Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/67bce3-ecbc-478d-8210-d07906a84b1d/1/GI-wmF42DDj4ZY1WaHyoYtlAjZA.mft
File: GI-wmF42DDj4ZY1WaHyoYtlAjZA.mft (raw, json)
Hash identifier: y7IHATa8VJLr7O6LxffxHklofab+TFD+zUIq/djUHqA=
Subject key identifier: EB:C1:FD:5F:54:AC:FC:11:61:75:7C:57:7B:13:BD:AB:7A:5C:BB:1B
Authority key identifier: 18:8F:B0:98:5E:36:0C:38:F8:65:8D:56:68:7C:A8:62:D9:40:8D:90
Certificate issuer: /CN=188fb0985e360c38f8658d56687ca862d9408d90
Certificate serial: 0199FF22C804675D48E0888313F3AB28D464
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GI-wmF42DDj4ZY1WaHyoYtlAjZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/67bce3-ecbc-478d-8210-d07906a84b1d/1/GI-wmF42DDj4ZY1WaHyoYtlAjZA.mft
Manifest number: 1356
Signing time: Mon 20 Oct 2025 01:01:33 +0000
Manifest this update: Mon 20 Oct 2025 01:01:33 +0000
Manifest next update: Tue 21 Oct 2025 01:01:33 +0000
Files and hashes: 1: 2dVxZZZj6zlHLdxhcm5JjXaDenM.roa (hash: rbawjEq/xe3wCEVClyA8U6kAU84cJfL3aa5STA3091s=)
2: GI-wmF42DDj4ZY1WaHyoYtlAjZA.crl (hash: aX5KNeMRqunayik+z+EIb6myGo3zgU5TMyX4mrlTIG4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/67bce3-ecbc-478d-8210-d07906a84b1d/1/GI-wmF42DDj4ZY1WaHyoYtlAjZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/67bce3-ecbc-478d-8210-d07906a84b1d/1/GI-wmF42DDj4ZY1WaHyoYtlAjZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/GI-wmF42DDj4ZY1WaHyoYtlAjZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:22:c8:04:67:5d:48:e0:88:83:13:f3:ab:28:d4:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=188fb0985e360c38f8658d56687ca862d9408d90
Validity
Not Before: Oct 20 01:01:33 2025 GMT
Not After : Oct 21 01:01:33 2025 GMT
Subject: CN=ebc1fd5f54acfc1161757c577b13bdab7a5cbb1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:23:04:09:14:54:e1:8b:a3:37:0c:f1:1b:f4:
9d:dc:35:fc:84:29:c2:a4:a5:22:3d:da:bd:42:b3:
c0:8e:fd:67:a0:e3:47:bd:82:40:f7:ed:2b:5d:64:
f3:e8:ea:bf:11:a1:50:10:d8:64:57:d9:52:b1:68:
bd:14:e0:45:ff:be:f1:2d:3f:f3:e1:59:f6:cf:98:
43:25:c3:ed:ed:ae:e5:38:2b:52:5a:32:4d:bf:54:
ed:1c:91:46:1c:70:67:83:b6:f8:c4:ba:d2:b7:85:
a5:87:d2:4b:2d:74:92:bc:0b:17:5a:27:a6:63:13:
b0:46:e0:50:9c:0c:75:86:94:b7:ab:05:ff:16:42:
22:55:22:c6:dc:ca:5e:66:d8:5a:67:bf:14:cc:fc:
86:33:38:79:8c:e4:eb:63:cc:94:a6:ec:cc:0b:6c:
57:8d:7e:fd:cd:6c:82:02:f4:e2:8f:a5:e1:7a:73:
09:41:24:85:e4:86:8d:d0:c6:c5:c6:49:09:1a:6c:
4e:da:97:8c:37:7f:4a:c1:32:df:fe:65:3f:f2:34:
0e:e7:61:42:22:e4:c2:21:9d:4f:4f:68:d5:06:e7:
a6:b7:bc:56:d4:a2:c9:a5:21:2a:e8:37:f7:b7:3d:
17:db:30:3c:0a:c0:fc:ec:de:63:c0:6f:6c:27:02:
0b:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:C1:FD:5F:54:AC:FC:11:61:75:7C:57:7B:13:BD:AB:7A:5C:BB:1B
X509v3 Authority Key Identifier:
keyid:18:8F:B0:98:5E:36:0C:38:F8:65:8D:56:68:7C:A8:62:D9:40:8D:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GI-wmF42DDj4ZY1WaHyoYtlAjZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/67bce3-ecbc-478d-8210-d07906a84b1d/1/GI-wmF42DDj4ZY1WaHyoYtlAjZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/67bce3-ecbc-478d-8210-d07906a84b1d/1/GI-wmF42DDj4ZY1WaHyoYtlAjZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:b6:b3:a2:b2:ea:6a:ce:a0:fc:ea:d8:a7:ea:43:50:51:1c:
e9:90:4e:f3:0c:1a:b2:6e:a3:69:f0:f2:da:5c:41:6d:71:fc:
cf:97:be:d5:da:de:ff:fb:24:ac:3f:8f:c4:0e:ef:14:7f:58:
66:26:cb:eb:8b:36:7b:48:0a:20:63:53:5a:2d:66:08:77:82:
8f:0a:4b:58:5c:44:b0:bf:a0:fb:40:86:41:19:73:d3:d1:5d:
9f:07:29:2c:eb:6a:b1:4f:02:b4:8a:55:a7:4a:4c:d0:05:00:
86:1d:fb:55:f8:4a:44:ea:39:7d:84:58:d5:c0:af:17:c5:08:
e2:8f:1f:13:79:92:ba:ec:9f:41:18:f1:9e:f6:da:c4:c3:78:
76:aa:61:aa:26:a8:1e:c7:9e:f3:d2:f6:a6:9b:37:4f:52:54:
82:d2:c5:25:10:76:c1:65:07:81:ea:e6:6e:46:8e:99:17:d8:
38:7a:f3:26:ea:62:02:7d:a5:43:f9:37:77:43:ac:5a:e0:32:
d2:0b:dc:d4:09:16:ef:37:bf:b6:73:20:ec:cf:b0:ed:b4:3a:
f1:06:db:33:c4:95:79:5f:06:70:78:66:ee:cb:49:d3:f5:93:
b2:75:90:49:44:7f:73:90:fc:36:5a:47:92:18:ce:41:ba:01:
41:73:2d:01
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn/IsgEZ11I4IiDE/OrKNRkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE4OGZiMDk4NWUzNjBjMzhmODY1OGQ1NjY4N2NhODYyZDk0
MDhkOTAwHhcNMjUxMDIwMDEwMTMzWhcNMjUxMDIxMDEwMTMzWjAzMTEwLwYDVQQD
EyhlYmMxZmQ1ZjU0YWNmYzExNjE3NTdjNTc3YjEzYmRhYjdhNWNiYjFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnCMECRRU4YujNwzxG/Sd3DX8hCnC
pKUiPdq9QrPAjv1noONHvYJA9+0rXWTz6Oq/EaFQENhkV9lSsWi9FOBF/77xLT/z
4Vn2z5hDJcPt7a7lOCtSWjJNv1TtHJFGHHBng7b4xLrSt4Wlh9JLLXSSvAsXWiem
YxOwRuBQnAx1hpS3qwX/FkIiVSLG3MpeZthaZ78UzPyGMzh5jOTrY8yUpuzMC2xX
jX79zWyCAvTij6XhenMJQSSF5IaN0MbFxkkJGmxO2peMN39KwTLf/mU/8jQO52FC
IuTCIZ1PT2jVBuemt7xW1KLJpSEq6Df3tz0X2zA8CsD87N5jwG9sJwILHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOvB/V9UrPwRYXV8V3sTvat6XLsbMB8GA1UdIwQY
MBaAFBiPsJheNgw4+GWNVmh8qGLZQI2QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR0ktd21GNDJERGo0WlkxV2FIeW9ZdGxBalpBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi82N2JjZTMtZWNiYy00NzhkLTgyMTAt
ZDA3OTA2YTg0YjFkLzEvR0ktd21GNDJERGo0WlkxV2FIeW9ZdGxBalpBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYi82N2JjZTMtZWNiYy00NzhkLTgyMTAtZDA3OTA2YTg0YjFk
LzEvR0ktd21GNDJERGo0WlkxV2FIeW9ZdGxBalpBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD7azorLq
as6g/OrYp+pDUFEc6ZBO8wwasm6jafDy2lxBbXH8z5e+1dre//skrD+PxA7vFH9Y
ZibL64s2e0gKIGNTWi1mCHeCjwpLWFxEsL+g+0CGQRlz09FdnwcpLOtqsU8CtIpV
p0pM0AUAhh37VfhKROo5fYRY1cCvF8UI4o8fE3mSuuyfQRjxnvbaxMN4dqphqiao
Hsee89L2pps3T1JUgtLFJRB2wWUHgermbkaOmRfYOHrzJupiAn2lQ/k3d0OsWuAy
0gvc1AkW7ze/tnMg7M+w7bQ68QbbM8SVeV8GcHhm7stJ0/WTsnWQSUR/c5D8NlpH
khjOQboBQXMtAQ==
-----END CERTIFICATE-----
Generated at Mon Oct 20 04:08:13 2025 by rpki-client