Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/a1e73d-5a1c-4f74-a45b-1897243c62ef/1/gXFLKnOMo96ukVr4fDqRxhPhvEk.mft
File: gXFLKnOMo96ukVr4fDqRxhPhvEk.mft (raw, json)
Hash identifier: CZxhgTQZ2QzEynVrs3rI8sLVj1/srocpflPXBd2trXA=
Subject key identifier: 54:56:18:02:5C:9A:EF:F8:7B:CD:F3:D4:24:82:53:63:46:2C:93:03
Authority key identifier: 81:71:4B:2A:73:8C:A3:DE:AE:91:5A:F8:7C:3A:91:C6:13:E1:BC:49
Certificate issuer: /CN=81714b2a738ca3deae915af87c3a91c613e1bc49
Certificate serial: 019A50E417338AF2963FF0E44A5D3BD3062F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gXFLKnOMo96ukVr4fDqRxhPhvEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/a1e73d-5a1c-4f74-a45b-1897243c62ef/1/gXFLKnOMo96ukVr4fDqRxhPhvEk.mft
Manifest number: 0795
Signing time: Tue 04 Nov 2025 22:01:56 +0000
Manifest this update: Tue 04 Nov 2025 22:01:56 +0000
Manifest next update: Wed 05 Nov 2025 22:01:56 +0000
Files and hashes: 1: 1--9ef5BuonyT90ODHV5G8KHwvGM.roa (hash: 96x1zDsthw+xfBLv+9YvZciWmPNAhtiP7Hkhk8XWewA=)
2: gXFLKnOMo96ukVr4fDqRxhPhvEk.crl (hash: i7q2xfTod0pP/sRE2M+/PhMnGa6ajDsVr2ZH9Au7neQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/a1e73d-5a1c-4f74-a45b-1897243c62ef/1/gXFLKnOMo96ukVr4fDqRxhPhvEk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/a1e73d-5a1c-4f74-a45b-1897243c62ef/1/gXFLKnOMo96ukVr4fDqRxhPhvEk.mft
rsync://rpki.ripe.net/repository/DEFAULT/gXFLKnOMo96ukVr4fDqRxhPhvEk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:01:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e4:17:33:8a:f2:96:3f:f0:e4:4a:5d:3b:d3:06:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81714b2a738ca3deae915af87c3a91c613e1bc49
Validity
Not Before: Nov 4 22:01:56 2025 GMT
Not After : Nov 5 22:01:56 2025 GMT
Subject: CN=545618025c9aeff87bcdf3d424825363462c9303
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:18:85:a3:b7:51:2f:66:ce:95:51:41:25:0b:
b4:b7:70:01:93:6e:fb:f4:6b:23:cd:a3:1a:3d:43:
c7:34:83:b0:91:03:96:39:11:a1:ce:99:34:9f:76:
48:8d:3d:20:a5:15:3d:34:af:50:d1:fc:2d:57:05:
f4:79:b6:32:f9:9e:bc:0a:93:82:5c:35:cd:93:18:
c2:af:45:25:6f:58:5d:39:96:4a:e1:58:c5:17:7e:
e5:cd:ae:bb:89:75:9c:10:ae:ae:eb:36:d6:6a:23:
fb:de:c4:83:b8:15:ab:83:b6:32:e8:72:e3:be:df:
7b:6b:15:2d:f5:3f:75:7c:e6:35:85:a0:f3:68:f7:
9c:2f:1c:02:fd:4c:03:c7:de:98:2f:f6:91:d5:58:
cf:94:d1:b5:69:64:52:13:51:b5:3e:7f:41:74:33:
7c:de:eb:8e:0b:ea:70:49:69:b2:de:87:b2:be:e3:
24:db:79:6a:df:f4:af:d0:bc:ec:a0:29:f9:bd:22:
21:93:ae:d3:d5:a4:37:08:57:64:b3:33:63:07:ef:
04:34:2d:b7:19:df:ba:9b:51:96:7f:95:15:9e:2d:
00:e9:6b:43:d1:e0:e6:c4:d5:df:b3:d8:37:c2:44:
ce:b1:28:8d:ad:54:e1:e3:e0:4a:1a:9f:03:58:d4:
9a:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:56:18:02:5C:9A:EF:F8:7B:CD:F3:D4:24:82:53:63:46:2C:93:03
X509v3 Authority Key Identifier:
