Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/3975b1-074c-4fd0-9661-d1d6c3f92ffb/1/Gw4VwVrnA6iXkEavXezEky7cf24.mft
File: Gw4VwVrnA6iXkEavXezEky7cf24.mft (raw, json)
Hash identifier: y2Dyg013VuLtT2DsNfncQbaowQFHr2+9OzXikOE5WCc=
Subject key identifier: 64:64:3F:06:35:15:5D:0D:C3:29:DE:43:EA:AD:8D:89:BF:A9:5C:F8
Authority key identifier: 1B:0E:15:C1:5A:E7:03:A8:97:90:46:AF:5D:EC:C4:93:2E:DC:7F:6E
Certificate issuer: /CN=1b0e15c15ae703a8979046af5decc4932edc7f6e
Certificate serial: 019A4D076910CF8EBE2C9C905A574BEE1FF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gw4VwVrnA6iXkEavXezEky7cf24.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/3975b1-074c-4fd0-9661-d1d6c3f92ffb/1/Gw4VwVrnA6iXkEavXezEky7cf24.mft
Manifest number: 084E
Signing time: Tue 04 Nov 2025 04:02:02 +0000
Manifest this update: Tue 04 Nov 2025 04:02:02 +0000
Manifest next update: Wed 05 Nov 2025 04:02:02 +0000
Files and hashes: 1: Gw4VwVrnA6iXkEavXezEky7cf24.crl (hash: zPLRwtNBZ7SojWBfPFVHdcJCCAlvNB8gCem1G5G1wnQ=)
2: WB9kjcUG_eK70F_25abwXmjO6D0.roa (hash: jo9Io4lvr31QdGnhzj2S5UeQzPHc2sTqLWFX7n7f+po=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/3975b1-074c-4fd0-9661-d1d6c3f92ffb/1/Gw4VwVrnA6iXkEavXezEky7cf24.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/3975b1-074c-4fd0-9661-d1d6c3f92ffb/1/Gw4VwVrnA6iXkEavXezEky7cf24.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gw4VwVrnA6iXkEavXezEky7cf24.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 04:02:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:07:69:10:cf:8e:be:2c:9c:90:5a:57:4b:ee:1f:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0e15c15ae703a8979046af5decc4932edc7f6e
Validity
Not Before: Nov 4 04:02:02 2025 GMT
Not After : Nov 5 04:02:02 2025 GMT
Subject: CN=64643f0635155d0dc329de43eaad8d89bfa95cf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:23:22:1b:3f:a1:cd:cd:97:e2:69:86:f9:a9:
e6:de:22:fd:65:8a:3b:ab:16:6e:af:ae:dc:3b:eb:
87:b8:a1:d5:c5:d7:86:6f:62:f8:98:8b:d7:f3:aa:
61:76:b2:e4:3b:1f:71:38:b8:b2:e3:4d:3f:09:1f:
d9:4e:96:66:b8:75:91:02:e8:a8:81:24:d0:85:c4:
06:a8:dd:22:88:f7:36:ea:2a:ce:6e:29:90:62:59:
80:18:0a:80:bc:6a:7d:79:c4:07:14:d1:9d:c2:7c:
b7:d1:8e:65:70:96:1c:2c:1b:53:e8:95:ba:04:c6:
b9:5e:2f:92:fe:82:59:f0:81:ee:ef:3a:6c:e8:77:
9d:9e:84:63:b4:16:44:1d:55:a7:b9:d9:9b:82:c2:
c7:c7:b8:e2:a0:dc:84:fb:11:b4:57:2d:d4:6b:a4:
ec:ad:f6:50:a3:ab:26:e8:78:db:f5:31:4b:ca:c9:
5a:3c:0f:12:84:93:52:7b:1c:f3:83:49:76:2f:f5:
51:d8:da:0a:1d:c5:3d:eb:db:65:f9:24:d4:71:fd:
68:52:b4:b9:b3:ed:44:8a:19:89:a6:a6:74:5a:09:
d2:69:d5:63:39:63:52:ad:53:56:7a:39:f9:e4:89:
c0:40:c2:48:a8:9a:65:e7:e4:b4:d8:32:cd:58:c4:
87:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:64:3F:06:35:15:5D:0D:C3:29:DE:43:EA:AD:8D:89:BF:A9:5C:F8
X509v3 Authority Key Identifier:
