Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/4a293b-4c41-428c-9287-bd98b3e90e43/1/G9vEEUREgGUxPvC4LhzPeubqVyA.mft
File: G9vEEUREgGUxPvC4LhzPeubqVyA.mft (raw, json)
Hash identifier: 3vEsZz7yzAOVYyNSIBuye1H+qzpw/K/FMop+gweaWgs=
Subject key identifier: 10:D6:D2:8A:DD:55:13:BD:42:E1:A6:0C:65:5A:66:A3:8A:63:64:51
Authority key identifier: 1B:DB:C4:11:44:44:80:65:31:3E:F0:B8:2E:1C:CF:7A:E6:EA:57:20
Certificate issuer: /CN=1bdbc41144448065313ef0b82e1ccf7ae6ea5720
Certificate serial: 019A52636CD883A5A540D926BFCBB3615C57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G9vEEUREgGUxPvC4LhzPeubqVyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/4a293b-4c41-428c-9287-bd98b3e90e43/1/G9vEEUREgGUxPvC4LhzPeubqVyA.mft
Manifest number: 1711
Signing time: Wed 05 Nov 2025 05:00:38 +0000
Manifest this update: Wed 05 Nov 2025 05:00:38 +0000
Manifest next update: Thu 06 Nov 2025 05:00:38 +0000
Files and hashes: 1: G9vEEUREgGUxPvC4LhzPeubqVyA.crl (hash: yWq5BPo1O2o+ENOZaj0fS3puHxCdJdT8m681FJ+xZM4=)
2: PWeS-NKTh0dPX7EQagJN_UUuvpA.roa (hash: B0E7vLVtVMLANL6NGMEZXBlTrX+gpHtSfadbpxHmK4Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/4a293b-4c41-428c-9287-bd98b3e90e43/1/G9vEEUREgGUxPvC4LhzPeubqVyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/4a293b-4c41-428c-9287-bd98b3e90e43/1/G9vEEUREgGUxPvC4LhzPeubqVyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/G9vEEUREgGUxPvC4LhzPeubqVyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:63:6c:d8:83:a5:a5:40:d9:26:bf:cb:b3:61:5c:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bdbc41144448065313ef0b82e1ccf7ae6ea5720
Validity
Not Before: Nov 5 05:00:38 2025 GMT
Not After : Nov 6 05:00:38 2025 GMT
Subject: CN=10d6d28add5513bd42e1a60c655a66a38a636451
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:6e:18:51:12:f0:29:e2:30:56:3a:a5:cd:9a:
e1:cc:85:9c:91:9e:0b:d2:fc:14:88:1c:b2:b1:d2:
0c:51:1b:1f:a6:bb:c2:2e:bc:81:b0:e6:70:be:c2:
e6:08:e9:11:2f:ab:85:40:99:0e:27:d3:ec:5f:bf:
93:6b:c0:e9:79:ed:b4:ba:1c:e4:fc:c0:5e:14:81:
43:b9:84:e3:66:cb:54:aa:24:ab:72:be:c8:b0:43:
ce:3f:3d:1e:cf:0d:55:9e:23:24:20:22:31:68:d6:
bd:47:a2:6a:22:e3:44:a5:10:91:18:a5:67:69:19:
0e:10:bf:bf:92:4a:36:7d:d5:bd:60:4f:3f:a9:1c:
81:4d:b4:22:05:07:14:a7:d6:ef:5d:60:44:22:43:
43:54:4d:f8:cd:21:70:59:dd:f4:87:be:7c:9a:10:
a6:b0:61:e2:26:50:49:fb:8a:7c:b6:9d:61:16:b4:
c7:2e:06:f9:ed:66:1c:e6:44:2e:13:e8:7e:fd:dc:
c7:e0:88:de:80:c7:e0:41:df:af:cc:5b:95:f5:96:
62:f8:4c:87:45:98:eb:f0:26:35:28:95:42:8f:9d:
b9:7e:29:9a:a6:c5:92:73:5b:b9:fc:54:f2:2b:65:
24:e2:49:e5:ef:9f:1d:00:e8:c5:81:21:53:80:ee:
58:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:D6:D2:8A:DD:55:13:BD:42:E1:A6:0C:65:5A:66:A3:8A:63:64:51
X509v3 Authority Key Identifier:
