Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/eadafe-6c9d-4ae0-8733-819a253225cc/1/G_FOjQs977AwQnATDRFHrg3ZLYs.mft
File: G_FOjQs977AwQnATDRFHrg3ZLYs.mft (raw, json)
Hash identifier: bMmdgpobdQSL7l8b9ciIIoH2WTLJQhTHsSikp/cVi2w=
Subject key identifier: 2A:2D:52:36:2D:68:D6:80:9A:D5:E4:E9:6F:EB:9C:82:15:F7:5B:EF
Authority key identifier: 1B:F1:4E:8D:0B:3D:EF:B0:30:42:70:13:0D:11:47:AE:0D:D9:2D:8B
Certificate issuer: /CN=1bf14e8d0b3defb0304270130d1147ae0dd92d8b
Certificate serial: 0199FC8FA72D1BCCCC01E2F323AEF1BA44DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G_FOjQs977AwQnATDRFHrg3ZLYs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/eadafe-6c9d-4ae0-8733-819a253225cc/1/G_FOjQs977AwQnATDRFHrg3ZLYs.mft
Manifest number: 09DA
Signing time: Sun 19 Oct 2025 13:01:36 +0000
Manifest this update: Sun 19 Oct 2025 13:01:36 +0000
Manifest next update: Mon 20 Oct 2025 13:01:36 +0000
Files and hashes: 1: G_FOjQs977AwQnATDRFHrg3ZLYs.crl (hash: wqUa2q20givS0Tl8hJx2IvwtboMonB6yFA9qxod+S2A=)
2: zdCQl1i-ErF9ikcF1dvUnhiF3Xg.roa (hash: haMcqGD9VuWSxs2wPMo5yLhdGqSHCO1AnFtOfllpTYQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/eadafe-6c9d-4ae0-8733-819a253225cc/1/G_FOjQs977AwQnATDRFHrg3ZLYs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/eadafe-6c9d-4ae0-8733-819a253225cc/1/G_FOjQs977AwQnATDRFHrg3ZLYs.mft
rsync://rpki.ripe.net/repository/DEFAULT/G_FOjQs977AwQnATDRFHrg3ZLYs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:a7:2d:1b:cc:cc:01:e2:f3:23:ae:f1:ba:44:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bf14e8d0b3defb0304270130d1147ae0dd92d8b
Validity
Not Before: Oct 19 13:01:36 2025 GMT
Not After : Oct 20 13:01:36 2025 GMT
Subject: CN=2a2d52362d68d6809ad5e4e96feb9c8215f75bef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:40:34:64:c2:24:b2:5b:77:45:b8:3f:d8:ea:
77:5e:24:c2:42:1f:00:10:20:6d:26:0b:76:5d:73:
69:dd:e1:ea:00:9a:ff:d7:92:87:a5:7c:d5:dd:92:
25:af:01:21:c2:77:6c:9a:2f:1b:ca:a8:56:6e:b4:
74:7d:9f:84:bc:22:77:d0:7a:f6:dc:f5:2e:d3:e3:
b1:08:fd:bf:a4:15:2b:60:08:70:be:91:bd:88:e2:
94:30:0a:08:d3:44:22:03:3f:b7:15:d9:3b:f2:1e:
94:83:73:11:fe:29:3a:90:73:66:ae:f7:cd:94:e9:
50:59:43:47:6e:f2:13:7e:83:df:ce:99:86:66:8a:
1a:c5:9e:41:70:f5:32:2b:87:6a:cb:53:5d:cc:d9:
49:98:fa:05:bf:14:b4:6e:59:c6:f0:fa:53:ad:e0:
96:0a:1e:2c:4c:28:13:bb:53:12:b7:c6:71:4e:94:
f9:75:21:87:97:7e:06:97:ca:e6:72:df:e6:f5:84:
4f:e9:93:ae:12:7c:35:6e:0a:e0:23:9f:2e:f6:71:
b9:a4:5d:53:f9:9a:1c:ac:a0:28:f8:eb:ba:a0:3c:
aa:16:19:ab:91:0c:4a:41:3c:f6:0f:1b:c6:06:93:
b2:73:46:4a:bd:cf:68:2b:26:3c:7f:7f:b5:8b:7a:
3b:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:2D:52:36:2D:68:D6:80:9A:D5:E4:E9:6F:EB:9C:82:15:F7:5B:EF
X509v3 Authority Key Identifier:
