Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/6ccaa9-9bf6-45c1-b9ac-615f66fdedec/1/GXXTHyIv7CWL1HYY_flMURzl4G4.mft
File: GXXTHyIv7CWL1HYY_flMURzl4G4.mft (raw, json)
Hash identifier: uuFeIIdmx09Qh/JCo6me6XPEx3UKIIR7qv4aIzqhvDY=
Subject key identifier: 0F:80:16:EC:71:87:0F:BD:A1:F8:2B:AF:8F:33:8C:1F:FB:BC:91:87
Authority key identifier: 19:75:D3:1F:22:2F:EC:25:8B:D4:76:18:FD:F9:4C:51:1C:E5:E0:6E
Certificate issuer: /CN=1975d31f222fec258bd47618fdf94c511ce5e06e
Certificate serial: 019A4EF432F27B4FDE790C0A70871CF92FC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GXXTHyIv7CWL1HYY_flMURzl4G4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/6ccaa9-9bf6-45c1-b9ac-615f66fdedec/1/GXXTHyIv7CWL1HYY_flMURzl4G4.mft
Manifest number: 0E50
Signing time: Tue 04 Nov 2025 13:00:17 +0000
Manifest this update: Tue 04 Nov 2025 13:00:17 +0000
Manifest next update: Wed 05 Nov 2025 13:00:17 +0000
Files and hashes: 1: GXXTHyIv7CWL1HYY_flMURzl4G4.crl (hash: 62RBF78BQOeMAqybyG7xspnGG1K2jL6lH+fqspOotQE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/6ccaa9-9bf6-45c1-b9ac-615f66fdedec/1/GXXTHyIv7CWL1HYY_flMURzl4G4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/6ccaa9-9bf6-45c1-b9ac-615f66fdedec/1/GXXTHyIv7CWL1HYY_flMURzl4G4.mft
rsync://rpki.ripe.net/repository/DEFAULT/GXXTHyIv7CWL1HYY_flMURzl4G4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:32:f2:7b:4f:de:79:0c:0a:70:87:1c:f9:2f:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1975d31f222fec258bd47618fdf94c511ce5e06e
Validity
Not Before: Nov 4 13:00:17 2025 GMT
Not After : Nov 5 13:00:17 2025 GMT
Subject: CN=0f8016ec71870fbda1f82baf8f338c1ffbbc9187
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:09:a4:d0:6f:73:ae:b7:a7:77:d6:87:f3:05:
2d:80:d9:99:60:5c:49:94:3e:e4:8e:7d:e2:57:aa:
15:a1:2f:52:16:92:1c:07:54:be:14:ea:4f:26:8d:
ac:e9:e5:8e:b0:80:10:1e:92:2f:81:3c:b6:a9:92:
b4:47:56:6c:5a:04:fc:30:e0:94:82:aa:3f:9a:4a:
41:8c:56:97:1b:da:f7:f3:58:52:f6:d6:09:e3:f8:
18:3b:26:e8:92:71:23:77:f9:92:68:8b:3c:41:ac:
25:f8:f4:a2:27:9a:f7:c1:28:1d:6e:9d:a2:27:a7:
38:83:95:a9:aa:6b:1b:23:c6:de:c9:b0:b0:3e:a4:
70:a0:ab:0d:cc:c8:b9:ab:91:eb:bb:60:ea:d1:b9:
6d:4a:50:d6:f7:66:0f:51:ce:cf:f0:0a:2a:1c:81:
67:fe:fc:1e:45:11:35:65:e4:83:9b:03:80:18:11:
c3:18:39:8f:64:2f:18:98:95:07:0c:fc:b9:25:27:
b7:be:99:4c:85:d6:b9:fe:59:e4:4a:4f:95:d6:43:
e6:f6:a3:62:c8:16:fa:1f:d5:18:51:96:e6:98:b2:
24:50:5d:56:c9:8e:45:22:04:a6:ea:0d:20:a8:f6:
17:46:0c:44:68:d2:c5:27:df:ee:24:66:5d:ba:3b:
4f:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:80:16:EC:71:87:0F:BD:A1:F8:2B:AF:8F:33:8C:1F:FB:BC:91:87
X509v3 Authority Key Identifier:
keyid:19:75:D3:1F:22:2F:EC:25:8B:D4:76:18:FD:F9:4C:51:1C:E5:E0:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GXXTHyIv7CWL1HYY_flMURzl4G4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6ccaa9-9bf6-45c1-b9ac-615f66fdedec/1/GXXTHyIv7CWL1HYY_flMURzl4G4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6ccaa9-9bf6-45c1-b9ac-615f66fdedec/1/GXXTHyIv7CWL1HYY_flMURzl4G4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:d3:e4:82:ba:b0:c1:39:36:b3:c1:69:05:3e:62:53:2d:50:
ed:b0:db:2c:70:89:ce:3b:09:b2:ad:4c:9d:dc:e7:dd:68:52:
f3:52:67:83:56:74:aa:c5:00:f8:5f:a5:54:d1:6a:f2:33:03:
a0:37:27:d9:cc:23:3b:df:7c:af:f8:cb:aa:c5:49:f3:b2:7a:
b3:07:bf:83:fe:62:41:72:de:9a:3c:3d:73:1f:87:99:f6:c1:
2e:38:e3:0e:ab:8d:b5:16:81:db:d3:c5:e1:b9:7f:b9:70:f2:
6f:c9:20:22:72:bb:67:98:e9:36:23:4a:7b:56:f7:34:2f:92:
e1:c6:04:1a:19:33:f8:80:ab:28:5d:05:d0:51:c7:47:87:87:
46:3d:b4:35:99:2b:b1:11:b0:d2:61:6c:5b:b9:75:f8:4e:54:
c7:1a:28:3c:97:f3:b2:09:7e:d7:9e:9c:26:10:9f:1e:46:f9:
84:0a:d0:82:df:82:64:1f:a2:28:53:a9:f1:8e:95:f9:13:f3:
54:e5:72:c1:af:ea:ff:87:f0:d9:e6:da:ce:7f:e6:94:b2:82:
7b:02:6d:8a:98:48:8d:89:50:0d:65:e0:1c:a6:b2:37:6e:6a:
9b:2b:33:a1:f9:c9:c6:86:48:2e:54:5d:75:0f:bd:fc:1e:41:
fa:fc:ed:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9DLye0/eeQwKcIcc+S/HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5NzVkMzFmMjIyZmVjMjU4YmQ0NzYxOGZkZjk0YzUxMWNl
NWUwNmUwHhcNMjUxMTA0MTMwMDE3WhcNMjUxMTA1MTMwMDE3WjAzMTEwLwYDVQQD
EygwZjgwMTZlYzcxODcwZmJkYTFmODJiYWY4ZjMzOGMxZmZiYmM5MTg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApAmk0G9zrrend9aH8wUtgNmZYFxJ
lD7kjn3iV6oVoS9SFpIcB1S+FOpPJo2s6eWOsIAQHpIvgTy2qZK0R1ZsWgT8MOCU
gqo/mkpBjFaXG9r381hS9tYJ4/gYOyboknEjd/mSaIs8Qawl+PSiJ5r3wSgdbp2i
J6c4g5WpqmsbI8beybCwPqRwoKsNzMi5q5Hru2Dq0bltSlDW92YPUc7P8AoqHIFn
/vweRRE1ZeSDmwOAGBHDGDmPZC8YmJUHDPy5JSe3vplMhda5/lnkSk+V1kPm9qNi
yBb6H9UYUZbmmLIkUF1WyY5FIgSm6g0gqPYXRgxEaNLFJ9/uJGZdujtPwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA+AFuxxhw+9ofgrr48zjB/7vJGHMB8GA1UdIwQY
MBaAFBl10x8iL+wli9R2GP35TFEc5eBuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR1hYVEh5SXY3Q1dMMUhZWV9mbE1VUnpsNEc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi82Y2NhYTktOWJmNi00NWMxLWI5YWMt
NjE1ZjY2ZmRlZGVjLzEvR1hYVEh5SXY3Q1dMMUhZWV9mbE1VUnpsNEc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi82Y2NhYTktOWJmNi00NWMxLWI5YWMtNjE1ZjY2ZmRlZGVj
LzEvR1hYVEh5SXY3Q1dMMUhZWV9mbE1VUnpsNEc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGdPkgrqw
wTk2s8FpBT5iUy1Q7bDbLHCJzjsJsq1Mndzn3WhS81Jng1Z0qsUA+F+lVNFq8jMD
oDcn2cwjO998r/jLqsVJ87J6swe/g/5iQXLemjw9cx+HmfbBLjjjDquNtRaB29PF
4bl/uXDyb8kgInK7Z5jpNiNKe1b3NC+S4cYEGhkz+ICrKF0F0FHHR4eHRj20NZkr
sRGw0mFsW7l1+E5UxxooPJfzsgl+156cJhCfHkb5hArQgt+CZB+iKFOp8Y6V+RPz
VOVywa/q/4fw2ebazn/mlLKCewJtiphIjYlQDWXgHKayN25qmyszofnJxoZILlRd
dQ+9/B5B+vztDQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 22:45:37 2025 by rpki-client