Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/708b4d-a63f-439d-9cce-148abff919ad/1/G_x3OM0P0OBEf510nOajkEf9y6w.mft
File: G_x3OM0P0OBEf510nOajkEf9y6w.mft (raw, json)
Hash identifier: w4e3TRnKU0OSyhfjvibzm2eC5dy9I5wlFSzq6uL0hmM=
Subject key identifier: 3E:07:C7:C7:97:BA:44:CC:63:4C:0E:C5:E0:61:B6:06:C8:61:04:C6
Authority key identifier: 1B:FC:77:38:CD:0F:D0:E0:44:7F:9D:74:9C:E6:A3:90:47:FD:CB:AC
Certificate issuer: /CN=1bfc7738cd0fd0e0447f9d749ce6a39047fdcbac
Certificate serial: 0199FC21C5767D4EB704A3BB34FC5DAB2048
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G_x3OM0P0OBEf510nOajkEf9y6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/708b4d-a63f-439d-9cce-148abff919ad/1/G_x3OM0P0OBEf510nOajkEf9y6w.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 11:01:35 +0000
Manifest this update: Sun 19 Oct 2025 11:01:35 +0000
Manifest next update: Mon 20 Oct 2025 11:01:35 +0000
Files and hashes: 1: G_x3OM0P0OBEf510nOajkEf9y6w.crl (hash: gAprc6Gbpkdh/VO8QjMlNqEznEC5sAM9Lp+jcMsSOZ4=)
2: Ih31sg8uCJb_KbpSa1L6Oxmc4Z8.roa (hash: 9mQ/h5Y96VB7w3Lx8Rm2UMKZ49LCZfxek1bOiFzpcfE=)
3: Y2jaKnMLOg7L7yt3a5FoJKVZD9M.roa (hash: E77+sc63md8h3e/NARC1FrCtInem3ClY6WQ72Z8aT70=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/708b4d-a63f-439d-9cce-148abff919ad/1/G_x3OM0P0OBEf510nOajkEf9y6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/708b4d-a63f-439d-9cce-148abff919ad/1/G_x3OM0P0OBEf510nOajkEf9y6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/G_x3OM0P0OBEf510nOajkEf9y6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:c5:76:7d:4e:b7:04:a3:bb:34:fc:5d:ab:20:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bfc7738cd0fd0e0447f9d749ce6a39047fdcbac
Validity
Not Before: Oct 19 11:01:35 2025 GMT
Not After : Oct 20 11:01:35 2025 GMT
Subject: CN=3e07c7c797ba44cc634c0ec5e061b606c86104c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:c3:1a:82:89:d9:29:e7:4e:5b:2c:59:df:d5:
b2:5e:16:54:82:74:1c:9c:82:a2:3c:95:01:7d:37:
37:74:d3:66:b3:3b:f4:2e:01:fb:25:6c:e9:b3:c5:
66:75:a4:ae:3b:d8:b2:71:49:7c:1e:67:48:55:eb:
a5:e4:98:6f:f7:a9:33:7d:4b:02:9c:ad:34:07:96:
a8:ed:29:78:15:7a:06:a2:7d:e5:b7:40:3a:d3:fa:
38:33:1a:a0:76:35:3d:c5:63:0c:44:d6:50:e6:66:
83:78:a4:92:8f:af:02:4d:04:0c:8b:a9:ff:ef:89:
13:b6:3c:b3:5f:8f:d5:c6:f1:53:0c:22:cf:c8:08:
0b:27:81:36:93:ab:79:29:7b:37:08:ea:93:69:e8:
2b:3f:2e:b9:14:44:41:bd:fe:4e:aa:2a:a9:99:5c:
90:47:9d:af:33:a1:b3:76:51:19:67:92:16:4c:9a:
20:fd:2d:64:2a:02:b6:33:c1:a0:c4:a6:82:76:1f:
e1:e6:8e:00:78:a9:a7:c8:4e:7e:f1:3a:36:51:d5:
a7:b3:fa:65:a2:c3:1e:28:fc:c3:6f:d0:ff:4e:8f:
65:d9:0c:8b:7a:8c:35:63:5f:53:ca:a6:52:e6:57:
90:c3:79:c7:42:50:02:ef:f6:7b:56:8d:6a:26:66:
7e:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:07:C7:C7:97:BA:44:CC:63:4C:0E:C5:E0:61:B6:06:C8:61:04:C6
X509v3 Authority Key Identifier:
keyid:1B:FC:77:38:CD:0F:D0:E0:44:7F:9D:74:9C:E6:A3:90:47:FD:CB:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G_x3OM0P0OBEf510nOajkEf9y6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/708b4d-a63f-439d-9cce-148abff919ad/1/G_x3OM0P0OBEf510nOajkEf9y6w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/708b4d-a63f-439d-9cce-148abff919ad/1/G_x3OM0P0OBEf510nOajkEf9y6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:cb:34:b7:f5:09:b2:e2:a5:b8:7b:94:88:1a:6a:09:d9:38:
e0:3c:fc:c3:f6:5c:23:97:7a:70:23:a8:e2:e0:2e:6f:9b:2e:
7b:95:26:b3:2f:c4:d5:72:da:ca:ea:bf:64:aa:0e:5e:37:90:
12:2d:dc:2d:38:76:fa:7e:d2:d2:c5:b6:d4:42:df:18:b3:18:
76:1e:ab:a1:41:f8:1e:6a:e4:81:11:a9:51:01:b0:d7:c0:f8:
47:6a:64:32:bc:70:3e:53:52:87:2d:17:11:95:a7:3c:c5:c0:
73:68:5c:43:3d:c7:e8:d0:25:a5:98:c6:28:85:35:6c:56:65:
4d:8f:59:df:a6:c7:1d:0c:91:7c:66:01:70:1f:d6:f7:f8:a8:
83:3b:ef:23:e6:a5:ea:ee:3e:75:d3:1c:b9:24:8e:0d:cb:04:
55:d4:c0:bc:6e:de:63:51:6c:49:cd:de:3d:5c:bb:e8:92:b1:
63:b0:91:ca:f3:24:b4:a0:6a:d5:d3:3f:cc:f7:ce:e6:53:13:
09:a8:31:8a:13:d0:5f:48:ed:98:b1:36:9f:ba:42:9e:30:fd:
f4:0b:f1:3c:25:b9:c7:8f:4b:75:f4:1b:c8:1d:71:30:ba:64:
44:ae:7a:ac:e3:ea:65:c1:02:98:10:f5:e9:83:82:31:21:2b:
e6:08:6f:ca
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8IcV2fU63BKO7NPxdqyBIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiZmM3NzM4Y2QwZmQwZTA0NDdmOWQ3NDljZTZhMzkwNDdm
ZGNiYWMwHhcNMjUxMDE5MTEwMTM1WhcNMjUxMDIwMTEwMTM1WjAzMTEwLwYDVQQD
EygzZTA3YzdjNzk3YmE0NGNjNjM0YzBlYzVlMDYxYjYwNmM4NjEwNGM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6sMagonZKedOWyxZ39WyXhZUgnQc
nIKiPJUBfTc3dNNmszv0LgH7JWzps8VmdaSuO9iycUl8HmdIVeul5Jhv96kzfUsC
nK00B5ao7Sl4FXoGon3lt0A60/o4MxqgdjU9xWMMRNZQ5maDeKSSj68CTQQMi6n/
74kTtjyzX4/VxvFTDCLPyAgLJ4E2k6t5KXs3COqTaegrPy65FERBvf5OqiqpmVyQ
R52vM6GzdlEZZ5IWTJog/S1kKgK2M8GgxKaCdh/h5o4AeKmnyE5+8To2UdWns/pl
osMeKPzDb9D/To9l2QyLeow1Y19TyqZS5leQw3nHQlAC7/Z7Vo1qJmZ+rQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD4Hx8eXukTMY0wOxeBhtgbIYQTGMB8GA1UdIwQY
MBaAFBv8dzjND9DgRH+ddJzmo5BH/cusMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR194M09NMFAwT0JFZjUxMG5PYWprRWY5eTZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS83MDhiNGQtYTYzZi00MzlkLTljY2Ut
MTQ4YWJmZjkxOWFkLzEvR194M09NMFAwT0JFZjUxMG5PYWprRWY5eTZ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS83MDhiNGQtYTYzZi00MzlkLTljY2UtMTQ4YWJmZjkxOWFk
LzEvR194M09NMFAwT0JFZjUxMG5PYWprRWY5eTZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAecs0t/UJ
suKluHuUiBpqCdk44Dz8w/ZcI5d6cCOo4uAub5sue5Umsy/E1XLayuq/ZKoOXjeQ
Ei3cLTh2+n7S0sW21ELfGLMYdh6roUH4HmrkgRGpUQGw18D4R2pkMrxwPlNShy0X
EZWnPMXAc2hcQz3H6NAlpZjGKIU1bFZlTY9Z36bHHQyRfGYBcB/W9/iogzvvI+al
6u4+ddMcuSSODcsEVdTAvG7eY1FsSc3ePVy76JKxY7CRyvMktKBq1dM/zPfO5lMT
CagxihPQX0jtmLE2n7pCnjD99AvxPCW5x49LdfQbyB1xMLpkRK56rOPqZcECmBD1
6YOCMSEr5ghvyg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:39:16 2025 by rpki-client