Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/886ed6-f613-4a0e-8c0d-1dd5faa06b0a/1/0GLPgHpWt3Gl9CzBia8tYx61quw.mft
File: 0GLPgHpWt3Gl9CzBia8tYx61quw.mft (raw, json)
Hash identifier: VGT9MOHdtLwOeiYuKt0BZ1058NLeG59JbyZVjYR2Xyo=
Subject key identifier: A3:11:6E:C4:51:76:36:75:67:A5:72:15:FC:2A:BB:B7:B1:0F:CC:E2
Authority key identifier: D0:62:CF:80:7A:56:B7:71:A5:F4:2C:C1:89:AF:2D:63:1E:B5:AA:EC
Certificate issuer: /CN=d062cf807a56b771a5f42cc189af2d631eb5aaec
Certificate serial: 0199FE1060A34EA2D98C661B7668B012B8CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0GLPgHpWt3Gl9CzBia8tYx61quw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/886ed6-f613-4a0e-8c0d-1dd5faa06b0a/1/0GLPgHpWt3Gl9CzBia8tYx61quw.mft
Manifest number: 02B3
Signing time: Sun 19 Oct 2025 20:01:50 +0000
Manifest this update: Sun 19 Oct 2025 20:01:50 +0000
Manifest next update: Mon 20 Oct 2025 20:01:50 +0000
Files and hashes: 1: 0GLPgHpWt3Gl9CzBia8tYx61quw.crl (hash: YbPB6BuMUjgBz2tnG7thC31ScY7YXapfQzj4BRRV/yM=)
2: QCjl4a-9vegdBZsLVvWX0ydUgGY.roa (hash: wA/gZkPE3yxDP3RHjNK9FN3A1qfwH3nLJskDkbvV8q4=)
3: wOvEyLEfRcu6DG-p65x_OfzTRz4.roa (hash: ZaQzkHyCf48D1aPuMMUWfO/IOaJleVElEqvlsuTrYGQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/886ed6-f613-4a0e-8c0d-1dd5faa06b0a/1/0GLPgHpWt3Gl9CzBia8tYx61quw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/886ed6-f613-4a0e-8c0d-1dd5faa06b0a/1/0GLPgHpWt3Gl9CzBia8tYx61quw.mft
rsync://rpki.ripe.net/repository/DEFAULT/0GLPgHpWt3Gl9CzBia8tYx61quw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:10:60:a3:4e:a2:d9:8c:66:1b:76:68:b0:12:b8:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d062cf807a56b771a5f42cc189af2d631eb5aaec
Validity
Not Before: Oct 19 20:01:50 2025 GMT
Not After : Oct 20 20:01:50 2025 GMT
Subject: CN=a3116ec45176367567a57215fc2abbb7b10fcce2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:0f:64:0e:ca:e9:c3:bc:3c:87:00:ea:6f:5d:
d1:8e:97:91:6b:2c:d7:94:c2:c2:12:43:12:36:0f:
a8:1b:c3:af:0c:81:56:51:f3:54:4b:7b:05:13:86:
61:59:8e:6d:75:f1:13:ad:50:53:24:f2:47:f3:80:
3b:86:f0:fa:77:7d:17:38:2c:e9:23:a1:51:40:3a:
91:95:9a:88:b0:69:23:6d:f4:bc:60:ba:4c:a8:3e:
44:4f:b9:09:53:01:a9:6e:67:d9:4e:b3:64:ac:06:
5e:52:c0:94:61:56:0a:34:3c:12:db:e4:2f:fd:bb:
18:3a:5b:53:5a:3b:bc:62:4e:bc:12:04:f7:a4:60:
12:f2:6e:98:98:30:dc:29:4c:5f:b5:90:46:4a:3c:
9e:d2:04:93:3f:41:7e:24:e9:26:60:15:75:c2:74:
16:e7:f1:31:5f:cb:09:97:df:6d:ee:46:b4:ae:06:
75:70:ac:df:00:17:5d:20:94:c1:af:ac:b4:c8:f3:
63:a6:fc:ae:2b:e1:82:c3:a9:23:c7:fb:f4:ff:d0:
58:ba:0e:67:76:2c:5f:6a:23:bf:c5:ec:91:df:50:
4b:87:68:5e:14:a3:19:55:f8:55:19:5a:49:0d:00:
e2:13:84:dd:eb:7b:21:27:55:19:04:13:eb:69:8b:
93:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:11:6E:C4:51:76:36:75:67:A5:72:15:FC:2A:BB:B7:B1:0F:CC:E2
X509v3 Authority Key Identifier:
keyid:D0:62:CF:80:7A:56:B7:71:A5:F4:2C:C1:89:AF:2D:63:1E:B5:AA:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0GLPgHpWt3Gl9CzBia8tYx61quw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/886ed6-f613-4a0e-8c0d-1dd5faa06b0a/1/0GLPgHpWt3Gl9CzBia8tYx61quw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/886ed6-f613-4a0e-8c0d-1dd5faa06b0a/1/0GLPgHpWt3Gl9CzBia8tYx61quw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:d6:f5:05:8e:e0:f0:76:2e:40:55:f1:f5:86:19:45:8d:6f:
bb:87:37:98:d2:15:73:da:70:ea:2a:bb:37:27:e3:43:8c:ea:
39:c9:95:48:d2:0f:eb:f2:68:3c:9e:2c:70:d8:89:5b:2b:9b:
c6:d5:a4:29:c7:3f:fc:38:00:3b:60:85:4b:0f:19:28:5d:28:
d1:45:3c:d0:39:4c:47:f5:ad:17:bf:af:72:3c:fd:bb:b0:28:
42:8e:37:f6:35:1e:e7:7c:7f:4c:8f:a3:75:11:80:d2:4a:7a:
64:d1:92:d6:be:8d:d3:88:47:24:da:57:97:a2:17:69:ff:b5:
c7:a7:4e:b2:18:da:2c:0b:dd:3c:7d:96:00:c0:00:43:be:09:
50:f1:49:5a:fd:d4:48:af:93:64:05:d1:53:09:d4:c4:e0:ed:
d1:af:14:f9:35:3e:01:36:6a:1f:58:48:2c:75:8d:4d:05:ab:
96:b9:52:d6:8b:f7:5e:da:f2:ad:9e:59:d1:81:c2:29:a3:82:
9b:b9:f3:e6:78:3f:e9:46:7e:40:65:72:70:bb:df:00:2c:f3:
47:5f:9a:fa:80:2d:56:a8:0d:43:94:43:b2:85:45:71:88:1f:
b5:61:d9:e3:d2:18:31:9a:19:59:d6:c9:aa:48:0a:f1:3e:8f:
98:17:aa:8d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn+EGCjTqLZjGYbdmiwErjOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwNjJjZjgwN2E1NmI3NzFhNWY0MmNjMTg5YWYyZDYzMWVi
NWFhZWMwHhcNMjUxMDE5MjAwMTUwWhcNMjUxMDIwMjAwMTUwWjAzMTEwLwYDVQQD
EyhhMzExNmVjNDUxNzYzNjc1NjdhNTcyMTVmYzJhYmJiN2IxMGZjY2UyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApg9kDsrpw7w8hwDqb13RjpeRayzX
lMLCEkMSNg+oG8OvDIFWUfNUS3sFE4ZhWY5tdfETrVBTJPJH84A7hvD6d30XOCzp
I6FRQDqRlZqIsGkjbfS8YLpMqD5ET7kJUwGpbmfZTrNkrAZeUsCUYVYKNDwS2+Qv
/bsYOltTWju8Yk68EgT3pGAS8m6YmDDcKUxftZBGSjye0gSTP0F+JOkmYBV1wnQW
5/ExX8sJl99t7ka0rgZ1cKzfABddIJTBr6y0yPNjpvyuK+GCw6kjx/v0/9BYug5n
dixfaiO/xeyR31BLh2heFKMZVfhVGVpJDQDiE4Td63shJ1UZBBPraYuTEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKMRbsRRdjZ1Z6VyFfwqu7exD8ziMB8GA1UdIwQY
MBaAFNBiz4B6VrdxpfQswYmvLWMetarsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMEdMUGdIcFd0M0dsOUN6QmlhOHRZeDYxcXV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS84ODZlZDYtZjYxMy00YTBlLThjMGQt
MWRkNWZhYTA2YjBhLzEvMEdMUGdIcFd0M0dsOUN6QmlhOHRZeDYxcXV3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS84ODZlZDYtZjYxMy00YTBlLThjMGQtMWRkNWZhYTA2YjBh
LzEvMEdMUGdIcFd0M0dsOUN6QmlhOHRZeDYxcXV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVtb1BY7g
8HYuQFXx9YYZRY1vu4c3mNIVc9pw6iq7NyfjQ4zqOcmVSNIP6/JoPJ4scNiJWyub
xtWkKcc//DgAO2CFSw8ZKF0o0UU80DlMR/WtF7+vcjz9u7AoQo439jUe53x/TI+j
dRGA0kp6ZNGS1r6N04hHJNpXl6IXaf+1x6dOshjaLAvdPH2WAMAAQ74JUPFJWv3U
SK+TZAXRUwnUxODt0a8U+TU+ATZqH1hILHWNTQWrlrlS1ov3XtryrZ5Z0YHCKaOC
m7nz5ng/6UZ+QGVycLvfACzzR1+a+oAtVqgNQ5RDsoVFcYgftWHZ49IYMZoZWdbJ
qkgK8T6PmBeqjQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 23:58:00 2025 by rpki-client