Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/60447d-d305-4dea-9daa-26837038c688/1/G7yEG3eaK7LCio2u4rLRDVp8NNU.mft
File: G7yEG3eaK7LCio2u4rLRDVp8NNU.mft (raw, json)
Hash identifier: NTpZ+tdfOUqJcDvMNji7FpBQOc4x4n4e6fo19tL254Y=
Subject key identifier: EA:F2:3C:9D:EF:52:2F:32:4E:E0:09:DF:85:1D:EB:26:82:3E:98:BF
Authority key identifier: 1B:BC:84:1B:77:9A:2B:B2:C2:8A:8D:AE:E2:B2:D1:0D:5A:7C:34:D5
Certificate issuer: /CN=1bbc841b779a2bb2c28a8daee2b2d10d5a7c34d5
Certificate serial: 0199FC8F974810700BBBB0424DCA10C4BFC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G7yEG3eaK7LCio2u4rLRDVp8NNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/60447d-d305-4dea-9daa-26837038c688/1/G7yEG3eaK7LCio2u4rLRDVp8NNU.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 13:01:32 +0000
Manifest this update: Sun 19 Oct 2025 13:01:32 +0000
Manifest next update: Mon 20 Oct 2025 13:01:32 +0000
Files and hashes: 1: G7yEG3eaK7LCio2u4rLRDVp8NNU.crl (hash: FP08xEHM/C5uqy2/hlcOtqIfh+0UPqSQQ5wsZ//hB2A=)
2: VBl-ShtkY5AIJWsXxjtVR-loSP4.roa (hash: UuFGS1s0gPMKN8UjwJZO3gcLtja3SP+rxmHIDo2PFTE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/60447d-d305-4dea-9daa-26837038c688/1/G7yEG3eaK7LCio2u4rLRDVp8NNU.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/60447d-d305-4dea-9daa-26837038c688/1/G7yEG3eaK7LCio2u4rLRDVp8NNU.mft
rsync://rpki.ripe.net/repository/DEFAULT/G7yEG3eaK7LCio2u4rLRDVp8NNU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:97:48:10:70:0b:bb:b0:42:4d:ca:10:c4:bf:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bbc841b779a2bb2c28a8daee2b2d10d5a7c34d5
Validity
Not Before: Oct 19 13:01:32 2025 GMT
Not After : Oct 20 13:01:32 2025 GMT
Subject: CN=eaf23c9def522f324ee009df851deb26823e98bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:97:fe:a3:ee:d1:d8:aa:37:45:5b:86:f2:ec:
46:33:2c:73:e5:c8:b1:2d:9e:28:59:63:5d:8c:85:
d3:63:99:3a:df:80:ee:22:c3:b4:8c:1e:7d:8d:7a:
63:78:48:59:c6:a1:e5:4a:31:36:95:52:9b:26:f5:
ad:50:bd:5a:a7:49:18:99:a0:32:33:86:e8:89:5b:
ba:76:7e:15:24:0f:7e:49:cd:21:7f:22:3c:4d:e0:
7e:0f:bd:7e:42:ce:d1:a4:b6:d0:0c:24:61:4a:3e:
de:17:5c:99:d7:cd:58:18:3f:54:65:62:ba:3b:a7:
97:08:79:32:5f:4c:dc:43:15:cb:7e:95:fd:72:c3:
be:1d:5e:93:b9:65:80:db:80:cc:21:64:0b:59:51:
67:2b:48:ec:3c:14:a3:54:95:33:0b:5f:03:f5:66:
a8:ef:e3:41:67:cf:a0:e3:0a:03:89:61:8e:4d:ff:
1d:d5:e0:47:bd:83:5a:5d:25:a3:6a:dc:35:80:79:
c9:c3:27:7d:54:9a:63:6d:d7:08:54:e8:da:b5:82:
d6:e8:1d:e0:f5:d8:28:fd:b1:da:dd:62:b0:fd:33:
de:56:48:75:8d:3c:37:a0:42:52:06:2e:5d:6d:ac:
68:2c:a3:23:6a:b4:2f:c9:50:07:ec:4b:fc:9f:08:
c6:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:F2:3C:9D:EF:52:2F:32:4E:E0:09:DF:85:1D:EB:26:82:3E:98:BF
X509v3 Authority Key Identifier:
