Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/de84ce-d704-4766-a388-f8e5b2d8680c/1/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.mft
File: gGFTFdx1DAPmD8NqdQxeP_ZurJQ.mft (raw, json)
Hash identifier: TVUvu34EZ9i6xzAL9DvSZizvfQEnnL+yiDvydgDKy8c=
Subject key identifier: EB:9B:2B:01:E7:99:21:73:21:B9:5C:C4:E1:37:AF:46:B5:B2:07:D6
Authority key identifier: 80:61:53:15:DC:75:0C:03:E6:0F:C3:6A:75:0C:5E:3F:F6:6E:AC:94
Certificate issuer: /CN=80615315dc750c03e60fc36a750c5e3ff66eac94
Certificate serial: 019A4DAAACEF89F570F99068BF152B13FAD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/de84ce-d704-4766-a388-f8e5b2d8680c/1/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.mft
Manifest number: 1713
Signing time: Tue 04 Nov 2025 07:00:22 +0000
Manifest this update: Tue 04 Nov 2025 07:00:22 +0000
Manifest next update: Wed 05 Nov 2025 07:00:22 +0000
Files and hashes: 1: dUjydhDtv2Ysc8dEDoiT2yx34lg.roa (hash: ebc83oZNm2ylmobsykoAv58WP6zLL9GO+02NODZysqQ=)
2: gGFTFdx1DAPmD8NqdQxeP_ZurJQ.crl (hash: sW8bk2oq+J2ftcte39k52KP3M7wQ1UwtY0Ew/3YcDVA=)
3: wnOuzl-IR7vlXr_TnkhmJHC0KcQ.roa (hash: A1fNf8pB5tQL1RUFisCU1kyqkrX8SMY0lp/3rcsduXg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/de84ce-d704-4766-a388-f8e5b2d8680c/1/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/de84ce-d704-4766-a388-f8e5b2d8680c/1/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:aa:ac:ef:89:f5:70:f9:90:68:bf:15:2b:13:fa:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80615315dc750c03e60fc36a750c5e3ff66eac94
Validity
Not Before: Nov 4 07:00:22 2025 GMT
Not After : Nov 5 07:00:22 2025 GMT
Subject: CN=eb9b2b01e799217321b95cc4e137af46b5b207d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:3a:a6:e0:76:fb:52:bd:36:a1:d5:17:8d:5e:
93:ba:0c:2d:1f:72:cd:71:18:ad:0e:d2:ef:9a:92:
78:88:72:a7:e1:97:81:7b:94:48:9e:30:2d:a8:5a:
e8:ca:3e:72:11:1d:d7:79:4a:e8:20:7b:1f:a3:4f:
6c:f6:c3:cf:c8:f5:51:79:70:c3:5a:ae:33:d6:4a:
da:20:0e:73:51:fc:c6:d5:bb:4c:6b:57:33:90:af:
42:8a:17:a5:c1:df:e8:3a:03:05:a3:82:60:d4:29:
b9:59:57:56:23:7f:f7:b1:c7:3d:0e:3d:2f:59:c6:
70:74:d9:cb:b9:7a:c3:46:8c:a7:d0:55:5c:fe:6e:
ff:d3:96:75:47:2d:ab:d8:8f:6a:60:52:f7:47:45:
82:18:d5:b3:04:cd:5c:bc:97:6b:c0:37:32:2c:8e:
4e:45:fa:0b:72:ba:a3:90:4c:2f:ab:54:eb:db:9c:
c2:c7:75:22:16:8b:60:e9:5f:6e:24:cd:d8:ee:a0:
7b:2a:c8:6a:a1:ec:7b:7d:b6:46:0d:44:21:b5:22:
99:c3:e3:bb:12:0f:91:c9:92:01:fc:58:54:1b:d1:
96:e5:77:4b:ce:3b:cd:84:0f:7d:64:bf:14:d7:d2:
d1:91:67:41:c4:f9:fa:22:d7:e1:d1:ae:da:5d:6b:
22:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:9B:2B:01:E7:99:21:73:21:B9:5C:C4:E1:37:AF:46:B5:B2:07:D6
X509v3 Authority Key Identifier:
