Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/6007ff-5f0c-4a73-a3f2-ccc5814094ad/1/GQ1bBUO9hajs-WmruFA8nerQ35g.mft
File: GQ1bBUO9hajs-WmruFA8nerQ35g.mft (raw, json)
Hash identifier: e8cGE3ULd5gqZ5NYsHK3abyaKWxafGWc6KszZuslHy4=
Subject key identifier: 83:CF:56:FC:BC:E1:6D:A5:6C:95:4E:24:1B:34:79:38:A6:12:8F:1F
Authority key identifier: 19:0D:5B:05:43:BD:85:A8:EC:F9:69:AB:B8:50:3C:9D:EA:D0:DF:98
Certificate issuer: /CN=190d5b0543bd85a8ecf969abb8503c9dead0df98
Certificate serial: 019A50E3DBD3C392BCFF4C9FB0376CAFDD5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GQ1bBUO9hajs-WmruFA8nerQ35g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/6007ff-5f0c-4a73-a3f2-ccc5814094ad/1/GQ1bBUO9hajs-WmruFA8nerQ35g.mft
Manifest number: 0DEF
Signing time: Tue 04 Nov 2025 22:01:41 +0000
Manifest this update: Tue 04 Nov 2025 22:01:41 +0000
Manifest next update: Wed 05 Nov 2025 22:01:41 +0000
Files and hashes: 1: DRozhMtaZ2qQi39QkdO5G1jc7k0.roa (hash: PuORiX2E31wDt+P9sStv2sIXh7s2xmzWRFumBtIrOBQ=)
2: GQ1bBUO9hajs-WmruFA8nerQ35g.crl (hash: ITLV3eoKaYhVMxBi7w5ndHvanGXa1Q4S6b5tW7ZkkHg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/6007ff-5f0c-4a73-a3f2-ccc5814094ad/1/GQ1bBUO9hajs-WmruFA8nerQ35g.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/6007ff-5f0c-4a73-a3f2-ccc5814094ad/1/GQ1bBUO9hajs-WmruFA8nerQ35g.mft
rsync://rpki.ripe.net/repository/DEFAULT/GQ1bBUO9hajs-WmruFA8nerQ35g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e3:db:d3:c3:92:bc:ff:4c:9f:b0:37:6c:af:dd:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=190d5b0543bd85a8ecf969abb8503c9dead0df98
Validity
Not Before: Nov 4 22:01:41 2025 GMT
Not After : Nov 5 22:01:41 2025 GMT
Subject: CN=83cf56fcbce16da56c954e241b347938a6128f1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:84:99:25:d1:01:e3:8a:d3:15:6a:fa:e8:3d:
ec:2d:5c:b8:64:7c:3a:e5:a3:4e:1a:b1:44:0c:ce:
47:7c:4d:09:18:c4:00:bb:71:82:25:e9:40:7f:12:
0d:05:70:d6:7b:8f:3f:83:c3:29:7d:c6:f9:6d:18:
ab:73:41:5c:34:f5:33:29:a9:35:39:ca:4b:3d:f7:
71:67:b1:cf:c1:fb:3a:d5:d3:df:37:00:b7:05:ee:
e9:30:d3:19:1e:9b:29:a3:ee:bb:6f:56:a1:53:8c:
b4:63:cc:1f:5e:54:3b:42:b1:0c:79:38:dc:a1:6f:
7d:d2:36:10:d1:0e:9d:28:88:4f:f6:8b:06:fd:48:
dc:d9:99:a2:60:50:1e:9b:d1:2a:0c:44:2d:9d:b6:
9b:d7:01:e9:d6:69:6a:38:70:e7:5b:6c:dc:06:19:
d1:7d:bf:36:a6:b5:1b:6d:6f:3b:94:6e:93:99:fa:
b4:33:64:d6:d3:16:94:0b:f2:9c:c3:1f:1b:0a:29:
fa:36:b9:fa:e5:37:c9:de:f0:71:c2:5e:86:a6:af:
5e:2f:67:6e:a0:f7:55:ae:b6:fd:49:88:ae:53:d4:
66:f3:fb:f9:b6:a7:83:2b:ce:e3:c6:7d:cc:54:23:
86:90:4a:95:5a:50:2c:64:66:a7:a4:e7:02:1f:ad:
eb:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:CF:56:FC:BC:E1:6D:A5:6C:95:4E:24:1B:34:79:38:A6:12:8F:1F
X509v3 Authority Key Identifier:
keyid:19:0D:5B:05:43:BD:85:A8:EC:F9:69:AB:B8:50:3C:9D:EA:D0:DF:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GQ1bBUO9hajs-WmruFA8nerQ35g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6007ff-5f0c-4a73-a3f2-ccc5814094ad/1/GQ1bBUO9hajs-WmruFA8nerQ35g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6007ff-5f0c-4a73-a3f2-ccc5814094ad/1/GQ1bBUO9hajs-WmruFA8nerQ35g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:1c:af:62:eb:86:b7:5f:da:2f:2f:ed:f1:7c:60:99:95:a5:
3c:a1:f6:45:e7:96:40:8e:05:43:0c:39:90:aa:38:eb:ba:d8:
61:de:97:5e:c0:87:06:71:df:9d:25:92:69:d8:ca:d3:49:74:
3c:e4:9e:47:d9:f6:8d:46:74:77:3a:b8:d3:4d:cd:7d:2c:e4:
ba:f3:c7:67:6a:96:37:0a:1c:54:49:56:a8:05:2d:80:16:d3:
4e:53:eb:f3:4d:77:a2:b3:22:23:8d:f6:c4:08:35:8f:20:bd:
da:c6:65:d0:b2:2d:1e:5d:8f:91:46:ae:b8:cd:a7:40:6f:90:
fc:67:bc:47:9a:18:df:09:aa:dc:61:42:80:79:97:44:af:ed:
20:e8:84:98:7a:70:9e:01:aa:0e:f1:a0:c1:cc:85:7a:8b:35:
b8:0f:26:25:27:18:98:60:ea:39:e2:fc:e6:90:d1:9b:89:37:
9b:bc:bf:a1:83:0c:cf:9c:3b:51:90:bc:28:f4:6a:d0:53:66:
57:8d:ea:ff:e8:20:74:35:32:12:5e:40:ed:bc:91:cb:fb:a4:
17:9c:70:b8:95:f9:f5:d9:7d:9a:cb:cf:3d:e5:cd:57:34:45:
19:b4:0b:1c:41:17:72:a5:aa:06:c4:d6:30:56:55:96:c6:d0:
60:65:a2:1b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpQ49vTw5K8/0yfsDdsr91cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5MGQ1YjA1NDNiZDg1YThlY2Y5NjlhYmI4NTAzYzlkZWFk
MGRmOTgwHhcNMjUxMTA0MjIwMTQxWhcNMjUxMTA1MjIwMTQxWjAzMTEwLwYDVQQD
Eyg4M2NmNTZmY2JjZTE2ZGE1NmM5NTRlMjQxYjM0NzkzOGE2MTI4ZjFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsISZJdEB44rTFWr66D3sLVy4ZHw6
5aNOGrFEDM5HfE0JGMQAu3GCJelAfxINBXDWe48/g8Mpfcb5bRirc0FcNPUzKak1
OcpLPfdxZ7HPwfs61dPfNwC3Be7pMNMZHpspo+67b1ahU4y0Y8wfXlQ7QrEMeTjc
oW990jYQ0Q6dKIhP9osG/Ujc2ZmiYFAem9EqDEQtnbab1wHp1mlqOHDnW2zcBhnR
fb82prUbbW87lG6Tmfq0M2TW0xaUC/Kcwx8bCin6Nrn65TfJ3vBxwl6Gpq9eL2du
oPdVrrb9SYiuU9Rm8/v5tqeDK87jxn3MVCOGkEqVWlAsZGanpOcCH63rrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIPPVvy84W2lbJVOJBs0eTimEo8fMB8GA1UdIwQY
MBaAFBkNWwVDvYWo7Plpq7hQPJ3q0N+YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR1ExYkJVTzloYWpzLVdtcnVGQThuZXJRMzVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC82MDA3ZmYtNWYwYy00YTczLWEzZjIt
Y2NjNTgxNDA5NGFkLzEvR1ExYkJVTzloYWpzLVdtcnVGQThuZXJRMzVnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC82MDA3ZmYtNWYwYy00YTczLWEzZjItY2NjNTgxNDA5NGFk
LzEvR1ExYkJVTzloYWpzLVdtcnVGQThuZXJRMzVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALhyvYuuG
t1/aLy/t8XxgmZWlPKH2ReeWQI4FQww5kKo467rYYd6XXsCHBnHfnSWSadjK00l0
POSeR9n2jUZ0dzq4003NfSzkuvPHZ2qWNwocVElWqAUtgBbTTlPr8013orMiI432
xAg1jyC92sZl0LItHl2PkUauuM2nQG+Q/Ge8R5oY3wmq3GFCgHmXRK/tIOiEmHpw
ngGqDvGgwcyFeos1uA8mJScYmGDqOeL85pDRm4k3m7y/oYMMz5w7UZC8KPRq0FNm
V43q/+ggdDUyEl5A7byRy/ukF5xwuJX59dl9msvPPeXNVzRFGbQLHEEXcqWqBsTW
MFZVlsbQYGWiGw==
-----END CERTIFICATE-----
Generated at Wed Nov 5 05:56:30 2025 by rpki-client