keyid:1B:BC:84:1B:77:9A:2B:B2:C2:8A:8D:AE:E2:B2:D1:0D:5A:7C:34:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G7yEG3eaK7LCio2u4rLRDVp8NNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/60447d-d305-4dea-9daa-26837038c688/1/G7yEG3eaK7LCio2u4rLRDVp8NNU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/60447d-d305-4dea-9daa-26837038c688/1/G7yEG3eaK7LCio2u4rLRDVp8NNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:12:32:07:d8:1c:c1:77:e5:e8:5c:0a:5b:ad:29:f5:2a:bc:
6f:dd:8d:00:4b:65:91:25:21:f6:00:fa:14:55:a3:17:94:ff:
3d:da:27:af:59:e8:df:77:37:32:22:98:6a:bb:0d:44:10:bc:
2e:33:b5:1f:71:c5:2d:84:f9:f4:c3:8a:3e:58:82:da:e8:dc:
ae:ba:21:35:c2:69:39:f6:15:de:63:61:2a:60:0f:86:07:c7:
54:18:d4:94:c9:ad:90:ef:01:cd:14:e5:c9:68:a0:59:a2:0f:
44:e9:96:74:13:10:4e:d5:c8:5f:73:5e:6b:ca:17:7e:b6:10:
fc:30:aa:96:6f:b9:7a:70:32:33:f3:c3:fd:4c:2d:2c:86:59:
c2:25:70:4f:11:98:ad:f7:f5:e0:36:55:b1:de:22:e6:91:12:
12:a6:a5:94:7c:9f:df:00:17:fc:73:ca:24:6c:c9:c1:e3:44:
14:12:cb:35:62:9e:c5:95:94:57:e1:a4:5d:23:22:18:24:19:
68:78:cb:25:5b:62:92:99:62:fc:4b:3c:a4:69:06:cd:ff:74:
1c:9a:b8:d5:8e:8a:15:69:14:c6:3b:fb:64:38:02:6e:31:4d:
f8:3a:a7:69:ae:16:d6:e5:a4:6a:e9:d3:03:74:06:83:ae:f2:
58:69:c5:2d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8j5dIEHALu7BCTcoQxL/DMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiYmM4NDFiNzc5YTJiYjJjMjhhOGRhZWUyYjJkMTBkNWE3
YzM0ZDUwHhcNMjUxMDE5MTMwMTMyWhcNMjUxMDIwMTMwMTMyWjAzMTEwLwYDVQQD
EyhlYWYyM2M5ZGVmNTIyZjMyNGVlMDA5ZGY4NTFkZWIyNjgyM2U5OGJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAupf+o+7R2Ko3RVuG8uxGMyxz5cix
LZ4oWWNdjIXTY5k634DuIsO0jB59jXpjeEhZxqHlSjE2lVKbJvWtUL1ap0kYmaAy
M4boiVu6dn4VJA9+Sc0hfyI8TeB+D71+Qs7RpLbQDCRhSj7eF1yZ181YGD9UZWK6
O6eXCHkyX0zcQxXLfpX9csO+HV6TuWWA24DMIWQLWVFnK0jsPBSjVJUzC18D9Wao
7+NBZ8+g4woDiWGOTf8d1eBHvYNaXSWjatw1gHnJwyd9VJpjbdcIVOjatYLW6B3g
9dgo/bHa3WKw/TPeVkh1jTw3oEJSBi5dbaxoLKMjarQvyVAH7Ev8nwjGlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOryPJ3vUi8yTuAJ34Ud6yaCPpi/MB8GA1UdIwQY
MBaAFBu8hBt3miuywoqNruKy0Q1afDTVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRzd5RUczZWFLN0xDaW8ydTRyTFJEVnA4Tk5VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS82MDQ0N2QtZDMwNS00ZGVhLTlkYWEt
MjY4MzcwMzhjNjg4LzEvRzd5RUczZWFLN0xDaW8ydTRyTFJEVnA4Tk5VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS82MDQ0N2QtZDMwNS00ZGVhLTlkYWEtMjY4MzcwMzhjNjg4
LzEvRzd5RUczZWFLN0xDaW8ydTRyTFJEVnA4Tk5VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALRIyB9gc
wXfl6FwKW60p9Sq8b92NAEtlkSUh9gD6FFWjF5T/Pdonr1no33c3MiKYarsNRBC8
LjO1H3HFLYT59MOKPliC2ujcrrohNcJpOfYV3mNhKmAPhgfHVBjUlMmtkO8BzRTl
yWigWaIPROmWdBMQTtXIX3Nea8oXfrYQ/DCqlm+5enAyM/PD/UwtLIZZwiVwTxGY
rff14DZVsd4i5pESEqallHyf3wAX/HPKJGzJweNEFBLLNWKexZWUV+GkXSMiGCQZ
aHjLJVtikpli/Es8pGkGzf90HJq41Y6KFWkUxjv7ZDgCbjFN+Dqnaa4W1uWkaunT
A3QGg67yWGnFLQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:42:06 2025 by rpki-client