keyid:1B:0E:15:C1:5A:E7:03:A8:97:90:46:AF:5D:EC:C4:93:2E:DC:7F:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gw4VwVrnA6iXkEavXezEky7cf24.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/3975b1-074c-4fd0-9661-d1d6c3f92ffb/1/Gw4VwVrnA6iXkEavXezEky7cf24.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/3975b1-074c-4fd0-9661-d1d6c3f92ffb/1/Gw4VwVrnA6iXkEavXezEky7cf24.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:a2:8f:79:6c:b2:33:b7:1b:ba:22:4c:64:8d:15:85:d9:a1:
73:9f:b3:50:50:1d:05:a3:d5:e8:e0:01:e5:a9:9c:bf:8f:83:
11:9e:8d:37:e3:98:ec:b3:34:31:a3:e2:34:4c:7d:53:29:66:
05:a3:47:fb:36:8b:8d:bb:9d:4c:7d:1c:3a:50:aa:a5:29:2e:
12:e7:b8:09:ee:9c:61:53:b6:fb:8d:91:69:5c:f6:cd:bb:e1:
d6:0d:35:bd:2e:db:e8:d1:80:80:27:c4:fd:ca:7f:1c:a5:bc:
eb:2d:3a:0f:b1:66:8f:39:d5:5d:02:9d:cc:7e:2c:c5:94:0e:
72:de:ea:d4:92:7d:1c:a2:4b:c6:40:8b:21:0a:ca:fe:8f:84:
3a:3a:03:d0:c6:a4:79:9c:bd:bc:6f:f6:c6:78:b5:e7:7f:5d:
df:0d:f9:50:eb:81:be:91:99:5a:d8:73:c7:f6:a8:10:e5:06:
c5:ab:9d:c8:ec:68:a6:03:59:11:6d:36:a4:0b:40:62:bf:de:
ed:20:bf:dc:c0:cd:6a:c0:be:73:7b:38:7f:0d:fe:f3:8e:e5:
25:9c:b2:9b:64:9d:74:fc:da:66:53:fc:14:5b:ed:73:88:ce:
0d:3e:1b:b8:0a:4d:29:32:3d:8d:67:43:98:a5:43:c4:ac:bb:
f3:7b:f1:92
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNB2kQz46+LJyQWldL7h/yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiMGUxNWMxNWFlNzAzYTg5NzkwNDZhZjVkZWNjNDkzMmVk
YzdmNmUwHhcNMjUxMTA0MDQwMjAyWhcNMjUxMTA1MDQwMjAyWjAzMTEwLwYDVQQD
Eyg2NDY0M2YwNjM1MTU1ZDBkYzMyOWRlNDNlYWFkOGQ4OWJmYTk1Y2Y4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoiMiGz+hzc2X4mmG+anm3iL9ZYo7
qxZur67cO+uHuKHVxdeGb2L4mIvX86phdrLkOx9xOLiy400/CR/ZTpZmuHWRAuio
gSTQhcQGqN0iiPc26irObimQYlmAGAqAvGp9ecQHFNGdwny30Y5lcJYcLBtT6JW6
BMa5Xi+S/oJZ8IHu7zps6HednoRjtBZEHVWnudmbgsLHx7jioNyE+xG0Vy3Ua6Ts
rfZQo6sm6Hjb9TFLyslaPA8ShJNSexzzg0l2L/VR2NoKHcU969tl+STUcf1oUrS5
s+1EihmJpqZ0WgnSadVjOWNSrVNWejn55InAQMJIqJpl5+S02DLNWMSH2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGRkPwY1FV0NwyneQ+qtjYm/qVz4MB8GA1UdIwQY
MBaAFBsOFcFa5wOol5BGr13sxJMu3H9uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3c0VndWcm5BNmlYa0VhdlhlekVreTdjZjI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC8zOTc1YjEtMDc0Yy00ZmQwLTk2NjEt
ZDFkNmMzZjkyZmZiLzEvR3c0VndWcm5BNmlYa0VhdlhlekVreTdjZjI0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC8zOTc1YjEtMDc0Yy00ZmQwLTk2NjEtZDFkNmMzZjkyZmZi
LzEvR3c0VndWcm5BNmlYa0VhdlhlekVreTdjZjI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACKKPeWyy
M7cbuiJMZI0Vhdmhc5+zUFAdBaPV6OAB5amcv4+DEZ6NN+OY7LM0MaPiNEx9Uylm
BaNH+zaLjbudTH0cOlCqpSkuEue4Ce6cYVO2+42RaVz2zbvh1g01vS7b6NGAgCfE
/cp/HKW86y06D7FmjznVXQKdzH4sxZQOct7q1JJ9HKJLxkCLIQrK/o+EOjoD0Mak
eZy9vG/2xni1539d3w35UOuBvpGZWthzx/aoEOUGxaudyOxopgNZEW02pAtAYr/e
7SC/3MDNasC+c3s4fw3+847lJZyym2SddPzaZlP8FFvtc4jODT4buApNKTI9jWdD
mKVDxKy783vxkg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 10:49:50 2025 by rpki-client