c7:cc:1a:
cb:64:cd:65:ea:0d:cb:a8:f2:3c:22:a6:e4:02:d8:
e5:f8:dd:c5:73:b1:b8:a5:0a:27:13:d3:c0:5b:1f:
d8:05:8d:b0:3b:aa:a0:f0:84:21:0f:89:72:0f:df:
3a:e2:2b:1f:26:9c:8f:86:ca:05:88:bb:75:a9:7c:
9a:57:9c:95:70:88:c1:58:80:72:3d:9b:18:8e:9f:
79:32:ac:fd:3d:27:a6:f5:8d:46:f4:6d:ab:9c:25:
c0:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:07:9B:30:B0:E3:38:DE:01:D1:0E:95:4F:0C:55:86:AB:59:5F:CB
X509v3 Authority Key Identifier:
keyid:81:A2:D0:DC:D5:0A:68:2F:97:5E:A3:D8:C3:8E:5E:67:BB:03:22:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gaLQ3NUKaC-XXqPYw45eZ7sDIvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/d25a72-bbe3-4ab0-9564-fe45d5160c39/1/gaLQ3NUKaC-XXqPYw45eZ7sDIvk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/d25a72-bbe3-4ab0-9564-fe45d5160c39/1/gaLQ3NUKaC-XXqPYw45eZ7sDIvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:56:6f:00:b1:b3:3c:b7:34:b8:d4:0b:f0:6a:e8:2e:5b:a1:
21:57:5e:2c:83:09:c5:35:5a:e9:4a:60:95:70:43:12:bb:b8:
4f:10:01:e9:bf:81:87:02:2a:f8:e4:df:7e:8c:d3:92:27:e5:
40:b9:d7:68:79:65:d4:31:1a:72:10:2b:5d:0f:f1:1d:0a:11:
21:8e:9a:f7:4a:73:3e:a0:77:7d:db:ce:27:f4:22:67:3e:15:
9b:9e:58:5f:ba:6c:c7:4b:75:cb:1b:17:77:db:7c:f5:69:83:
d4:0e:7a:2d:73:72:b1:3c:8a:77:dd:09:98:09:c8:67:cc:14:
b1:b9:20:64:f3:62:cb:60:02:ca:df:43:e7:33:c9:cd:92:3d:
ec:39:ab:c6:4e:ac:f1:a0:92:28:bc:7f:b8:76:66:6f:aa:ed:
0f:d3:21:9c:ba:4e:54:8d:a6:30:7a:ec:85:d4:34:76:c8:c9:
98:5f:11:a1:dc:e4:2e:75:85:83:89:15:d3:64:84:c6:b8:e7:
c4:e3:20:67:61:fc:5a:4f:35:79:a3:3a:09:e7:19:62:6c:b5:
7e:3a:39:64:e8:67:c8:77:65:03:19:b5:6b:84:76:9a:0a:fe:
ed:e5:1e:a0:6e:1b:0d:0a:ea:f3:48:7d:e5:13:00:8e:ad:47:
86:14:89:2f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpRh+C5Fw8k6FNVf9VLigK+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxYTJkMGRjZDUwYTY4MmY5NzVlYTNkOGMzOGU1ZTY3YmIw
MzIyZjkwHhcNMjUxMTA1MDEwMDUwWhcNMjUxMTA2MDEwMDUwWjAzMTEwLwYDVQQD
Eyg5ZTA3OWIzMGIwZTMzOGRlMDFkMTBlOTU0ZjBjNTU4NmFiNTk1ZmNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+cyIo22x4KJDSXUeadta5w5fgQx
9nKArap6n3cOTYOMi617jcCHannkGE8twnLcOnrUALZ4Z1usz6G5Kgq0/w/XEXzn
0cNAC/E3ea1ealiPPXIjeJqmyKgTEr0wl9pxRsoZLUL46TJam9sQTyg5vlUFfzjs
iN4+eQW//WmY6CgwgURYvyi1arHUF7RSp+0Qy+o6LNQiONxLlSN9MhrXACTHzBrL
ZM1l6g3LqPI8IqbkAtjl+N3Fc7G4pQonE9PAWx/YBY2wO6qg8IQhD4lyD9864isf
JpyPhsoFiLt1qXyaV5yVcIjBWIByPZsYjp95Mqz9PSem9Y1G9G2rnCXA8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ4HmzCw4zjeAdEOlU8MVYarWV/LMB8GA1UdIwQY
MBaAFIGi0NzVCmgvl16j2MOOXme7AyL5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ2FMUTNOVUthQy1YWHFQWXc0NWVaN3NESXZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9kMjVhNzItYmJlMy00YWIwLTk1NjQt
ZmU0NWQ1MTYwYzM5LzEvZ2FMUTNOVUthQy1YWHFQWXc0NWVaN3NESXZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi9kMjVhNzItYmJlMy00YWIwLTk1NjQtZmU0NWQ1MTYwYzM5
LzEvZ2FMUTNOVUthQy1YWHFQWXc0NWVaN3NESXZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM1ZvALGz
PLc0uNQL8GroLluhIVdeLIMJxTVa6UpglXBDEru4TxAB6b+BhwIq+OTffozTkifl
QLnXaHll1DEachArXQ/xHQoRIY6a90pzPqB3fdvOJ/QiZz4Vm55YX7psx0t1yxsX
d9t89WmD1A56LXNysTyKd90JmAnIZ8wUsbkgZPNiy2ACyt9D5zPJzZI97Dmrxk6s
8aCSKLx/uHZmb6rtD9MhnLpOVI2mMHrshdQ0dsjJmF8RodzkLnWFg4kV02SExrjn
xOMgZ2H8Wk81eaM6CecZYmy1fjo5ZOhnyHdlAxm1a4R2mgr+7eUeoG4bDQrq80h9
5RMAjq1HhhSJLw==
-----END CERTIFICATE-----
Generated at Wed Nov 5 08:37:32 2025 by rpki-client