Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/7247d5-e283-4b29-acfd-82e1e200504e/1/gFwMnyN2PAN71ohHRc-EZNLbZj4.mft
File: gFwMnyN2PAN71ohHRc-EZNLbZj4.mft (raw, json)
Hash identifier: sVnZpZ9U9yhO6fNMCr6Bh8pCTgN9CLHCd5awsJKDAj0=
Subject key identifier: 58:3B:99:AD:8D:23:9D:28:10:31:20:0C:65:58:A8:20:01:19:DB:8E
Authority key identifier: 80:5C:0C:9F:23:76:3C:03:7B:D6:88:47:45:CF:84:64:D2:DB:66:3E
Certificate issuer: /CN=805c0c9f23763c037bd6884745cf8464d2db663e
Certificate serial: 019A00359123A03ED3BCB8490E0873DF3EFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gFwMnyN2PAN71ohHRc-EZNLbZj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/7247d5-e283-4b29-acfd-82e1e200504e/1/gFwMnyN2PAN71ohHRc-EZNLbZj4.mft
Manifest number: 16E4
Signing time: Mon 20 Oct 2025 06:01:41 +0000
Manifest this update: Mon 20 Oct 2025 06:01:41 +0000
Manifest next update: Tue 21 Oct 2025 06:01:41 +0000
Files and hashes: 1: 3BCTdWPdAwRCl8UX_2fwNUPfXDk.roa (hash: auwwYg2jmDefujiM9dhtcg3qGUezv1eAv9OXRPuNl5Q=)
2: gFwMnyN2PAN71ohHRc-EZNLbZj4.crl (hash: OTm8re25TiIzlZaP7qXjWjICIrRY2pAZZnxPOUqoBRg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/7247d5-e283-4b29-acfd-82e1e200504e/1/gFwMnyN2PAN71ohHRc-EZNLbZj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/7247d5-e283-4b29-acfd-82e1e200504e/1/gFwMnyN2PAN71ohHRc-EZNLbZj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/gFwMnyN2PAN71ohHRc-EZNLbZj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 06:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:35:91:23:a0:3e:d3:bc:b8:49:0e:08:73:df:3e:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=805c0c9f23763c037bd6884745cf8464d2db663e
Validity
Not Before: Oct 20 06:01:41 2025 GMT
Not After : Oct 21 06:01:41 2025 GMT
Subject: CN=583b99ad8d239d281031200c6558a8200119db8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:8b:64:7f:26:83:3a:10:27:cf:00:9a:f4:2e:
c8:bb:dc:be:06:1e:5f:95:f2:64:3a:29:3b:e7:92:
09:2a:cb:70:ed:80:48:52:16:93:39:40:48:53:6f:
d3:a1:f0:18:8e:17:7e:55:1c:bd:33:38:05:d5:12:
a3:e1:2c:e6:de:7d:24:64:17:59:b7:37:db:22:92:
59:94:8a:fe:53:70:2c:93:1c:44:d8:da:91:3b:44:
77:e2:56:56:42:8c:7e:4d:73:52:c0:6c:3b:b7:18:
7c:ae:0a:22:7b:86:60:2f:8b:53:03:ca:af:29:af:
99:dc:d1:10:bb:69:76:fe:16:26:6b:91:bc:3f:ec:
4e:65:e3:13:5c:ea:5d:0c:ba:6b:fa:3b:2a:8b:c4:
32:6d:d0:c4:39:58:03:4d:25:58:26:c8:b6:75:d1:
84:b8:d7:5b:06:75:e3:36:fc:eb:07:e8:28:88:6c:
59:40:5e:e4:e9:0e:55:be:8a:1f:aa:0f:66:12:d3:
f6:ac:d0:e9:97:0f:9f:52:2a:50:bc:57:0c:0f:b9:
fa:7b:c3:09:04:7d:01:db:85:70:83:fe:0d:bb:4c:
ad:09:c7:aa:35:76:1c:04:d8:f5:2b:ae:4c:af:df:
df:07:a6:64:2e:7f:11:49:e8:04:0e:e1:2c:d4:64:
48:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:3B:99:AD:8D:23:9D:28:10:31:20:0C:65:58:A8:20:01:19:DB:8E
X509v3 Authority Key Identifier:
keyid:80:5C:0C:9F:23:76:3C:03:7B:D6:88:47:45:CF:84:64:D2:DB:66:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gFwMnyN2PAN71ohHRc-EZNLbZj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7247d5-e283-4b29-acfd-82e1e200504e/1/gFwMnyN2PAN71ohHRc-EZNLbZj4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7247d5-e283-4b29-acfd-82e1e200504e/1/gFwMnyN2PAN71ohHRc-EZNLbZj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:95:20:0b:55:06:68:af:d3:a6:76:7c:b7:57:3b:d6:c5:ce:
86:2e:b5:04:9b:47:6f:16:cc:0d:96:26:7f:52:32:e8:0f:4c:
0f:47:1a:ce:01:26:fc:6a:d7:a8:11:84:9f:a9:40:22:d7:38:
1b:81:b8:74:b5:e6:e8:59:35:d0:27:e0:da:da:70:8c:ca:b0:
67:17:06:d6:33:c5:42:61:7c:4c:f7:48:79:6b:66:79:ad:8d:
78:ce:f5:a3:3d:6e:d2:11:81:30:93:a9:d5:fa:0b:c6:7b:69:
b8:e8:1f:4c:d0:cb:41:68:80:53:08:48:31:ad:06:78:ed:9e:
28:c8:f9:91:1b:76:b1:64:b5:7c:c6:03:04:f3:4a:cf:00:49:
90:17:a3:af:40:67:4f:49:14:92:e6:b5:10:86:77:8a:5d:41:
60:75:d1:11:ba:84:43:4b:2c:4d:1f:3f:e5:8d:ec:8f:c6:e0:
7e:2b:ff:88:84:66:9c:60:7f:3a:d4:20:39:8a:d7:90:d6:2e:
20:af:00:4c:02:4b:a9:43:8e:ea:da:06:42:c7:c6:c7:08:41:
9e:61:aa:d8:34:88:2f:52:61:6c:a6:3c:37:36:c3:0c:17:be:
9e:35:a9:21:9e:4e:6e:6b:1d:b2:0f:bd:31:4f:c0:e8:d4:1e:
c6:21:4a:99
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoANZEjoD7TvLhJDghz3z77MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgwNWMwYzlmMjM3NjNjMDM3YmQ2ODg0NzQ1Y2Y4NDY0ZDJk
YjY2M2UwHhcNMjUxMDIwMDYwMTQxWhcNMjUxMDIxMDYwMTQxWjAzMTEwLwYDVQQD
Eyg1ODNiOTlhZDhkMjM5ZDI4MTAzMTIwMGM2NTU4YTgyMDAxMTlkYjhlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiotkfyaDOhAnzwCa9C7Iu9y+Bh5f
lfJkOik755IJKstw7YBIUhaTOUBIU2/TofAYjhd+VRy9MzgF1RKj4Szm3n0kZBdZ
tzfbIpJZlIr+U3AskxxE2NqRO0R34lZWQox+TXNSwGw7txh8rgoie4ZgL4tTA8qv
Ka+Z3NEQu2l2/hYma5G8P+xOZeMTXOpdDLpr+jsqi8QybdDEOVgDTSVYJsi2ddGE
uNdbBnXjNvzrB+goiGxZQF7k6Q5Vvoofqg9mEtP2rNDplw+fUipQvFcMD7n6e8MJ
BH0B24Vwg/4Nu0ytCceqNXYcBNj1K65Mr9/fB6ZkLn8RSegEDuEs1GRI/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFg7ma2NI50oEDEgDGVYqCABGduOMB8GA1UdIwQY
MBaAFIBcDJ8jdjwDe9aIR0XPhGTS22Y+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ0Z3TW55TjJQQU43MW9oSFJjLUVaTkxiWmo0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS83MjQ3ZDUtZTI4My00YjI5LWFjZmQt
ODJlMWUyMDA1MDRlLzEvZ0Z3TW55TjJQQU43MW9oSFJjLUVaTkxiWmo0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS83MjQ3ZDUtZTI4My00YjI5LWFjZmQtODJlMWUyMDA1MDRl
LzEvZ0Z3TW55TjJQQU43MW9oSFJjLUVaTkxiWmo0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQJUgC1UG
aK/TpnZ8t1c71sXOhi61BJtHbxbMDZYmf1Iy6A9MD0cazgEm/GrXqBGEn6lAItc4
G4G4dLXm6Fk10Cfg2tpwjMqwZxcG1jPFQmF8TPdIeWtmea2NeM71oz1u0hGBMJOp
1foLxntpuOgfTNDLQWiAUwhIMa0GeO2eKMj5kRt2sWS1fMYDBPNKzwBJkBejr0Bn
T0kUkua1EIZ3il1BYHXREbqEQ0ssTR8/5Y3sj8bgfiv/iIRmnGB/OtQgOYrXkNYu
IK8ATAJLqUOO6toGQsfGxwhBnmGq2DSIL1JhbKY8NzbDDBe+njWpIZ5Obmsdsg+9
MU/A6NQexiFKmQ==
-----END CERTIFICATE-----
Generated at Mon Oct 20 11:31:37 2025 by rpki-client