keyid:80:61:53:15:DC:75:0C:03:E6:0F:C3:6A:75:0C:5E:3F:F6:6E:AC:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/de84ce-d704-4766-a388-f8e5b2d8680c/1/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/de84ce-d704-4766-a388-f8e5b2d8680c/1/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:30:5d:00:69:74:74:80:a0:c2:d3:8c:30:c2:1e:4f:90:e0:
2a:e9:87:fe:92:d7:c6:3d:27:f4:15:ae:dc:8e:5e:57:9a:aa:
0f:a3:52:1a:bb:93:f6:61:b7:31:7e:dc:2e:b5:0b:fe:13:e9:
ba:dc:4e:cb:a8:c3:53:8b:4e:f0:2b:95:13:8d:85:df:67:0e:
28:b9:0b:a7:22:93:10:8d:2d:61:df:28:79:12:4b:df:88:d9:
5c:61:d0:f5:cd:c4:52:8f:5c:b5:5b:58:0f:4f:a3:7e:60:af:
b4:e3:26:43:33:7e:e4:02:6c:81:12:e2:6c:a6:e5:99:15:5d:
fc:03:ae:b2:81:c0:98:90:bb:dc:5b:40:de:84:90:ea:29:35:
52:fe:ef:7e:3a:88:66:10:f5:55:26:98:8e:5f:85:24:e7:9f:
86:01:f7:f5:c7:a5:ea:6b:bd:d5:79:1a:89:5a:61:5f:37:78:
14:a2:05:04:44:d6:61:1b:24:dc:da:4b:c8:87:cc:d7:dd:a7:
2b:8b:4a:d0:26:23:26:b1:0f:b4:3a:99:1a:6a:ef:a3:9a:f9:
f9:64:e1:d0:32:23:57:ed:4b:e6:4c:86:f7:5d:d5:70:12:ab:
bf:d2:2b:8c:99:0c:d1:2f:95:d0:fd:98:fa:1f:30:96:e9:df:
09:1e:fd:74
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNqqzvifVw+ZBovxUrE/rRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgwNjE1MzE1ZGM3NTBjMDNlNjBmYzM2YTc1MGM1ZTNmZjY2
ZWFjOTQwHhcNMjUxMTA0MDcwMDIyWhcNMjUxMTA1MDcwMDIyWjAzMTEwLwYDVQQD
EyhlYjliMmIwMWU3OTkyMTczMjFiOTVjYzRlMTM3YWY0NmI1YjIwN2Q2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Tqm4Hb7Ur02odUXjV6TugwtH3LN
cRitDtLvmpJ4iHKn4ZeBe5RInjAtqFroyj5yER3XeUroIHsfo09s9sPPyPVReXDD
Wq4z1kraIA5zUfzG1btMa1czkK9Cihelwd/oOgMFo4Jg1Cm5WVdWI3/3scc9Dj0v
WcZwdNnLuXrDRoyn0FVc/m7/05Z1Ry2r2I9qYFL3R0WCGNWzBM1cvJdrwDcyLI5O
RfoLcrqjkEwvq1Tr25zCx3UiFotg6V9uJM3Y7qB7Kshqoex7fbZGDUQhtSKZw+O7
Eg+RyZIB/FhUG9GW5XdLzjvNhA99ZL8U19LRkWdBxPn6Itfh0a7aXWsiPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOubKwHnmSFzIblcxOE3r0a1sgfWMB8GA1UdIwQY
MBaAFIBhUxXcdQwD5g/DanUMXj/2bqyUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ0dGVEZkeDFEQVBtRDhOcWRReGVQX1p1ckpRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9kZTg0Y2UtZDcwNC00NzY2LWEzODgt
ZjhlNWIyZDg2ODBjLzEvZ0dGVEZkeDFEQVBtRDhOcWRReGVQX1p1ckpRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi9kZTg0Y2UtZDcwNC00NzY2LWEzODgtZjhlNWIyZDg2ODBj
LzEvZ0dGVEZkeDFEQVBtRDhOcWRReGVQX1p1ckpRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWzBdAGl0
dICgwtOMMMIeT5DgKumH/pLXxj0n9BWu3I5eV5qqD6NSGruT9mG3MX7cLrUL/hPp
utxOy6jDU4tO8CuVE42F32cOKLkLpyKTEI0tYd8oeRJL34jZXGHQ9c3EUo9ctVtY
D0+jfmCvtOMmQzN+5AJsgRLibKblmRVd/AOusoHAmJC73FtA3oSQ6ik1Uv7vfjqI
ZhD1VSaYjl+FJOefhgH39cel6mu91XkaiVphXzd4FKIFBETWYRsk3NpLyIfM192n
K4tK0CYjJrEPtDqZGmrvo5r5+WTh0DIjV+1L5kyG913VcBKrv9IrjJkM0S+V0P2Y
+h8wlunfCR79dA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:41:14 2025 by rpki-client