Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/04b91a-e349-40cd-b901-1f13f55d0059/1/gzVETFgRYcWIroS-AZZbyOg3gLg.mft
File: gzVETFgRYcWIroS-AZZbyOg3gLg.mft (raw, json)
Hash identifier: FhiN24UKomCwwvj90wXiskr3mSP5p6Y37lAHWhnrxZs=
Subject key identifier: 96:A5:2E:33:DC:C7:38:8A:AB:CB:ED:FD:CB:57:AC:32:A8:12:D9:43
Authority key identifier: 83:35:44:4C:58:11:61:C5:88:AE:84:BE:01:96:5B:C8:E8:37:80:B8
Certificate issuer: /CN=8335444c581161c588ae84be01965bc8e83780b8
Certificate serial: 0199FF22D8FB0640A34DE92844DB7805F371
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gzVETFgRYcWIroS-AZZbyOg3gLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/04b91a-e349-40cd-b901-1f13f55d0059/1/gzVETFgRYcWIroS-AZZbyOg3gLg.mft
Manifest number: 140E
Signing time: Mon 20 Oct 2025 01:01:37 +0000
Manifest this update: Mon 20 Oct 2025 01:01:37 +0000
Manifest next update: Tue 21 Oct 2025 01:01:37 +0000
Files and hashes: 1: 52xHcZKMiLkJfC48D6ah-VZ8yTA.roa (hash: jrz3bp7KHkqbn8SdD2JCqFdwlcK3RRhyL/xchThJ/cc=)
2: gzVETFgRYcWIroS-AZZbyOg3gLg.crl (hash: ZqWVd/n8NaWupas93gDAMymGqtIUVdPKyBudvsQ8wmY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/04b91a-e349-40cd-b901-1f13f55d0059/1/gzVETFgRYcWIroS-AZZbyOg3gLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/04b91a-e349-40cd-b901-1f13f55d0059/1/gzVETFgRYcWIroS-AZZbyOg3gLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/gzVETFgRYcWIroS-AZZbyOg3gLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:22:d8:fb:06:40:a3:4d:e9:28:44:db:78:05:f3:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8335444c581161c588ae84be01965bc8e83780b8
Validity
Not Before: Oct 20 01:01:37 2025 GMT
Not After : Oct 21 01:01:37 2025 GMT
Subject: CN=96a52e33dcc7388aabcbedfdcb57ac32a812d943
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ce:9e:7b:92:bf:a2:25:3d:f7:66:94:3b:51:
e8:7d:b8:32:7b:83:ae:1d:e6:55:6d:fa:cd:6b:fa:
30:da:3f:6e:70:94:d7:79:97:74:8b:54:8e:86:42:
b0:0b:2c:5f:46:af:75:85:b6:02:48:25:71:3b:86:
9c:95:ac:1a:39:57:48:99:59:62:0b:be:4a:94:b2:
22:96:d6:72:0d:45:a1:74:ed:64:e6:16:25:5c:9d:
f1:cd:67:b5:f5:d5:08:f1:11:87:fa:5a:2b:77:5f:
cc:e1:0c:66:63:da:40:a9:a1:18:4c:92:da:3c:68:
28:c2:0f:98:98:c9:de:0e:6b:8c:94:2a:34:1d:1b:
f4:42:02:41:93:92:69:35:66:69:be:4f:77:75:dd:
e4:1f:95:3c:2b:17:f1:59:6b:b6:e7:42:81:b9:0b:
cc:f0:9e:50:fc:e3:ca:bc:ba:6d:db:26:6c:e9:d7:
c0:b6:44:73:fb:d9:65:6d:63:d6:68:cc:2c:3c:bf:
9b:1b:50:04:91:77:84:76:ca:3f:ea:fb:29:a9:b4:
07:fc:ca:b9:06:85:eb:47:a4:37:30:0d:60:07:a2:
7b:e8:0e:46:84:ad:22:d5:9f:12:fa:38:bd:49:bf:
fd:e1:f8:b0:53:f3:2c:65:54:82:44:13:c5:25:00:
73:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:A5:2E:33:DC:C7:38:8A:AB:CB:ED:FD:CB:57:AC:32:A8:12:D9:43
X509v3 Authority Key Identifier:
keyid:83:35:44:4C:58:11:61:C5:88:AE:84:BE:01:96:5B:C8:E8:37:80:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gzVETFgRYcWIroS-AZZbyOg3gLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/04b91a-e349-40cd-b901-1f13f55d0059/1/gzVETFgRYcWIroS-AZZbyOg3gLg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/04b91a-e349-40cd-b901-1f13f55d0059/1/gzVETFgRYcWIroS-AZZbyOg3gLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:f8:20:cd:64:b6:d2:61:56:6f:36:24:a9:1a:6d:52:2b:db:
94:ac:e1:46:50:fc:fe:33:81:c3:c0:99:e3:fe:a8:ba:64:ea:
20:9f:6b:49:b1:d1:5e:a6:4e:62:3a:97:e8:80:79:42:a9:88:
70:31:8d:8a:3f:fe:9e:51:38:a8:6c:d9:0a:0a:09:b6:56:d8:
f7:c3:c9:cc:89:5b:ad:96:e7:bd:5e:68:6a:4e:04:f6:f9:65:
94:f2:db:92:33:bc:ae:f6:f7:62:f2:8b:ec:ad:0e:be:13:bc:
cc:cd:ff:5e:4b:3a:f2:61:fd:24:29:3d:40:d7:ee:a6:9b:45:
98:fe:e4:78:99:01:96:22:b8:a5:28:4b:9c:f0:5e:11:85:cf:
ad:e8:a8:40:14:7a:05:3f:e2:8b:01:98:34:50:38:b2:a5:5c:
be:37:25:38:55:91:cf:88:ca:3b:86:0a:2d:2e:04:a4:41:9b:
37:96:2a:e7:67:ae:86:40:fd:ad:55:20:72:b2:f7:e6:f2:23:
2a:3d:f9:03:43:64:b1:ae:2e:38:17:5a:d7:0a:1d:20:3c:24:
78:20:fc:04:2e:78:fc:0e:1b:a7:d2:45:f8:55:f2:47:6e:0e:
8e:c3:f9:af:93:f0:1f:6d:0a:dd:bf:f0:e1:7f:07:b6:b6:01:
ff:de:fd:f5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn/Itj7BkCjTekoRNt4BfNxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzMzU0NDRjNTgxMTYxYzU4OGFlODRiZTAxOTY1YmM4ZTgz
NzgwYjgwHhcNMjUxMDIwMDEwMTM3WhcNMjUxMDIxMDEwMTM3WjAzMTEwLwYDVQQD
Eyg5NmE1MmUzM2RjYzczODhhYWJjYmVkZmRjYjU3YWMzMmE4MTJkOTQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzM6ee5K/oiU992aUO1Hofbgye4Ou
HeZVbfrNa/ow2j9ucJTXeZd0i1SOhkKwCyxfRq91hbYCSCVxO4aclawaOVdImVli
C75KlLIiltZyDUWhdO1k5hYlXJ3xzWe19dUI8RGH+lord1/M4QxmY9pAqaEYTJLa
PGgowg+YmMneDmuMlCo0HRv0QgJBk5JpNWZpvk93dd3kH5U8KxfxWWu250KBuQvM
8J5Q/OPKvLpt2yZs6dfAtkRz+9llbWPWaMwsPL+bG1AEkXeEdso/6vspqbQH/Mq5
BoXrR6Q3MA1gB6J76A5GhK0i1Z8S+ji9Sb/94fiwU/MsZVSCRBPFJQBzawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJalLjPcxziKq8vt/ctXrDKoEtlDMB8GA1UdIwQY
MBaAFIM1RExYEWHFiK6EvgGWW8joN4C4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3pWRVRGZ1JZY1dJcm9TLUFaWmJ5T2czZ0xnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8wNGI5MWEtZTM0OS00MGNkLWI5MDEt
MWYxM2Y1NWQwMDU5LzEvZ3pWRVRGZ1JZY1dJcm9TLUFaWmJ5T2czZ0xnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC8wNGI5MWEtZTM0OS00MGNkLWI5MDEtMWYxM2Y1NWQwMDU5
LzEvZ3pWRVRGZ1JZY1dJcm9TLUFaWmJ5T2czZ0xnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj/ggzWS2
0mFWbzYkqRptUivblKzhRlD8/jOBw8CZ4/6oumTqIJ9rSbHRXqZOYjqX6IB5QqmI
cDGNij/+nlE4qGzZCgoJtlbY98PJzIlbrZbnvV5oak4E9vlllPLbkjO8rvb3YvKL
7K0OvhO8zM3/Xks68mH9JCk9QNfupptFmP7keJkBliK4pShLnPBeEYXPreioQBR6
BT/iiwGYNFA4sqVcvjclOFWRz4jKO4YKLS4EpEGbN5Yq52euhkD9rVUgcrL35vIj
Kj35A0Nksa4uOBda1wodIDwkeCD8BC54/A4bp9JF+FXyR24OjsP5r5PwH20K3b/w
4X8HtrYB/9799Q==
-----END CERTIFICATE-----
Generated at Mon Oct 20 10:39:20 2025 by rpki-client