Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/666dd5-cfa3-40e7-aa30-98f940e4d7c1/1/GEx8A2TxCTz8WEyTA3AkEE-0hUo.mft
File: GEx8A2TxCTz8WEyTA3AkEE-0hUo.mft (raw, json)
Hash identifier: p8XUQHBalnelhbjf2CGPXTuoCQ6J/Gzig+wGPvxNx3g=
Subject key identifier: 66:4D:86:BB:38:BA:DB:76:AD:70:23:20:3A:A9:1E:E2:2E:21:7D:36
Authority key identifier: 18:4C:7C:03:64:F1:09:3C:FC:58:4C:93:03:70:24:10:4F:B4:85:4A
Certificate issuer: /CN=184c7c0364f1093cfc584c93037024104fb4854a
Certificate serial: 0199FCFD410ECB67CFF5516E4F1AE6C1D605
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GEx8A2TxCTz8WEyTA3AkEE-0hUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/666dd5-cfa3-40e7-aa30-98f940e4d7c1/1/GEx8A2TxCTz8WEyTA3AkEE-0hUo.mft
Manifest number: 10DA
Signing time: Sun 19 Oct 2025 15:01:19 +0000
Manifest this update: Sun 19 Oct 2025 15:01:19 +0000
Manifest next update: Mon 20 Oct 2025 15:01:19 +0000
Files and hashes: 1: GEx8A2TxCTz8WEyTA3AkEE-0hUo.crl (hash: K6g2rN5x6evZIG1RatxwVMm7W+MUgxXLNkOPl8bq+lk=)
2: kNJ4QKHP3RBmZh_tZnDEEJ0E5FE.roa (hash: uU2AY7qa+oUGBZk907QJJv8yZmXGgHMwO9buFHC3OUI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/666dd5-cfa3-40e7-aa30-98f940e4d7c1/1/GEx8A2TxCTz8WEyTA3AkEE-0hUo.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/666dd5-cfa3-40e7-aa30-98f940e4d7c1/1/GEx8A2TxCTz8WEyTA3AkEE-0hUo.mft
rsync://rpki.ripe.net/repository/DEFAULT/GEx8A2TxCTz8WEyTA3AkEE-0hUo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:41:0e:cb:67:cf:f5:51:6e:4f:1a:e6:c1:d6:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=184c7c0364f1093cfc584c93037024104fb4854a
Validity
Not Before: Oct 19 15:01:19 2025 GMT
Not After : Oct 20 15:01:19 2025 GMT
Subject: CN=664d86bb38badb76ad7023203aa91ee22e217d36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:5f:82:5c:68:41:2b:38:54:9e:1e:5d:4c:b7:
5c:b3:f0:11:83:b3:11:20:38:07:d4:17:1c:9f:66:
65:eb:93:d4:76:97:ab:06:6f:e1:cf:bf:35:69:e7:
cd:e3:e4:a7:f8:60:97:25:54:0b:55:81:6a:8c:6b:
02:93:b9:0d:fa:e3:0a:ad:26:d9:6f:c1:5f:58:f6:
45:00:2d:98:52:b2:0e:1b:d5:58:45:5a:97:9a:07:
a3:36:ad:7d:35:39:bf:1d:e3:be:c7:ce:7d:2b:5d:
96:3a:85:04:2b:8c:89:e9:8b:a1:2f:ac:7a:ce:90:
5b:43:de:02:b9:d7:3f:71:ee:a7:4d:34:b8:e9:4d:
df:7e:bf:68:a5:1a:e3:45:b7:34:92:77:53:cb:4f:
4f:63:20:49:4b:9e:ae:2a:ae:92:00:0e:dc:45:68:
69:19:1f:79:5c:b8:52:a2:36:af:1f:56:73:d4:a7:
c8:be:81:c8:5d:08:99:57:ac:f0:91:36:c8:5f:0f:
ad:51:be:2b:c4:83:ea:45:67:24:c4:6f:13:3d:dc:
8a:e8:d6:57:5d:f3:57:14:71:63:38:a8:9a:5e:b1:
88:0a:bb:5e:e0:24:0d:51:39:10:b5:12:a5:a8:38:
27:2b:23:6a:2a:a4:b0:8c:41:b2:6a:ba:29:63:68:
7d:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:4D:86:BB:38:BA:DB:76:AD:70:23:20:3A:A9:1E:E2:2E:21:7D:36
X509v3 Authority Key Identifier:
keyid:18:4C:7C:03:64:F1:09:3C:FC:58:4C:93:03:70:24:10:4F:B4:85:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GEx8A2TxCTz8WEyTA3AkEE-0hUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/666dd5-cfa3-40e7-aa30-98f940e4d7c1/1/GEx8A2TxCTz8WEyTA3AkEE-0hUo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/666dd5-cfa3-40e7-aa30-98f940e4d7c1/1/GEx8A2TxCTz8WEyTA3AkEE-0hUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:2a:68:fd:6e:00:34:74:ca:4d:9f:13:71:5c:78:30:bd:41:
c7:96:b1:76:5c:6c:e9:c4:92:7f:a0:db:1d:67:c9:26:3a:c5:
7d:78:01:20:54:48:34:f0:aa:6e:a5:5a:9b:39:1a:8f:db:c0:
bb:c5:e4:6c:3d:d7:f9:65:13:37:ab:7b:d1:90:b6:4a:94:de:
f5:a2:2f:4e:23:ef:a5:de:d4:5a:50:74:cb:b9:23:e0:85:b8:
83:7d:f9:32:b1:c3:d0:f7:6e:62:00:ff:08:be:78:13:26:f6:
54:64:57:62:a3:87:ab:03:02:b7:cb:b6:cf:c0:c0:f5:86:ed:
d9:06:1a:b1:a1:6b:b3:06:7e:c5:69:75:34:25:d9:df:00:fc:
49:b5:be:43:b9:1b:9a:ec:10:d3:52:11:04:a1:4f:ad:1e:9b:
ae:87:61:90:94:79:ae:26:69:7d:17:51:d1:b4:94:4d:73:4d:
b4:58:af:7f:8b:00:ce:16:8a:c1:2b:5d:7e:dd:7b:86:45:82:
79:b7:b6:2e:0d:fb:d0:09:c4:64:43:bf:f8:f4:e4:c2:e4:9a:
73:00:ea:32:e7:66:e8:ec:16:84:e6:c5:a2:a3:35:0d:aa:9c:
c9:2c:82:72:28:d7:ae:9f:04:a8:6b:00:bd:34:5d:d4:3f:82:
8f:2b:c6:4b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8/UEOy2fP9VFuTxrmwdYFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE4NGM3YzAzNjRmMTA5M2NmYzU4NGM5MzAzNzAyNDEwNGZi
NDg1NGEwHhcNMjUxMDE5MTUwMTE5WhcNMjUxMDIwMTUwMTE5WjAzMTEwLwYDVQQD
Eyg2NjRkODZiYjM4YmFkYjc2YWQ3MDIzMjAzYWE5MWVlMjJlMjE3ZDM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyl+CXGhBKzhUnh5dTLdcs/ARg7MR
IDgH1Bccn2Zl65PUdperBm/hz781aefN4+Sn+GCXJVQLVYFqjGsCk7kN+uMKrSbZ
b8FfWPZFAC2YUrIOG9VYRVqXmgejNq19NTm/HeO+x859K12WOoUEK4yJ6YuhL6x6
zpBbQ94Cudc/ce6nTTS46U3ffr9opRrjRbc0kndTy09PYyBJS56uKq6SAA7cRWhp
GR95XLhSojavH1Zz1KfIvoHIXQiZV6zwkTbIXw+tUb4rxIPqRWckxG8TPdyK6NZX
XfNXFHFjOKiaXrGICrte4CQNUTkQtRKlqDgnKyNqKqSwjEGyaropY2h9DwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGZNhrs4utt2rXAjIDqpHuIuIX02MB8GA1UdIwQY
MBaAFBhMfANk8Qk8/FhMkwNwJBBPtIVKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR0V4OEEyVHhDVHo4V0V5VEEzQWtFRS0waFVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS82NjZkZDUtY2ZhMy00MGU3LWFhMzAt
OThmOTQwZTRkN2MxLzEvR0V4OEEyVHhDVHo4V0V5VEEzQWtFRS0waFVvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS82NjZkZDUtY2ZhMy00MGU3LWFhMzAtOThmOTQwZTRkN2Mx
LzEvR0V4OEEyVHhDVHo4V0V5VEEzQWtFRS0waFVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWSpo/W4A
NHTKTZ8TcVx4ML1Bx5axdlxs6cSSf6DbHWfJJjrFfXgBIFRINPCqbqVamzkaj9vA
u8XkbD3X+WUTN6t70ZC2SpTe9aIvTiPvpd7UWlB0y7kj4IW4g335MrHD0PduYgD/
CL54Eyb2VGRXYqOHqwMCt8u2z8DA9Ybt2QYasaFrswZ+xWl1NCXZ3wD8SbW+Q7kb
muwQ01IRBKFPrR6brodhkJR5riZpfRdR0bSUTXNNtFivf4sAzhaKwStdft17hkWC
ebe2Lg370AnEZEO/+PTkwuSacwDqMudm6OwWhObFoqM1DaqcySyCcijXrp8EqGsA
vTRd1D+CjyvGSw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 22:30:48 2025 by rpki-client