Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/6a900a-8b5c-407b-a094-898036734878/1/GXSZvpe8wyf2Tp64xCOUUIygbWU.mft
File: GXSZvpe8wyf2Tp64xCOUUIygbWU.mft (raw, json)
Hash identifier: pR++FJ3UANS0NRAuRZbibVQoLwKyg/Y0L3DOzVV/0Ug=
Subject key identifier: CA:94:86:11:B5:E8:5B:9D:15:53:91:26:07:DE:87:46:E9:7E:1E:42
Authority key identifier: 19:74:99:BE:97:BC:C3:27:F6:4E:9E:B8:C4:23:94:50:8C:A0:6D:65
Certificate issuer: /CN=197499be97bcc327f64e9eb8c42394508ca06d65
Certificate serial: 0199FC21CDFAC24F63B098EC9D3B8FD4FD5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GXSZvpe8wyf2Tp64xCOUUIygbWU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/6a900a-8b5c-407b-a094-898036734878/1/GXSZvpe8wyf2Tp64xCOUUIygbWU.mft
Manifest number: 0D38
Signing time: Sun 19 Oct 2025 11:01:37 +0000
Manifest this update: Sun 19 Oct 2025 11:01:37 +0000
Manifest next update: Mon 20 Oct 2025 11:01:37 +0000
Files and hashes: 1: GXSZvpe8wyf2Tp64xCOUUIygbWU.crl (hash: dz/66GuhiYt0tReRgBilk0gzK9bGArESvmRvz/6AkWE=)
2: sotFwW0dd18jhlgGMEoNrnqopP4.roa (hash: gVSt/FfSJjyB1+rQ4tB9A+DWP4ec6C61j3+zsQZbog8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/6a900a-8b5c-407b-a094-898036734878/1/GXSZvpe8wyf2Tp64xCOUUIygbWU.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/6a900a-8b5c-407b-a094-898036734878/1/GXSZvpe8wyf2Tp64xCOUUIygbWU.mft
rsync://rpki.ripe.net/repository/DEFAULT/GXSZvpe8wyf2Tp64xCOUUIygbWU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:cd:fa:c2:4f:63:b0:98:ec:9d:3b:8f:d4:fd:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=197499be97bcc327f64e9eb8c42394508ca06d65
Validity
Not Before: Oct 19 11:01:37 2025 GMT
Not After : Oct 20 11:01:37 2025 GMT
Subject: CN=ca948611b5e85b9d1553912607de8746e97e1e42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:99:c5:1e:4c:e4:14:9a:33:87:c6:95:4f:38:
3a:74:bc:70:9a:d3:d2:83:12:ce:04:a5:46:97:2a:
4d:25:9a:9e:38:1c:6a:38:f4:44:23:ec:cf:41:21:
bb:67:71:f8:53:c6:03:9b:41:ba:aa:c1:63:b0:b3:
e3:2f:47:2a:0f:97:78:82:21:14:1c:ab:4a:08:5a:
3c:97:30:32:69:e5:5b:60:9f:28:b4:23:c2:5b:97:
31:6d:f7:85:7c:51:36:d4:51:06:e8:dc:25:96:71:
91:b0:c8:2b:c3:35:b0:d2:b9:b4:6e:95:fc:0e:28:
c7:07:fc:91:14:b3:61:7b:17:1e:a7:d5:7c:6d:37:
b1:40:32:73:ba:49:9b:9b:8c:a6:b1:a2:bf:9a:d9:
4f:af:3b:c8:69:3e:8a:22:98:31:ed:e8:55:95:ee:
f9:b0:d8:5e:f0:d8:60:40:be:9b:7a:29:a1:15:08:
75:9c:7f:32:5e:0b:97:b4:ee:1e:de:a2:e7:ae:80:
b5:b7:74:ae:9c:a7:09:d5:17:ea:d6:24:78:5d:46:
08:33:c6:3f:5d:bf:11:c9:af:06:de:d6:5c:9f:f9:
a8:93:14:a0:ac:ac:ac:39:ff:13:ea:fa:41:27:73:
e0:37:4b:71:45:63:16:cf:e0:30:ab:d5:03:f1:03:
b5:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:94:86:11:B5:E8:5B:9D:15:53:91:26:07:DE:87:46:E9:7E:1E:42
X509v3 Authority Key Identifier:
