Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/329968-247c-4dea-99d2-60107b4ea4eb/1/GnmgrDMSwWU_MAsEUQ2b8snCpV8.mft
File: GnmgrDMSwWU_MAsEUQ2b8snCpV8.mft (raw, json)
Hash identifier: 0yyxJ9Yi6m0vNWbb/tJjd5g+v6So0fxCKAQBk6s92vw=
Subject key identifier: 85:99:D3:9A:3E:C2:3A:48:19:29:F0:0E:29:77:C7:BD:05:E6:76:0C
Authority key identifier: 1A:79:A0:AC:33:12:C1:65:3F:30:0B:04:51:0D:9B:F2:C9:C2:A5:5F
Certificate issuer: /CN=1a79a0ac3312c1653f300b04510d9bf2c9c2a55f
Certificate serial: 019A4DE1DA1FF3FFBFEB402D21FD45BF313D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GnmgrDMSwWU_MAsEUQ2b8snCpV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/329968-247c-4dea-99d2-60107b4ea4eb/1/GnmgrDMSwWU_MAsEUQ2b8snCpV8.mft
Manifest number: 169F
Signing time: Tue 04 Nov 2025 08:00:38 +0000
Manifest this update: Tue 04 Nov 2025 08:00:38 +0000
Manifest next update: Wed 05 Nov 2025 08:00:38 +0000
Files and hashes: 1: GnmgrDMSwWU_MAsEUQ2b8snCpV8.crl (hash: GURkejuZe9niiu2h3sodGx7L3gJippbWp+EoldJPyAI=)
2: TOBAVscU9VJTwLsUhLP0tAjAQi4.roa (hash: IKzhkAp3S93tfIC5ceCBznZ4xMgoDfcxElkoH29JQ+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/329968-247c-4dea-99d2-60107b4ea4eb/1/GnmgrDMSwWU_MAsEUQ2b8snCpV8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/329968-247c-4dea-99d2-60107b4ea4eb/1/GnmgrDMSwWU_MAsEUQ2b8snCpV8.mft
rsync://rpki.ripe.net/repository/DEFAULT/GnmgrDMSwWU_MAsEUQ2b8snCpV8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:da:1f:f3:ff:bf:eb:40:2d:21:fd:45:bf:31:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a79a0ac3312c1653f300b04510d9bf2c9c2a55f
Validity
Not Before: Nov 4 08:00:38 2025 GMT
Not After : Nov 5 08:00:38 2025 GMT
Subject: CN=8599d39a3ec23a481929f00e2977c7bd05e6760c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:66:b4:38:96:60:e7:fc:40:aa:17:17:ba:66:
4a:77:6d:89:4b:47:3f:e2:b5:26:6c:dc:43:71:39:
fa:2f:19:2e:1e:66:52:f2:eb:7d:cf:13:3e:d0:5a:
9d:f8:76:56:17:cb:07:99:fd:63:47:6e:b7:48:0f:
30:ce:8f:8b:15:e3:f3:9d:f0:1d:84:a9:e2:b4:f8:
d4:7c:26:f0:dd:e7:28:26:07:22:99:15:3d:10:ee:
b7:ab:32:8f:12:58:c1:07:80:98:85:1a:84:7e:c9:
90:23:29:4e:cb:58:16:f2:69:9f:f7:d7:60:42:65:
19:4f:96:38:8f:58:11:88:ec:f8:9f:e7:d4:42:16:
48:cd:37:d2:10:db:b7:27:7d:fc:51:7c:72:9c:7d:
9f:bd:f9:1d:4b:ca:cf:ba:fc:8b:f4:3f:6d:56:3b:
e7:91:a4:5c:d4:da:ab:f1:f4:13:24:5d:68:af:d0:
f4:cf:c2:d7:33:b1:ac:55:1d:e6:02:f9:44:51:37:
58:b2:97:7e:36:cd:5f:d8:d1:77:f7:ce:ad:1d:69:
b2:10:71:20:a2:21:0d:95:79:08:5f:ac:06:93:87:
e5:0c:b9:27:96:10:b4:72:97:b7:c3:13:a8:22:5e:
9f:e5:47:45:7b:21:93:52:b9:2d:2e:99:66:51:ae:
bc:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:99:D3:9A:3E:C2:3A:48:19:29:F0:0E:29:77:C7:BD:05:E6:76:0C
X509v3 Authority Key Identifier:
keyid:1A:79:A0:AC:33:12:C1:65:3F:30:0B:04:51:0D:9B:F2:C9:C2:A5:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GnmgrDMSwWU_MAsEUQ2b8snCpV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/329968-247c-4dea-99d2-60107b4ea4eb/1/GnmgrDMSwWU_MAsEUQ2b8snCpV8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/329968-247c-4dea-99d2-60107b4ea4eb/1/GnmgrDMSwWU_MAsEUQ2b8snCpV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:cb:fd:41:24:39:9e:48:34:0c:44:d4:f7:df:9b:3a:cc:dd:
b0:23:cd:d1:53:5d:a4:3c:a2:f1:60:0f:d8:aa:26:b4:5a:6d:
e6:4c:1c:56:d0:df:39:e7:e6:d2:d6:d8:73:db:0c:f6:85:33:
8a:32:f4:a2:be:7f:d9:54:a0:34:6d:11:9d:af:d2:04:b4:f6:
7b:7f:97:9b:fa:48:ec:ee:72:70:69:07:c4:66:ec:95:eb:37:
ef:92:fc:93:c8:23:0c:2b:ca:97:59:ff:a3:51:c1:1b:f7:64:
07:85:3c:b7:d7:e1:79:c2:de:86:95:6c:ac:b2:8d:89:3b:6c:
38:82:f6:19:a0:22:ea:81:6c:64:c2:e8:4d:03:51:8f:65:ea:
1b:5b:ad:7b:5f:78:78:58:00:0c:33:25:ef:20:e4:e4:27:64:
af:a0:87:6b:45:f3:13:14:82:8d:36:e4:79:54:44:0c:fa:ff:
46:1d:40:25:85:54:50:94:0c:90:89:dc:ca:03:d1:ce:c4:c1:
1d:dd:95:14:6e:81:d8:e7:a8:5b:f7:d1:09:b5:bc:0c:df:ad:
04:ef:5f:cd:47:dd:29:46:55:33:d0:f5:13:38:5e:13:a7:89:
b2:32:86:f5:90:e0:3b:3d:c8:9b:67:5c:5f:25:01:c9:15:3f:
85:0f:bb:64
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpN4dof8/+/60AtIf1FvzE9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhNzlhMGFjMzMxMmMxNjUzZjMwMGIwNDUxMGQ5YmYyYzlj
MmE1NWYwHhcNMjUxMTA0MDgwMDM4WhcNMjUxMTA1MDgwMDM4WjAzMTEwLwYDVQQD
Eyg4NTk5ZDM5YTNlYzIzYTQ4MTkyOWYwMGUyOTc3YzdiZDA1ZTY3NjBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4ma0OJZg5/xAqhcXumZKd22JS0c/
4rUmbNxDcTn6LxkuHmZS8ut9zxM+0Fqd+HZWF8sHmf1jR263SA8wzo+LFePznfAd
hKnitPjUfCbw3ecoJgcimRU9EO63qzKPEljBB4CYhRqEfsmQIylOy1gW8mmf99dg
QmUZT5Y4j1gRiOz4n+fUQhZIzTfSENu3J338UXxynH2fvfkdS8rPuvyL9D9tVjvn
kaRc1Nqr8fQTJF1or9D0z8LXM7GsVR3mAvlEUTdYspd+Ns1f2NF3986tHWmyEHEg
oiENlXkIX6wGk4flDLknlhC0cpe3wxOoIl6f5UdFeyGTUrktLplmUa68KwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIWZ05o+wjpIGSnwDil3x70F5nYMMB8GA1UdIwQY
MBaAFBp5oKwzEsFlPzALBFENm/LJwqVfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR25tZ3JETVN3V1VfTUFzRVVRMmI4c25DcFY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS8zMjk5NjgtMjQ3Yy00ZGVhLTk5ZDIt
NjAxMDdiNGVhNGViLzEvR25tZ3JETVN3V1VfTUFzRVVRMmI4c25DcFY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS8zMjk5NjgtMjQ3Yy00ZGVhLTk5ZDItNjAxMDdiNGVhNGVi
LzEvR25tZ3JETVN3V1VfTUFzRVVRMmI4c25DcFY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtsv9QSQ5
nkg0DETU99+bOszdsCPN0VNdpDyi8WAP2KomtFpt5kwcVtDfOefm0tbYc9sM9oUz
ijL0or5/2VSgNG0Rna/SBLT2e3+Xm/pI7O5ycGkHxGbsles375L8k8gjDCvKl1n/
o1HBG/dkB4U8t9fhecLehpVsrLKNiTtsOIL2GaAi6oFsZMLoTQNRj2XqG1ute194
eFgADDMl7yDk5Cdkr6CHa0XzExSCjTbkeVREDPr/Rh1AJYVUUJQMkIncygPRzsTB
Hd2VFG6B2OeoW/fRCbW8DN+tBO9fzUfdKUZVM9D1EzheE6eJsjKG9ZDgOz3Im2dc
XyUByRU/hQ+7ZA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 17:54:32 2025 by rpki-client