
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/2210c7-9959-44f7-ada6-efd3ae985ee4/1/gswXHj3IRnEeBW4uNiQdrJlKYA0.mft
File: gswXHj3IRnEeBW4uNiQdrJlKYA0.mft (raw, json)
Hash identifier: GUM+D8dalke1LarC1vK9GaBlZh5J6eOA8AZRh7NJQ+o=
Subject key identifier: 3E:3D:47:35:D2:92:5E:3C:E8:23:FB:D9:4E:C1:FC:48:EB:0D:02:A0
Authority key identifier: 82:CC:17:1E:3D:C8:46:71:1E:05:6E:2E:36:24:1D:AC:99:4A:60:0D
Certificate issuer: /CN=82cc171e3dc846711e056e2e36241dac994a600d
Certificate serial: 0199FDD914455B417A4B857F19B5A4A59313
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gswXHj3IRnEeBW4uNiQdrJlKYA0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/2210c7-9959-44f7-ada6-efd3ae985ee4/1/gswXHj3IRnEeBW4uNiQdrJlKYA0.mft
Manifest number: 16E5
Signing time: Sun 19 Oct 2025 19:01:26 +0000
Manifest this update: Sun 19 Oct 2025 19:01:26 +0000
Manifest next update: Mon 20 Oct 2025 19:01:26 +0000
Files and hashes: 1: JjOh7wV3uoOnT6pZLsppbv_LAZ8.roa (hash: QPSPPNn3Qn++fdP63nXuDi3yMhHz0vKFIROySBvf1mk=)
2: gswXHj3IRnEeBW4uNiQdrJlKYA0.crl (hash: btMlesQFIp770FDTmLDLq0ttUVEg2EK0DfmttJz6gVg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/2210c7-9959-44f7-ada6-efd3ae985ee4/1/gswXHj3IRnEeBW4uNiQdrJlKYA0.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/2210c7-9959-44f7-ada6-efd3ae985ee4/1/gswXHj3IRnEeBW4uNiQdrJlKYA0.mft
rsync://rpki.ripe.net/repository/DEFAULT/gswXHj3IRnEeBW4uNiQdrJlKYA0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:14:45:5b:41:7a:4b:85:7f:19:b5:a4:a5:93:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82cc171e3dc846711e056e2e36241dac994a600d
Validity
Not Before: Oct 19 19:01:26 2025 GMT
Not After : Oct 20 19:01:26 2025 GMT
Subject: CN=3e3d4735d2925e3ce823fbd94ec1fc48eb0d02a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:fd:f7:d2:81:31:16:a8:c7:72:3c:9a:90:69:
a6:27:91:c8:a0:f0:78:7c:62:fc:33:80:31:e5:70:
1d:a0:d9:16:58:68:1d:50:2f:3f:85:ec:86:b8:3e:
a4:42:1d:3a:bb:28:02:f7:02:48:4c:f3:35:e5:8d:
f8:8e:1d:c8:8f:52:cc:b4:ff:32:92:33:e7:67:fa:
be:77:e3:39:c0:37:d8:43:e4:19:57:11:72:91:7b:
04:40:13:65:62:d4:f8:7a:fb:60:83:9e:7b:81:03:
d5:a2:5e:50:06:18:4d:5a:fc:3d:98:8e:15:ae:fd:
6a:2c:8c:d3:57:75:eb:5c:71:65:0c:c7:c7:70:b9:
6c:61:aa:79:d7:23:a0:56:8b:35:cb:f1:46:8a:9c:
42:b2:3d:80:3b:fd:39:42:62:c4:27:fc:3f:91:49:
72:18:f5:ce:04:7c:a2:33:6d:ce:b9:f9:0f:dd:13:
20:cb:d8:78:bb:45:94:3c:ac:54:ab:7e:7f:a0:c6:
c1:42:60:8a:94:d5:22:02:82:70:bc:34:f7:68:0e:
77:18:d4:31:b8:98:33:6b:90:5c:95:c6:e6:e4:33:
25:df:9c:3f:4f:9e:06:0c:33:b5:b2:7c:d6:dc:3a:
f4:a8:e1:e6:2d:cd:a6:89:a3:25:ec:a4:16:5f:64:
97:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:3D:47:35:D2:92:5E:3C:E8:23:FB:D9:4E:C1:FC:48:EB:0D:02:A0
X509v3 Authority Key Identifier:
keyid:82:CC:17:1E:3D:C8:46:71:1E:05:6E:2E:36:24:1D:AC:99:4A:60:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gswXHj3IRnEeBW4uNiQdrJlKYA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/2210c7-9959-44f7-ada6-efd3ae985ee4/1/gswXHj3IRnEeBW4uNiQdrJlKYA0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/2210c7-9959-44f7-ada6-efd3ae985ee4/1/gswXHj3IRnEeBW4uNiQdrJlKYA0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:50:24:76:39:87:3d:4d:a7:e3:76:1d:a6:cf:c6:72:c9:ee:
05:ce:fe:96:77:16:5c:ac:23:fd:8b:4a:ce:73:27:26:04:dd:
7a:59:6e:f5:6f:b4:1f:de:37:0b:cd:dc:86:85:80:2e:ff:72:
f1:ae:c8:3e:85:9c:c5:e9:07:78:4f:b2:d0:45:c7:5e:07:15:
db:c0:09:c0:9d:8a:28:87:b5:7d:98:4c:3b:88:fe:7a:1d:51:
e7:98:89:c4:df:a9:48:0e:22:7e:fc:a9:88:51:99:a1:1f:a0:
e2:bb:71:06:fd:c8:60:da:ce:3b:1a:32:99:ee:1e:d1:ee:6e:
ff:be:7d:28:f5:9a:7e:7c:81:46:f6:c9:42:15:b9:a9:e0:00:
40:9a:47:db:39:44:21:20:b5:28:54:83:3a:26:85:d3:16:1f:
fc:56:06:d0:87:c1:52:71:c3:8c:86:c6:c1:f9:be:f0:b4:95:
d6:42:9b:6e:36:36:db:da:54:c4:44:24:33:12:c1:26:93:26:
51:97:c0:33:33:1f:d0:59:fe:d2:80:c1:85:36:88:bb:9d:80:
38:a6:ab:f4:bd:d5:14:9a:a0:1f:af:7d:3a:50:88:98:37:af:
c1:2f:bf:51:d9:82:cf:87:19:b7:20:48:c3:e8:26:07:41:4c:
b2:9b:03:d6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn92RRFW0F6S4V/GbWkpZMTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyY2MxNzFlM2RjODQ2NzExZTA1NmUyZTM2MjQxZGFjOTk0
YTYwMGQwHhcNMjUxMDE5MTkwMTI2WhcNMjUxMDIwMTkwMTI2WjAzMTEwLwYDVQQD
EygzZTNkNDczNWQyOTI1ZTNjZTgyM2ZiZDk0ZWMxZmM0OGViMGQwMmEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApv330oExFqjHcjyakGmmJ5HIoPB4
fGL8M4Ax5XAdoNkWWGgdUC8/heyGuD6kQh06uygC9wJITPM15Y34jh3Ij1LMtP8y
kjPnZ/q+d+M5wDfYQ+QZVxFykXsEQBNlYtT4evtgg557gQPVol5QBhhNWvw9mI4V
rv1qLIzTV3XrXHFlDMfHcLlsYap51yOgVos1y/FGipxCsj2AO/05QmLEJ/w/kUly
GPXOBHyiM23OufkP3RMgy9h4u0WUPKxUq35/oMbBQmCKlNUiAoJwvDT3aA53GNQx
uJgza5Bclcbm5DMl35w/T54GDDO1snzW3Dr0qOHmLc2miaMl7KQWX2SXbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD49RzXSkl486CP72U7B/EjrDQKgMB8GA1UdIwQY
MBaAFILMFx49yEZxHgVuLjYkHayZSmANMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3N3WEhqM0lSbkVlQlc0dU5pUWRySmxLWUEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC8yMjEwYzctOTk1OS00NGY3LWFkYTYt
ZWZkM2FlOTg1ZWU0LzEvZ3N3WEhqM0lSbkVlQlc0dU5pUWRySmxLWUEwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC8yMjEwYzctOTk1OS00NGY3LWFkYTYtZWZkM2FlOTg1ZWU0
LzEvZ3N3WEhqM0lSbkVlQlc0dU5pUWRySmxLWUEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMFAkdjmH
PU2n43Ydps/GcsnuBc7+lncWXKwj/YtKznMnJgTdellu9W+0H943C83choWALv9y
8a7IPoWcxekHeE+y0EXHXgcV28AJwJ2KKIe1fZhMO4j+eh1R55iJxN+pSA4ifvyp
iFGZoR+g4rtxBv3IYNrOOxoyme4e0e5u/759KPWafnyBRvbJQhW5qeAAQJpH2zlE
ISC1KFSDOiaF0xYf/FYG0IfBUnHDjIbGwfm+8LSV1kKbbjY229pUxEQkMxLBJpMm
UZfAMzMf0Fn+0oDBhTaIu52AOKar9L3VFJqgH699OlCImDevwS+/UdmCz4cZtyBI
w+gmB0FMspsD1g==
-----END CERTIFICATE-----
Generated at Sun Oct 19 23:42:52 2025 by rpki-client