keyid:19:74:99:BE:97:BC:C3:27:F6:4E:9E:B8:C4:23:94:50:8C:A0:6D:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GXSZvpe8wyf2Tp64xCOUUIygbWU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/6a900a-8b5c-407b-a094-898036734878/1/GXSZvpe8wyf2Tp64xCOUUIygbWU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/6a900a-8b5c-407b-a094-898036734878/1/GXSZvpe8wyf2Tp64xCOUUIygbWU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cf:c4:0b:b5:c6:4a:82:06:df:25:c8:cb:b0:33:c5:b0:9d:09:
fd:aa:84:8b:e5:8e:32:8a:0c:21:42:ec:18:da:ab:89:8d:d7:
98:a2:70:d6:bd:7c:a6:24:fd:57:af:7c:e1:5d:13:cb:2a:5a:
3b:80:58:2d:7a:d1:2a:cb:6b:e3:5c:f0:5e:9b:20:54:b0:9a:
2b:35:81:97:26:7b:5b:8f:b6:9f:d3:2d:70:17:c9:e4:45:62:
05:51:2c:1e:b4:68:c4:48:8d:b9:b2:af:46:f4:1a:e7:01:09:
a9:0a:3c:21:6a:ac:83:35:ba:d3:ae:e6:a8:66:99:05:7c:d0:
db:1b:43:91:fe:9f:d0:d7:69:a3:f2:6e:1e:7e:08:ef:8a:bf:
4e:c4:ba:cf:6a:e2:6b:4f:9c:fb:f9:01:50:fe:07:6d:6d:36:
e2:c0:1f:20:59:70:ca:7f:f0:96:72:c0:9f:ca:b7:83:e9:ee:
4a:2a:7c:2d:6a:e7:41:50:d9:22:ec:bc:3f:61:13:ac:d6:74:
c6:2b:03:55:6f:60:28:48:d6:1f:af:32:be:8c:18:c6:9c:f3:
de:51:aa:00:6d:55:bd:02:66:89:d4:b9:52:d7:36:7d:64:f8:
36:79:f2:d2:bd:e3:08:22:5a:92:e5:77:99:5e:92:4b:7a:2a:
f7:3b:96:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8Ic36wk9jsJjsnTuP1P1eMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5NzQ5OWJlOTdiY2MzMjdmNjRlOWViOGM0MjM5NDUwOGNh
MDZkNjUwHhcNMjUxMDE5MTEwMTM3WhcNMjUxMDIwMTEwMTM3WjAzMTEwLwYDVQQD
EyhjYTk0ODYxMWI1ZTg1YjlkMTU1MzkxMjYwN2RlODc0NmU5N2UxZTQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiJnFHkzkFJozh8aVTzg6dLxwmtPS
gxLOBKVGlypNJZqeOBxqOPREI+zPQSG7Z3H4U8YDm0G6qsFjsLPjL0cqD5d4giEU
HKtKCFo8lzAyaeVbYJ8otCPCW5cxbfeFfFE21FEG6NwllnGRsMgrwzWw0rm0bpX8
DijHB/yRFLNhexcep9V8bTexQDJzukmbm4ymsaK/mtlPrzvIaT6KIpgx7ehVle75
sNhe8NhgQL6beimhFQh1nH8yXguXtO4e3qLnroC1t3SunKcJ1Rfq1iR4XUYIM8Y/
Xb8Rya8G3tZcn/mokxSgrKysOf8T6vpBJ3PgN0txRWMWz+Awq9UD8QO1hwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMqUhhG16FudFVORJgfeh0bpfh5CMB8GA1UdIwQY
MBaAFBl0mb6XvMMn9k6euMQjlFCMoG1lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR1hTWnZwZTh3eWYyVHA2NHhDT1VVSXlnYldVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS82YTkwMGEtOGI1Yy00MDdiLWEwOTQt
ODk4MDM2NzM0ODc4LzEvR1hTWnZwZTh3eWYyVHA2NHhDT1VVSXlnYldVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS82YTkwMGEtOGI1Yy00MDdiLWEwOTQtODk4MDM2NzM0ODc4
LzEvR1hTWnZwZTh3eWYyVHA2NHhDT1VVSXlnYldVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAz8QLtcZK
ggbfJcjLsDPFsJ0J/aqEi+WOMooMIULsGNqriY3XmKJw1r18piT9V6984V0Tyypa
O4BYLXrRKstr41zwXpsgVLCaKzWBlyZ7W4+2n9MtcBfJ5EViBVEsHrRoxEiNubKv
RvQa5wEJqQo8IWqsgzW6067mqGaZBXzQ2xtDkf6f0Ndpo/JuHn4I74q/TsS6z2ri
a0+c+/kBUP4HbW024sAfIFlwyn/wlnLAn8q3g+nuSip8LWrnQVDZIuy8P2ETrNZ0
xisDVW9gKEjWH68yvowYxpzz3lGqAG1VvQJmidS5Utc2fWT4Nnny0r3jCCJakuV3
mV6SS3oq9zuWZQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 21:12:32 2025 by rpki-client