Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/773678-e200-46af-86c1-6bd8022d2eae/1/GBel7BjE8sRHhK3FA4NWvlrolCk.mft
File: GBel7BjE8sRHhK3FA4NWvlrolCk.mft (raw, json)
Hash identifier: 1mXMTu4z3eV/5xeBCRAwkb+WbwfZb/dNfuE9FBhJFpw=
Subject key identifier: 41:88:94:1C:85:6A:8D:FF:8D:E3:58:FA:7A:81:9D:E6:10:E5:28:F8
Authority key identifier: 18:17:A5:EC:18:C4:F2:C4:47:84:AD:C5:03:83:56:BE:5A:E8:94:29
Certificate issuer: /CN=1817a5ec18c4f2c44784adc5038356be5ae89429
Certificate serial: 019A4F62C2BBF01D31E8DAEB91261B3DCD7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GBel7BjE8sRHhK3FA4NWvlrolCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/773678-e200-46af-86c1-6bd8022d2eae/1/GBel7BjE8sRHhK3FA4NWvlrolCk.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 15:01:03 +0000
Manifest this update: Tue 04 Nov 2025 15:01:03 +0000
Manifest next update: Wed 05 Nov 2025 15:01:03 +0000
Files and hashes: 1: GBel7BjE8sRHhK3FA4NWvlrolCk.crl (hash: ygLTaizTDiMbhyIkKMOGk7andwKmTln7+wSlt8JiW/s=)
2: YPZsDLLgzY_7M-GC9SiCWRi1ybo.roa (hash: 9PJDi8b5z4045eOIRy/iUo+ovH8jKNIpIEnuC9ZNGWE=)
3: dhax6YlGZdJ59Lja9mjH_mTZXS8.roa (hash: z4HlD8GeanPgFBicLk5Q3SISz2iD/qfFdvuzkfzBoxc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/773678-e200-46af-86c1-6bd8022d2eae/1/GBel7BjE8sRHhK3FA4NWvlrolCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/773678-e200-46af-86c1-6bd8022d2eae/1/GBel7BjE8sRHhK3FA4NWvlrolCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/GBel7BjE8sRHhK3FA4NWvlrolCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:c2:bb:f0:1d:31:e8:da:eb:91:26:1b:3d:cd:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1817a5ec18c4f2c44784adc5038356be5ae89429
Validity
Not Before: Nov 4 15:01:03 2025 GMT
Not After : Nov 5 15:01:03 2025 GMT
Subject: CN=4188941c856a8dff8de358fa7a819de610e528f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:1c:65:49:31:03:34:9c:5e:da:48:69:84:7d:
0d:1e:70:bd:f1:1a:d5:3e:0f:9f:52:53:37:c8:d7:
6b:bb:56:2b:25:37:c1:1a:5b:1c:2b:bf:fd:38:98:
59:75:9e:e8:9c:2c:76:30:35:ac:8a:cc:f3:08:da:
97:83:86:a6:4a:9c:57:9c:27:60:32:27:2b:a3:cc:
8c:57:7b:8c:7c:ef:9f:ee:a2:ee:c6:67:21:45:0c:
62:1d:a2:5e:94:78:00:ad:59:ad:e6:9a:76:c2:63:
68:1f:01:f6:8b:f9:a4:8c:d9:47:80:e9:3b:54:42:
04:d6:bb:3f:d5:9f:c0:cc:c4:bb:2d:da:d8:17:5d:
ca:b9:0c:eb:06:a3:5b:4e:6a:56:a4:93:28:41:32:
99:bc:90:ca:c9:38:a1:92:66:f5:ef:89:6d:f1:bd:
13:3e:dc:b3:70:d0:31:cc:b9:48:34:24:2b:34:ff:
53:c6:f4:cc:bc:d6:b6:3f:c1:99:de:00:97:4f:1a:
51:62:a4:fb:6e:43:3d:17:ca:13:6a:a2:ea:62:74:
fb:bb:29:76:7f:10:b8:03:ef:fb:89:1d:5a:7c:a4:
24:d7:88:46:8d:e6:2e:77:0c:0e:03:97:cf:f9:24:
66:3f:fc:0c:bb:11:01:5e:c6:55:39:f4:70:96:ec:
4c:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:88:94:1C:85:6A:8D:FF:8D:E3:58:FA:7A:81:9D:E6:10:E5:28:F8
X509v3 Authority Key Identifier:
keyid:18:17:A5:EC:18:C4:F2:C4:47:84:AD:C5:03:83:56:BE:5A:E8:94:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GBel7BjE8sRHhK3FA4NWvlrolCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/773678-e200-46af-86c1-6bd8022d2eae/1/GBel7BjE8sRHhK3FA4NWvlrolCk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/773678-e200-46af-86c1-6bd8022d2eae/1/GBel7BjE8sRHhK3FA4NWvlrolCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:cc:de:38:ae:44:2f:4a:5a:29:b4:6c:db:f3:4e:65:35:d9:
b6:c6:d2:39:73:fe:27:8e:f3:ef:a8:dd:6e:56:af:1e:f6:29:
73:92:f2:60:ce:0f:91:a6:0f:5e:1d:b5:76:a4:fb:ba:1d:a3:
5c:43:a4:2b:73:b3:67:2f:cc:ce:d0:64:69:35:54:4e:ef:9d:
c7:85:1f:97:11:7f:ac:b6:ac:ee:0b:d2:7c:1c:b5:81:a5:34:
06:d5:d8:0c:b3:d0:74:89:7a:87:9d:f1:1b:6e:52:a0:9f:ea:
b2:cb:5e:4c:d8:63:c7:f0:2e:ab:d7:c4:d4:3b:ff:c5:d2:38:
24:ef:e9:21:4f:75:f5:35:c0:44:56:0f:2b:e4:b5:3f:cf:e1:
9a:99:7f:fb:8f:e1:e0:ae:c0:5a:0a:c6:95:7c:35:f5:68:26:
27:20:cc:a6:57:22:c8:ca:9b:83:4e:67:d4:5d:af:b8:e7:88:
b9:f4:a4:7e:2e:63:39:50:01:d8:1c:f3:98:98:2c:ee:73:fa:
03:cc:f7:fd:c0:f4:e5:11:c9:86:90:43:d9:a3:7e:5a:b7:a5:
aa:b9:53:ab:b5:e1:29:97:e7:b3:ed:0f:42:0a:53:83:8f:2e:
48:47:42:71:12:22:a1:4d:68:fe:77:40:77:fd:e4:f1:e6:1a:
9b:6a:b1:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPYsK78B0x6NrrkSYbPc1+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE4MTdhNWVjMThjNGYyYzQ0Nzg0YWRjNTAzODM1NmJlNWFl
ODk0MjkwHhcNMjUxMTA0MTUwMTAzWhcNMjUxMTA1MTUwMTAzWjAzMTEwLwYDVQQD
Eyg0MTg4OTQxYzg1NmE4ZGZmOGRlMzU4ZmE3YTgxOWRlNjEwZTUyOGY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3RxlSTEDNJxe2khphH0NHnC98RrV
Pg+fUlM3yNdru1YrJTfBGlscK7/9OJhZdZ7onCx2MDWsiszzCNqXg4amSpxXnCdg
Micro8yMV3uMfO+f7qLuxmchRQxiHaJelHgArVmt5pp2wmNoHwH2i/mkjNlHgOk7
VEIE1rs/1Z/AzMS7LdrYF13KuQzrBqNbTmpWpJMoQTKZvJDKyTihkmb174lt8b0T
PtyzcNAxzLlINCQrNP9TxvTMvNa2P8GZ3gCXTxpRYqT7bkM9F8oTaqLqYnT7uyl2
fxC4A+/7iR1afKQk14hGjeYudwwOA5fP+SRmP/wMuxEBXsZVOfRwluxM6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEGIlByFao3/jeNY+nqBneYQ5Sj4MB8GA1UdIwQY
MBaAFBgXpewYxPLER4StxQODVr5a6JQpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR0JlbDdCakU4c1JIaEszRkE0Tld2bHJvbENrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC83NzM2NzgtZTIwMC00NmFmLTg2YzEt
NmJkODAyMmQyZWFlLzEvR0JlbDdCakU4c1JIaEszRkE0Tld2bHJvbENrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC83NzM2NzgtZTIwMC00NmFmLTg2YzEtNmJkODAyMmQyZWFl
LzEvR0JlbDdCakU4c1JIaEszRkE0Tld2bHJvbENrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASMzeOK5E
L0paKbRs2/NOZTXZtsbSOXP+J47z76jdblavHvYpc5LyYM4PkaYPXh21dqT7uh2j
XEOkK3OzZy/MztBkaTVUTu+dx4UflxF/rLas7gvSfBy1gaU0BtXYDLPQdIl6h53x
G25SoJ/qssteTNhjx/Auq9fE1Dv/xdI4JO/pIU919TXARFYPK+S1P8/hmpl/+4/h
4K7AWgrGlXw19WgmJyDMplciyMqbg05n1F2vuOeIufSkfi5jOVAB2BzzmJgs7nP6
A8z3/cD05RHJhpBD2aN+WrelqrlTq7XhKZfns+0PQgpTg48uSEdCcRIioU1o/ndA
d/3k8eYam2qxAw==
-----END CERTIFICATE-----
Generated at Tue Nov 4 20:03:19 2025 by rpki-client