keyid:1B:DB:C4:11:44:44:80:65:31:3E:F0:B8:2E:1C:CF:7A:E6:EA:57:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G9vEEUREgGUxPvC4LhzPeubqVyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/4a293b-4c41-428c-9287-bd98b3e90e43/1/G9vEEUREgGUxPvC4LhzPeubqVyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/4a293b-4c41-428c-9287-bd98b3e90e43/1/G9vEEUREgGUxPvC4LhzPeubqVyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:63:1d:06:62:8b:8c:6e:37:da:dd:72:35:63:4d:0d:07:66:
dc:35:9d:f2:fd:ac:49:87:f9:1f:d1:7a:95:90:b4:83:90:fb:
bc:d1:53:d3:b7:ca:8f:dc:10:ce:5c:4e:00:c9:98:1d:21:67:
ba:a1:d6:46:b3:ee:d1:ec:d4:d4:54:8e:0e:79:f2:63:34:c2:
00:5b:23:64:e9:d3:df:76:2e:43:77:10:e7:7f:50:ce:99:74:
14:ea:22:47:45:3a:56:07:01:39:d7:3c:ca:96:f4:c3:6d:e3:
20:26:67:ad:c3:d9:fb:96:f4:82:23:74:37:b9:cd:26:8e:64:
45:b2:55:34:04:51:18:08:5f:01:37:08:aa:7e:0b:d4:df:2a:
3d:a0:bd:c6:c0:f4:f4:0a:db:5a:b3:d6:e4:ab:87:ad:49:3b:
ef:c8:88:53:ac:a7:3f:67:f0:87:37:60:d5:b1:4a:db:a2:46:
7f:aa:77:79:7b:56:82:53:04:5c:9d:ca:d6:d1:9f:2e:60:97:
92:eb:b8:ea:b0:10:6c:f6:b8:af:93:27:28:66:96:3a:72:11:
02:f3:20:e3:4f:b9:65:6c:94:e1:06:07:d7:df:a0:b0:29:9c:
33:f0:8f:2f:e1:5c:87:b3:e9:d1:b1:1b:86:9c:22:f7:b1:2d:
84:22:05:2a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpSY2zYg6WlQNkmv8uzYVxXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiZGJjNDExNDQ0NDgwNjUzMTNlZjBiODJlMWNjZjdhZTZl
YTU3MjAwHhcNMjUxMTA1MDUwMDM4WhcNMjUxMTA2MDUwMDM4WjAzMTEwLwYDVQQD
EygxMGQ2ZDI4YWRkNTUxM2JkNDJlMWE2MGM2NTVhNjZhMzhhNjM2NDUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtW4YURLwKeIwVjqlzZrhzIWckZ4L
0vwUiByysdIMURsfprvCLryBsOZwvsLmCOkRL6uFQJkOJ9PsX7+Ta8Dpee20uhzk
/MBeFIFDuYTjZstUqiSrcr7IsEPOPz0ezw1VniMkICIxaNa9R6JqIuNEpRCRGKVn
aRkOEL+/kko2fdW9YE8/qRyBTbQiBQcUp9bvXWBEIkNDVE34zSFwWd30h758mhCm
sGHiJlBJ+4p8tp1hFrTHLgb57WYc5kQuE+h+/dzH4IjegMfgQd+vzFuV9ZZi+EyH
RZjr8CY1KJVCj525fimapsWSc1u5/FTyK2Uk4knl758dAOjFgSFTgO5YTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBDW0ordVRO9QuGmDGVaZqOKY2RRMB8GA1UdIwQY
MBaAFBvbxBFERIBlMT7wuC4cz3rm6lcgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRzl2RUVVUkVnR1V4UHZDNExoelBldWJxVnlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy80YTI5M2ItNGM0MS00MjhjLTkyODct
YmQ5OGIzZTkwZTQzLzEvRzl2RUVVUkVnR1V4UHZDNExoelBldWJxVnlBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy80YTI5M2ItNGM0MS00MjhjLTkyODctYmQ5OGIzZTkwZTQz
LzEvRzl2RUVVUkVnR1V4UHZDNExoelBldWJxVnlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuGMdBmKL
jG432t1yNWNNDQdm3DWd8v2sSYf5H9F6lZC0g5D7vNFT07fKj9wQzlxOAMmYHSFn
uqHWRrPu0ezU1FSODnnyYzTCAFsjZOnT33YuQ3cQ539Qzpl0FOoiR0U6VgcBOdc8
ypb0w23jICZnrcPZ+5b0giN0N7nNJo5kRbJVNARRGAhfATcIqn4L1N8qPaC9xsD0
9ArbWrPW5KuHrUk778iIU6ynP2fwhzdg1bFK26JGf6p3eXtWglMEXJ3K1tGfLmCX
kuu46rAQbPa4r5MnKGaWOnIRAvMg40+5ZWyU4QYH19+gsCmcM/CPL+Fch7Pp0bEb
hpwi97EthCIFKg==
-----END CERTIFICATE-----
Generated at Wed Nov 5 12:13:32 2025 by rpki-client