
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/d88e87-62f9-475b-a84d-036e7efc9aca/1/gLonv9hqgQoXlX0fcm_hYNTrMiU.mft
File: gLonv9hqgQoXlX0fcm_hYNTrMiU.mft (raw, json)
Hash identifier: EtcwDSMUxHcEOs8fBG1mrPraZ6t6t5jjn93t4fKggNI=
Subject key identifier: 12:C4:DC:0A:C8:53:2C:06:CD:98:D2:BA:FD:93:FB:B0:8A:D1:2E:AF
Authority key identifier: 80:BA:27:BF:D8:6A:81:0A:17:95:7D:1F:72:6F:E1:60:D4:EB:32:25
Certificate issuer: /CN=80ba27bfd86a810a17957d1f726fe160d4eb3225
Certificate serial: 0199FB45CF4B476B8BD37CDDAA81EC4006D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gLonv9hqgQoXlX0fcm_hYNTrMiU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/d88e87-62f9-475b-a84d-036e7efc9aca/1/gLonv9hqgQoXlX0fcm_hYNTrMiU.mft
Manifest number: 16DD
Signing time: Sun 19 Oct 2025 07:01:20 +0000
Manifest this update: Sun 19 Oct 2025 07:01:20 +0000
Manifest next update: Mon 20 Oct 2025 07:01:20 +0000
Files and hashes: 1: gLonv9hqgQoXlX0fcm_hYNTrMiU.crl (hash: g5NY6pbaW2T0ZTbcsVff/yNDsw08y8o3uAazLkR5Gys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/d88e87-62f9-475b-a84d-036e7efc9aca/1/gLonv9hqgQoXlX0fcm_hYNTrMiU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/d88e87-62f9-475b-a84d-036e7efc9aca/1/gLonv9hqgQoXlX0fcm_hYNTrMiU.mft
rsync://rpki.ripe.net/repository/DEFAULT/gLonv9hqgQoXlX0fcm_hYNTrMiU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:45:cf:4b:47:6b:8b:d3:7c:dd:aa:81:ec:40:06:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80ba27bfd86a810a17957d1f726fe160d4eb3225
Validity
Not Before: Oct 19 07:01:20 2025 GMT
Not After : Oct 20 07:01:20 2025 GMT
Subject: CN=12c4dc0ac8532c06cd98d2bafd93fbb08ad12eaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:d3:bd:49:3d:43:9b:c0:bd:46:c9:8f:93:fb:
38:13:df:c9:eb:e7:93:24:e4:1c:d1:b0:02:ba:a0:
68:d8:41:40:9f:0e:2f:dd:ea:18:e3:ec:d3:c1:dc:
6b:b3:e6:70:05:e2:5f:c6:d0:08:bb:ec:b6:7d:e7:
dc:e7:c5:68:8d:62:14:b1:b3:b9:cb:f6:59:bd:bd:
92:1d:3e:e1:81:be:91:c4:a2:ee:58:9f:2e:f7:68:
97:4c:6f:69:b9:03:7d:4e:9a:56:ef:fd:cc:96:cd:
39:0e:3e:1e:8a:cf:71:af:e9:f5:78:d5:4b:e8:01:
1f:18:3d:8e:45:23:d6:9d:f0:b6:2d:56:10:a0:f8:
1a:b7:e0:05:a2:93:a3:78:7f:9a:36:d5:be:63:3c:
36:ab:6b:13:96:84:4c:fe:a2:c8:d2:08:c5:70:b6:
41:4e:b7:19:2f:6a:78:12:3f:a3:93:db:9c:52:d0:
f3:5c:3a:ce:8d:01:a7:ea:64:39:67:fb:11:83:9c:
ea:32:da:87:b2:14:07:be:53:36:09:95:c8:0b:d0:
da:1f:91:8a:40:2a:b8:12:90:5e:09:33:ba:1a:08:
94:2d:35:61:e8:93:1b:4e:6a:e9:57:a0:7b:21:ea:
36:8e:ab:d3:b8:5a:78:76:3c:9c:cf:5a:00:07:a2:
91:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:C4:DC:0A:C8:53:2C:06:CD:98:D2:BA:FD:93:FB:B0:8A:D1:2E:AF
X509v3 Authority Key Identifier:
keyid:80:BA:27:BF:D8:6A:81:0A:17:95:7D:1F:72:6F:E1:60:D4:EB:32:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gLonv9hqgQoXlX0fcm_hYNTrMiU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d88e87-62f9-475b-a84d-036e7efc9aca/1/gLonv9hqgQoXlX0fcm_hYNTrMiU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d88e87-62f9-475b-a84d-036e7efc9aca/1/gLonv9hqgQoXlX0fcm_hYNTrMiU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:a9:68:df:72:57:5b:03:82:a6:da:6d:3d:2a:3e:f4:61:4a:
4c:b3:17:47:5f:8f:3c:fc:0a:13:85:5d:82:30:e6:50:70:06:
e7:43:be:3a:3c:43:dd:2a:61:77:90:ac:fc:43:12:f9:76:26:
c6:3b:8a:b5:75:da:9d:71:fc:99:d3:32:5a:e5:99:cd:d8:dc:
01:06:f0:73:c2:2d:c6:93:1c:df:7d:da:16:72:c6:cf:d2:55:
42:b3:af:74:01:41:d2:81:32:3e:cc:e6:c6:ad:0d:c2:f0:40:
33:ac:64:b9:80:4f:cf:1e:06:74:e7:0a:d3:19:3f:9f:b2:9f:
7b:bf:73:d6:da:51:90:2c:72:b4:29:2a:a8:84:d0:d7:f8:bc:
07:cb:c2:5e:09:23:2c:0a:b4:fa:6b:d3:f5:65:03:95:8e:30:
bb:65:3c:fa:d9:6f:f0:5a:01:90:0e:e9:e1:d8:5a:ae:a2:87:
b9:e7:bb:4c:83:ba:bf:5c:df:fa:3f:fb:30:17:4a:e3:d9:77:
1c:04:85:e2:5f:9a:9d:a3:e3:cc:77:65:49:be:5f:aa:5b:3b:
12:09:8d:5c:92:d7:00:4e:ef:57:5a:bb:2c:18:40:70:ba:51:
ff:e1:40:ec:22:38:69:46:49:aa:77:d8:03:34:e5:de:00:9a:
4f:66:62:88
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7Rc9LR2uL03zdqoHsQAbTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgwYmEyN2JmZDg2YTgxMGExNzk1N2QxZjcyNmZlMTYwZDRl
YjMyMjUwHhcNMjUxMDE5MDcwMTIwWhcNMjUxMDIwMDcwMTIwWjAzMTEwLwYDVQQD
EygxMmM0ZGMwYWM4NTMyYzA2Y2Q5OGQyYmFmZDkzZmJiMDhhZDEyZWFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAndO9ST1Dm8C9RsmPk/s4E9/J6+eT
JOQc0bACuqBo2EFAnw4v3eoY4+zTwdxrs+ZwBeJfxtAIu+y2fefc58VojWIUsbO5
y/ZZvb2SHT7hgb6RxKLuWJ8u92iXTG9puQN9TppW7/3Mls05Dj4eis9xr+n1eNVL
6AEfGD2ORSPWnfC2LVYQoPgat+AFopOjeH+aNtW+Yzw2q2sTloRM/qLI0gjFcLZB
TrcZL2p4Ej+jk9ucUtDzXDrOjQGn6mQ5Z/sRg5zqMtqHshQHvlM2CZXIC9DaH5GK
QCq4EpBeCTO6GgiULTVh6JMbTmrpV6B7Ieo2jqvTuFp4djycz1oAB6KR1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBLE3ArIUywGzZjSuv2T+7CK0S6vMB8GA1UdIwQY
MBaAFIC6J7/YaoEKF5V9H3Jv4WDU6zIlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ0xvbnY5aHFnUW9YbFgwZmNtX2hZTlRyTWlVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9kODhlODctNjJmOS00NzViLWE4NGQt
MDM2ZTdlZmM5YWNhLzEvZ0xvbnY5aHFnUW9YbFgwZmNtX2hZTlRyTWlVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi9kODhlODctNjJmOS00NzViLWE4NGQtMDM2ZTdlZmM5YWNh
LzEvZ0xvbnY5aHFnUW9YbFgwZmNtX2hZTlRyTWlVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjqlo33JX
WwOCptptPSo+9GFKTLMXR1+PPPwKE4VdgjDmUHAG50O+OjxD3Sphd5Cs/EMS+XYm
xjuKtXXanXH8mdMyWuWZzdjcAQbwc8ItxpMc333aFnLGz9JVQrOvdAFB0oEyPszm
xq0NwvBAM6xkuYBPzx4GdOcK0xk/n7Kfe79z1tpRkCxytCkqqITQ1/i8B8vCXgkj
LAq0+mvT9WUDlY4wu2U8+tlv8FoBkA7p4dharqKHuee7TIO6v1zf+j/7MBdK49l3
HASF4l+anaPjzHdlSb5fqls7EgmNXJLXAE7vV1q7LBhAcLpR/+FA7CI4aUZJqnfY
AzTl3gCaT2ZiiA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:14:28 2025 by rpki-client