keyid:1B:F1:4E:8D:0B:3D:EF:B0:30:42:70:13:0D:11:47:AE:0D:D9:2D:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G_FOjQs977AwQnATDRFHrg3ZLYs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/eadafe-6c9d-4ae0-8733-819a253225cc/1/G_FOjQs977AwQnATDRFHrg3ZLYs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/eadafe-6c9d-4ae0-8733-819a253225cc/1/G_FOjQs977AwQnATDRFHrg3ZLYs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:ff:16:4a:15:e9:d2:03:eb:3e:9c:02:01:0a:0b:fd:11:1d:
86:d2:17:b6:00:84:b4:77:3a:93:ed:66:ec:3c:26:84:52:4e:
42:1b:a8:d3:d6:73:c1:65:4f:09:2b:cd:a8:0a:5c:ad:23:b1:
5a:61:1a:48:71:0f:84:1a:a2:0b:df:4c:0f:51:98:bc:c0:db:
0e:fd:fc:8f:1f:3a:43:b5:69:cd:be:05:cd:0b:93:b0:d8:95:
6a:c3:9d:ae:cc:82:62:2f:a2:86:13:8c:f5:9a:25:e3:24:d6:
9c:29:58:56:43:cd:33:67:92:0a:fc:d1:97:3f:69:c3:47:f0:
03:d5:a6:0e:19:e2:0b:38:03:ee:5b:aa:9d:7d:82:63:70:f1:
58:9f:b7:3f:22:74:79:71:71:97:7a:55:fd:93:e0:74:a7:6d:
a8:cf:9d:72:84:ee:06:f7:26:eb:6f:82:39:26:0e:fe:75:64:
77:5c:7a:ec:95:e2:9f:db:a0:d1:5e:b1:48:eb:3a:17:72:92:
56:32:08:2d:71:4a:27:c8:e6:14:ad:da:be:f9:3b:ad:d0:17:
1d:15:85:de:7e:70:c4:1b:1d:2b:ab:3c:d7:7b:42:7c:14:77:
d0:a3:dc:77:1f:0d:7a:a1:3b:f8:ca:0a:6b:f2:7a:82:11:70:
a6:ad:7e:19
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8j6ctG8zMAeLzI67xukTfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiZjE0ZThkMGIzZGVmYjAzMDQyNzAxMzBkMTE0N2FlMGRk
OTJkOGIwHhcNMjUxMDE5MTMwMTM2WhcNMjUxMDIwMTMwMTM2WjAzMTEwLwYDVQQD
EygyYTJkNTIzNjJkNjhkNjgwOWFkNWU0ZTk2ZmViOWM4MjE1Zjc1YmVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvEA0ZMIkslt3Rbg/2Op3XiTCQh8A
ECBtJgt2XXNp3eHqAJr/15KHpXzV3ZIlrwEhwndsmi8byqhWbrR0fZ+EvCJ30Hr2
3PUu0+OxCP2/pBUrYAhwvpG9iOKUMAoI00QiAz+3Fdk78h6Ug3MR/ik6kHNmrvfN
lOlQWUNHbvITfoPfzpmGZooaxZ5BcPUyK4dqy1NdzNlJmPoFvxS0blnG8PpTreCW
Ch4sTCgTu1MSt8ZxTpT5dSGHl34Gl8rmct/m9YRP6ZOuEnw1bgrgI58u9nG5pF1T
+ZocrKAo+Ou6oDyqFhmrkQxKQTz2DxvGBpOyc0ZKvc9oKyY8f3+1i3o72QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCotUjYtaNaAmtXk6W/rnIIV91vvMB8GA1UdIwQY
MBaAFBvxTo0LPe+wMEJwEw0RR64N2S2LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR19GT2pRczk3N0F3UW5BVERSRkhyZzNaTFlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS9lYWRhZmUtNmM5ZC00YWUwLTg3MzMt
ODE5YTI1MzIyNWNjLzEvR19GT2pRczk3N0F3UW5BVERSRkhyZzNaTFlzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS9lYWRhZmUtNmM5ZC00YWUwLTg3MzMtODE5YTI1MzIyNWNj
LzEvR19GT2pRczk3N0F3UW5BVERSRkhyZzNaTFlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATP8WShXp
0gPrPpwCAQoL/REdhtIXtgCEtHc6k+1m7DwmhFJOQhuo09ZzwWVPCSvNqApcrSOx
WmEaSHEPhBqiC99MD1GYvMDbDv38jx86Q7Vpzb4FzQuTsNiVasOdrsyCYi+ihhOM
9Zol4yTWnClYVkPNM2eSCvzRlz9pw0fwA9WmDhniCzgD7luqnX2CY3DxWJ+3PyJ0
eXFxl3pV/ZPgdKdtqM+dcoTuBvcm62+COSYO/nVkd1x67JXin9ug0V6xSOs6F3KS
VjIILXFKJ8jmFK3avvk7rdAXHRWF3n5wxBsdK6s813tCfBR30KPcdx8NeqE7+MoK
a/J6ghFwpq1+GQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:31:21 2025 by rpki-client