Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/c6f0a8-98f2-49fb-8506-42ad3b4c8d0c/1/GYIE0cJaARI2vqB0HkxgE500mxA.mft
File: GYIE0cJaARI2vqB0HkxgE500mxA.mft (raw, json)
Hash identifier: +/pgQfyjwKyhc4dkzp1oebGZRj9Jl8gOy0tbjcQfz9s=
Subject key identifier: 65:14:F1:F2:5E:9D:35:41:AD:F4:9D:AA:C2:94:7F:3F:CA:FC:61:69
Authority key identifier: 19:82:04:D1:C2:5A:01:12:36:BE:A0:74:1E:4C:60:13:9D:34:9B:10
Certificate issuer: /CN=198204d1c25a011236bea0741e4c60139d349b10
Certificate serial: 019A4DE15BEBBC836B3B51D62A1F3EB0CD59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GYIE0cJaARI2vqB0HkxgE500mxA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/c6f0a8-98f2-49fb-8506-42ad3b4c8d0c/1/GYIE0cJaARI2vqB0HkxgE500mxA.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 08:00:05 +0000
Manifest this update: Tue 04 Nov 2025 08:00:05 +0000
Manifest next update: Wed 05 Nov 2025 08:00:05 +0000
Files and hashes: 1: GYIE0cJaARI2vqB0HkxgE500mxA.crl (hash: t3XD++NDlQSPyG7Xtvcb2yGwYOBXIyIO+GwiIFQnUro=)
2: kKreilVZ98mCE6qg5IcJvMPMCcM.roa (hash: nnm83jFx2ukSqxJkqYReRSVveVI2MP9/RX2milhxjy4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/c6f0a8-98f2-49fb-8506-42ad3b4c8d0c/1/GYIE0cJaARI2vqB0HkxgE500mxA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/c6f0a8-98f2-49fb-8506-42ad3b4c8d0c/1/GYIE0cJaARI2vqB0HkxgE500mxA.mft
rsync://rpki.ripe.net/repository/DEFAULT/GYIE0cJaARI2vqB0HkxgE500mxA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:5b:eb:bc:83:6b:3b:51:d6:2a:1f:3e:b0:cd:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=198204d1c25a011236bea0741e4c60139d349b10
Validity
Not Before: Nov 4 08:00:05 2025 GMT
Not After : Nov 5 08:00:05 2025 GMT
Subject: CN=6514f1f25e9d3541adf49daac2947f3fcafc6169
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:b2:74:fa:c6:f5:08:20:08:ad:c1:08:d4:27:
0c:a3:da:3a:ff:ca:33:f8:d5:cd:c0:2c:53:83:9b:
39:b3:66:0b:b6:d1:22:db:68:a6:a7:72:fe:46:ad:
b8:62:26:f3:fd:f0:00:ce:b9:89:c4:1a:a1:77:7c:
0d:53:27:fb:63:9a:be:3a:9f:fe:57:b2:c3:d2:20:
d5:d0:e2:82:9d:89:3a:09:16:fe:24:e8:1f:0c:7a:
45:d3:19:ce:a5:a9:fc:b7:b1:a2:d0:30:32:7b:44:
ec:a5:0c:52:a1:40:8e:e8:57:78:9a:fc:16:52:36:
f2:cd:e1:0f:5f:2f:4b:2e:22:7c:cc:24:ea:ad:44:
0f:07:4e:e6:32:5e:0a:e6:ba:b7:1b:41:0c:cd:14:
6a:b2:97:48:b1:32:e1:9a:8c:35:c3:5a:b9:db:cb:
83:39:66:37:a2:a7:55:0e:7d:b5:1d:b4:d5:29:30:
ef:69:1a:58:3b:ed:6a:a5:d1:96:d5:6a:21:f4:c6:
6e:3b:2e:e5:6c:a9:5c:1f:ed:b3:fd:c2:eb:86:93:
59:f0:0d:8a:4e:33:14:c6:13:dd:d3:95:16:f4:7a:
e5:05:bd:98:23:69:c3:ba:aa:51:69:04:95:03:6b:
90:20:9d:d1:82:df:0b:10:d4:5e:57:7e:ec:ce:ca:
89:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:14:F1:F2:5E:9D:35:41:AD:F4:9D:AA:C2:94:7F:3F:CA:FC:61:69
X509v3 Authority Key Identifier:
keyid:19:82:04:D1:C2:5A:01:12:36:BE:A0:74:1E:4C:60:13:9D:34:9B:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GYIE0cJaARI2vqB0HkxgE500mxA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/c6f0a8-98f2-49fb-8506-42ad3b4c8d0c/1/GYIE0cJaARI2vqB0HkxgE500mxA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/c6f0a8-98f2-49fb-8506-42ad3b4c8d0c/1/GYIE0cJaARI2vqB0HkxgE500mxA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:a4:32:7c:71:89:a0:76:69:da:e7:5e:a9:be:a0:83:c3:fd:
11:5d:d6:af:81:12:be:43:c7:70:b5:71:f9:99:ea:8c:e4:97:
64:1b:38:c1:71:81:50:a2:81:00:64:84:a3:a2:99:0d:6c:59:
fb:b6:8c:f5:20:58:b5:17:16:b6:7a:55:25:5d:ad:e7:b1:ce:
a2:a7:11:c2:82:47:60:12:e0:6d:0f:3a:57:7d:db:d8:4f:d6:
83:17:f3:d0:a6:7a:2b:77:cc:9a:db:53:93:f1:f8:79:93:7f:
bf:80:c0:bf:07:99:fc:e3:05:41:56:c5:e1:de:98:57:1c:cd:
ab:87:c3:7b:12:23:c5:56:08:a4:8b:39:44:ed:4c:6a:ac:33:
80:53:32:6a:b2:17:e7:e4:f3:f5:17:5d:24:d8:64:df:da:3d:
7f:1d:20:d2:bd:37:60:40:50:da:70:1e:b7:25:44:d3:48:71:
d9:6a:d0:d7:22:23:ca:81:fd:ae:01:06:24:8a:42:6d:bf:22:
73:32:7d:c6:6a:25:6d:3d:fe:ca:ae:13:eb:af:7f:ff:52:eb:
32:6e:d7:bf:fd:b8:c0:98:9e:68:c6:8c:e5:77:24:ac:d4:b3:
6d:6d:52:b4:c8:75:0e:6e:29:e9:dd:63:d4:75:fb:be:73:89:
12:d0:eb:6b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpN4VvrvINrO1HWKh8+sM1ZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5ODIwNGQxYzI1YTAxMTIzNmJlYTA3NDFlNGM2MDEzOWQz
NDliMTAwHhcNMjUxMTA0MDgwMDA1WhcNMjUxMTA1MDgwMDA1WjAzMTEwLwYDVQQD
Eyg2NTE0ZjFmMjVlOWQzNTQxYWRmNDlkYWFjMjk0N2YzZmNhZmM2MTY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2bJ0+sb1CCAIrcEI1CcMo9o6/8oz
+NXNwCxTg5s5s2YLttEi22imp3L+Rq24Yibz/fAAzrmJxBqhd3wNUyf7Y5q+Op/+
V7LD0iDV0OKCnYk6CRb+JOgfDHpF0xnOpan8t7Gi0DAye0TspQxSoUCO6Fd4mvwW
UjbyzeEPXy9LLiJ8zCTqrUQPB07mMl4K5rq3G0EMzRRqspdIsTLhmow1w1q528uD
OWY3oqdVDn21HbTVKTDvaRpYO+1qpdGW1Woh9MZuOy7lbKlcH+2z/cLrhpNZ8A2K
TjMUxhPd05UW9HrlBb2YI2nDuqpRaQSVA2uQIJ3Rgt8LENReV37szsqJYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGUU8fJenTVBrfSdqsKUfz/K/GFpMB8GA1UdIwQY
MBaAFBmCBNHCWgESNr6gdB5MYBOdNJsQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR1lJRTBjSmFBUkkydnFCMEhreGdFNTAwbXhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9jNmYwYTgtOThmMi00OWZiLTg1MDYt
NDJhZDNiNGM4ZDBjLzEvR1lJRTBjSmFBUkkydnFCMEhreGdFNTAwbXhBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS9jNmYwYTgtOThmMi00OWZiLTg1MDYtNDJhZDNiNGM4ZDBj
LzEvR1lJRTBjSmFBUkkydnFCMEhreGdFNTAwbXhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKqQyfHGJ
oHZp2udeqb6gg8P9EV3Wr4ESvkPHcLVx+ZnqjOSXZBs4wXGBUKKBAGSEo6KZDWxZ
+7aM9SBYtRcWtnpVJV2t57HOoqcRwoJHYBLgbQ86V33b2E/Wgxfz0KZ6K3fMmttT
k/H4eZN/v4DAvweZ/OMFQVbF4d6YVxzNq4fDexIjxVYIpIs5RO1MaqwzgFMyarIX
5+Tz9RddJNhk39o9fx0g0r03YEBQ2nAetyVE00hx2WrQ1yIjyoH9rgEGJIpCbb8i
czJ9xmolbT3+yq4T669//1LrMm7Xv/24wJieaMaM5XckrNSzbW1StMh1Dm4p6d1j
1HX7vnOJEtDraw==
-----END CERTIFICATE-----
Generated at Tue Nov 4 18:04:51 2025 by rpki-client