keyid:81:71:4B:2A:73:8C:A3:DE:AE:91:5A:F8:7C:3A:91:C6:13:E1:BC:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gXFLKnOMo96ukVr4fDqRxhPhvEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/a1e73d-5a1c-4f74-a45b-1897243c62ef/1/gXFLKnOMo96ukVr4fDqRxhPhvEk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/a1e73d-5a1c-4f74-a45b-1897243c62ef/1/gXFLKnOMo96ukVr4fDqRxhPhvEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:35:c0:7b:7d:6d:d8:97:a5:4e:38:09:68:58:01:14:3c:8b:
90:b7:0b:6b:7b:f0:00:11:bb:2d:91:11:af:18:27:d9:e2:11:
1c:ae:dc:96:d5:62:80:26:d9:86:b1:d3:05:5f:49:6e:73:c2:
5a:30:f0:1e:5b:aa:81:da:52:96:d8:3b:b4:eb:fc:f8:68:66:
00:8f:66:22:59:45:f2:21:15:ca:aa:bd:30:e6:0f:6c:1d:9d:
00:18:04:55:64:95:4e:41:ca:30:e7:70:7d:d6:de:49:d7:b8:
5a:ce:35:18:e9:76:f5:5e:84:33:57:c1:9e:82:26:fd:d2:9f:
68:fb:d5:d3:fb:94:d4:31:3e:f2:ed:47:90:95:e5:fa:15:b7:
46:69:cb:6e:f8:75:45:20:26:71:bd:8c:73:d7:04:6f:8a:a2:
e3:df:03:b7:59:71:07:f9:93:2b:d1:b5:5b:f6:79:d3:33:dc:
33:49:d4:65:f3:df:3d:2f:91:4a:ae:a1:93:b8:53:fd:58:fe:
73:28:a0:1a:17:30:8b:e7:ec:b9:0e:cf:5e:6d:8b:c6:ee:e8:
ab:6c:26:53:0b:e1:85:b8:ee:ab:a2:6e:9b:3a:05:dc:af:5f:
b2:f9:4b:49:c8:2b:7b:53:91:79:7e:3f:6a:f8:e1:f1:16:fc:
9f:56:f9:a9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpQ5BczivKWP/DkSl070wYvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxNzE0YjJhNzM4Y2EzZGVhZTkxNWFmODdjM2E5MWM2MTNl
MWJjNDkwHhcNMjUxMTA0MjIwMTU2WhcNMjUxMTA1MjIwMTU2WjAzMTEwLwYDVQQD
Eyg1NDU2MTgwMjVjOWFlZmY4N2JjZGYzZDQyNDgyNTM2MzQ2MmM5MzAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0RiFo7dRL2bOlVFBJQu0t3ABk277
9GsjzaMaPUPHNIOwkQOWORGhzpk0n3ZIjT0gpRU9NK9Q0fwtVwX0ebYy+Z68CpOC
XDXNkxjCr0Ulb1hdOZZK4VjFF37lza67iXWcEK6u6zbWaiP73sSDuBWrg7Yy6HLj
vt97axUt9T91fOY1haDzaPecLxwC/UwDx96YL/aR1VjPlNG1aWRSE1G1Pn9BdDN8
3uuOC+pwSWmy3oeyvuMk23lq3/Sv0LzsoCn5vSIhk67T1aQ3CFdkszNjB+8ENC23
Gd+6m1GWf5UVni0A6WtD0eDmxNXfs9g3wkTOsSiNrVTh4+BKGp8DWNSaEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFRWGAJcmu/4e83z1CSCU2NGLJMDMB8GA1UdIwQY
MBaAFIFxSypzjKPerpFa+Hw6kcYT4bxJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ1hGTEtuT01vOTZ1a1ZyNGZEcVJ4aFBodkVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9hMWU3M2QtNWExYy00Zjc0LWE0NWIt
MTg5NzI0M2M2MmVmLzEvZ1hGTEtuT01vOTZ1a1ZyNGZEcVJ4aFBodkVrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS9hMWU3M2QtNWExYy00Zjc0LWE0NWItMTg5NzI0M2M2MmVm
LzEvZ1hGTEtuT01vOTZ1a1ZyNGZEcVJ4aFBodkVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALjXAe31t
2JelTjgJaFgBFDyLkLcLa3vwABG7LZERrxgn2eIRHK7cltVigCbZhrHTBV9JbnPC
WjDwHluqgdpSltg7tOv8+GhmAI9mIllF8iEVyqq9MOYPbB2dABgEVWSVTkHKMOdw
fdbeSde4Ws41GOl29V6EM1fBnoIm/dKfaPvV0/uU1DE+8u1HkJXl+hW3RmnLbvh1
RSAmcb2Mc9cEb4qi498Dt1lxB/mTK9G1W/Z50zPcM0nUZfPfPS+RSq6hk7hT/Vj+
cyigGhcwi+fsuQ7PXm2Lxu7oq2wmUwvhhbjuq6JumzoF3K9fsvlLScgre1OReX4/
avjh8Rb8n1b5qQ==
-----END CERTIFICATE-----
Generated at Wed Nov 5 07:45:03 2025 by rpki-client